{"report_id":"a030b0b4-61b0-4d71-bb50-88ce2782d86c","version":6,"status":"done","tags":[],"date":"2026-01-03T07:15:53Z","url":{"schema":"https","addr":"puffdex.com/","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"puffdex.com/","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"title":"PUFFDEX - Cryptocurrency trading and invest platform","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-01T18:57:27.267814Z","times_seen":17658709,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"puffdex.com/","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-07T07:15:53Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-12-28T22:26:34.892336Z","alert_count":0,"request_count":1,"received_data":209628,"sent_data":413,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"puffdex.com","ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":273,"request_count":275,"received_data":4443606,"sent_data":148904,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"Chart.js","description":"Chart.js is an open-source JavaScript library that allows you to draw different types of charts by using the HTML5 canvas element.","website":"https://www.chartjs.org","common_platform_enumeration":"","icon":"Chart.js.svg","categories":["JavaScript graphics"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-12-28T22:17:36.419718Z","alert_count":0,"request_count":1,"received_data":201487,"sent_data":420,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-28T22:14:05.525046Z","alert_count":0,"request_count":3,"received_data":122889,"sent_data":1638,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api.binance.com","ip":{"addr":"3.164.248.171","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2017-04-01","domain_rank":543119,"first_seen":"2017-12-19T18:31:49Z","last_seen":"2026-01-02T19:58:34.106943Z","alert_count":0,"request_count":13,"received_data":61720,"sent_data":6114,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-12-28T22:17:10.032556Z","alert_count":0,"request_count":1,"received_data":34196,"sent_data":473,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-12-28T22:20:33.111263Z","alert_count":0,"request_count":2,"received_data":654187,"sent_data":931,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2025-12-28T22:27:44.219613Z","alert_count":0,"request_count":1,"received_data":88169,"sent_data":445,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"puffdex.com/","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7a3f4cf97298fa8f6d69269255b966e0","sha1":"4bf5ebe2a54b77861ed5f27ee6bf1b2dad51bee5","sha256":"ad2b3dcf918ab0ae263e9397f03ec368ae0bcb37a33ac868db9627a057e504df","sha512":"d4659950de2486f3b077024dfe504bdec342fd35e8017890344a783da99fdf2183f1135018e9229add4b5336bfc0cc5056e431c6bd7a86b3e76c89b34c28d425","ssdeep":"","tlshash":"e601dd4b375bb4a231b7b0455f9ba304b86b013b7aa0c411389c52089f60e2ba3266d4","size":675,"data":"","first_seen":"2025-06-23T06:40:42.611386Z","last_seen":"2026-06-05T15:12:51.746336Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3d450bea2ae4b035e95c4bf621486c13","sha1":"3567c232074d9d2f96b7d4ce489a61c2d933a606","sha256":"d6fb2166159f96b4e113a78266e6b2591ff8a549d647ae58e0c743b5832db5fd","sha512":"8738ca7fc79b4ff1fb451c923c83c58eb9db9c399cb63e1c61c3b340a678d7069744c42f2ea78406b459a56e924e36c8df341ef1f7d45cf7969772015e8eb69f","ssdeep":"","tlshash":"c5e02b8b370f4c71549ba6872f7f7305f843213b99a1a421295d6204cf61e17a304cd0","size":295,"data":"","first_seen":"2025-06-19T20:02:29.562271Z","last_seen":"2026-06-05T15:12:51.796161Z","times_seen":339,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/chart.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6452e2b454b091f857a45cce7624eae","sha1":"cb555814104cfb8bf88e4d1b21033b495c3c5a77","sha256":"48444a82d4edcb5bec0f1965faacdde18d9c17db3063d042abada2f705c9f54a","sha512":"5a85622a1283e2a2365abb9266abfdfa4bcce167c585431008b3784250d3b79694e7a7cb432da0628c5622a9449d7a89cbff80739abf864d6859faa730387030","ssdeep":"6144:Iy2IGjjkD/6w7tKuhSGmexa2FiKqU/1eFRQ1T9mkb0h3N+2HJ8l/mXI:v+kD/6w74uhSGmexa2FiBeeFRQ1T9mCH","tlshash":"3d14f5d53342b12282e256d2583a050ae33666483547899cf6bc5ddf3c6a98b71fff38","size":208522,"data":"","first_seen":"2025-10-13T17:57:35.280368Z","last_seen":"2026-08-01T18:55:33.046921Z","times_seen":5507,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/lottie-web/5.12.2/lottie.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"55bf86203909151984bef8cbe4739d64","sha1":"543e646b2ff86405b77bd2514b1aede8a8b4cbd8","sha256":"a0757321f974527bda3cc2593bf56cc7ffe4578421249ced6ae49ffb1c529f90","sha512":"8c49ee0edea37de7028ed850009f9e774313540fbee592a69547260c606fdaf508fd1127e85b88762c4b367413faf2aeb04da18539368acddc16fbf9c00f9282","ssdeep":"3072:xnEwejqNqAvPSIoPayIYzfq526QGK2y0mbsZmml+39xzKMTlB6k:xUjqNqAvPSIoPayIYzfq52tU1l4fRRBl","tlshash":"a85419597254343805c540a9806f0a4bb736292e246ac49cb76cf4ffacbde8d31beb75","size":305543,"data":"","first_seen":"2023-07-18T12:10:25Z","last_seen":"2026-08-01T13:57:27.093653Z","times_seen":2310,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fe8462dc5678e9f3091b64ec50361a58","sha1":"506e741fb2c2e2dc13ce89456af416e3b78c5823","sha256":"a2a2a71a1bfc6599fe99d8a524df0aca331deb4d217df2fd755aaa0fc2acde36","sha512":"2c039d3c82a63c59bb3cf427f0205599ccce4c78fcd376e982871a894ebc2073b25e959ac5768bcb392d80efd6f78a99dfed7755c5a2912aca889ad8b4b89048","ssdeep":"","tlshash":"4c01991b1c5360fe22ea203ee73b2a0a22152a872141c0533d9c80282fd08242fadbcd","size":714,"data":"","first_seen":"2025-06-22T10:42:51.78747Z","last_seen":"2026-06-05T15:12:51.797265Z","times_seen":374,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/js/main.js?v=6","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a07361f38ac15b4cda4f3b6ec77889ec","sha1":"f68b585821bb867ba7314f368d58aca6f3925458","sha256":"ab5c07b6f866cd214207fa8c80072348e3884b9d3717d911ab9e81cbbb5b962f","sha512":"2dedebeec56a25ee92a7538d41ee0ac105d64a691dfd68d765450387edf36422df1d6ffd4e4e1fc0f644996cabb1bfb27ac4223633636f2913032af95c6a46d6","ssdeep":"192:GVHfaVY5ZcNv48zKAXEWOho7Y/YJYScEElXRe0wlWORznvlpL1OECuJAtYnnThxO:GOKlo7s8RElXRnwlWsjdKECuFbK7roO","tlshash":"e8a28298b12129aa813b7379be775646fb380027d341d349bd6c1de11fb2180d9a3f6e","size":21466,"data":"","first_seen":"2025-09-12T01:55:01.906964Z","last_seen":"2026-04-06T12:02:02.524739Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e164d5ae02a2209d639ffc7cbc85c900","sha1":"459267c1b7e040ce10af3f981587596525b5c7e0","sha256":"db64c8fe03f2692f49db33ec9f12454e49c59e5dcb6ecc657ef764eccc89ab00","sha512":"d9da3a981e4acc051c4a579394163e1bfb8468688461bbaee5384a664a356360e053ae59918ac8e7f8d4be0ce4c7d8a3239f2c199af2ab8847d66071ba037516","ssdeep":"","tlshash":"5421761d92f516344573b16b13cf5c1d293110bbf089ca3c3e6debc05fa10a499a6ac9","size":1319,"data":"","first_seen":"2025-06-19T20:02:29.567184Z","last_seen":"2026-05-25T10:16:26.62692Z","times_seen":222,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1fe14c193af13e31363ece33d89f7391","sha1":"eeff30620bd13addc41065981419206ffa1e696a","sha256":"e397133834a6a1f5bd97c73c159623b85d04b2e7dffd37634db1fef9720ca07a","sha512":"4893ab398df30699746d4e8e502e35de44809076f0a99e84eef9170d884957c9b5f50dff0019cca7d89f9137a68a14c6c43edc1f56ab4a560d1c07d79377236c","ssdeep":"3072:ElsVUDrPYH0/ivPUawWprNWG962FK42DIZGTzqd5NlDrwlERJJ4TvbsSftvy:lUfwLvPUspQ42NTzqdZeERJJ4TvgSfty","tlshash":"f11418c9b7ca7066439375bc502f014bb17a7992f84cd8d0e182d8d42e74aaa12b7f7d","size":200838,"data":"","first_seen":"2026-01-02T08:18:11.595588Z","last_seen":"2026-01-03T07:16:21.813123Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-01T18:44:07.559399Z","times_seen":183319,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"72ee8adb330d5ca4c5d68c08d2c82d4d","sha1":"51852bc01b5edbbf37ea930915b13bf25816caa5","sha256":"794eba715fe6fe2f8036b6b751f3749fe868102e0d1d1ba0ae7bf85de90f2240","sha512":"3e09f830b768b8a9814f106064fa83947183b3e0c3b6786a5a1fa46a28bb2f284c8233f603c50080c9a3571a1e3644817dd60c8df42b78e9f811f0ab4cf95284","ssdeep":"","tlshash":"01f0264a23b54270a46fa91f819b11083b518047681af858370c42d06f5efaea2b37e6","size":494,"data":"","first_seen":"2024-12-06T22:27:57.13338Z","last_seen":"2026-06-05T15:12:51.8497Z","times_seen":303,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1870326e7e2581c17a2d8483275e697c","sha1":"12e42d5cffaa0dfae1c50982657599d032c1f5b6","sha256":"f178f3a61d6e863ab5041c32429147a5685afd75f730d9338aaa3ded19c3be96","sha512":"9b910ebee21f3ae000b4ed67e4c36c6a91827f9b6609a2f7e859b56e076a83e751f000ab179583038f5297d121f7d06b4c75448b66d1a69e339b6397a398d025","ssdeep":"96:By5RgaBWaBMLPND2n/a7mLp/gDJPYpiS4eJJWOhev0nvDJeYQeeJJWOhev0K:SnfyD2nQmVgsYOkv0BsYOkv0K","tlshash":"23d1436c99ba192c607770eb1a9f47099191e10b3e86dee97e0c43505f7a07cd4fb389","size":6663,"data":"","first_seen":"2024-12-06T22:27:57.134398Z","last_seen":"2026-05-15T00:39:55.753747Z","times_seen":278,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/js/toastr.js","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a02ccbbcf3073559037a62af82bfdd24","sha1":"4d5f7b3f3f280698aa26b10e1d7c6dd5708d64aa","sha256":"27f959b17ddfe77ca20a31b9950ebc3fbe8030c3ac376eec7355b2d7925e364c","sha512":"35acaadcc160935be74fb1492b1b0ca205aed6b61d8bd8edf4e26254c7772da02941ec53de59e3d66ce1695cc12de4ed9cf32b750e04659c7c0e2521b4697f22","ssdeep":"192:JJZWM9gzM3t3QrpJvxl6Xs8cZ9tID6CqQwPjOoOg6yS21tl3jWq5T14:JY45Kk7cZDItqLNO6S21tNA","tlshash":"deb20a08695263654cb7737c8aab800cfb769323458a96067dbc92d82f70714d6f6fec","size":24854,"data":"","first_seen":"2023-07-07T00:40:59Z","last_seen":"2026-08-01T13:57:27.113686Z","times_seen":964,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/js/noti.js?v=3","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6df3802945529795d74dbf9ac7f7afcd","sha1":"2a5bf6c00baa2869769f629fe74009ba7f14976f","sha256":"da7bfecee787dd36b914c1bcbba8290ca09f5eb63cf65ccd37394a8b9c21985c","sha512":"7aa37dceb01cc94ca3e4c5bb0512f69b7f80ef2a717b12a3c21aa566146655af59f4787868bb3dcd452fff0e7843e048193cd91e0e867af5907299cee7b121cc","ssdeep":"192:Pu2zR+wyioZAP34P+AN7bkaJPLYFdack34PT7rjaR7Fb71SLdqa34P17rjaR7Fb8:moz/ARdJTYD5exFb71SJ4exFboSzVqeO","tlshash":"3742725420ca1922457f63b8da925a5dfb22d20b93072aa13afc46d32ff7c14c2c3b1d","size":12111,"data":"","first_seen":"2025-06-22T10:42:51.761799Z","last_seen":"2026-08-01T13:57:27.122056Z","times_seen":290,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__172.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__172.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2452\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2lXrrVR0kqX1X8z9j7lbrneL3NBNiF5Zgyrpj%2BpDoxHKQlD0FmX3ytHX18ce6Tmg2iACKjYHb60LTAH%2BLnkCtVUPtCu7q6ZsHg%3D%3D\"}]}\r\ncf-ray: 9b80b4900ae7712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2452,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"2172cc0521a905b8a287030e0c6a4d86","sha1":"89aba1cad3b13ca2e4906e37d846f83adb6a0c0d","sha256":"e1ba04dc4d4e4a772e0deffd14e24d2653ed0800b3c02bac58fbbc570abcba23","sha512":"5fc1830df97b2087c97d45182fb45302d406a53fee1dfa11b1a3d0aa848ca277bd2e41b094d9f72f7aa49918910d518e0c9365a50ebe5081596161b14fc8842d","ssdeep":"","tlshash":"43516ddd58140a23366649ac9b99e3f1320a7fe95e0bd0043467f2be8f728cd01db504","first_seen":"2024-12-06T22:27:57.088699Z","last_seen":"2026-07-17T09:57:30.94974Z","times_seen":157,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__201.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__201.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:30 GMT\r\ncontent-length: 2459\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p8a6BRYstZmhsHLflZfoyai4gTgLLeJV3Uh0HtaUC%2FjIkU76t%2BhXPRjM6IWoRZBQL0M7czNpPW1S5llv23CzFXIYeoAjhHXkZg%3D%3D\"}]}\r\ncf-ray: 9b80b4905b06712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2459,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"50741bfc626893d14d4b6595b62f3f43","sha1":"9d1b22f81824acda4d3303ff04094aa50e2c6e62","sha256":"5673c4c4033a61d6d2caffb525d3c013df04e34ff6ebe26e98c751312b7b8d92","sha512":"0a78cb039cb36f9aea9a47ca774efd0654408520a3b61b42e8861793e34559ec77a2e3dd16032283534b20261e3d8c1d86ac20e937058c5535bc176dbf6b9016","ssdeep":"","tlshash":"f35139c3fb1580a163472eebcaa19c6d015f4f25cca520f75201b1a971fc09a5fe96ed","first_seen":"2024-12-06T22:27:57.095029Z","last_seen":"2026-07-17T09:57:30.947031Z","times_seen":157,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuotai.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuotai.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 13059\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WRBzlhpoQ7KmWn2nBj3mcCfFwfBGH1g36B0YMPZD7sGjHsKBpRt5LMScZR5bIjekOf9EVdfzHKibfAmi5CFXqdMDSbvkeORCKQ%3D%3D\"}]}\r\ncf-ray: 9b80b48cda01712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13059,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 310 x 246, 8-bit colormap, non-interlaced","md5":"dc06ad0e32ef57a127b78482ea33cce9","sha1":"a2dc99e6dbcce91b9ccc18a0926f7fcba9464326","sha256":"b672fd2a1562e8315bc120c76b452fea37b0ff04bb9e1eacb17dafcdcfb321db","sha512":"b524ac7efd349c94394fc8ccf63be17d8a37be80775f9034ae4e17bf0646d6e9b32aeba63192731c3df04e82e3bd3759cf0b8fd4f27bc221a51e3c2468d3801c","ssdeep":"384:VsV+yHeg03bSRhy/NaCwF4/tAStq0wc6nZ:Vsd+h3Gjy1HwF4/tAStcZ","tlshash":"1242cfeb6bb240402357d448c4613bf21816210de513e7e9cfcb54786c1acfe4c22add","first_seen":"2024-12-06T22:27:57.053426Z","last_seen":"2026-07-17T09:57:30.994524Z","times_seen":168,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__26.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__26.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1165\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E7ZfzoP4tmbTSXMWQgvQnv%2BTqUhgUVTYXjMorikyGbxNJxDnx8ULyneznO1DTy9uAko%2FtYncNP3VI%2FFzX2Q0B36ek%2BiKNjhf6w%3D%3D\"}]}\r\ncf-ray: 9b80b48dba2b712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1165,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"50333973529f140a38862b5e59223c23","sha1":"ca772352821ce63cc8d52b58b4dff1bcbe92b6d6","sha256":"ae37bc4c761654d71faa919cdb2bcc500d39f14f3747c2124a67f7eafe4116e3","sha512":"93152b60013a15a74c510b75bf4c4d11f27cab49234bb7980c9bb245935673d6adc119cf598a648c29ba5bfad9e4cf730988f224e352cab3c65728fe9318bfe8","ssdeep":"","tlshash":"9121a5f530731d399a089789f51c68b85d126f08ae9496164444f8f4f8f6b49e048ab2","first_seen":"2024-12-06T22:27:57.061496Z","last_seen":"2026-07-17T09:57:30.946495Z","times_seen":157,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__203.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__203.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:30 GMT\r\ncontent-length: 2496\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zFZKn6ls%2FSKSH0mu0Kb0Y9mthRt%2BCRRAWZ4ZbfP1i8t%2BZQOb8R%2BvNz1zoomjPysUYLJ3wYBx6hLcPAPYy3ikU8OSq2HuQX3ioQ%3D%3D\"}]}\r\ncf-ray: 9b80b4905b08712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2496,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"992da572d0eeab68de7e123b557fcaa9","sha1":"663782959996919942a7c1ed657545a29231d8c5","sha256":"a6e12a53275c9e16fad5ad380035fb843eff53aeea8e27399b3e06ea590638c0","sha512":"d21309b4a57659e19f2c760404a945ae587eb3d44d9a1363a06424066cb5ffa48657125432b611185c6fc407ce096cbd61b74d956b9270409694e12eebb02d51","ssdeep":"","tlshash":"41513a79984c20166c9f0af0ba1304686f478d645bfa41e54837f82ca8f71c06837721","first_seen":"2024-12-06T22:27:57.097189Z","last_seen":"2026-07-17T09:57:30.959959Z","times_seen":157,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105_.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105_.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1127\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b703Ypf8C6a6RB4i%2B2ztqUbIxKNPMMSfSqu9SPUNhL0KXIWzkeZXpBwOX%2Fw6ZLOkYmiH3GrzyHv5kvvS5YCAMcyEJicd5TMS4Q%3D%3D\"}]}\r\ncf-ray: 9b80b48d2a0d712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1127,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"661559d919ea7aef1f7887ce598376b2","sha1":"c28b02ecb24b5484ddafbe5837e840493226545f","sha256":"b8d9cde6830d09df938f59aa13e88d5f7f0a75c658e7a0c91be97a39dfb9b779","sha512":"c4645565d6f44307387474758a191706ea61a91965554cf934d7506521c67267bc2f86b7f7a557a64c839151a0935042e071bbf9398236e0ae3fa443e7342756","ssdeep":"","tlshash":"1f2194ab87b491adb66851ec34b3ee61d80f6d100d25136f3b87ba88647a0976d42682","first_seen":"2024-12-06T22:27:57.071009Z","last_seen":"2026-07-17T09:57:30.976976Z","times_seen":157,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__118.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__118.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2521\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F4mXZdG%2FPGt9HJQS9h9MF1rTl5b5Aqu%2BjVUa68w6bIhNbMYI6Kz7eD2uFBD7yuPvnn8QFrXG%2Fxo%2BXsaTlYa5SAJp4xXCzbKDGA%3D%3D\"}]}\r\ncf-ray: 9b80b48f6ab0712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2521,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"67e87a046547d37d3d6ff7c1457d99a0","sha1":"912d5edfe351304cd868fa2a6cf82c8a766c345d","sha256":"d475374d44a909777d599d557b1f386d521c6611d21c396beb1c43d6606274d4","sha512":"4c4b842b334c7d62b3516652ab86fc89633f087139e4bc55f9a65ee5b3fe4fadb414c8279a42235ade342587bb0b1be84d1dcf0d6c1c7b578dcfe06e4e1a529b","ssdeep":"","tlshash":"74510ae24e5da83aaf4f601dc9ce9a106a631c3c2a8131595ce8be1dd6b2e224749537","first_seen":"2024-12-06T22:27:57.086375Z","last_seen":"2026-07-17T09:57:30.943107Z","times_seen":157,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-03T07:15:28.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 07:15:28 GMT\r\ncontent-type: text/html;charset=UTF-8\r\nset-cookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; Path=/; HttpOnly\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-language: en\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=boNXt1VYhzv%2B2FIbfDEbKpeL2wGAP0GJdJzyGIQgGYFP4%2FLgg5wAhv7%2FEdt2SH4w3HUKVkgHh2BbPWDuLXXaUXEvoLDCXCWzwA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b80b48529e70b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"Chart.js","description":"Chart.js is an open-source JavaScript library that allows you to draw different types of charts by using the HTML5 canvas element.","website":"https://www.chartjs.org","common_platform_enumeration":"","icon":"Chart.js.svg","categories":["JavaScript graphics"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]}],"data":{"size":243057,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1953)","md5":"71669a4fe5ffd565d39cd142af4d13a2","sha1":"0299a33f695736d89603deb06e6497316dfc1624","sha256":"53fa60cab41d9ea12276ef182b759e16bdfa78741015e92af5cb8d8e3af96f9b","sha512":"cfbbff07f085f56f724a41416beef507b1cbf0056a2afb35b5f612b92edcdfd3a841e5f38433d52702c48a4bd2ecab554046696bf12c6c81a1a42a8f379350da","ssdeep":"3072:tED1+eZnddphZXIuy38MlhBBLZbfGO2eJMDV:tED1+eZnddbZXIuy38MlhBBdY","tlshash":"6b341be022f015e1a00293e9bb764a6a3b52d5679746c644b7fc1ed49fc2ccdcd43a8b","first_seen":"2026-01-03T07:16:21.755122Z","last_seen":"2026-01-03T07:16:21.755122Z","times_seen":1,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":81,"dns":64,"connect":1,"send":0,"wait":74,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__98.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__98.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1076\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SpA9w1P8MXCS7xxvtHPnNFrQM7nVBApJz0txfp81BOWMh0P1KThnp7K1jdC99ljoBaNIeXFcxbO3suyKyLDJfGHeWf3gL%2F4QFw%3D%3D\"}]}\r\ncf-ray: 9b80b48f3a9b712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1076,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"0b3074990371bd83962bb56860f860a5","sha1":"7a368b9124d8064c68fd5f5b55af78174b1e5e1c","sha256":"fc668937a6369ced1814294a22f0fbd772ba5ea2049d9d4d0df721efb4a751cd","sha512":"8d72fb2bc062f4aeb72367e3707f5827c158f7e84c554397041aaeabf8525d22d70265aa1863d32a8e15063f1eba4753f816d227a30cef59fe611d1db0e134ed","ssdeep":"","tlshash":"541184fa16b07aa0d1cc83374328f6a087410f1ab860b68f90def5da24b454ccdd6304","first_seen":"2024-12-06T22:27:57.072103Z","last_seen":"2026-07-17T09:57:30.955129Z","times_seen":157,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__107.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__107.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2452\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Yci7SBIZBViXWXnqKaRgjoHF5MDrDdGP8MyBTjpqFpxzl4vLpWC92x75ClpoH5fmODQhwiMzdeOHjXbrU8bzeGKCiYw4XiLAw%3D%3D\"}]}\r\ncf-ray: 9b80b48f4aa5712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2452,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"2172cc0521a905b8a287030e0c6a4d86","sha1":"89aba1cad3b13ca2e4906e37d846f83adb6a0c0d","sha256":"e1ba04dc4d4e4a772e0deffd14e24d2653ed0800b3c02bac58fbbc570abcba23","sha512":"5fc1830df97b2087c97d45182fb45302d406a53fee1dfa11b1a3d0aa848ca277bd2e41b094d9f72f7aa49918910d518e0c9365a50ebe5081596161b14fc8842d","ssdeep":"","tlshash":"43516ddd58140a23366649ac9b99e3f1320a7fe95e0bd0043467f2be8f728cd01db504","first_seen":"2024-12-06T22:27:57.088699Z","last_seen":"2026-07-17T09:57:30.94974Z","times_seen":157,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__41.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__41.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1095\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EeZUWZb4bxlHbbcaymUky19ZJbK%2BSmanO1mnOpCH2wlMpUcQqa%2FSWJeH%2BxcyOt62YVsdjIaJYa8Efj5oySVXALXffjt6Xn7YeA%3D%3D\"}]}\r\ncf-ray: 9b80b48e0a49712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1095,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"3b3e2ccbff9209b2012b53b091045763","sha1":"7d8145d03947788abc4689ac1ee24ca8a364b9ab","sha256":"cd7ab1ce9e85c923fd9ce8f2f64a29d7ef7849a6573e2f365f6f080ba41e76a6","sha512":"87d37e4db8e5f0f300a054b2967078113ee1e2715b4bc0b2711fdaf47b6272cdab9d3f4f7cbde780cfbd98f9b03f5e0f98a6c55b770fe8188f35125121a0e927","ssdeep":"","tlshash":"eb11c4c4161bbfb6c44a571784228bc9cff28c6cf004c00b46307c1978f62dae93e482","first_seen":"2024-12-06T22:27:57.065973Z","last_seen":"2026-07-17T09:57:30.968541Z","times_seen":157,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__100.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__100.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1082\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nbu0pTKgmFOPoY3ChMAmfFAiKiS1VhG%2BS3c1c%2FWwJG3D3edaRbBYQHKtFjNmVqzj2Ciz5BOcF1lRW7J1sEMqwoV0WpDe1YLBpg%3D%3D\"}]}\r\ncf-ray: 9b80b48f3a9d712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1082,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"67fe2793ea27441b173869a156d3a020","sha1":"70adef4cf030eec04027921efeb86583552fc2c9","sha256":"f748c5cdbc3c42753e90626fa56cc20408ee32a570986f4d40985f237daf8bbf","sha512":"d9b0b37ab89684c5a38661f8d4ea08af23dac9639549845d72f2f0b69d14323f6f9f93e634e43150e2f05dff4ba1604338cf873c87c4cab97e3c66d5cbb9fe98","ssdeep":"","tlshash":"1e11b7e1e2d02a17c8e4d9be2326207f9b441d165388278e860ab358273b1c9d07f4b7","first_seen":"2024-12-06T22:27:57.073178Z","last_seen":"2026-07-17T09:57:30.949254Z","times_seen":157,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__130.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__130.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2605\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HqWfqwwDqcYmRiZNboqzif%2FHwO7QXYdv5U3QZQl9BLvVumzDGZqVHHSuzDUYospUtRocE7%2BTnz%2BSvScO4VyJfiRPehwA9JXjmw%3D%3D\"}]}\r\ncf-ray: 9b80b48f9abc712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2605,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"b28e49aac00b6054373887a863314cac","sha1":"e8d65a43411cc569823097105a78b44e238dff8a","sha256":"faa834f50cdf37acf578c2c4f2e9df776e20978cfa419d5315a9b5e23b5c4f74","sha512":"8524d75aa0e1234bfce1305b1a3c5bf51638bba864cb1bd4c1003030e867176a379673ea81a054c413749db2bb4c1f5c056dc81a1e91495f66cbd0d2a7da38ef","ssdeep":"","tlshash":"ca512b96f27184c9e7a57643a7e54003a0263c964454489caecabf915f7f05a5847b06","first_seen":"2024-12-06T22:27:57.087555Z","last_seen":"2026-07-17T09:57:30.979222Z","times_seen":157,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__193.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__193.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2501\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vwRVfNvJG3Svl6xRtlHVDHz6Pd3RzQYsOQmGigMxEGvxSFYm5z6vh7TzkCWzV13xI%2Filf%2FE7p1lXpIT%2BZdRUzxAIiWDFcoIO1A%3D%3D\"}]}\r\ncf-ray: 9b80b4904afe712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2501,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"8e9ec66f80915f8c5766545d02c40a17","sha1":"a79d55e49aca03a2b3301df15110716dfe39d5fb","sha256":"d09935298290d607f4ad422dd60e9b77b2d5c958435b48e9200d8d6d0dbf6231","sha512":"8c26c93a7e7d53ff6f534a6a97dbe82cca0f84fc2eccf2ddee82d68f86ec4d84d089b636b1c947533d34b1582194feda318ead2b53a9b7970f505dc25209652d","ssdeep":"","tlshash":"d2511b84d8f972aa11d354f454c1eb8598b9bef81c1a774770253e2e64310c6ce7c8be","first_seen":"2024-12-06T22:27:57.09193Z","last_seen":"2026-07-17T09:57:30.978735Z","times_seen":157,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__204.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__204.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:30 GMT\r\ncontent-length: 2519\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ieS1VcUhXHZXz7YMjNMHcFEYbjo6qpQl7v2NR%2FSO5jDx%2FJ34njp8RQ9e7wwB5u0UEle8G1shJufqDiJohPnEmwloKbBtnWN74Q%3D%3D\"}]}\r\ncf-ray: 9b80b4905b09712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2519,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"adf7ea7ba32b52d9d1d351900e3acadd","sha1":"8c7d2d33fac5ee6c836ab2f6f9fd9e78d8ee3d14","sha256":"9a2498779f3d889c8e2260202d6186a1124cd743c0a3bb2c8cf1e64d66f59705","sha512":"21b7aacbdfa49415ab52660015328593646af45d26161956b9f3a14e096cb80c58d2e15306e134426ae922d8d6f85465e281cbcb0a9fcf8a4d4c8b025f6ca255","ssdeep":"","tlshash":"98511b83f4fbcf7788750a0b0a4a120103577d259275899bde857c9722fe0bfa25c015","first_seen":"2024-12-06T22:27:57.096118Z","last_seen":"2026-07-17T09:57:30.970028Z","times_seen":157,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/animation.json","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/animation.json HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: application/json;charset=UTF-8\r\npriority: u=3,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7cwNfM1OEtaYokkelDhJQWP19wgpXJ%2BJH1kDF5SmiIHIFSNDfXFgwWqOqN1SphHNIy%2Fop9bEhAxayYmXKkPVKbDVPCIGT98Fog%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b80b48af9ea712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":598133,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"b20461aaec546f9b8600fc2510c97f39","sha1":"dc4f50ec5de51b91429a2094b888ca2aa6fa1016","sha256":"e5b4bf9d6d251dbe826d992294f0daf8e01979d767ce0d9e66d237096893caa8","sha512":"df6452287bc69c849afd85e63158705916db504caf58ef8e21dae78d9c0947bd0de519f49b62cc8e25fb21bb18eef9ef1da56679d674aef4cfa3edd1ccfac3d5","ssdeep":"768:PmgUORAAM0gAUs2HlZ6Kt/rkgT0Ay9Anf0sfUbgkT+vpEZjB0/VF4gHSJFC0SfTj:ug5PuqYaYsdYv","tlshash":"1bd4e83ac6691cafa93da339a9f99354e5d4536b00d90c077f7c59cc0f7310a0a8ae5e","first_seen":"2025-06-22T10:42:51.770623Z","last_seen":"2026-07-17T09:57:30.971001Z","times_seen":156,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":145,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/USDT.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/USDT.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 5168\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zVP3fNu81ZQEzbm0nRyEiFiT7%2B6JRD8O%2F06X3XW7a9VfvEZFfOi41bOMIh4TrunhnGhhTMOMBLuIJHlMkv9nwVr0tcvonPGUag%3D%3D\"}]}\r\ncf-ray: 9b80b48ca9f9712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5168,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 127 x 121, 8-bit colormap, non-interlaced","md5":"6d51b47bd1e501579a784403188a2287","sha1":"96c8b707dfce3a8d060b662b60389f8d3886d6e9","sha256":"8fae335f5c13e7965ae57540c4b94ac61961c8e4ff6ba17154bcc97381f6dae0","sha512":"b127035ebcfcfa37f8217b92efcb3acfcca01fe2155c72a23814285d980de7c33df58f3a7beab3d1b0598ca6cb6a9969d6d2ad5ede38fd78fcd572c8e4925a5e","ssdeep":"96:OSfPimRW6CPBTGJNSvaky3yYcEBUZu/Y5VhU0h0FVa4++aQcWMxWg3BmeEOVkQa:3HtWBPO4vbhEBUWY5VyU05cL4gMFOa3","tlshash":"40b16d85bf3d40be35a3a98c13602770bebd274799acd9abe1843a8c909901107df577","first_seen":"2024-12-06T22:27:57.131232Z","last_seen":"2026-07-17T09:57:31.003992Z","times_seen":168,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__82.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__82.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1128\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=36NvCt0TUxCC0WFedAxCw%2BQ4RvrP10X%2FZ6Oc3WrlRitf%2F5LgNgj4oOanG5g%2FlaRnYAva%2B8WugkMusZ9vvEZtXjJ93mketFwRPQ%3D%3D\"}]}\r\ncf-ray: 9b80b48eca8b712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1128,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"8d4530793f2161abdb48afd9212910a7","sha1":"55359cf1e4ede8bf209d28697edb82a16868f8e6","sha256":"2472bf51de60d02b6c6e7d85946feb178260ea213315de58e2e6c3fd141fc882","sha512":"4da06101e1c46df21142a7754094b40d610f8f065cf686463f660e68949cecafb199e4f3d9de899068ffb15d7820b3c71f1c67463bbb31cb52d6c7423e789bfa","ssdeep":"","tlshash":"9721c4c10ba00578c08e78b098df1d64a528ad1b2e23de7ad801f32867bb1088fe42b0","first_seen":"2024-12-06T22:27:57.078299Z","last_seen":"2026-07-17T09:57:30.954499Z","times_seen":157,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__87.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__87.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1082\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J0AOkodLOdhGEKqlqgI7RxtXPtx8G8XKiJ7oCMbSKKH8cakjpCcbg5RSX952H8uF1L%2FDjNprXv6oW0gSOTuPI%2FuxLmsWvDz13A%3D%3D\"}]}\r\ncf-ray: 9b80b48eda90712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1082,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"67fe2793ea27441b173869a156d3a020","sha1":"70adef4cf030eec04027921efeb86583552fc2c9","sha256":"f748c5cdbc3c42753e90626fa56cc20408ee32a570986f4d40985f237daf8bbf","sha512":"d9b0b37ab89684c5a38661f8d4ea08af23dac9639549845d72f2f0b69d14323f6f9f93e634e43150e2f05dff4ba1604338cf873c87c4cab97e3c66d5cbb9fe98","ssdeep":"","tlshash":"1e11b7e1e2d02a17c8e4d9be2326207f9b441d165388278e860ab358273b1c9d07f4b7","first_seen":"2024-12-06T22:27:57.073178Z","last_seen":"2026-07-17T09:57:30.949254Z","times_seen":157,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:28.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://puffdex.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 19:22:36 GMT\r\nexpires: Wed, 30 Dec 2026 19:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 301972\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-01T18:55:04.597189Z","times_seen":952218,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":151,"dns":4,"connect":7,"send":0,"wait":8,"receive":4,"ssl":137},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__34.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__34.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1085\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kkJyZjmBXfkODmJYAf1ixsZSrIxd%2BWLvAtlrHToYedZRuN20EnEKmU4ZLW7hDn1uUDUnOZIPizt4dU%2FeXw2yVIjrm1%2BNa7eU5A%3D%3D\"}]}\r\ncf-ray: 9b80b48dda33712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1085,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"27f8387852fc4141a627c5c4b65b791c","sha1":"ebfacab627e3fc57d066dc041ccfe4d686a5bc6d","sha256":"e6c2f05cbd041c1ec03ff6a38e1e74ce9176d9cb09b2feb0968bf017f3f4cb4f","sha512":"ea16dc2cb4b05cfab36749d84fb9ad5b722f841d3c4f3cf2c503ed67d425c3e8a77fc1dcc049c7b734ba8c8d89076bd46bd691597470232b7035ef0b10f8f27b","ssdeep":"","tlshash":"1011c8d82730dc3fc29476f5a2294160dce34e08028391475c46f81c60360cba497747","first_seen":"2024-12-06T22:27:57.079336Z","last_seen":"2026-07-17T09:57:30.9456Z","times_seen":157,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__120.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__120.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2452\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TS1Iyru2qXCfAuEAxo5U2m50Hc7ACK65fJsCevMGqpT6FUiBUEPsV3BEQ9OIree64QQZH5orN3zJ0Ox6%2BIYGGJ9TbY2ihSFs1A%3D%3D\"}]}\r\ncf-ray: 9b80b48f6ab2712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2452,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"2172cc0521a905b8a287030e0c6a4d86","sha1":"89aba1cad3b13ca2e4906e37d846f83adb6a0c0d","sha256":"e1ba04dc4d4e4a772e0deffd14e24d2653ed0800b3c02bac58fbbc570abcba23","sha512":"5fc1830df97b2087c97d45182fb45302d406a53fee1dfa11b1a3d0aa848ca277bd2e41b094d9f72f7aa49918910d518e0c9365a50ebe5081596161b14fc8842d","ssdeep":"","tlshash":"43516ddd58140a23366649ac9b99e3f1320a7fe95e0bd0043467f2be8f728cd01db504","first_seen":"2024-12-06T22:27:57.088699Z","last_seen":"2026-07-17T09:57:30.94974Z","times_seen":157,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__121.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__121.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2532\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0he5DDCMcQcFu3skgGswQ%2BAr5rLEJMmzBvWDCbszruko4K6G2mohi6lJEOVolbaJj0RMhcW2cFIzl4NBF%2Fy0rh8YxbLhQrJGxQ%3D%3D\"}]}\r\ncf-ray: 9b80b48f6ab3712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2532,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"e355727213ea7aefac63c70f888c3b7c","sha1":"3d44fcdad9ff14633cbe99693dc2739778fe7ad9","sha256":"2a16100972b15829065588b0908adf16b26d0994a93e1445d56496ec2378da69","sha512":"ea991dcfc07fb0003aba9bd186c2eddf709d588b0af3575f55d49936c644e64e02194ffab6e9e3911107a84716a4818d4f7ca03b1972e13dec2bd31c6f6665ef","ssdeep":"","tlshash":"e1513b85259e444682a348d94c931afc7e19cee3453ed80302717cd4e4f273e12b63af","first_seen":"2024-12-06T22:27:57.085308Z","last_seen":"2026-07-17T09:57:30.97406Z","times_seen":157,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__151.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__151.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2496\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NfBszM5xf%2BEcxbenSfFHB7%2BdUF1g%2FPrk2nzfK6lACzeX3q%2FNR7LfO2PbmgA%2FYM7jsobHAXgANbd6j3d5B9gc0UdMt%2Fhs5JxTMA%3D%3D\"}]}\r\ncf-ray: 9b80b48fcad2712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2496,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"992da572d0eeab68de7e123b557fcaa9","sha1":"663782959996919942a7c1ed657545a29231d8c5","sha256":"a6e12a53275c9e16fad5ad380035fb843eff53aeea8e27399b3e06ea590638c0","sha512":"d21309b4a57659e19f2c760404a945ae587eb3d44d9a1363a06424066cb5ffa48657125432b611185c6fc407ce096cbd61b74d956b9270409694e12eebb02d51","ssdeep":"","tlshash":"41513a79984c20166c9f0af0ba1304686f478d645bfa41e54837f82ca8f71c06837721","first_seen":"2024-12-06T22:27:57.097189Z","last_seen":"2026-07-17T09:57:30.959959Z","times_seen":157,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__173.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__173.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2532\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9HjVguQMiA6QmJJfC0GcwrgrKonnixJlpL%2BY5xpGffxlpYHt6pTUHjFzkvRc1ybZ5hlWSf2VapGtockvB4FGbDxsnvtuEDDdpA%3D%3D\"}]}\r\ncf-ray: 9b80b4900ae8712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2532,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"e355727213ea7aefac63c70f888c3b7c","sha1":"3d44fcdad9ff14633cbe99693dc2739778fe7ad9","sha256":"2a16100972b15829065588b0908adf16b26d0994a93e1445d56496ec2378da69","sha512":"ea991dcfc07fb0003aba9bd186c2eddf709d588b0af3575f55d49936c644e64e02194ffab6e9e3911107a84716a4818d4f7ca03b1972e13dec2bd31c6f6665ef","ssdeep":"","tlshash":"e1513b85259e444682a348d94c931afc7e19cee3453ed80302717cd4e4f273e12b63af","first_seen":"2024-12-06T22:27:57.085308Z","last_seen":"2026-07-17T09:57:30.97406Z","times_seen":157,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__192.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__192.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:30 GMT\r\ncontent-length: 2530\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uylhl8%2FD9P82SUD9htT0P%2BpRLjEaMRjXGFoeMCdCZyo1bw%2FdPf7QamBYZxaNBI1C6Pprre4PqdV0UC3eloHDHthv3WZqeQWnZA%3D%3D\"}]}\r\ncf-ray: 9b80b4903afd712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2530,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"e13151c32d29b50f25e946b72ccac569","sha1":"c49420114727d2a20799004c47d43960a25c1d0c","sha256":"4f1d41a99c167e12b07ee5b919683497ac4fd3b1a456020714e9640eab28419e","sha512":"1297a1f11e1779a678cc91bd36a137eca7f47b0e513208ab62ed24e365261f0ed023c97e444490e24f103f8791f404aae2280ef5b1792d9c74a989181dd655f0","ssdeep":"","tlshash":"74516de9bd256c29ff8f9d1fc5d01986dfe48c07816c251e744276e892f6c08ebb08a5","first_seen":"2024-12-06T22:27:57.090895Z","last_seen":"2026-07-17T09:57:30.960505Z","times_seen":157,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__24.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__24.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1161\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rQDHKMBfh0hn%2FfiHjS6l%2BPkqWN98EIOEUe5mvm%2FOthi0BWfWKzWC56QvW9xmB3BBB%2BvWNDWmPLRz%2BeeppFf4D2f9iMAv25n9SA%3D%3D\"}]}\r\ncf-ray: 9b80b48dba29712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1161,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"e50c044ba3552cd6cc0360be3b1c8556","sha1":"c62adf647bc3b965624b60c571c8bc3cdb94305c","sha256":"8c4a348cd473994e5b0569588bd3997085eb51e0e434959379ed8b0c6f29312e","sha512":"0cb3f436341349091a811a3ba791decc54759c64a87474c38f506aa9f4bcffb08502b17855155908f0e2e291a27d2d9e44f0c84327e9249f182b7da7a753d0cb","ssdeep":"","tlshash":"a921a84d9a4170e0e9b91c050a161130814bbd241d276b4f9a7d3faa3636bba44fd015","first_seen":"2024-12-06T22:27:57.082236Z","last_seen":"2026-07-17T09:57:30.973126Z","times_seen":157,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__36.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__36.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1117\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I3HEP5jvn9leLRHh9xrlu2LUDIIMJe9VZEPtJApUVoKUUm8%2F7RLwS3HNnXrS9Nsc8tjQqy8zjsKi8iWtlrHfud9pvdxW1KvUyw%3D%3D\"}]}\r\ncf-ray: 9b80b48dea35712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1117,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"397412fe707f80f1106f544f25c841ed","sha1":"1ff59de33d9785f6ef75bddf201453eebc27c9a3","sha256":"2fb75535b7a097b9b71606c92f237955fb81e90530238a9b51548cf17833506d","sha512":"434099b41bd6f0a75c6d5d51da7f6d9d64fe390008911884bad7a36c9e211e6c7819760cd6807bafbfb9ad784cdc4aa2b45c24a7a9c163b8220476baabcf5730","ssdeep":"","tlshash":"fa2165e72c4c9ff8c4d421f14aee929a87b15f91bc005157d8a3f492047248388b3291","first_seen":"2024-12-06T22:27:57.074226Z","last_seen":"2026-07-17T09:57:30.941854Z","times_seen":157,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/img/header/market-screener.svg","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:28.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/img/header/market-screener.svg HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:28 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DXjTDGbd5Ni%2B99P4hGHwQ%2F%2FFHc8oPQ0AbIJk4o9f6%2BFp6o2kGcNgB8p66O5wG9XxYE3uwIEfi20MXcPO0MpvJu50lmEVHWSx5g%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9b80b486b9b0712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1688,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"24c7b0b83795ef8461878325122b1499","sha1":"16a34c45d1c3bf263a890fb4689c36b5c48b8db7","sha256":"b08c1bc91d0325fc5fd89b00e9cf7aba49c3341fbeb71f1782013bba8bc37287","sha512":"3137f70bbdbdb7822f6e1f273d22e2516383c0567e92900b6bec7570b4918aecc772f6f7dbe0364490c35f0d7ea06bf9d734a16a87c0f1fd54a65c65f29c60f1","ssdeep":"","tlshash":"8331d1dc50d6c9f9aa64c70417f89f95786238fb3250459cfebc64273b824a4309ced6","first_seen":"2025-06-02T07:00:29.919137Z","last_seen":"2026-07-27T14:59:58.469171Z","times_seen":266,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__27.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__27.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1129\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oZBdO1r3qLfuvxaKGQ%2F4t7C2cj22pYB6Y%2BwBjGIFnbcJLGUITueOXvcZ%2Fs4%2Fl1ewrIUw6W2KhP32nKHJabm0vVY9ZRZVaYBWcg%3D%3D\"}]}\r\ncf-ray: 9b80b48dba2c712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1129,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"3cbff16023a3738f74fa0f3c620ee35d","sha1":"e4cde715e08c03d9178230a74b666ddb6acd8a81","sha256":"68245287bc0046e97ca7010a57ca6845265b7783db419585cd865e7e5b65f0fa","sha512":"86f1063d01cad2508a7938022a6c1cd2256cb81f4fb0b033c768211a3683e902448a2175ea35f66740c45cf0694ce539027b008d8892f44ad0edc50d12cd06c8","ssdeep":"","tlshash":"272165aa734dac789b882753a348562c96994d292a610623d5e77c0f59f720e8d90750","first_seen":"2024-12-06T22:27:57.064878Z","last_seen":"2026-07-17T09:57:30.95355Z","times_seen":157,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__40.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__40.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1129\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2FmeCM1lwThMvRzQglVO8VFBDL4UmT8MfFOmv9neo5Mndyh72p5YfEoxTvXOeGYmxjg3kPyyIJh7eduL54oAWecBL2wUgY94vw%3D%3D\"}]}\r\ncf-ray: 9b80b48dfa48712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1129,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"3cbff16023a3738f74fa0f3c620ee35d","sha1":"e4cde715e08c03d9178230a74b666ddb6acd8a81","sha256":"68245287bc0046e97ca7010a57ca6845265b7783db419585cd865e7e5b65f0fa","sha512":"86f1063d01cad2508a7938022a6c1cd2256cb81f4fb0b033c768211a3683e902448a2175ea35f66740c45cf0694ce539027b008d8892f44ad0edc50d12cd06c8","ssdeep":"","tlshash":"272165aa734dac789b882753a348562c96994d292a610623d5e77c0f59f720e8d90750","first_seen":"2024-12-06T22:27:57.064878Z","last_seen":"2026-07-17T09:57:30.95355Z","times_seen":157,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__70.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__70.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1175\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XGNt0PGiu%2FOdpa0p%2Fu2Aw6bFeE3LPGHoZ1MuiI9%2Fad93O9pQ%2FGuFRV%2BqM7fuMUaRUXwE5QOzJrXe%2BgUUny2OiDPq9mGo7rRMQw%3D%3D\"}]}\r\ncf-ray: 9b80b48e8a7f712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1175,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"564765291e71e2e3a6cc543a40b65548","sha1":"de712ea89fa95bb9c9994e96f804b1676673ed5a","sha256":"2869e4c8912785059529abd6817339639f5f3398fa7fc37628e37d1890467c2b","sha512":"9d030870449923e6d22f904d1d3194ad331e30daabca95a92c96295595b0f51ab3d71e5b11a020a29254a8971dfcd4c1fe6bde33bc4aaca7c3dac279d9549f99","ssdeep":"","tlshash":"552175474751446858949b2d83095ad2ec030ee6bd53530a805bb6197239e3f4678da0","first_seen":"2024-12-06T22:27:57.076211Z","last_seen":"2026-07-17T09:57:30.989044Z","times_seen":157,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__164.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__164.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2496\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CRPfc8InZHJSm9k6q%2B9YzVFfBPkcTBu%2FieII7dhao53dA7L71%2BJU8jdeYdD%2FtRUdww07OI5KRXGCshm%2FTjuebcTyRgCD%2FT6pqA%3D%3D\"}]}\r\ncf-ray: 9b80b48ffadf712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2496,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"992da572d0eeab68de7e123b557fcaa9","sha1":"663782959996919942a7c1ed657545a29231d8c5","sha256":"a6e12a53275c9e16fad5ad380035fb843eff53aeea8e27399b3e06ea590638c0","sha512":"d21309b4a57659e19f2c760404a945ae587eb3d44d9a1363a06424066cb5ffa48657125432b611185c6fc407ce096cbd61b74d956b9270409694e12eebb02d51","ssdeep":"","tlshash":"41513a79984c20166c9f0af0ba1304686f478d645bfa41e54837f82ca8f71c06837721","first_seen":"2024-12-06T22:27:57.097189Z","last_seen":"2026-07-17T09:57:30.959959Z","times_seen":157,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/img/header/market-cap.svg","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:28.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/img/header/market-cap.svg HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:28 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GEZeE2A%2FzRcYsLUAAuvMTDLZQJGp1dfnmYK7XQNNiSdyiP7Atrar2LVvAxZrLMXL4XU7P9A5Um67rWnnfb8wdrtOT1EyaZO8HA%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9b80b486b9af712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2411,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"9a158803d2e19c53560b0e584bac9d31","sha1":"8d8d86d15def4ad67061bee3077535cbabe7c2e2","sha256":"2e7b555e20af3a2eafb5cf7ad235d99ce39c58818c7dc4acec36acf808e04dc7","sha512":"a6fd891b73b76b772aa2e64065edee3fcb77b22f7247d1310e7724cd375568afbf9665c903da61521ce31efedc5dfadb0f2b69b15a314f2844609fd35d732440","ssdeep":"","tlshash":"b44145e80765473e56489f055eb94e9574206092bf62418cf37e3d2bffc2e9b208cc65","first_seen":"2025-06-02T07:00:29.898514Z","last_seen":"2026-07-27T14:59:58.497424Z","times_seen":263,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__6.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__6.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1146\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1lbioo7VjgbOIcC6tVOtGRDC8XrY1nHRAGAcQ0u7YECO1JxSW2vsNvcC1RvW2oKIWdfaeL2vzTe3wAhpmwVEjEK7AR%2BdhCf%2FjQ%3D%3D\"}]}\r\ncf-ray: 9b80b48d4a14712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1146,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"8a6d89eeb884ff17869546bf9363d8b1","sha1":"5884c7083b9e71f8f5c436a82d4f79e84deedf69","sha256":"7eaf8fcc7b9b9326219f5b2f37e8135c7ae5960f07ea48594445710045c9ff18","sha512":"7309ccd0af2423148f1a2ffb5230abb880b52cfe5196a10d036ddf6eae918c61f78d3284fbcfbcbb773b11690f4f5684eb5ee13eec9fd279d43f21f590007973","ssdeep":"","tlshash":"2d21a5b72948f49ce939b9d11131b0b1864e9f60154f34fb10c7b1218bb020d6eaec61","first_seen":"2024-12-06T22:27:57.080393Z","last_seen":"2026-07-17T09:57:30.96439Z","times_seen":157,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__21.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__21.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1085\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f9GqyWowyFEHKwtI%2BZsw6DQmei%2BtTGY5qLw8Qg3rni06yXkdiXbIF8Pafi1nltv4n8b%2FANRPLez4nXL7Ec%2BUSeYLHOT4OnnPfA%3D%3D\"}]}\r\ncf-ray: 9b80b48d9a24712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1085,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"27f8387852fc4141a627c5c4b65b791c","sha1":"ebfacab627e3fc57d066dc041ccfe4d686a5bc6d","sha256":"e6c2f05cbd041c1ec03ff6a38e1e74ce9176d9cb09b2feb0968bf017f3f4cb4f","sha512":"ea16dc2cb4b05cfab36749d84fb9ad5b722f841d3c4f3cf2c503ed67d425c3e8a77fc1dcc049c7b734ba8c8d89076bd46bd691597470232b7035ef0b10f8f27b","ssdeep":"","tlshash":"1011c8d82730dc3fc29476f5a2294160dce34e08028391475c46f81c60360cba497747","first_seen":"2024-12-06T22:27:57.079336Z","last_seen":"2026-07-17T09:57:30.9456Z","times_seen":157,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__101.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__101.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1117\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vUFfKlMEbtwQEKlitZDlRC%2FS2kE42DaeziIHb5rK3BfBbT8r3I1D9cnXI32KEKPG0w7aNJV%2FwDrmHmHCQeOeoXbQ%2BWMoB3bBNg%3D%3D\"}]}\r\ncf-ray: 9b80b48f3a9e712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1117,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"397412fe707f80f1106f544f25c841ed","sha1":"1ff59de33d9785f6ef75bddf201453eebc27c9a3","sha256":"2fb75535b7a097b9b71606c92f237955fb81e90530238a9b51548cf17833506d","sha512":"434099b41bd6f0a75c6d5d51da7f6d9d64fe390008911884bad7a36c9e211e6c7819760cd6807bafbfb9ad784cdc4aa2b45c24a7a9c163b8220476baabcf5730","ssdeep":"","tlshash":"fa2165e72c4c9ff8c4d421f14aee929a87b15f91bc005157d8a3f492047248388b3291","first_seen":"2024-12-06T22:27:57.074226Z","last_seen":"2026-07-17T09:57:30.941854Z","times_seen":157,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__185.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__185.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2452\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AwT%2BHmBjj5k6DBr85EcxZywP0fzQmf8fvPL8QSUrwSrSDkM3zRhBu4Z9y5QznNi4oQWyQped0oHXkJxTXBaOZRZu04ECI6QlUg%3D%3D\"}]}\r\ncf-ray: 9b80b4902af6712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2452,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"2172cc0521a905b8a287030e0c6a4d86","sha1":"89aba1cad3b13ca2e4906e37d846f83adb6a0c0d","sha256":"e1ba04dc4d4e4a772e0deffd14e24d2653ed0800b3c02bac58fbbc570abcba23","sha512":"5fc1830df97b2087c97d45182fb45302d406a53fee1dfa11b1a3d0aa848ca277bd2e41b094d9f72f7aa49918910d518e0c9365a50ebe5081596161b14fc8842d","ssdeep":"","tlshash":"43516ddd58140a23366649ac9b99e3f1320a7fe95e0bd0043467f2be8f728cd01db504","first_seen":"2024-12-06T22:27:57.088699Z","last_seen":"2026-07-17T09:57:30.94974Z","times_seen":157,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__207.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__207.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:30 GMT\r\ncontent-length: 2574\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BxWhVKcNnzRMPD2X%2FHi8FRdotuZnqNzPdPtGlaPo2jcChOMK7BwLNrnnQeJyanL72ZUhUvQC3YJOTYxU%2FZeBWwd25l0ATeSyGQ%3D%3D\"}]}\r\ncf-ray: 9b80b4906b0c712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2574,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"8d591f68a09077fcafa0b05ae40473e4","sha1":"add27caff55e10c8205e31004ecabd1a5a6cf0df","sha256":"9b427e6c8f08fcda3b6057a2185b63759c319e3f83b40ff8d0871baf34371544","sha512":"883433f2368e70edc09e30d0eec94507c5ee61bd8bc4051145c29a6132650e63d19ff72572219ebe238f1cf294431bd48e014ddd4b66b3fe0f89636257b953d5","ssdeep":"","tlshash":"9d512abfeac30d80e79941629665c4bcd7c26e10e4c33f67506abb22a0b0450f02c9e3","first_seen":"2024-12-06T22:27:57.09293Z","last_seen":"2026-07-17T09:57:30.981761Z","times_seen":157,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__143.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__143.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2605\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XHvmkJPR6eJ%2FVmfi6ONqASqlGVX7cQ%2Fj8aHyWSP8jzBfM4aDGR04jtZ6SwtAGSoPpZNCCJztgbdP58HvWuT%2FVj%2FrMf7f48jYnQ%3D%3D\"}]}\r\ncf-ray: 9b80b48fbaca712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2605,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"b28e49aac00b6054373887a863314cac","sha1":"e8d65a43411cc569823097105a78b44e238dff8a","sha256":"faa834f50cdf37acf578c2c4f2e9df776e20978cfa419d5315a9b5e23b5c4f74","sha512":"8524d75aa0e1234bfce1305b1a3c5bf51638bba864cb1bd4c1003030e867176a379673ea81a054c413749db2bb4c1f5c056dc81a1e91495f66cbd0d2a7da38ef","ssdeep":"","tlshash":"ca512b96f27184c9e7a57643a7e54003a0263c964454489caecabf915f7f05a5847b06","first_seen":"2024-12-06T22:27:57.087555Z","last_seen":"2026-07-17T09:57:30.979222Z","times_seen":157,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__186.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__186.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:30 GMT\r\ncontent-length: 2532\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vlrumlv5L49M5Bx%2ByvvO1fAjdpe%2B9eRzIUg3NzR2YaR4VDCGwKZPibmPDqYpJ8fRtnwfH24KlbtvhhzpDFcYAsqlQXpRhH3CFA%3D%3D\"}]}\r\ncf-ray: 9b80b4902af7712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2532,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"e355727213ea7aefac63c70f888c3b7c","sha1":"3d44fcdad9ff14633cbe99693dc2739778fe7ad9","sha256":"2a16100972b15829065588b0908adf16b26d0994a93e1445d56496ec2378da69","sha512":"ea991dcfc07fb0003aba9bd186c2eddf709d588b0af3575f55d49936c644e64e02194ffab6e9e3911107a84716a4818d4f7ca03b1972e13dec2bd31c6f6665ef","ssdeep":"","tlshash":"e1513b85259e444682a348d94c931afc7e19cee3453ed80302717cd4e4f273e12b63af","first_seen":"2024-12-06T22:27:57.085308Z","last_seen":"2026-07-17T09:57:30.97406Z","times_seen":157,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__205.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__205.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:30 GMT\r\ncontent-length: 2530\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kX2Y8%2FyC9pS4JUm%2FoLsDfuwU6%2Bl4ZmDSEN8St7uub1KnqDWZ2ZJez%2BJG8ntFaMtNnPcZ4OGqwjKSRCpZEEABj0MRRh%2B4tqYcBA%3D%3D\"}]}\r\ncf-ray: 9b80b4905b0a712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2530,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"e13151c32d29b50f25e946b72ccac569","sha1":"c49420114727d2a20799004c47d43960a25c1d0c","sha256":"4f1d41a99c167e12b07ee5b919683497ac4fd3b1a456020714e9640eab28419e","sha512":"1297a1f11e1779a678cc91bd36a137eca7f47b0e513208ab62ed24e365261f0ed023c97e444490e24f103f8791f404aae2280ef5b1792d9c74a989181dd655f0","ssdeep":"","tlshash":"74516de9bd256c29ff8f9d1fc5d01986dfe48c07816c251e744276e892f6c08ebb08a5","first_seen":"2024-12-06T22:27:57.090895Z","last_seen":"2026-07-17T09:57:30.960505Z","times_seen":157,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/XRPshang.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/XRPshang.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 4255\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JoHvEtlibFVqpd8UfPWoVpMivvvyXQzcRHmtgpoX9oUhJ7vtKkwxDtuzUnu5RrQGBcZ%2Ba28%2BbAKmLKLY4PdaFIzCh1On87P%2BYw%3D%3D\"}]}\r\ncf-ray: 9b80b48cc9ff712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4255,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 118 x 90, 8-bit colormap, non-interlaced","md5":"0f1ee41f7092fc174ca6812e08adf312","sha1":"8b3e5477207e610b424165ddfbc7c5c3ffbc54fa","sha256":"f5e584a75855b773019d2220b62015c1ce74ee07a15c4509027568d01246485c","sha512":"c597fec14fd866f23371ed15e8e6d7f91d702334312013d86e09075be02bab8efb5144d633732c3ac163c0c1eac3a21b262ae4e4e1249121b1746908b4e3f7fe","ssdeep":"96:+5Y9wu0gYXM9NbIqaSYx5+gmSRV9vRkKEawdCTf:3wHgeobXa6gmS5TXwQr","tlshash":"7c918ef56b63003fd2b6454941698e0a9c048d3635eefa0431ccb27e9ae6971ca5b493","first_seen":"2024-12-06T22:27:57.050196Z","last_seen":"2026-07-17T09:57:30.940707Z","times_seen":168,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youhuan.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youhuan.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 3658\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HuGo12r7dgOWsTVz0X8w9nplobSFJx%2Fvlh%2BP0GVGnrN5yozteD0Y9I5eVRsP3j9Jjmpu4voJTJoWd4b0IrCZi6S0JCaQeF2%2B7A%3D%3D\"}]}\r\ncf-ray: 9b80b48cfa06712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3658,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 238 x 138, 8-bit/color RGBA, non-interlaced","md5":"eb42fdf9633376a853fa85bf12834bc6","sha1":"3908cd7954b6e61e1237097d3e5f121e7af43846","sha256":"1887f08507cc2c7d1e6d3ac5f777be5f615d8693b96079c21071470d0c6de70c","sha512":"9cb777a63db5f7eafc8dc010564e36ffc188326dbd40c833b076b50327636386248a1a7e301e4c61bc91a99b3af8b49f5bbde237786ac64fe59e5525a122ced8","ssdeep":"","tlshash":"7e716e9e2974bbfeda8ee30e417fdaca5c41c454057928fc0042ddd47a65cc1605174d","first_seen":"2024-12-06T22:27:57.058217Z","last_seen":"2026-07-17T09:57:31.011779Z","times_seen":168,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__11.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__11.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1161\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zuQ1mx4nRerw%2B9PHFl7nGlVAIx0uZgG%2BFUE7D7UssYFWLhbyPT9wl2NV8B1Uav2C2Z0TI1cgp927D6Ohz3l%2F1UZU%2FyrJjPfVlg%3D%3D\"}]}\r\ncf-ray: 9b80b48d6a19712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1161,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"e50c044ba3552cd6cc0360be3b1c8556","sha1":"c62adf647bc3b965624b60c571c8bc3cdb94305c","sha256":"8c4a348cd473994e5b0569588bd3997085eb51e0e434959379ed8b0c6f29312e","sha512":"0cb3f436341349091a811a3ba791decc54759c64a87474c38f506aa9f4bcffb08502b17855155908f0e2e291a27d2d9e44f0c84327e9249f182b7da7a753d0cb","ssdeep":"","tlshash":"a921a84d9a4170e0e9b91c050a161130814bbd241d276b4f9a7d3faa3636bba44fd015","first_seen":"2024-12-06T22:27:57.082236Z","last_seen":"2026-07-17T09:57:30.973126Z","times_seen":157,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__47.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__47.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1085\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iQk4OETdssoQ%2Fo3426dyUe8Fnzh4fqrIEpSA0yZjE1Dp%2Fdk2HRK0QTlU2NcF5D2I%2BewOpiO4r4M%2B9yXb4P4v%2FDIOgzvgFnJBBw%3D%3D\"}]}\r\ncf-ray: 9b80b48e2a62712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1085,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"27f8387852fc4141a627c5c4b65b791c","sha1":"ebfacab627e3fc57d066dc041ccfe4d686a5bc6d","sha256":"e6c2f05cbd041c1ec03ff6a38e1e74ce9176d9cb09b2feb0968bf017f3f4cb4f","sha512":"ea16dc2cb4b05cfab36749d84fb9ad5b722f841d3c4f3cf2c503ed67d425c3e8a77fc1dcc049c7b734ba8c8d89076bd46bd691597470232b7035ef0b10f8f27b","ssdeep":"","tlshash":"1011c8d82730dc3fc29476f5a2294160dce34e08028391475c46f81c60360cba497747","first_seen":"2024-12-06T22:27:57.079336Z","last_seen":"2026-07-17T09:57:30.9456Z","times_seen":157,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__112.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__112.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2496\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lQapf1LqgNpFygPRbahOItId7%2FXm1XYEYHiEOWvgV9bfeQrnnb2d8Lc6EFRN%2BXSV89eAm6CbfnSwCGYz7ywdkhnzXBCEyhDBqg%3D%3D\"}]}\r\ncf-ray: 9b80b48f5aaa712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2496,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"992da572d0eeab68de7e123b557fcaa9","sha1":"663782959996919942a7c1ed657545a29231d8c5","sha256":"a6e12a53275c9e16fad5ad380035fb843eff53aeea8e27399b3e06ea590638c0","sha512":"d21309b4a57659e19f2c760404a945ae587eb3d44d9a1363a06424066cb5ffa48657125432b611185c6fc407ce096cbd61b74d956b9270409694e12eebb02d51","ssdeep":"","tlshash":"41513a79984c20166c9f0af0ba1304686f478d645bfa41e54837f82ca8f71c06837721","first_seen":"2024-12-06T22:27:57.097189Z","last_seen":"2026-07-17T09:57:30.959959Z","times_seen":157,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__55.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__55.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1093\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NXwhEZT%2BvcaBK%2FXg0lXik8VJNwia6tog1Sj0qp4q9ALOrBzxTdyXtfaSCeSw%2BGK2ZUlLK8vj9kA9TB8siNljyu%2BF1ZBkYiWCxA%3D%3D\"}]}\r\ncf-ray: 9b80b48e5a6c712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1093,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"2083e1ff8b48312098bbd8247f3c42f0","sha1":"7d958c8a1c3ef4aa2aedf6b15759532f081c8f6b","sha256":"01a6dbc53976398d47220bab14117b4f95526159664afccf2a3c9985c3f557fb","sha512":"812083096b1a10301091e7197dd49fe809d2ee54e9115f6df23c0f78420651c745abf55b8291749d198244cae649d8980a81b08b79d6c77bdf1b1668c617f097","ssdeep":"","tlshash":"441108e0ffa8e48a389f78a3005ba02740058e1569a0ac8a092eb30f1d3010ea4cdc62","first_seen":"2024-12-06T22:27:57.068056Z","last_seen":"2026-07-17T09:57:30.96946Z","times_seen":157,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__73.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__73.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1085\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0vmFzu7wLQDs2djrgg25DM4w%2BN8idUeSbhtUM%2FJhGEv7Y4Xp5NzI3%2BoBJsCAj%2Fwpnt98o5eRbf4NLfWo8W9I3EGzqlwTNHgxuQ%3D%3D\"}]}\r\ncf-ray: 9b80b48e9a82712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1085,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"27f8387852fc4141a627c5c4b65b791c","sha1":"ebfacab627e3fc57d066dc041ccfe4d686a5bc6d","sha256":"e6c2f05cbd041c1ec03ff6a38e1e74ce9176d9cb09b2feb0968bf017f3f4cb4f","sha512":"ea16dc2cb4b05cfab36749d84fb9ad5b722f841d3c4f3cf2c503ed67d425c3e8a77fc1dcc049c7b734ba8c8d89076bd46bd691597470232b7035ef0b10f8f27b","ssdeep":"","tlshash":"1011c8d82730dc3fc29476f5a2294160dce34e08028391475c46f81c60360cba497747","first_seen":"2024-12-06T22:27:57.079336Z","last_seen":"2026-07-17T09:57:30.9456Z","times_seen":157,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__93.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__93.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1095\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pwefTE%2FJMaiBaroyPZBT7CBgNjf2LSOtbm%2FY5ijENAqfQvtgoOkRIzARE%2Fw3JGLapQRBuWA9HJGWbtSYvuNFQdaQXJizDqzm7A%3D%3D\"}]}\r\ncf-ray: 9b80b48f1a96712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1095,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"3b3e2ccbff9209b2012b53b091045763","sha1":"7d8145d03947788abc4689ac1ee24ca8a364b9ab","sha256":"cd7ab1ce9e85c923fd9ce8f2f64a29d7ef7849a6573e2f365f6f080ba41e76a6","sha512":"87d37e4db8e5f0f300a054b2967078113ee1e2715b4bc0b2711fdaf47b6272cdab9d3f4f7cbde780cfbd98f9b03f5e0f98a6c55b770fe8188f35125121a0e927","ssdeep":"","tlshash":"eb11c4c4161bbfb6c44a571784228bc9cff28c6cf004c00b46307c1978f62dae93e482","first_seen":"2024-12-06T22:27:57.065973Z","last_seen":"2026-07-17T09:57:30.968541Z","times_seen":157,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__110.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__110.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2459\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t6IU%2BOHPLdyvClVlLoGA9x2SbIhPHOwvkraceSZP0UMYgJVoaYoCdggf%2FUJK0JLFEgxyUCSi%2Fff3i3FTTK5MUmhtUsyOTD24NQ%3D%3D\"}]}\r\ncf-ray: 9b80b48f4aa8712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2459,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"50741bfc626893d14d4b6595b62f3f43","sha1":"9d1b22f81824acda4d3303ff04094aa50e2c6e62","sha256":"5673c4c4033a61d6d2caffb525d3c013df04e34ff6ebe26e98c751312b7b8d92","sha512":"0a78cb039cb36f9aea9a47ca774efd0654408520a3b61b42e8861793e34559ec77a2e3dd16032283534b20261e3d8c1d86ac20e937058c5535bc176dbf6b9016","ssdeep":"","tlshash":"f35139c3fb1580a163472eebcaa19c6d015f4f25cca520f75201b1a971fc09a5fe96ed","first_seen":"2024-12-06T22:27:57.095029Z","last_seen":"2026-07-17T09:57:30.947031Z","times_seen":157,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__127.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__127.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2530\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BNnxdm3LaUrYFhlXp6%2Fkw5fwS8ejxmaaETdv1XIgnCH6T%2FEvDFK4X%2Bu6%2BD8abDJnPjodSHFquB%2FcWzk2ICD8wRQLSbJDShN6hQ%3D%3D\"}]}\r\ncf-ray: 9b80b48f8ab9712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2530,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"e13151c32d29b50f25e946b72ccac569","sha1":"c49420114727d2a20799004c47d43960a25c1d0c","sha256":"4f1d41a99c167e12b07ee5b919683497ac4fd3b1a456020714e9640eab28419e","sha512":"1297a1f11e1779a678cc91bd36a137eca7f47b0e513208ab62ed24e365261f0ed023c97e444490e24f103f8791f404aae2280ef5b1792d9c74a989181dd655f0","ssdeep":"","tlshash":"74516de9bd256c29ff8f9d1fc5d01986dfe48c07816c251e744276e892f6c08ebb08a5","first_seen":"2024-12-06T22:27:57.090895Z","last_seen":"2026-07-17T09:57:30.960505Z","times_seen":157,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__129.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__129.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2574\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WOR6jTdgfn4Xh2%2FlUOqs3fyCaKyQLsGg%2FVVy0iGBb%2FOcp3ehqBYUPicxRiGOaClBOhRYQS2IkV%2Bou%2BZHS5Yr8cfDm96cZv78pw%3D%3D\"}]}\r\ncf-ray: 9b80b48f9abb712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2574,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"8d591f68a09077fcafa0b05ae40473e4","sha1":"add27caff55e10c8205e31004ecabd1a5a6cf0df","sha256":"9b427e6c8f08fcda3b6057a2185b63759c319e3f83b40ff8d0871baf34371544","sha512":"883433f2368e70edc09e30d0eec94507c5ee61bd8bc4051145c29a6132650e63d19ff72572219ebe238f1cf294431bd48e014ddd4b66b3fe0f89636257b953d5","ssdeep":"","tlshash":"9d512abfeac30d80e79941629665c4bcd7c26e10e4c33f67506abb22a0b0450f02c9e3","first_seen":"2024-12-06T22:27:57.09293Z","last_seen":"2026-07-17T09:57:30.981761Z","times_seen":157,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__149.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__149.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2459\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N48mW7Te68g0vK4jn57Sdae3WdDAPOWLkdzksTJUy9fZiBC%2FSu4bS3jeYYWT9BYEe53Viod4QZh6YMC7PAPi8b5MVpRQ8mk%2FMg%3D%3D\"}]}\r\ncf-ray: 9b80b48fcad0712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2459,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"50741bfc626893d14d4b6595b62f3f43","sha1":"9d1b22f81824acda4d3303ff04094aa50e2c6e62","sha256":"5673c4c4033a61d6d2caffb525d3c013df04e34ff6ebe26e98c751312b7b8d92","sha512":"0a78cb039cb36f9aea9a47ca774efd0654408520a3b61b42e8861793e34559ec77a2e3dd16032283534b20261e3d8c1d86ac20e937058c5535bc176dbf6b9016","ssdeep":"","tlshash":"f35139c3fb1580a163472eebcaa19c6d015f4f25cca520f75201b1a971fc09a5fe96ed","first_seen":"2024-12-06T22:27:57.095029Z","last_seen":"2026-07-17T09:57:30.947031Z","times_seen":157,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/BTC.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/BTC.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 7122\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kHM5P6cGTQgbIiwsTBznGz5gbn2EOmt9qDrp4s9H2UdjEKqjUs6PNEPP8YBkSoGgiQHRoeKbVEMRMOedHgYcyoglafEGlSsRRw%3D%3D\"}]}\r\ncf-ray: 9b80b48cfa05712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7122,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 192 x 185, 8-bit colormap, non-interlaced","md5":"cecbb351de59a5af2dd64ee1299ad34b","sha1":"5524394b0c2f7604d0dcc14ab2a5e3e470b42194","sha256":"3a94aa67a5302869e077021fef84bec9736c0cfbd48f8d2eacfd2c51ec1b6c1c","sha512":"749962900acf32a49c5cf47fa1ec587c6d0e672f46f5ef81c55ddd1367813356b1a059472bdf4c44a06bf11943337ea66a849b8b03b66f3daf9f006fefb6db2e","ssdeep":"192:iKTkA5cplyH7KGt7RKsKLziZ99hqn9i/PMG:cScpkb/KsKv099hRPMG","tlshash":"dbe1afc75b0f3c145d3409a55bc90fb5fc802417dcb4b77b96ba9ccab1d5195e158603","first_seen":"2024-12-06T22:27:57.060463Z","last_seen":"2026-07-17T09:57:31.00045Z","times_seen":168,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__45.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__45.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1146\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3tszF9Q0YuH9M8Afg3F9G%2BDYUrW0XPmtOz2O1o7727NxhtG4kcVSGgo8P8G4Md9Rk24nSuync5TGlmTMbrpCk9tzNqRt9V7mGQ%3D%3D\"}]}\r\ncf-ray: 9b80b48e1a60712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1146,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"8a6d89eeb884ff17869546bf9363d8b1","sha1":"5884c7083b9e71f8f5c436a82d4f79e84deedf69","sha256":"7eaf8fcc7b9b9326219f5b2f37e8135c7ae5960f07ea48594445710045c9ff18","sha512":"7309ccd0af2423148f1a2ffb5230abb880b52cfe5196a10d036ddf6eae918c61f78d3284fbcfbcbb773b11690f4f5684eb5ee13eec9fd279d43f21f590007973","ssdeep":"","tlshash":"2d21a5b72948f49ce939b9d11131b0b1864e9f60154f34fb10c7b1218bb020d6eaec61","first_seen":"2024-12-06T22:27:57.080393Z","last_seen":"2026-07-17T09:57:30.96439Z","times_seen":157,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__71.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__71.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1146\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O0F5Q1lGb55xGDOmWvR9%2BW06SI7uLwqCfQEaEbC8%2B69p%2FAxcm4LJ9kMqMbzX3AveTGP6dFwel41D4okf2X5K2cMgO%2FApsWDpkw%3D%3D\"}]}\r\ncf-ray: 9b80b48e9a80712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1146,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"8a6d89eeb884ff17869546bf9363d8b1","sha1":"5884c7083b9e71f8f5c436a82d4f79e84deedf69","sha256":"7eaf8fcc7b9b9326219f5b2f37e8135c7ae5960f07ea48594445710045c9ff18","sha512":"7309ccd0af2423148f1a2ffb5230abb880b52cfe5196a10d036ddf6eae918c61f78d3284fbcfbcbb773b11690f4f5684eb5ee13eec9fd279d43f21f590007973","ssdeep":"","tlshash":"2d21a5b72948f49ce939b9d11131b0b1864e9f60154f34fb10c7b1218bb020d6eaec61","first_seen":"2024-12-06T22:27:57.080393Z","last_seen":"2026-07-17T09:57:30.96439Z","times_seen":157,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__95.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__95.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1128\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yKEmO4ZfJ6SZYVUB93dydDONLm9pX5Zu2lrXGK7nuswcs9sRW157xTpfimZW%2FwcMAnqk8jCUvDx1MCcSB%2Bn5d4Vq%2BkHLey9QZQ%3D%3D\"}]}\r\ncf-ray: 9b80b48f2a98712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1128,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"8d4530793f2161abdb48afd9212910a7","sha1":"55359cf1e4ede8bf209d28697edb82a16868f8e6","sha256":"2472bf51de60d02b6c6e7d85946feb178260ea213315de58e2e6c3fd141fc882","sha512":"4da06101e1c46df21142a7754094b40d610f8f065cf686463f660e68949cecafb199e4f3d9de899068ffb15d7820b3c71f1c67463bbb31cb52d6c7423e789bfa","ssdeep":"","tlshash":"9721c4c10ba00578c08e78b098df1d64a528ad1b2e23de7ad801f32867bb1088fe42b0","first_seen":"2024-12-06T22:27:57.078299Z","last_seen":"2026-07-17T09:57:30.954499Z","times_seen":157,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__123.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__123.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2459\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=me4UFVn4JZMSE9r%2FvE8fouxWhdOU0NwWCNspKTdCDAXCG62Q5VlJVYik%2BFKxtjNEOoJzxmLQLy1Vanip4%2B%2FT3PI3f2EDW4pxfQ%3D%3D\"}]}\r\ncf-ray: 9b80b48f7ab5712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2459,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"50741bfc626893d14d4b6595b62f3f43","sha1":"9d1b22f81824acda4d3303ff04094aa50e2c6e62","sha256":"5673c4c4033a61d6d2caffb525d3c013df04e34ff6ebe26e98c751312b7b8d92","sha512":"0a78cb039cb36f9aea9a47ca774efd0654408520a3b61b42e8861793e34559ec77a2e3dd16032283534b20261e3d8c1d86ac20e937058c5535bc176dbf6b9016","ssdeep":"","tlshash":"f35139c3fb1580a163472eebcaa19c6d015f4f25cca520f75201b1a971fc09a5fe96ed","first_seen":"2024-12-06T22:27:57.095029Z","last_seen":"2026-07-17T09:57:30.947031Z","times_seen":157,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__158.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__158.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2379\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jr51d15RrpnBnfJKEQAhz1%2Fmbj1jfLN0aN%2FDygQ152%2Bn9IUrapwnA6Ruqohxbrf%2FB%2FSB17dc4Ond%2BHfMcDMzL%2B3BhLsl5dqCVg%3D%3D\"}]}\r\ncf-ray: 9b80b48fead9712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2379,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"fd7aa9cb135ed0372c742822ba53ae06","sha1":"1da731da9d7b334674d5d811648acfe55c3e2053","sha256":"e8b076bd916db67db55245e7a8de004cc840ff1106c27a8dbe54f46555e27697","sha512":"dd6f7bae5d834f2ad3e36a9be7c287b2f113b7d21741936f8913cd3ebb4f61030a29087c1474641520af1e9d0e0ca337d9e76caa94ed63d73e0ae6b1345c222d","ssdeep":"","tlshash":"404119a3d1117d13ee0c746b8e19d141433a4e43a923b99d3fa87e199e710856a72681","first_seen":"2024-12-06T22:27:57.098149Z","last_seen":"2026-07-17T09:57:30.962501Z","times_seen":157,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__25.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__25.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1127\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x2z%2FicNyT0Km7Vqhe2gRQy6%2Fi5qSCdSqV%2Bit7jZxc943cUAc9Sn25iWDgQjEoIzLYSggwxvfFaB%2B4lpD5E6MbTgCcszPdFuCog%3D%3D\"}]}\r\ncf-ray: 9b80b48dba2a712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1127,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"661559d919ea7aef1f7887ce598376b2","sha1":"c28b02ecb24b5484ddafbe5837e840493226545f","sha256":"b8d9cde6830d09df938f59aa13e88d5f7f0a75c658e7a0c91be97a39dfb9b779","sha512":"c4645565d6f44307387474758a191706ea61a91965554cf934d7506521c67267bc2f86b7f7a557a64c839151a0935042e071bbf9398236e0ae3fa443e7342756","ssdeep":"","tlshash":"1f2194ab87b491adb66851ec34b3ee61d80f6d100d25136f3b87ba88647a0976d42682","first_seen":"2024-12-06T22:27:57.071009Z","last_seen":"2026-07-17T09:57:30.976976Z","times_seen":157,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__114.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__114.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2530\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mo1z5A6RTXHFeHUKLWOFhvz5wxcj%2FDQlw8D8RHX0EWxXn0jFN1vnlpBSeaaLPL1TofRo2l3%2F4mXyXpkmRqIlfcR4F63F5iXYUA%3D%3D\"}]}\r\ncf-ray: 9b80b48f5aac712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2530,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"e13151c32d29b50f25e946b72ccac569","sha1":"c49420114727d2a20799004c47d43960a25c1d0c","sha256":"4f1d41a99c167e12b07ee5b919683497ac4fd3b1a456020714e9640eab28419e","sha512":"1297a1f11e1779a678cc91bd36a137eca7f47b0e513208ab62ed24e365261f0ed023c97e444490e24f103f8791f404aae2280ef5b1792d9c74a989181dd655f0","ssdeep":"","tlshash":"74516de9bd256c29ff8f9d1fc5d01986dfe48c07816c251e744276e892f6c08ebb08a5","first_seen":"2024-12-06T22:27:57.090895Z","last_seen":"2026-07-17T09:57:30.960505Z","times_seen":157,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__160.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__160.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2532\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mlX1L1Cz4Z4Y9EbOxav8UGKQZSalyAYDgDredLgnO46XH%2B8jMzH4TNaqqGuSMbYwul06mQR1yJ2m3pxcwZHYgqYYGX6wdDx9Mg%3D%3D\"}]}\r\ncf-ray: 9b80b48feadb712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2532,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"e355727213ea7aefac63c70f888c3b7c","sha1":"3d44fcdad9ff14633cbe99693dc2739778fe7ad9","sha256":"2a16100972b15829065588b0908adf16b26d0994a93e1445d56496ec2378da69","sha512":"ea991dcfc07fb0003aba9bd186c2eddf709d588b0af3575f55d49936c644e64e02194ffab6e9e3911107a84716a4818d4f7ca03b1972e13dec2bd31c6f6665ef","ssdeep":"","tlshash":"e1513b85259e444682a348d94c931afc7e19cee3453ed80302717cd4e4f273e12b63af","first_seen":"2024-12-06T22:27:57.085308Z","last_seen":"2026-07-17T09:57:30.97406Z","times_seen":157,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/fonts/inter/Inter-Bold.ttf","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:28.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /fonts/inter/Inter-Bold.ttf HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/assets/css/root.css?v=3\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: font/ttf;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:28 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1JF1PjyOMytkZUAfLVeBuNCavir0lMQmHwGtc%2FqzLFlQvx3UuzRmcXF1PlTRcjZIuZ9KBfSAnBuisMw3kho%2FwcD17ttqtGSFwQ%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9b80b48939e1712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":316100,"size_decoded":0,"mime_type":"font/ttf; charset=UTF-8","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 34 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)InterBold3.019;RSMS;Inte","md5":"275bfea5dc74c33f51916fee80feae67","sha1":"48747b7a60086f97af0d373febcbd1f1bee87f17","sha256":"790c108befe859dac2ddbd20af3fbb6917c601b3d544c8a05761519f3b5508fe","sha512":"0b82f93805dff2769bad25a503c6264094df6f403a636b039a8917aa2a1580b0c70c70ff4eb5135dda83aff0c3092e2a707216920685162ef52b395f82a86c11","ssdeep":"3072:kAkl4i5ZELTzK/PxMJ2YkGIKpqjw0K2pgm0J2Rrq41tIW+yMaf/J7oPHUGHYI9LN:VLTnJ2CW9BpW2RW1JaZWRRnQzSF","tlshash":"08647c03f313c35dc9172d3a8b92c7a0b327bc926b12e10ab7243a55c99b4f85e6b5d5","first_seen":"2023-05-10T15:50:10Z","last_seen":"2026-08-01T13:57:27.134583Z","times_seen":1624,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=SOLUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.164.248.171","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 13 Dec 2024 00:00:00 GMT","end":"Tue, 13 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:5E:B6:FE:3E:A9:63:38:16:AB:57:DA:E0:4F:51:4B:FA:2B:49:43","sha256":"AC:E7:4C:8F:D2:FB:EB:5E:41:DF:BA:9F:C5:FA:44:FB:25:36:FD:A5:BF:21:D1:F5:3B:AF:7D:14:A3:D8:FF:37"}}},"request":{"raw":"GET /api/v3/klines?symbol=SOLUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://puffdex.com/\r\nOrigin: https://puffdex.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1265\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 1e7af769-f25e-4619-8dad-f3496bca961b\r\nx-mbx-used-weight: 18\r\nx-mbx-used-weight-1m: 18\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 784f462b4ee4e847ccfe44db65f51a9c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: yM5H7uJQVe_WFfgHzn1pCgumWnAsCTyO1Dupwux5fruvEZOnFEnx6A==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4165,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"e033ba7808a6a1808b140687a4ca18a5","sha1":"aa161bd194f2c7ba956a505d69ee7f3b2bed04dc","sha256":"3a233b5f3a2f51133ab736c4cb81de543a08e559bf01a8177075ce1fc6342328","sha512":"6ff17afe1dafed76a882fad1a964c65bda50c3d31d2119a020d0673f3ae234dee2f3fbd6a88ed40fba21d4454cff9c0d372db931735761dc88f59df75d719de3","ssdeep":"48:iJcD7NWBBLZopLtI+d6nnBPlatd4UfpCca+u5WXjEOlSontBkuAkmn8uRuY4vCU9:cRBxZo/jINlapVLX3W11CTFznb","tlshash":"5c8147411389c3b4fab99d0e33e3bc648e1a705aedcb5ce0c9a03ba748f19b50b48705","first_seen":"2026-01-03T07:16:21.776588Z","last_seen":"2026-01-03T07:16:21.776588Z","times_seen":1,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=TRXUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.164.248.171","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 13 Dec 2024 00:00:00 GMT","end":"Tue, 13 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:5E:B6:FE:3E:A9:63:38:16:AB:57:DA:E0:4F:51:4B:FA:2B:49:43","sha256":"AC:E7:4C:8F:D2:FB:EB:5E:41:DF:BA:9F:C5:FA:44:FB:25:36:FD:A5:BF:21:D1:F5:3B:AF:7D:14:A3:D8:FF:37"}}},"request":{"raw":"GET /api/v3/klines?symbol=TRXUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://puffdex.com/\r\nOrigin: https://puffdex.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1141\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: f348f2b4-abc9-4ae5-9614-dcbd83402122\r\nx-mbx-used-weight: 24\r\nx-mbx-used-weight-1m: 24\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 784f462b4ee4e847ccfe44db65f51a9c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: T0UPCXLcur2ABUOJlpBpSwelMvO41qvjp4zVK1IGjLcvDH6ZfExkaw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3997,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"246ecef135644d05c1811b8aaf6c1ab3","sha1":"6a98a5cfe3cf1a4eba43b72a33d8969e8a4ec287","sha256":"86c937791527879b7ffe9f2cd51cef4b1ba2c243afe35de7213d3889111dee12","sha512":"423307b38b1d50e0aadb7ec9c8a980b9156e99fa1916f0d112dc431559618d08c45286154bbdfd437880a380f228ed13eb0574de6b9185ab11c26c1b059200dd","ssdeep":"","tlshash":"f481b51102b48650fa39481e23a3f966865ef05feddfcfd489d22a670df44f25a58b42","first_seen":"2026-01-03T07:16:21.777586Z","last_seen":"2026-01-03T07:16:21.777586Z","times_seen":1,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__19.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__19.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1146\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CK2cKsgRTMbsMCJK%2FKOjDTYlE2uqW1hNpcNw3QmSbfIwa3VNQbkwAAJ77i8plxf8U27AZ2aPduSXxCekTLoio1G125LeMTLKlQ%3D%3D\"}]}\r\ncf-ray: 9b80b48d8a22712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1146,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"8a6d89eeb884ff17869546bf9363d8b1","sha1":"5884c7083b9e71f8f5c436a82d4f79e84deedf69","sha256":"7eaf8fcc7b9b9326219f5b2f37e8135c7ae5960f07ea48594445710045c9ff18","sha512":"7309ccd0af2423148f1a2ffb5230abb880b52cfe5196a10d036ddf6eae918c61f78d3284fbcfbcbb773b11690f4f5684eb5ee13eec9fd279d43f21f590007973","ssdeep":"","tlshash":"2d21a5b72948f49ce939b9d11131b0b1864e9f60154f34fb10c7b1218bb020d6eaec61","first_seen":"2024-12-06T22:27:57.080393Z","last_seen":"2026-07-17T09:57:30.96439Z","times_seen":157,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__74.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__74.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1082\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kQQTbCey%2BiSjjySGCjROAOMMivEbwYyXG4GpmlN6aDk7n4bH%2FM%2Fqz7pu9EoEgMwpKTz8zSVkCTgSTHREyzs%2Bx6z0R9Zag38AIw%3D%3D\"}]}\r\ncf-ray: 9b80b48eaa83712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1082,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"67fe2793ea27441b173869a156d3a020","sha1":"70adef4cf030eec04027921efeb86583552fc2c9","sha256":"f748c5cdbc3c42753e90626fa56cc20408ee32a570986f4d40985f237daf8bbf","sha512":"d9b0b37ab89684c5a38661f8d4ea08af23dac9639549845d72f2f0b69d14323f6f9f93e634e43150e2f05dff4ba1604338cf873c87c4cab97e3c66d5cbb9fe98","ssdeep":"","tlshash":"1e11b7e1e2d02a17c8e4d9be2326207f9b441d165388278e860ab358273b1c9d07f4b7","first_seen":"2024-12-06T22:27:57.073178Z","last_seen":"2026-07-17T09:57:30.949254Z","times_seen":157,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__167.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__167.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2501\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GEoS5dScZkeGLSAjgWb4IcgmXoPfI7L7rsYWH%2BxKDZ648UOT%2FL38Tfx1iPPjXOw93ecLBfwbbYUt8v4I1v8VeL%2BXQrQ25nJjsA%3D%3D\"}]}\r\ncf-ray: 9b80b48ffae2712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2501,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"8e9ec66f80915f8c5766545d02c40a17","sha1":"a79d55e49aca03a2b3301df15110716dfe39d5fb","sha256":"d09935298290d607f4ad422dd60e9b77b2d5c958435b48e9200d8d6d0dbf6231","sha512":"8c26c93a7e7d53ff6f534a6a97dbe82cca0f84fc2eccf2ddee82d68f86ec4d84d089b636b1c947533d34b1582194feda318ead2b53a9b7970f505dc25209652d","ssdeep":"","tlshash":"d2511b84d8f972aa11d354f454c1eb8598b9bef81c1a774770253e2e64310c6ce7c8be","first_seen":"2024-12-06T22:27:57.09193Z","last_seen":"2026-07-17T09:57:30.978735Z","times_seen":157,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/img/coins/SOL.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:28.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/img/coins/SOL.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:28 GMT\r\ncontent-length: 404\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YYuVNgSI0KdNvK%2BwklsLHRc5ex%2BudhgN29Fp9bjzNSiEnZfOd9HBTL6sJk2%2BHdl1RzKAjY029lLajBj2O19P%2F6ybGfY2rNM8lA%3D%3D\"}]}\r\ncf-ray: 9b80b486c9b7712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":404,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"5e22a9302a4383454bfe530f0ddffb53","sha1":"be5b706cd340c21bd9be3a3ce56647ec384d6624","sha256":"b4f74a2541dbe53158395e8b054ec169ffe18124b55a0b5e027ebd9c22b5ba11","sha512":"0d94a417d4f0c678faea64e59463ab5c6cd582168ae7e744d44c1d6878deffec49dec89d5b5ca176bb15767eae10cdf9aa1691d4b033367becb08caf8ec56889","ssdeep":"","tlshash":"c9e0f1f27d245ca97f5642050fe80ff2d03c66f515119c861db2ca2d554105545d5453","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-08-01T18:09:33.213138Z","times_seen":1042,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__43.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__43.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1128\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6hr2oopBdH1DA5tXRbXu%2FdUF6iRiL18X2RZoJ8iW9%2FrEjEQNeyCX%2BYPA9ObWosctthnVkEP1VD47My9wphx5FGF82o9PU9Fohw%3D%3D\"}]}\r\ncf-ray: 9b80b48e1a5e712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1128,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"8d4530793f2161abdb48afd9212910a7","sha1":"55359cf1e4ede8bf209d28697edb82a16868f8e6","sha256":"2472bf51de60d02b6c6e7d85946feb178260ea213315de58e2e6c3fd141fc882","sha512":"4da06101e1c46df21142a7754094b40d610f8f065cf686463f660e68949cecafb199e4f3d9de899068ffb15d7820b3c71f1c67463bbb31cb52d6c7423e789bfa","ssdeep":"","tlshash":"9721c4c10ba00578c08e78b098df1d64a528ad1b2e23de7ad801f32867bb1088fe42b0","first_seen":"2024-12-06T22:27:57.078299Z","last_seen":"2026-07-17T09:57:30.954499Z","times_seen":157,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/img/header/card.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:28.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/img/header/card.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:28 GMT\r\ncontent-length: 4528\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iAbEOzbJ%2BVDzUQSirEppf%2B5qKa4bEazr3f%2F2f0z4pmjxpW8tUsFoA4zfFuaRSJqhnc8Wr6SzPNxNu24GfPW94XGdxj9W1sZP%2FQ%3D%3D\"}]}\r\ncf-ray: 9b80b486b9b4712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4528,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"787d17f49cc145d078cec3f38989b144","sha1":"8bb854fe7462d3ddc152b958232a952888a14c3f","sha256":"c38f9a1f91724365b80b233a5ddc5b891216bf82bb05f7be521fc2e75bd3cf37","sha512":"8ab4bb5374d3d7133892ba81959d0a0cf9c3adc05328d644b2ef326e602907c6988dd9b1588cb18e595583458628e130943ed8b53d70d13dde7c03fcde4f6ed1","ssdeep":"48:+MvnJralQqxKPbGf3k0IJN5IloAhat2wxrYCrW3ETb92jw1M:ZvnJWlHAjck0IJ7Ifat2wpYkbb92jwm","tlshash":"7891cc06da5235c1664ea9b711d503596c334153cdc19c5cb4cd8829af303e91e6ebdf","first_seen":"2025-02-15T17:58:10.483843Z","last_seen":"2026-08-01T13:57:27.122585Z","times_seen":418,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/img/support-logo-chat.svg","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:28.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/img/support-logo-chat.svg HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:28 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=571zTUpoQerWaIHbJGuTWhIAHsLb%2Fu9lD0eiJgX2YhK9kYFMgzfoNiEo34TCPgGxgnlNepN651wlHoe%2FgxA0pYo7g1BFdMSNeA%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9b80b486d9c2712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1834,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"911003c9a49f882d73fe4c40511816f8","sha1":"240e8d2f0cf44da1b1cf801a1e3eab472d081e34","sha256":"1192299763868ea940054d1bb7529b95620f02490f8f42aba8590a9df6d394b8","sha512":"e1221ebb601b7d8723f7d84c6e9c91aff64ffbc75d66ff89dba9f4499c1c8ef0f09e9819a00573c8302b295228c40cee0f306b92ebdf8522a41ea6156ea1236f","ssdeep":"","tlshash":"363124f9f7edb5d4f91887d0539a56b07b5b21fa7623c50807d21ea0f24162e04a988d","first_seen":"2025-05-02T21:59:25.084344Z","last_seen":"2026-08-01T13:57:27.102646Z","times_seen":456,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__30.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__30.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1128\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FcT7h9SuYmLrlFMFBTQapyOgaHZJLHwiML%2Bwu1Q0ZdBpKlLC8GcFfDPgwf9PlPWJiSJ8hVaaFIlMEK%2FsG%2FVbjw7levOO1Cs5iw%3D%3D\"}]}\r\ncf-ray: 9b80b48dca2f712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1128,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"8d4530793f2161abdb48afd9212910a7","sha1":"55359cf1e4ede8bf209d28697edb82a16868f8e6","sha256":"2472bf51de60d02b6c6e7d85946feb178260ea213315de58e2e6c3fd141fc882","sha512":"4da06101e1c46df21142a7754094b40d610f8f065cf686463f660e68949cecafb199e4f3d9de899068ffb15d7820b3c71f1c67463bbb31cb52d6c7423e789bfa","ssdeep":"","tlshash":"9721c4c10ba00578c08e78b098df1d64a528ad1b2e23de7ad801f32867bb1088fe42b0","first_seen":"2024-12-06T22:27:57.078299Z","last_seen":"2026-07-17T09:57:30.954499Z","times_seen":157,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__94.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__94.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1093\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tqkjuyVFkEsjIyA1ZltWB4lhAqQdx0McdaK8MxdY32JS6CTP5GBQehqj9uXI01VyPpB84stl3m%2B%2F%2FN%2Bf44hRShHYOWixOPQ9kQ%3D%3D\"}]}\r\ncf-ray: 9b80b48f2a97712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1093,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"2083e1ff8b48312098bbd8247f3c42f0","sha1":"7d958c8a1c3ef4aa2aedf6b15759532f081c8f6b","sha256":"01a6dbc53976398d47220bab14117b4f95526159664afccf2a3c9985c3f557fb","sha512":"812083096b1a10301091e7197dd49fe809d2ee54e9115f6df23c0f78420651c745abf55b8291749d198244cae649d8980a81b08b79d6c77bdf1b1668c617f097","ssdeep":"","tlshash":"441108e0ffa8e48a389f78a3005ba02740058e1569a0ac8a092eb30f1d3010ea4cdc62","first_seen":"2024-12-06T22:27:57.068056Z","last_seen":"2026-07-17T09:57:30.96946Z","times_seen":157,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__111.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__111.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2521\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XNMmEwlymwmv%2BC%2BinsFzcQsWqvE2HSBzHxtxBXw8q6QMc77OKNNaPHYl9KSeJkcN1ghiscb7pjde6Ti3RBklBvdjv94GZcMQFA%3D%3D\"}]}\r\ncf-ray: 9b80b48f5aa9712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2521,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"fa67807a96a067ecdf1f9e8f149ef9a2","sha1":"7778bfe4e7e00898a0ebd8b67e37e8e4ee8ca199","sha256":"2b11d4e566612651b277dff0a58701c2da5355b4c167ee07868a97e98f3d3942","sha512":"4b71c5ac28548ee033691e1087ec4f055b0f4aaa151d3613917922c0ce5df1e9c2bc3f1c3ba3f6d35ed73bcd47d8f73e85658960c4567bd3f5e7e76f83e09683","ssdeep":"","tlshash":"a5515b9765b28ce89705c4e7e606d136fe306c0b908493328f5379bd0d39a9813a8765","first_seen":"2024-12-06T22:27:57.089719Z","last_seen":"2026-07-17T09:57:30.963373Z","times_seen":157,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/img/header/p2p.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:28.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/img/header/p2p.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:28 GMT\r\ncontent-length: 5440\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cdA8j23scDwLedTAIQXDNtFSB7DtkDqABJZeJSEygHInrnL22DCp3rodq2y0%2FLE9Zb%2FDCiaDJUkVeGZEE%2FxqQfFMnkb2cSsEcA%3D%3D\"}]}\r\ncf-ray: 9b80b486c9b5712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5440,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"ecf394d33dfc28501d3f92f99d490660","sha1":"0a51f4e56a04e40a05eae931cd68d86750a2c43e","sha256":"e003384304ceacbe2ab8f0abdf2ef74e1c8fc3b2a58c93a43d46afc0c3499eca","sha512":"c7489bf8a174dd7b4ee4ac736be0384eaf9a8601e60f777faa9d6c8803967400e579dcf81536182ddd4535667f252c5818038c9c2270c768f937c0d6eb66d42a","ssdeep":"96:+cVYcgk0I8QIMIat2wU9bmdT5DdlBa6hUGDN:wcgkrMa7HBaqZ","tlshash":"62b1d91ef92231d0224dae7725ec61155f3381979a81ac94f9cf48521f142ab1c9b6fe","first_seen":"2025-02-15T17:58:10.485235Z","last_seen":"2026-08-01T13:57:27.130848Z","times_seen":417,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=DOGEUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.164.248.171","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 13 Dec 2024 00:00:00 GMT","end":"Tue, 13 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:5E:B6:FE:3E:A9:63:38:16:AB:57:DA:E0:4F:51:4B:FA:2B:49:43","sha256":"AC:E7:4C:8F:D2:FB:EB:5E:41:DF:BA:9F:C5:FA:44:FB:25:36:FD:A5:BF:21:D1:F5:3B:AF:7D:14:A3:D8:FF:37"}}},"request":{"raw":"GET /api/v3/klines?symbol=DOGEUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://puffdex.com/\r\nOrigin: https://puffdex.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1259\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 98abaa7b-af27-4c9a-ab1c-8675e27ed0ad\r\nx-mbx-used-weight: 20\r\nx-mbx-used-weight-1m: 20\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 784f462b4ee4e847ccfe44db65f51a9c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: jSkqOszkjPwD6yzuR7kMcYstEB7Bf_H4qO37LGzALTfbg9SG6Sb8ag==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4114,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"bc806777cd38e0e654c9d4c31973dbd4","sha1":"7d2694a36623224959b32ed67470afa524c9a7cf","sha256":"1db7aba69c77924e7a663ce49bef29be864c267c50c461ace3aa86e097f9b96e","sha512":"4456c3b03359c49364fe6fe1b81110f253d8b126c3cfaa38ed47b54e63a5ba4d4036e74d453c6c57194a77ce7738ee7c70cdd7ad78e23166b86e5a974e15b91e","ssdeep":"96:g105UA1O/QDxFzTi72oH6WxujCk+fiIrxYqNyLeR:U05Unkxu2oa/j/LeR","tlshash":"ae81299113988770f93d0a1b2796f962672a701eedca5fe185d995b308f1d760b0cf06","first_seen":"2026-01-03T07:16:21.782701Z","last_seen":"2026-01-03T07:16:21.782701Z","times_seen":1,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__77.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__77.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1127\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KyZmJlsfmieM3PgqVpLhY5Sbkct7iL1aJP8wYxoHmiwlUmIMVaXr5mNCqcqblj%2FtRpz3foJJTkE2dKYwoqv9F20muHczH2HC%2BQ%3D%3D\"}]}\r\ncf-ray: 9b80b48eba86712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1127,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"661559d919ea7aef1f7887ce598376b2","sha1":"c28b02ecb24b5484ddafbe5837e840493226545f","sha256":"b8d9cde6830d09df938f59aa13e88d5f7f0a75c658e7a0c91be97a39dfb9b779","sha512":"c4645565d6f44307387474758a191706ea61a91965554cf934d7506521c67267bc2f86b7f7a557a64c839151a0935042e071bbf9398236e0ae3fa443e7342756","ssdeep":"","tlshash":"1f2194ab87b491adb66851ec34b3ee61d80f6d100d25136f3b87ba88647a0976d42682","first_seen":"2024-12-06T22:27:57.071009Z","last_seen":"2026-07-17T09:57:30.976976Z","times_seen":157,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__135.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__135.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2543\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8EYOHwx8xbqsLZIrC%2Bi9fyouHdfrnR1P0hhSwdXDU7hZgvErOaVZEge%2FGXzyQYfLTrr3OWiaXDMTb0kvxQilYAzHxGDjc88T6A%3D%3D\"}]}\r\ncf-ray: 9b80b48faac1712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2543,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"442debe82512cd5550528ce377bd5182","sha1":"92600a508ed36fcb763f6999b0fec6bf7fda6818","sha256":"619351a77b896faeb26aedc24c3c4a6b0ddf900f2be0b5fa56496fc7f1275586","sha512":"c9b5cb481d415c114f62a2c4d4b27dd27790a462df25a1550717ae9b1bcdd93676478f01bd672be56919fb0aeab91f5deedf01559af93b8abb61bd794a5a8e40","ssdeep":"","tlshash":"cc513a16de6474f959d86632a53305a01380df11b98bb550d30aba877bb3405f86451c","first_seen":"2024-12-06T22:27:57.093947Z","last_seen":"2026-07-17T09:57:30.950573Z","times_seen":157,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__154.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__154.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2501\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BlbYAKIN%2B3ML5%2Fgz%2BlS0kqQwXtxJljr5D9a2xNdJSERT7sE3BN1H%2F74Nw66B6M5sYd%2Fw8ByfCHH4R1RTMLBQCxLHXa4HSL3A6A%3D%3D\"}]}\r\ncf-ray: 9b80b48fead5712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2501,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"8e9ec66f80915f8c5766545d02c40a17","sha1":"a79d55e49aca03a2b3301df15110716dfe39d5fb","sha256":"d09935298290d607f4ad422dd60e9b77b2d5c958435b48e9200d8d6d0dbf6231","sha512":"8c26c93a7e7d53ff6f534a6a97dbe82cca0f84fc2eccf2ddee82d68f86ec4d84d089b636b1c947533d34b1582194feda318ead2b53a9b7970f505dc25209652d","ssdeep":"","tlshash":"d2511b84d8f972aa11d354f454c1eb8598b9bef81c1a774770253e2e64310c6ce7c8be","first_seen":"2024-12-06T22:27:57.09193Z","last_seen":"2026-07-17T09:57:30.978735Z","times_seen":157,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/img/coins/DOGE.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:28.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/img/coins/DOGE.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:28 GMT\r\ncontent-length: 2808\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3OwXbROXfnaw2sbN7lnkjPxtZtzKgC4vY0kf9MKmoncjYfZp1R%2Bpues1qHwYzOhC7H52MA0mxUGjO4nThx7npncaHqV2VOWGuA%3D%3D\"}]}\r\ncf-ray: 9b80b486c9b9712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2808,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"d55dd75446d505958e5210985b246bed","sha1":"df83b77aa8f8647f67f478e02c23f864a592f6d6","sha256":"8abf24f47bc3b4def59a6e6441a9f2dbb8d20c953c2c5373f219ab614a8f208d","sha512":"b65c5b9eca2ac0bef1dfdf742eb6ce365c3368650b37cd847ce12b955e683d3843cdeab9ec25beed31976e9b3ab571e59d4c66431e44345e7c57347a72bb758f","ssdeep":"","tlshash":"a6515c150736fcaac55846a3889f0970c8ee362be160571a7664cc17ff949494a17743","first_seen":"2023-05-07T19:16:41Z","last_seen":"2026-08-01T18:09:33.18989Z","times_seen":996,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuohuan2.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuohuan2.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 3111\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E%2BNGzYgpKEq5dK2%2BfnNK%2B%2FwzPER3pmr%2FvodYtYybMFSy4rsXd1cZgZW7eKKs3wEAclSznb%2FmhjJ4I%2F9ZhepdRH7R%2FsmOHZXUHA%3D%3D\"}]}\r\ncf-ray: 9b80b48c99f7712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3111,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 202 x 108, 8-bit/color RGBA, non-interlaced","md5":"0181c213204cfeb8732de816266bfd3f","sha1":"783fa913351a35a275646c48b8dba3b656f93aa5","sha256":"433bc635bdb05472179c3e705dbf9e6cf8d552dbd8691088f8d2747db7a8b832","sha512":"3a293cd2f4f4f493195389aae736976c9e82901572cdb278aedf2a86a33e5cdfc521f176017099dcecaac6f4fe65edc88023a702148672f6c2ad9a86ded895e0","ssdeep":"","tlshash":"51515dd0cad09c77faa52429b0f41b4c48ced28183914dd0963ecd4f3757ea1513a203","first_seen":"2024-12-06T22:27:57.128659Z","last_seen":"2026-07-17T09:57:31.005259Z","times_seen":168,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__38.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__38.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1127\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KyVNOZvZfOJOOeXYitt5P6d%2FOHT2r8iJPLyLbuMxuu%2FdZTT2AtwmNfJvnvFZPjA%2FLshQFyRZUktKDDSOWca%2FQlZi9%2BARcEgsEQ%3D%3D\"}]}\r\ncf-ray: 9b80b48dea44712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1127,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"661559d919ea7aef1f7887ce598376b2","sha1":"c28b02ecb24b5484ddafbe5837e840493226545f","sha256":"b8d9cde6830d09df938f59aa13e88d5f7f0a75c658e7a0c91be97a39dfb9b779","sha512":"c4645565d6f44307387474758a191706ea61a91965554cf934d7506521c67267bc2f86b7f7a557a64c839151a0935042e071bbf9398236e0ae3fa443e7342756","ssdeep":"","tlshash":"1f2194ab87b491adb66851ec34b3ee61d80f6d100d25136f3b87ba88647a0976d42682","first_seen":"2024-12-06T22:27:57.071009Z","last_seen":"2026-07-17T09:57:30.976976Z","times_seen":157,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__177.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__177.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2496\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s4xjymd8Ex8t1KBDytOUenj8L15MjjyyHz2woDqZ1ORnECLnRABRGLEDWZUL7rPAPf%2BqAuytcwNhs7DLuysYWFE3Q3yPAdV%2FRw%3D%3D\"}]}\r\ncf-ray: 9b80b4901aed712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2496,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"992da572d0eeab68de7e123b557fcaa9","sha1":"663782959996919942a7c1ed657545a29231d8c5","sha256":"a6e12a53275c9e16fad5ad380035fb843eff53aeea8e27399b3e06ea590638c0","sha512":"d21309b4a57659e19f2c760404a945ae587eb3d44d9a1363a06424066cb5ffa48657125432b611185c6fc407ce096cbd61b74d956b9270409694e12eebb02d51","ssdeep":"","tlshash":"41513a79984c20166c9f0af0ba1304686f478d645bfa41e54837f82ca8f71c06837721","first_seen":"2024-12-06T22:27:57.097189Z","last_seen":"2026-07-17T09:57:30.959959Z","times_seen":157,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__49.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__49.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1117\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rTsjkp5d5PSJ5UAP%2FNS%2BLygvtFot5Of9mrgsiB8mLm1%2FVldAEcTv0Vu43Q5CsvplhW6oxXnid44NK46DCELHYTon%2BdP7bdNboA%3D%3D\"}]}\r\ncf-ray: 9b80b48e3a64712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1117,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"397412fe707f80f1106f544f25c841ed","sha1":"1ff59de33d9785f6ef75bddf201453eebc27c9a3","sha256":"2fb75535b7a097b9b71606c92f237955fb81e90530238a9b51548cf17833506d","sha512":"434099b41bd6f0a75c6d5d51da7f6d9d64fe390008911884bad7a36c9e211e6c7819760cd6807bafbfb9ad784cdc4aa2b45c24a7a9c163b8220476baabcf5730","ssdeep":"","tlshash":"fa2165e72c4c9ff8c4d421f14aee929a87b15f91bc005157d8a3f492047248388b3291","first_seen":"2024-12-06T22:27:57.074226Z","last_seen":"2026-07-17T09:57:30.941854Z","times_seen":157,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:100,300,400,500,700,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:28.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css?family=Roboto:100,300,400,500,700,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 03 Jan 2026 07:15:28 GMT\r\ndate: Sat, 03 Jan 2026 07:15:28 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33510,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"49f2590313831152e2b656ca33b7fc37","sha1":"910db6f788b80561905582e510ed3a09ed752c59","sha256":"591b1c315e1d15fd0a13a83272e68f621d26092559ad6adbf0108012d22d3173","sha512":"65a0b79b9011b31f8b55a7a0ed8a5c6e55f992f775c21592c0502765afa716f01ef5c65e7abbc2d8681bda6ad804f2661072016fc5e529cf5dd007a9c1811837","ssdeep":"768:DDSDjDGDUDB4DiLDZD1D5CJmwBUiRDfMTcfFBhiEymDcTYeBai75tdmtC0BQiVPI:I0rAwyl","tlshash":"3de200a1041750009b838ce223cebf35fe1f52517142d0b5abfdab6badcbc66526936d","first_seen":"2025-11-19T00:32:15.532783Z","last_seen":"2026-02-19T18:58:31.233433Z","times_seen":1940,"resource_available":false,"data":null}},"time_used":531,"timings":{"blocked":241,"dns":1,"connect":9,"send":0,"wait":22,"receive":0,"ssl":254},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__10.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__10.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1117\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sGqJIG4HH1gqVMk5ZPoV3a9NYrAbEayIJ1VWPQJ50UPmAI%2FUVs6JD3AFUYZ9pq%2BgN0oyQVIbN6GAYE43P9okziU87ecbf7q8vw%3D%3D\"}]}\r\ncf-ray: 9b80b48d6a18712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1117,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"397412fe707f80f1106f544f25c841ed","sha1":"1ff59de33d9785f6ef75bddf201453eebc27c9a3","sha256":"2fb75535b7a097b9b71606c92f237955fb81e90530238a9b51548cf17833506d","sha512":"434099b41bd6f0a75c6d5d51da7f6d9d64fe390008911884bad7a36c9e211e6c7819760cd6807bafbfb9ad784cdc4aa2b45c24a7a9c163b8220476baabcf5730","ssdeep":"","tlshash":"fa2165e72c4c9ff8c4d421f14aee929a87b15f91bc005157d8a3f492047248388b3291","first_seen":"2024-12-06T22:27:57.074226Z","last_seen":"2026-07-17T09:57:30.941854Z","times_seen":157,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__69.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__69.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1128\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gvEV5aoasoWZxicapJj29q8kIpygy1PNkyP51KFgHqhuSinW1FiVG2zrZU8lFoc3P2AkNb5rYNzC6NlHRrzl%2FNA9aq%2BCYbp1SQ%3D%3D\"}]}\r\ncf-ray: 9b80b48e8a7e712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1128,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"8d4530793f2161abdb48afd9212910a7","sha1":"55359cf1e4ede8bf209d28697edb82a16868f8e6","sha256":"2472bf51de60d02b6c6e7d85946feb178260ea213315de58e2e6c3fd141fc882","sha512":"4da06101e1c46df21142a7754094b40d610f8f065cf686463f660e68949cecafb199e4f3d9de899068ffb15d7820b3c71f1c67463bbb31cb52d6c7423e789bfa","ssdeep":"","tlshash":"9721c4c10ba00578c08e78b098df1d64a528ad1b2e23de7ad801f32867bb1088fe42b0","first_seen":"2024-12-06T22:27:57.078299Z","last_seen":"2026-07-17T09:57:30.954499Z","times_seen":157,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__88.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__88.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1117\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QEgIX%2BqD1hiD5WLcL9Xz5f3NksaS1tnE9MqkRsSpJVb5%2FkHeN7tpzkSJvJ%2BlOuLUCvobNk5FZGSvFr%2Brog1w76VtKFenom1pVA%3D%3D\"}]}\r\ncf-ray: 9b80b48eea91712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1117,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"397412fe707f80f1106f544f25c841ed","sha1":"1ff59de33d9785f6ef75bddf201453eebc27c9a3","sha256":"2fb75535b7a097b9b71606c92f237955fb81e90530238a9b51548cf17833506d","sha512":"434099b41bd6f0a75c6d5d51da7f6d9d64fe390008911884bad7a36c9e211e6c7819760cd6807bafbfb9ad784cdc4aa2b45c24a7a9c163b8220476baabcf5730","ssdeep":"","tlshash":"fa2165e72c4c9ff8c4d421f14aee929a87b15f91bc005157d8a3f492047248388b3291","first_seen":"2024-12-06T22:27:57.074226Z","last_seen":"2026-07-17T09:57:30.941854Z","times_seen":157,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/img/coins/ETH.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:28.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/img/coins/ETH.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:28 GMT\r\ncontent-length: 1100\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Oh41wCQ7r%2BPhHGt19hCRLCoa4GWo2Y0V4V%2B%2Bg%2Bvyh9m4yV8x%2BEFXoXJwWtZQlK6coo%2FaNymHNlT%2Frdz5i2g2squf%2Fu3%2BOIIKg%3D%3D\"}]}\r\ncf-ray: 9b80b486c9b8712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1100,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"8658d5935ab59ee39d15c39226279d46","sha1":"27463866eb9fa6fe4b6d2bd2cd3d6fd88392cb43","sha256":"595a7c97f329934d40fa297958ccbb31d3cd101c2965b02a32a7c96fd49c9e11","sha512":"0179fd67c6baa7d46fba32986a8f6fe1586f2d9d3c57161bc33ecae609d6e608e8d9bfcdad0459bf41ba087843955a45ce5daca8ea223cb33138de6b4c8b13db","ssdeep":"","tlshash":"f211b6b64261eec7905c8a22da820b38ed2d9718f01c3f06ef73efb39225b045105d0a","first_seen":"2023-05-25T23:01:30Z","last_seen":"2026-08-01T18:09:33.225805Z","times_seen":1854,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__0.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__0.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1165\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H94h%2BTxQEbDSAvOF%2FqgV%2BplwCRFiZog%2Fa5MBO1unjVx6oi5z1cs9LWXwZbYuBgnLCwM20cHTj35hYR1T3nZPvI0Po%2F8o0hTlag%3D%3D\"}]}\r\ncf-ray: 9b80b48d3a0e712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1165,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"50333973529f140a38862b5e59223c23","sha1":"ca772352821ce63cc8d52b58b4dff1bcbe92b6d6","sha256":"ae37bc4c761654d71faa919cdb2bcc500d39f14f3747c2124a67f7eafe4116e3","sha512":"93152b60013a15a74c510b75bf4c4d11f27cab49234bb7980c9bb245935673d6adc119cf598a648c29ba5bfad9e4cf730988f224e352cab3c65728fe9318bfe8","ssdeep":"","tlshash":"9121a5f530731d399a089789f51c68b85d126f08ae9496164444f8f4f8f6b49e048ab2","first_seen":"2024-12-06T22:27:57.061496Z","last_seen":"2026-07-17T09:57:30.946495Z","times_seen":157,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__29.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__29.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1093\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wfo4nd%2BttXjLPMlFrruZteBOmfuvqH9tG9daLFleMOBqCLrFq%2Bc4ndhqoh4Wh6gryJJDs%2FTfFwjG1dqBpAcPOnV4mgyDn4BMhA%3D%3D\"}]}\r\ncf-ray: 9b80b48dca2e712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1093,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"2083e1ff8b48312098bbd8247f3c42f0","sha1":"7d958c8a1c3ef4aa2aedf6b15759532f081c8f6b","sha256":"01a6dbc53976398d47220bab14117b4f95526159664afccf2a3c9985c3f557fb","sha512":"812083096b1a10301091e7197dd49fe809d2ee54e9115f6df23c0f78420651c745abf55b8291749d198244cae649d8980a81b08b79d6c77bdf1b1668c617f097","ssdeep":"","tlshash":"441108e0ffa8e48a389f78a3005ba02740058e1569a0ac8a092eb30f1d3010ea4cdc62","first_seen":"2024-12-06T22:27:57.068056Z","last_seen":"2026-07-17T09:57:30.96946Z","times_seen":157,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__60.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__60.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1085\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BYXedqqQ5ukae4Ah1eDH4%2Fk2rWj7YRlGK%2Bl8oat5ajv6LbNsqMKs9T3rs2IP3XihKVcUdF13FUU2FIDAnaPfcjbGYby4AN1YuA%3D%3D\"}]}\r\ncf-ray: 9b80b48e6a73712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1085,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"27f8387852fc4141a627c5c4b65b791c","sha1":"ebfacab627e3fc57d066dc041ccfe4d686a5bc6d","sha256":"e6c2f05cbd041c1ec03ff6a38e1e74ce9176d9cb09b2feb0968bf017f3f4cb4f","sha512":"ea16dc2cb4b05cfab36749d84fb9ad5b722f841d3c4f3cf2c503ed67d425c3e8a77fc1dcc049c7b734ba8c8d89076bd46bd691597470232b7035ef0b10f8f27b","ssdeep":"","tlshash":"1011c8d82730dc3fc29476f5a2294160dce34e08028391475c46f81c60360cba497747","first_seen":"2024-12-06T22:27:57.079336Z","last_seen":"2026-07-17T09:57:30.9456Z","times_seen":157,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__117.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__117.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2605\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CL%2Bm1uM5OOKz9jW1vh%2Fb2gN74TEX7gkqskHytIzFkE0tW97EUilIi3ULVg4ZxZ9GzlZX6NQd7NJQiGjMFnCPcjD2LXlGL6a9mA%3D%3D\"}]}\r\ncf-ray: 9b80b48f6aaf712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2605,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"b28e49aac00b6054373887a863314cac","sha1":"e8d65a43411cc569823097105a78b44e238dff8a","sha256":"faa834f50cdf37acf578c2c4f2e9df776e20978cfa419d5315a9b5e23b5c4f74","sha512":"8524d75aa0e1234bfce1305b1a3c5bf51638bba864cb1bd4c1003030e867176a379673ea81a054c413749db2bb4c1f5c056dc81a1e91495f66cbd0d2a7da38ef","ssdeep":"","tlshash":"ca512b96f27184c9e7a57643a7e54003a0263c964454489caecabf915f7f05a5847b06","first_seen":"2024-12-06T22:27:57.087555Z","last_seen":"2026-07-17T09:57:30.979222Z","times_seen":157,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__119.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__119.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2379\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M9S8V%2ByXFcFlP4e7zRXGvcEQArUVS7i6IgPaXAL9KfeNFpOgWqge8aE%2Bi%2FIB31haB7rdsFcf4%2FMi43%2FuJ4EpAmResOFpTOYx5g%3D%3D\"}]}\r\ncf-ray: 9b80b48f6ab1712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2379,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"fd7aa9cb135ed0372c742822ba53ae06","sha1":"1da731da9d7b334674d5d811648acfe55c3e2053","sha256":"e8b076bd916db67db55245e7a8de004cc840ff1106c27a8dbe54f46555e27697","sha512":"dd6f7bae5d834f2ad3e36a9be7c287b2f113b7d21741936f8913cd3ebb4f61030a29087c1474641520af1e9d0e0ca337d9e76caa94ed63d73e0ae6b1345c222d","ssdeep":"","tlshash":"404119a3d1117d13ee0c746b8e19d141433a4e43a923b99d3fa87e199e710856a72681","first_seen":"2024-12-06T22:27:57.098149Z","last_seen":"2026-07-17T09:57:30.962501Z","times_seen":157,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__132.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__132.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2379\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iPK2Y759BO8UPwFTUqLxJCr%2BysUK3dvdMdD3ucdP9EpMA5Hs9eMIoO1FO2Pw%2BV%2FbBtKPVk7WJ5ZWE7ivaf1zAguxWj%2F5ZYNnpA%3D%3D\"}]}\r\ncf-ray: 9b80b48f9abe712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2379,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"fd7aa9cb135ed0372c742822ba53ae06","sha1":"1da731da9d7b334674d5d811648acfe55c3e2053","sha256":"e8b076bd916db67db55245e7a8de004cc840ff1106c27a8dbe54f46555e27697","sha512":"dd6f7bae5d834f2ad3e36a9be7c287b2f113b7d21741936f8913cd3ebb4f61030a29087c1474641520af1e9d0e0ca337d9e76caa94ed63d73e0ae6b1345c222d","ssdeep":"","tlshash":"404119a3d1117d13ee0c746b8e19d141433a4e43a923b99d3fa87e199e710856a72681","first_seen":"2024-12-06T22:27:57.098149Z","last_seen":"2026-07-17T09:57:30.962501Z","times_seen":157,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/img/untitled-app-modal.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:28.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/img/untitled-app-modal.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:28 GMT\r\ncontent-length: 9947\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qCHX5dkUgb6TYcYjQqmQyQKcvzTaeGJ4UYhe%2F7NwwYL1lpuAIZIqBTv9SgbVJtwLIb3arCES%2BhjJc1MLF%2BlOJUxhjJ3IyQYYJw%3D%3D\"}]}\r\ncf-ray: 9b80b486d9c4712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9947,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 345 x 252, 8-bit colormap, non-interlaced","md5":"5559668af3e553fc871a55adf3347819","sha1":"4a699964c855c8f83c2610de0af2419a71257c8c","sha256":"8ac5dfb6306149a3edebaf77bc100de9ffa8af46e56b8bc79716fc701e207617","sha512":"e0edab55aac4f8d743e98bbb7d52ed7c5b1f5b32c84e8cc271015c10d57333c2b458f30b4eb5e41e0c7e91b02dd46a8cf30b9653a3e932949413f85021485967","ssdeep":"96:JHrmqk0gW4mwLtat2J2wx1Q4Hs3NGlGzribeTnSodQNDirGQ0rNpV6x/ddcEoSa8:JHrmqk6QoqeTSoao4pVCdHahAob+8RLE","tlshash":"3b225ba49f9578c0975e1e73b5e5004548330ae7cdc2bd4abdce542a0f28b819f2b9d7","first_seen":"2024-12-06T22:27:57.026807Z","last_seen":"2026-08-01T13:57:27.100549Z","times_seen":416,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__57.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__57.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1175\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gasnTaThN%2F85Tz88A0V8CKkDT5psmxvlKuCxDWVAP1rmemwOHEPn3GGs1EObiQWy2DW11VHwv8KsjfWxphOn8eJnGRqC43B%2BpA%3D%3D\"}]}\r\ncf-ray: 9b80b48e5a6f712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1175,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"564765291e71e2e3a6cc543a40b65548","sha1":"de712ea89fa95bb9c9994e96f804b1676673ed5a","sha256":"2869e4c8912785059529abd6817339639f5f3398fa7fc37628e37d1890467c2b","sha512":"9d030870449923e6d22f904d1d3194ad331e30daabca95a92c96295595b0f51ab3d71e5b11a020a29254a8971dfcd4c1fe6bde33bc4aaca7c3dac279d9549f99","ssdeep":"","tlshash":"552175474751446858949b2d83095ad2ec030ee6bd53530a805bb6197239e3f4678da0","first_seen":"2024-12-06T22:27:57.076211Z","last_seen":"2026-07-17T09:57:30.989044Z","times_seen":157,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__72.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__72.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1076\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r7aNnV%2F68m22j1odvhxxhlOyIfwvwMpJafVhvUeZJ2378wFNHiV1wr%2BvMKkN1pJ%2BY%2Ff2LNKB%2FqBMseZcVtu9ipu4MlLm7O2X5A%3D%3D\"}]}\r\ncf-ray: 9b80b48e9a81712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1076,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"0b3074990371bd83962bb56860f860a5","sha1":"7a368b9124d8064c68fd5f5b55af78174b1e5e1c","sha256":"fc668937a6369ced1814294a22f0fbd772ba5ea2049d9d4d0df721efb4a751cd","sha512":"8d72fb2bc062f4aeb72367e3707f5827c158f7e84c554397041aaeabf8525d22d70265aa1863d32a8e15063f1eba4753f816d227a30cef59fe611d1db0e134ed","ssdeep":"","tlshash":"541184fa16b07aa0d1cc83374328f6a087410f1ab860b68f90def5da24b454ccdd6304","first_seen":"2024-12-06T22:27:57.072103Z","last_seen":"2026-07-17T09:57:30.955129Z","times_seen":157,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__162.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__162.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2459\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FlN%2BW%2BPMFn7mOkG2ZRlDGcAmdBCHYfITrA5jtX%2FDGlgnFGYSjH4v3ikx6l%2B4gyLzmQI20APrNM0j6M8XerrXPBme%2FAKKknd%2BRQ%3D%3D\"}]}\r\ncf-ray: 9b80b48ffadd712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2459,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"50741bfc626893d14d4b6595b62f3f43","sha1":"9d1b22f81824acda4d3303ff04094aa50e2c6e62","sha256":"5673c4c4033a61d6d2caffb525d3c013df04e34ff6ebe26e98c751312b7b8d92","sha512":"0a78cb039cb36f9aea9a47ca774efd0654408520a3b61b42e8861793e34559ec77a2e3dd16032283534b20261e3d8c1d86ac20e937058c5535bc176dbf6b9016","ssdeep":"","tlshash":"f35139c3fb1580a163472eebcaa19c6d015f4f25cca520f75201b1a971fc09a5fe96ed","first_seen":"2024-12-06T22:27:57.095029Z","last_seen":"2026-07-17T09:57:30.947031Z","times_seen":157,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__184.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__184.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2379\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5ZhWzqu48Uo8i4XnMgixVQnWh88UbTF8iAzfjm%2BoKvdEP9OLcRlRjfhEh5W%2Fx2UsdIRU7EZMmv19%2FgBFN07HoIUeIjfklZ%2FKWw%3D%3D\"}]}\r\ncf-ray: 9b80b4902af5712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2379,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"fd7aa9cb135ed0372c742822ba53ae06","sha1":"1da731da9d7b334674d5d811648acfe55c3e2053","sha256":"e8b076bd916db67db55245e7a8de004cc840ff1106c27a8dbe54f46555e27697","sha512":"dd6f7bae5d834f2ad3e36a9be7c287b2f113b7d21741936f8913cd3ebb4f61030a29087c1474641520af1e9d0e0ca337d9e76caa94ed63d73e0ae6b1345c222d","ssdeep":"","tlshash":"404119a3d1117d13ee0c746b8e19d141433a4e43a923b99d3fa87e199e710856a72681","first_seen":"2024-12-06T22:27:57.098149Z","last_seen":"2026-07-17T09:57:30.962501Z","times_seen":157,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/ETH.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/ETH.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 5130\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B449rhxG7D3LXiKDcVK8PKOfS4CwbKkFZf%2BJ%2BU%2BZADDWYom7AcMyOEzju15Z0zcUbK%2FHwZFJLzWswmBEM38q6JonDdIMolADIw%3D%3D\"}]}\r\ncf-ray: 9b80b48ca9fb712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5130,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 141 x 137, 8-bit colormap, non-interlaced","md5":"f8eddb7276c4edb97e56cd39fca25a0a","sha1":"36f391244d5c673fa5283873192fc9fc04d3b3b4","sha256":"6e77a07dd211da688784069afc432e62aef7613dcafb50608669ad59acfcf8a0","sha512":"a61a80abc4e49b47baf3f5e0405e912b6d940a9d35648933b9a5854464b29fe7b6737488a24c30eb812414f1df54d4debf660f819f070dbef724baa46a78d8b0","ssdeep":"96:tUcdk0k5UMW5mxde6N4AKjP9UgHYH+LY+NchLEAnV71a6lGz:tbdvp5mJSAKjPSX+LY+gR7Qz","tlshash":"46b18d9b62e9b8c23e383f5fa2c0fc54c362e561787c62810ad1a65d64087d88362d9e","first_seen":"2024-12-06T22:27:57.051306Z","last_seen":"2026-07-17T09:57:31.020355Z","times_seen":168,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__2.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__2.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1095\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B2sA8gY68ps4%2Fyoi772AtU6UZ3e4fjgtl8N00qfKyWmdXHJum37IOFbwEaHRLDk9SYaFvl7DQ1373dmLdNRv4xltKzTajzGQlQ%3D%3D\"}]}\r\ncf-ray: 9b80b48d4a10712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1095,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"3b3e2ccbff9209b2012b53b091045763","sha1":"7d8145d03947788abc4689ac1ee24ca8a364b9ab","sha256":"cd7ab1ce9e85c923fd9ce8f2f64a29d7ef7849a6573e2f365f6f080ba41e76a6","sha512":"87d37e4db8e5f0f300a054b2967078113ee1e2715b4bc0b2711fdaf47b6272cdab9d3f4f7cbde780cfbd98f9b03f5e0f98a6c55b770fe8188f35125121a0e927","ssdeep":"","tlshash":"eb11c4c4161bbfb6c44a571784228bc9cff28c6cf004c00b46307c1978f62dae93e482","first_seen":"2024-12-06T22:27:57.065973Z","last_seen":"2026-07-17T09:57:30.968541Z","times_seen":157,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__7.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__7.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1076\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0xZmKkEFPYcKIPAhnk4g6q3ncuM9X331RRT1nVtuUf4bCMqnZlihnjFVtAJH0UFZFGvaWQOAhcGVlO66w7Xxb%2FYeD28RhPajtw%3D%3D\"}]}\r\ncf-ray: 9b80b48d5a15712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1076,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"0b3074990371bd83962bb56860f860a5","sha1":"7a368b9124d8064c68fd5f5b55af78174b1e5e1c","sha256":"fc668937a6369ced1814294a22f0fbd772ba5ea2049d9d4d0df721efb4a751cd","sha512":"8d72fb2bc062f4aeb72367e3707f5827c158f7e84c554397041aaeabf8525d22d70265aa1863d32a8e15063f1eba4753f816d227a30cef59fe611d1db0e134ed","ssdeep":"","tlshash":"541184fa16b07aa0d1cc83374328f6a087410f1ab860b68f90def5da24b454ccdd6304","first_seen":"2024-12-06T22:27:57.072103Z","last_seen":"2026-07-17T09:57:30.955129Z","times_seen":157,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__64.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__64.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1127\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Clstm3Xj9UBE3FQDFcyWi2GcCZuZMP1nrGlKrZcWCTXOAvPZQRgt93y6jlnmJuuq7etot5IBfmBKY3JGRVAY17%2Bp8DWyR2%2FKg%3D%3D\"}]}\r\ncf-ray: 9b80b48e7a77712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1127,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"661559d919ea7aef1f7887ce598376b2","sha1":"c28b02ecb24b5484ddafbe5837e840493226545f","sha256":"b8d9cde6830d09df938f59aa13e88d5f7f0a75c658e7a0c91be97a39dfb9b779","sha512":"c4645565d6f44307387474758a191706ea61a91965554cf934d7506521c67267bc2f86b7f7a557a64c839151a0935042e071bbf9398236e0ae3fa443e7342756","ssdeep":"","tlshash":"1f2194ab87b491adb66851ec34b3ee61d80f6d100d25136f3b87ba88647a0976d42682","first_seen":"2024-12-06T22:27:57.071009Z","last_seen":"2026-07-17T09:57:30.976976Z","times_seen":157,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__102.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__102.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1161\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BlILmSH0fp6JmUDqoogP2FPzlD5sZQXZ99cTMQUn1dT8Wrl4jl%2F1ZetFFfiAuSumuCSm7Rg%2B2qyR6hDKqH3bnJWYxsqRIqOKAw%3D%3D\"}]}\r\ncf-ray: 9b80b48f3a9f712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1161,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"e50c044ba3552cd6cc0360be3b1c8556","sha1":"c62adf647bc3b965624b60c571c8bc3cdb94305c","sha256":"8c4a348cd473994e5b0569588bd3997085eb51e0e434959379ed8b0c6f29312e","sha512":"0cb3f436341349091a811a3ba791decc54759c64a87474c38f506aa9f4bcffb08502b17855155908f0e2e291a27d2d9e44f0c84327e9249f182b7da7a753d0cb","ssdeep":"","tlshash":"a921a84d9a4170e0e9b91c050a161130814bbd241d276b4f9a7d3faa3636bba44fd015","first_seen":"2024-12-06T22:27:57.082236Z","last_seen":"2026-07-17T09:57:30.973126Z","times_seen":157,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__115.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__115.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2501\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OPPD1fx1zbJCTnX2Dfkr99zHwTxq2mdaGc5q1g0NccEoki0zXhhgcHIlHUcgmRO8qhthl%2F%2FMVCaRalaAY5zek39GXgz0r7sVbg%3D%3D\"}]}\r\ncf-ray: 9b80b48f5aad712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2501,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"8e9ec66f80915f8c5766545d02c40a17","sha1":"a79d55e49aca03a2b3301df15110716dfe39d5fb","sha256":"d09935298290d607f4ad422dd60e9b77b2d5c958435b48e9200d8d6d0dbf6231","sha512":"8c26c93a7e7d53ff6f534a6a97dbe82cca0f84fc2eccf2ddee82d68f86ec4d84d089b636b1c947533d34b1582194feda318ead2b53a9b7970f505dc25209652d","ssdeep":"","tlshash":"d2511b84d8f972aa11d354f454c1eb8598b9bef81c1a774770253e2e64310c6ce7c8be","first_seen":"2024-12-06T22:27:57.09193Z","last_seen":"2026-07-17T09:57:30.978735Z","times_seen":157,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__146.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__146.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2452\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lb%2Fnx%2Fa6r9HEE9SDpkOlrhLCPacAlRRyX75fcI%2FikpwUzXu%2BllBWu6Cgr17dD9qKqh0J8sqPmjRY04OpshDpfFCZVqX22HOPJw%3D%3D\"}]}\r\ncf-ray: 9b80b48fbacd712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2452,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"2172cc0521a905b8a287030e0c6a4d86","sha1":"89aba1cad3b13ca2e4906e37d846f83adb6a0c0d","sha256":"e1ba04dc4d4e4a772e0deffd14e24d2653ed0800b3c02bac58fbbc570abcba23","sha512":"5fc1830df97b2087c97d45182fb45302d406a53fee1dfa11b1a3d0aa848ca277bd2e41b094d9f72f7aa49918910d518e0c9365a50ebe5081596161b14fc8842d","ssdeep":"","tlshash":"43516ddd58140a23366649ac9b99e3f1320a7fe95e0bd0043467f2be8f728cd01db504","first_seen":"2024-12-06T22:27:57.088699Z","last_seen":"2026-07-17T09:57:30.94974Z","times_seen":157,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/MaterialDesign-Webfont/7.4.47/css/materialdesignicons.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:28.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/MaterialDesign-Webfont/7.4.47/css/materialdesignicons.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 07:15:28 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 42396\r\ncf-ray: 9b80b486e9f8b1b8-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"658b77e4-a59c\"\r\nlast-modified: Wed, 27 Dec 2023 01:03:32 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1297682\r\nexpires: Thu, 24 Dec 2026 07:15:28 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Lvy2kZROOkqo8KvQoMs%2FS9bIRmtwi6Qtwblr9A5u54KZiXean%2FGEjJDJXj7cQb79WogMmJ1VEA0IpmH7UsOgoSJWFVosM8rgYRVQKOLF9%2BdRmdlDNn56HB0UclnPLqapKIbAMlQK\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":346626,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2c83c4bce691e18f82409f87b2bf84e4","sha1":"3958d951f073022975e50de0c711a17bfa1b703f","sha256":"03fe3caba05e65b14e4035139eee89b12be87cd0bcf342ac3886770eec3a9962","sha512":"fe4eb9f06e94b02bdb906441def3d7a6c3c781679db89c225863c2192d78210c37c69afadc010c740f273181b68266245e2b50c434e7ea288aff67c3e13f3ba8","ssdeep":"3072:LRA3YkpX8O2wOBZuRVOh01y7xBqlaOznO3oDmCleSI5B1H3n/ZdhI97:LRAI64wN89BqZnODweSgH3n/hIB","tlshash":"b5742de5d04d24e3f733c85fd740b798458bf2b2d6690e05f68b660d09cba221687f6a","first_seen":"2023-12-27T17:19:29Z","last_seen":"2026-08-01T18:09:33.171346Z","times_seen":6226,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":11,"dns":1,"connect":1,"send":0,"wait":9,"receive":2,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__9.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__9.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1082\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Unw2iD10SQXarQtcVsiJgl39X7o1Mm%2FLGRpmeH2ptop77ZrTv%2FetMLe241d82Xm9a6yPZ3a7msn4FDSpCl8SDkyT7Y8QGHC2vw%3D%3D\"}]}\r\ncf-ray: 9b80b48d5a17712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1082,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"67fe2793ea27441b173869a156d3a020","sha1":"70adef4cf030eec04027921efeb86583552fc2c9","sha256":"f748c5cdbc3c42753e90626fa56cc20408ee32a570986f4d40985f237daf8bbf","sha512":"d9b0b37ab89684c5a38661f8d4ea08af23dac9639549845d72f2f0b69d14323f6f9f93e634e43150e2f05dff4ba1604338cf873c87c4cab97e3c66d5cbb9fe98","ssdeep":"","tlshash":"1e11b7e1e2d02a17c8e4d9be2326207f9b441d165388278e860ab358273b1c9d07f4b7","first_seen":"2024-12-06T22:27:57.073178Z","last_seen":"2026-07-17T09:57:30.949254Z","times_seen":157,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__15.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__15.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1095\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j6rNaF3wa7%2FG7iY6QMNRVqjc44l6%2BX6LhJwM3MdQXHdyrdsdqFv%2Fnt6i3Gd%2BV9yyUXNEc2K5%2FdLzIlzptUPx5yGgPKF%2Fv51gjg%3D%3D\"}]}\r\ncf-ray: 9b80b48d7a1e712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1095,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"3b3e2ccbff9209b2012b53b091045763","sha1":"7d8145d03947788abc4689ac1ee24ca8a364b9ab","sha256":"cd7ab1ce9e85c923fd9ce8f2f64a29d7ef7849a6573e2f365f6f080ba41e76a6","sha512":"87d37e4db8e5f0f300a054b2967078113ee1e2715b4bc0b2711fdaf47b6272cdab9d3f4f7cbde780cfbd98f9b03f5e0f98a6c55b770fe8188f35125121a0e927","ssdeep":"","tlshash":"eb11c4c4161bbfb6c44a571784228bc9cff28c6cf004c00b46307c1978f62dae93e482","first_seen":"2024-12-06T22:27:57.065973Z","last_seen":"2026-07-17T09:57:30.968541Z","times_seen":157,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__52.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__52.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1165\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hGguWIdVAimdNfGtBZeH%2BSVuulHpgxMbMpi%2B6TlQoSzy9rWq8YRHlxdaZk39BwW88hcWEap2nzq0c%2Fd%2Bf%2BAo9zq7jMAqx4Lz2w%3D%3D\"}]}\r\ncf-ray: 9b80b48e4a67712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1165,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"50333973529f140a38862b5e59223c23","sha1":"ca772352821ce63cc8d52b58b4dff1bcbe92b6d6","sha256":"ae37bc4c761654d71faa919cdb2bcc500d39f14f3747c2124a67f7eafe4116e3","sha512":"93152b60013a15a74c510b75bf4c4d11f27cab49234bb7980c9bb245935673d6adc119cf598a648c29ba5bfad9e4cf730988f224e352cab3c65728fe9318bfe8","ssdeep":"","tlshash":"9121a5f530731d399a089789f51c68b85d126f08ae9496164444f8f4f8f6b49e048ab2","first_seen":"2024-12-06T22:27:57.061496Z","last_seen":"2026-07-17T09:57:30.946495Z","times_seen":157,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__191.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__191.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:30 GMT\r\ncontent-length: 2519\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W9dKRQ%2BtPA6Wp1EGGocimIQ%2BnlqDD%2BpFIUzEZYG9sYvLq0vWEI7SX6vQWr3SvxBmO96jmVQrSEsBxc%2FNLaR3HMqo%2F7wRlPejnQ%3D%3D\"}]}\r\ncf-ray: 9b80b4903afc712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2519,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"adf7ea7ba32b52d9d1d351900e3acadd","sha1":"8c7d2d33fac5ee6c836ab2f6f9fd9e78d8ee3d14","sha256":"9a2498779f3d889c8e2260202d6186a1124cd743c0a3bb2c8cf1e64d66f59705","sha512":"21b7aacbdfa49415ab52660015328593646af45d26161956b9f3a14e096cb80c58d2e15306e134426ae922d8d6f85465e281cbcb0a9fcf8a4d4c8b025f6ca255","ssdeep":"","tlshash":"98511b83f4fbcf7788750a0b0a4a120103577d259275899bde857c9722fe0bfa25c015","first_seen":"2024-12-06T22:27:57.096118Z","last_seen":"2026-07-17T09:57:30.970028Z","times_seen":157,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__197.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__197.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2379\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FFKyr%2FAqSaEUouRd%2FptCoRUe2ojC0j0bwL2fa%2Fm6fGdGrGKiegFluqwGE9xjYzJoAQDCnQ6qmvn%2B6uYpu5e4kyaKqzuTiMB%2F7w%3D%3D\"}]}\r\ncf-ray: 9b80b4904b02712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2379,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"fd7aa9cb135ed0372c742822ba53ae06","sha1":"1da731da9d7b334674d5d811648acfe55c3e2053","sha256":"e8b076bd916db67db55245e7a8de004cc840ff1106c27a8dbe54f46555e27697","sha512":"dd6f7bae5d834f2ad3e36a9be7c287b2f113b7d21741936f8913cd3ebb4f61030a29087c1474641520af1e9d0e0ca337d9e76caa94ed63d73e0ae6b1345c222d","ssdeep":"","tlshash":"404119a3d1117d13ee0c746b8e19d141433a4e43a923b99d3fa87e199e710856a72681","first_seen":"2024-12-06T22:27:57.098149Z","last_seen":"2026-07-17T09:57:30.962501Z","times_seen":157,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__202.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__202.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:30 GMT\r\ncontent-length: 2521\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uoi6iIlD12%2B%2FfKwLdHYipo3OfT76e%2FjCopm7N4FVscORVgFCAgtE2FDDCwCV9h2gGo%2Ba1omLHZHgGhjkSPWpHhegwRLO%2BsWbuQ%3D%3D\"}]}\r\ncf-ray: 9b80b4905b07712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2521,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"fa67807a96a067ecdf1f9e8f149ef9a2","sha1":"7778bfe4e7e00898a0ebd8b67e37e8e4ee8ca199","sha256":"2b11d4e566612651b277dff0a58701c2da5355b4c167ee07868a97e98f3d3942","sha512":"4b71c5ac28548ee033691e1087ec4f055b0f4aaa151d3613917922c0ce5df1e9c2bc3f1c3ba3f6d35ed73bcd47d8f73e85658960c4567bd3f5e7e76f83e09683","ssdeep":"","tlshash":"a5515b9765b28ce89705c4e7e606d136fe306c0b908493328f5379bd0d39a9813a8765","first_seen":"2024-12-06T22:27:57.089719Z","last_seen":"2026-07-17T09:57:30.963373Z","times_seen":157,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/api/getLocale?v=2\u0026lang=en","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:28.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /api/getLocale?v=2\u0026lang=en HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nset-cookie: lang=en; Path=/; SameSite=Lax\r\ncache-control: max-age=10800, public\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: application/json;charset=UTF-8\r\npriority: u=3,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:28 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hkchDWhh1p6TO48efbzB5Ma8th1PjEThzD4Wd7eoGJ20PiREK%2BIggCNAZMAQF20UCf7Q%2FtShelcDeZsj2FKef%2FUdk0n0hgE4Tg%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b80b48989e3712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80998,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"99047e400483a1f6e9362e178b39ff60","sha1":"c0a55c47027c3cddc987c7b8b7309db3e05fa28e","sha256":"b7776170a61ab526cf2d81584ee650a9c4333820dbb28193d58cd15d84deebe7","sha512":"531b62cc31b98898b6be344842cc0010b4f8c65e0e233f5a101389d03b9b11524aaebfabad5d99937e2be061a9d16c6536d619bfd7112d3dab055b6890621942","ssdeep":"768:z7p/iImdbdEbMVlzh4qwxeAxa9w6ucD4amIMAUOhBKGBEVSQdsoQcCSZBjsJUoLc:i9dI8JPOEprmiUO+GBEVSUycPDsiseF","tlshash":"0783e90b991e3d720bc61391bcee5ddc71fd024091e1906a1afe84ad16adfc9c2e7897","first_seen":"2025-06-22T10:42:51.741965Z","last_seen":"2026-04-06T12:02:02.522281Z","times_seen":107,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__139.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__139.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2519\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=orZ0jMktP%2BUQ%2FeD7gnmuPU0VByFkz2w9d3lqOA5Tsd72PneRWm0gbyTjkbQMaTouaLpeoqgeFFBvuiLfK3%2FZRU%2FYoAdu%2BvRLIg%3D%3D\"}]}\r\ncf-ray: 9b80b48fbac5712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2519,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"adf7ea7ba32b52d9d1d351900e3acadd","sha1":"8c7d2d33fac5ee6c836ab2f6f9fd9e78d8ee3d14","sha256":"9a2498779f3d889c8e2260202d6186a1124cd743c0a3bb2c8cf1e64d66f59705","sha512":"21b7aacbdfa49415ab52660015328593646af45d26161956b9f3a14e096cb80c58d2e15306e134426ae922d8d6f85465e281cbcb0a9fcf8a4d4c8b025f6ca255","ssdeep":"","tlshash":"98511b83f4fbcf7788750a0b0a4a120103577d259275899bde857c9722fe0bfa25c015","first_seen":"2024-12-06T22:27:57.096118Z","last_seen":"2026-07-17T09:57:30.970028Z","times_seen":157,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__200.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__200.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:30 GMT\r\ncontent-length: 2543\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qh%2BlnJESRQFhLufQeBQJirQfefzia3FoK2%2BOmP65R%2BB1Ibl1GiPSIlacd3dWTJvdX2TTQaSSkFIHmETgYh2orslnhMXs0yaBTA%3D%3D\"}]}\r\ncf-ray: 9b80b4904b05712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2543,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"442debe82512cd5550528ce377bd5182","sha1":"92600a508ed36fcb763f6999b0fec6bf7fda6818","sha256":"619351a77b896faeb26aedc24c3c4a6b0ddf900f2be0b5fa56496fc7f1275586","sha512":"c9b5cb481d415c114f62a2c4d4b27dd27790a462df25a1550717ae9b1bcdd93676478f01bd672be56919fb0aeab91f5deedf01559af93b8abb61bd794a5a8e40","ssdeep":"","tlshash":"cc513a16de6474f959d86632a53305a01380df11b98bb550d30aba877bb3405f86451c","first_seen":"2024-12-06T22:27:57.093947Z","last_seen":"2026-07-17T09:57:30.950573Z","times_seen":157,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__208.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__208.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:30 GMT\r\ncontent-length: 2574\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wxoggd3yCuiMq5l8ii7Em6JUWtrvXNIRb8hlqSBGvpMD30WvlZ6m%2BMorbi%2BMT6en5gLZmEs0e%2FiX89aZSXA%2FwPY9MdeToyJt7Q%3D%3D\"}]}\r\ncf-ray: 9b80b4906b0d712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2574,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"8d591f68a09077fcafa0b05ae40473e4","sha1":"add27caff55e10c8205e31004ecabd1a5a6cf0df","sha256":"9b427e6c8f08fcda3b6057a2185b63759c319e3f83b40ff8d0871baf34371544","sha512":"883433f2368e70edc09e30d0eec94507c5ee61bd8bc4051145c29a6132650e63d19ff72572219ebe238f1cf294431bd48e014ddd4b66b3fe0f89636257b953d5","ssdeep":"","tlshash":"9d512abfeac30d80e79941629665c4bcd7c26e10e4c33f67506abb22a0b0450f02c9e3","first_seen":"2024-12-06T22:27:57.09293Z","last_seen":"2026-07-17T09:57:30.981761Z","times_seen":157,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/img/header/heat-map.svg","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:28.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/img/header/heat-map.svg HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:28 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lcgZK3qORanomWpWkELsgXi0j6d%2B51QKleMIkmBRXhoUuD4nT068EHtcDF%2FNiv9PZ08P7uFXnEy6XxJY4eA95fbz71lbzm%2F5PA%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9b80b486b9b1712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2031,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"38072961af3da72b8380c6bda9044a91","sha1":"77be88133c31a4fa727474e58e9c35e9c7225465","sha256":"aaafa49ae82df38a2e0e0f1ea10250fa3a8413ea51f17647df955166800ec3ac","sha512":"11ed3d0c9f5aa9b3ce174685ed7fbae5e64b8329bc89e84a8a5632b265d3639dcba5be2db03c59f8ce36ea002e6a3de230618bed077c8d567e3ef44fba92c1eb","ssdeep":"","tlshash":"d341b8e9173985790b08d72c5a797a061ef214d7667084acfb2e283a3783dd310c0f98","first_seen":"2024-12-06T22:27:57.04065Z","last_seen":"2026-07-27T14:59:58.477355Z","times_seen":270,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/img/header/technical-analysis.svg","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:28.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/img/header/technical-analysis.svg HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:28 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WEoyArPXf8AqBL%2Fq9TYUaZABoL504E1cd5SdzC4%2Fa%2BqnI114FOQaWNLxVz%2BTgpaZAxxLt8XK6pLsmNHYv847dmHJo51cllquRA%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9b80b486b9b3712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5032,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"392721e78e0013c0fa96cc574ec5063e","sha1":"45bb4f8eef034d061eae888b3b759f8890d82961","sha256":"e98843f36f8117977e9a636e6d29b9f0ed94e6ed93bbb492d3413dedd8db25e2","sha512":"33707ce4e4feace0dccd38422ee937c42ecc55f80f80148f922fc0d81c1965cfd3a19452eecd3e7ef4e423ed7ec6d3fb3858d9f025dd8e3b648a79a1c2e9900d","ssdeep":"96:+kUAfxrpn/Ilg7arcU7pV7M3qIkLmzKGhsmnJR3UDDVod96:3Ugxr6qOoq0KGXkDhoH6","tlshash":"0ca1728b033cc2f877c86428a9713542367264bf5678a108f3bff8263747f662259d58","first_seen":"2024-12-06T22:27:57.056845Z","last_seen":"2026-07-27T14:59:58.486712Z","times_seen":278,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/baidian.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/baidian.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 223\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BCWhIfh5dlgR%2FHEGOOwP%2BC6BPQFn7MfQJlAd8vwK4Ci71YiekM%2FPb%2ByiH8IvhXk23rf5iBZPG%2FkiALPOY99%2BvVIpLPo7T%2BfGrw%3D%3D\"}]}\r\ncf-ray: 9b80b48c79f3712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":223,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 8 x 9, 8-bit/color RGBA, non-interlaced","md5":"8c449751fd1ba616788193704f52ee90","sha1":"04e9f5111ddcdd679bb7513f8f41d643105721e4","sha256":"bf1bd6fc635dcbfafd5a1426fec6e8490bc8e2e854ad3201c0d0f897a4716a28","sha512":"9a1e9f4e8f99f24282ce016b2f659b4811f5642d62aada575846f0f59d8fb5846b43d3fbf0e7f5e86725c6d36b33fa32072c1cb60668471862ba8a3adf3f8deb","ssdeep":"","tlshash":"dfd023c02741edecd1ab30b3d3088c454033e1d092300c04ac864c2a0ca43d04349089","first_seen":"2024-12-06T22:27:57.038265Z","last_seen":"2026-07-17T09:57:31.012901Z","times_seen":168,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__190.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__190.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2496\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hBkz%2BAtAof39%2FNuYJL9KzVihKR3mqtT9HfS3xKGcYkNkwujrmeIT7qCm9Ew1T3R6xepvItab6lkmwXQJQSPsLlR7dXyixczhZg%3D%3D\"}]}\r\ncf-ray: 9b80b4903afb712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2496,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"992da572d0eeab68de7e123b557fcaa9","sha1":"663782959996919942a7c1ed657545a29231d8c5","sha256":"a6e12a53275c9e16fad5ad380035fb843eff53aeea8e27399b3e06ea590638c0","sha512":"d21309b4a57659e19f2c760404a945ae587eb3d44d9a1363a06424066cb5ffa48657125432b611185c6fc407ce096cbd61b74d956b9270409694e12eebb02d51","ssdeep":"","tlshash":"41513a79984c20166c9f0af0ba1304686f478d645bfa41e54837f82ca8f71c06837721","first_seen":"2024-12-06T22:27:57.097189Z","last_seen":"2026-07-17T09:57:30.959959Z","times_seen":157,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/img/why-we-3.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:28.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/img/why-we-3.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:28 GMT\r\ncontent-length: 35330\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l%2BG9aSZOGF1DFHqLVnIBv5zwgViz0PhGoqZapu2UrI9RXg9Gc5AVfMNV60vYeWDucSfKgtz8CX0gWAgAJVENddgU3Jy14poo2w%3D%3D\"}]}\r\ncf-ray: 9b80b486d9c0712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35330,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 436 x 378, 8-bit/color RGBA, non-interlaced","md5":"75db13442d06a1f1b627fd56194df892","sha1":"b2ce9f2f5fabde14dec5a939448d28876e946fe8","sha256":"65527f9f107b75b8ef337d5d2835c23f7dda0f51fb0c8ec220ad97be8bdb6985","sha512":"2266af931fb038e9581025a6005dd226674b2dfb7912bb8d611fe9dfd89f6c11be27baec78c1c13f34887d91b597f5567eb85c4e39b2f6dc315b71045fae6d2a","ssdeep":"768:sc3FOz6Nwy3nh3gHDdYyzXbG2aCPu1ySBfGRyj6nyCpCowtnIVkhl:7VN5hQHhY2LG1euGySCojkL","tlshash":"d2f2f1e3e96bae9ca5eb8579d4a40a4f3c170524d4bd420efdec38491f7b03665c4853","first_seen":"2024-12-06T22:27:57.025646Z","last_seen":"2026-07-17T09:57:30.965227Z","times_seen":179,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__46.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__46.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1076\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j3F8EGuK5rGVPyHx2KPiOU1EGTyXIv2xVJI1UauH2qYq%2BKT8cJjd%2FIVOWC8cyJPlUT4vrh1WtVFQxX1Q9HsstLMgzHok%2F1HYtg%3D%3D\"}]}\r\ncf-ray: 9b80b48e2a61712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1076,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"0b3074990371bd83962bb56860f860a5","sha1":"7a368b9124d8064c68fd5f5b55af78174b1e5e1c","sha256":"fc668937a6369ced1814294a22f0fbd772ba5ea2049d9d4d0df721efb4a751cd","sha512":"8d72fb2bc062f4aeb72367e3707f5827c158f7e84c554397041aaeabf8525d22d70265aa1863d32a8e15063f1eba4753f816d227a30cef59fe611d1db0e134ed","ssdeep":"","tlshash":"541184fa16b07aa0d1cc83374328f6a087410f1ab860b68f90def5da24b454ccdd6304","first_seen":"2024-12-06T22:27:57.072103Z","last_seen":"2026-07-17T09:57:30.955129Z","times_seen":157,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__105.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__105.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2521\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8QqzQtTTKuF3rJglgzt8VeCBpy1zr8%2BQ9kE5JWX1QSSNlCyzv5cn9IHEsL8H2Pp6zPtDpg7P4%2FD%2BQrh71Hhba2Bct7Gl%2Bc%2B0tw%3D%3D\"}]}\r\ncf-ray: 9b80b48f4aa3712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2521,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"67e87a046547d37d3d6ff7c1457d99a0","sha1":"912d5edfe351304cd868fa2a6cf82c8a766c345d","sha256":"d475374d44a909777d599d557b1f386d521c6611d21c396beb1c43d6606274d4","sha512":"4c4b842b334c7d62b3516652ab86fc89633f087139e4bc55f9a65ee5b3fe4fadb414c8279a42235ade342587bb0b1be84d1dcf0d6c1c7b578dcfe06e4e1a529b","ssdeep":"","tlshash":"74510ae24e5da83aaf4f601dc9ce9a106a631c3c2a8131595ce8be1dd6b2e224749537","first_seen":"2024-12-06T22:27:57.086375Z","last_seen":"2026-07-17T09:57:30.943107Z","times_seen":157,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__188.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__188.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:30 GMT\r\ncontent-length: 2459\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3n3q0KoiA88CcKYAb3jFkXMNiwIhMbWZnz19XPDK0Kk4aJMvRboLZveFYQBkAdO8ra7RjfhZ6kKAv%2FEALrtxzPkSLgaAejoP1Q%3D%3D\"}]}\r\ncf-ray: 9b80b4903af9712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2459,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"50741bfc626893d14d4b6595b62f3f43","sha1":"9d1b22f81824acda4d3303ff04094aa50e2c6e62","sha256":"5673c4c4033a61d6d2caffb525d3c013df04e34ff6ebe26e98c751312b7b8d92","sha512":"0a78cb039cb36f9aea9a47ca774efd0654408520a3b61b42e8861793e34559ec77a2e3dd16032283534b20261e3d8c1d86ac20e937058c5535bc176dbf6b9016","ssdeep":"","tlshash":"f35139c3fb1580a163472eebcaa19c6d015f4f25cca520f75201b1a971fc09a5fe96ed","first_seen":"2024-12-06T22:27:57.095029Z","last_seen":"2026-07-17T09:57:30.947031Z","times_seen":157,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/img/coins/BNB.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:28.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/img/coins/BNB.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:28 GMT\r\ncontent-length: 2560\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q%2BT67ysjqndxIQbLhBGyE%2FUzwQA6Kd1EXQFZOYweyfU570XNF1f%2BOD9PKxIleWIfxfSaToSZaX9PnnohCtxf6WUV%2BeP%2B1pVsjw%3D%3D\"}]}\r\ncf-ray: 9b80b486c9bb712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2560,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"cb84d3ca48a52e3df1025731a8bef4ec","sha1":"b059f2eb3aaf93145fd62647cb908c5532e06795","sha256":"0f4502d8c5254df1eb0eb8d124c7684b4f02e2a5004525d5bd7acd18a6ebb9fc","sha512":"d7cd5d9aface1bb4718d418d1f7108bbbde7e8e24e926ce4bd4a88f51c715759e55741de3d6b17e7e54dea502761817e093e768a337fc0030a259fe9b4338151","ssdeep":"","tlshash":"7e513a6a47020c971334d44f89fc3eea1d6edc1ad421e0aeee0197fa18101c18dbe343","first_seen":"2023-05-25T23:01:30Z","last_seen":"2026-08-01T18:09:33.211273Z","times_seen":1611,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoqiao.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoqiao.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 5397\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QU4RpVPh0dGUcPr7%2B8CvDyBUGYvUspvzIhXz6xrCJ%2BawG0hS5dRUEQMhxV%2Bq2E9mnKQ9tsizmvyz9Hk%2FwHYFKXo2zKT0vziYYw%3D%3D\"}]}\r\ncf-ray: 9b80b48cda00712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5397,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 332 x 143, 8-bit colormap, non-interlaced","md5":"6518eea67780de67389ec44462258bf5","sha1":"73406afd8708d8003bf05d2b4a92058df025de52","sha256":"eaad7c385e448e04ffb8f87273286c328308312aa04c4381ddb600151c832e71","sha512":"09e61eb5cec6351ee13b1ce853da84ee17d909d6ab166c908ef72fddaedd71a091431566eae55ba01fe3f11e043321e17a8097b3a2f41e9810317260c1ed7a00","ssdeep":"96:KvhAGFoe/eNiLjZCqblz5H7kgSRNzewCd6bTqbtJDNFvkBuldyBvpEcEHBG9+tiW:KJkULjBb9x7kfzZc6S5jFvLH0vmcEq+f","tlshash":"6cb17dc5423a1aead8bfb1b7b420ca97631007ae58c0f85f0d4d4b76a937291fd412a8","first_seen":"2024-12-06T22:27:57.054518Z","last_seen":"2026-07-17T09:57:30.991933Z","times_seen":168,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__20.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__20.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1076\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=niEsCm7VLZPRNnw%2BAh7YZsi3P8BN8eWmayHFpHD5w88k2eIL409AfD94IWMzQE90ak0chCeRjQU1W4usedQIF1AxBgBOZsyElA%3D%3D\"}]}\r\ncf-ray: 9b80b48d9a23712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1076,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"0b3074990371bd83962bb56860f860a5","sha1":"7a368b9124d8064c68fd5f5b55af78174b1e5e1c","sha256":"fc668937a6369ced1814294a22f0fbd772ba5ea2049d9d4d0df721efb4a751cd","sha512":"8d72fb2bc062f4aeb72367e3707f5827c158f7e84c554397041aaeabf8525d22d70265aa1863d32a8e15063f1eba4753f816d227a30cef59fe611d1db0e134ed","ssdeep":"","tlshash":"541184fa16b07aa0d1cc83374328f6a087410f1ab860b68f90def5da24b454ccdd6304","first_seen":"2024-12-06T22:27:57.072103Z","last_seen":"2026-07-17T09:57:30.955129Z","times_seen":157,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__66.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__66.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1129\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7MOsZAjoqCX5%2BrlV0uttNMSKOVt1ASsSsXTIqlEoGLW3y6M%2F8xTIb2IT0drvA%2BTlVZDGxNI5OnZUxUVklRjGpg0GOqCDJdGvJQ%3D%3D\"}]}\r\ncf-ray: 9b80b48e7a7b712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1129,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"3cbff16023a3738f74fa0f3c620ee35d","sha1":"e4cde715e08c03d9178230a74b666ddb6acd8a81","sha256":"68245287bc0046e97ca7010a57ca6845265b7783db419585cd865e7e5b65f0fa","sha512":"86f1063d01cad2508a7938022a6c1cd2256cb81f4fb0b033c768211a3683e902448a2175ea35f66740c45cf0694ce539027b008d8892f44ad0edc50d12cd06c8","ssdeep":"","tlshash":"272165aa734dac789b882753a348562c96994d292a610623d5e77c0f59f720e8d90750","first_seen":"2024-12-06T22:27:57.064878Z","last_seen":"2026-07-17T09:57:30.95355Z","times_seen":157,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__124.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__124.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2521\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IFByQRV%2FdKk6JumdpgJckLOcx33eTXDUqj%2Fy%2Bsvzj95GG01c%2BSol36VlJbuiFo%2BuQ12Mjw%2FFUqMaWdxSk6NMm0FbhneF8aJFkA%3D%3D\"}]}\r\ncf-ray: 9b80b48f7ab6712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2521,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"fa67807a96a067ecdf1f9e8f149ef9a2","sha1":"7778bfe4e7e00898a0ebd8b67e37e8e4ee8ca199","sha256":"2b11d4e566612651b277dff0a58701c2da5355b4c167ee07868a97e98f3d3942","sha512":"4b71c5ac28548ee033691e1087ec4f055b0f4aaa151d3613917922c0ce5df1e9c2bc3f1c3ba3f6d35ed73bcd47d8f73e85658960c4567bd3f5e7e76f83e09683","ssdeep":"","tlshash":"a5515b9765b28ce89705c4e7e606d136fe306c0b908493328f5379bd0d39a9813a8765","first_seen":"2024-12-06T22:27:57.089719Z","last_seen":"2026-07-17T09:57:30.963373Z","times_seen":157,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__161.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__161.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2543\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4N1%2Br1QuiU%2BcwijO8nJZaQm6%2FExf%2BEFs61bTA%2BnS1MaEw%2Fdsqdgvu8IJgWnRgiRqQCnVkb8y8ffBmusFCQ1OkCBWdZLgzhL0nw%3D%3D\"}]}\r\ncf-ray: 9b80b48ffadc712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2543,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"442debe82512cd5550528ce377bd5182","sha1":"92600a508ed36fcb763f6999b0fec6bf7fda6818","sha256":"619351a77b896faeb26aedc24c3c4a6b0ddf900f2be0b5fa56496fc7f1275586","sha512":"c9b5cb481d415c114f62a2c4d4b27dd27790a462df25a1550717ae9b1bcdd93676478f01bd672be56919fb0aeab91f5deedf01559af93b8abb61bd794a5a8e40","ssdeep":"","tlshash":"cc513a16de6474f959d86632a53305a01380df11b98bb550d30aba877bb3405f86451c","first_seen":"2024-12-06T22:27:57.093947Z","last_seen":"2026-07-17T09:57:30.950573Z","times_seen":157,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/img/arrow-down.svg","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:28.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/img/arrow-down.svg HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:28 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NCLOw1%2FPd%2BoN90pH9git90legFSgSA%2FRgxVUrtq2tHm3RueHlZXtAFPXqqiUq791tNfoI25FtIUd2DSVsMRv6ar5Z9eYnH%2FMtA%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9b80b486d9c3712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":243,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"d0be16ce06ea0a66b8c8be201c88f71a","sha1":"03afb7918db67625b2365659d303a057071773eb","sha256":"3e6f14737272b9e9e4b60048aea76d784d99ed190878112b91f2cfba0c6fc77c","sha512":"c26291f4c90c6fe57adfcd466577789d483352812391a587011e19e0e8bf111230722309775ae62ef605ce3ef8bc7efe533b18eef7fbfea696f60205f169c245","ssdeep":"","tlshash":"19d0a79841d84d2ce6664650d7783664f03e10735f894188ea52713ed51a6cd6c339ec","first_seen":"2024-12-06T22:27:57.083257Z","last_seen":"2026-08-01T13:57:27.128349Z","times_seen":458,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/XRPxia.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/XRPxia.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 4545\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AvHxxxIjn2At5oGC5yxpkNv3d2Tx60tc1kUSuQnli92PRJgf%2BmGGuYv9wzEA5XkTTENJtuJMLh%2FH%2BqBJVygFU%2Fua82%2B6rN3KYg%3D%3D\"}]}\r\ncf-ray: 9b80b48cea02712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4545,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 138 x 85, 8-bit colormap, non-interlaced","md5":"b7a5eeb84e1a6fbd18a6fe2d64379fda","sha1":"a97a665106ced5a59aa89e88dd17d59ee14cec27","sha256":"c1a3fb5afc69e1416afeccb42d7105e4635efeaae53e49b976e5043d6690f8e5","sha512":"04d321903303e07609dfd17933a96004efa3621b79c52c9963a2879c5299a311024de402b2315cf13c3495d1e8d641f1d9bfaad388772f1d05709b40a57fcf04","ssdeep":"96:B1zPyOiIRY67J2w6xkoDeYyfdxDim9G0PI4nWaHAQz:B1zPRiIRYy6aaeYEG0Q4nWwz","tlshash":"2e917c2de589f7d1d74401357f58b0d33c81a32e7b0451a390b14528322a13b998f012","first_seen":"2024-12-06T22:27:57.05937Z","last_seen":"2026-07-17T09:57:31.004503Z","times_seen":168,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__51.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__51.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1127\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4VFx55byR3fhV2yLqTkE3pwh13JsIw%2Bp59jOMF3aUbrKVP0gMW%2FRBx16niuPoD1vSwsVFYlbzTR%2BG2IhN8y5igv%2BCPj%2B4E%2FOmQ%3D%3D\"}]}\r\ncf-ray: 9b80b48e4a66712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1127,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"661559d919ea7aef1f7887ce598376b2","sha1":"c28b02ecb24b5484ddafbe5837e840493226545f","sha256":"b8d9cde6830d09df938f59aa13e88d5f7f0a75c658e7a0c91be97a39dfb9b779","sha512":"c4645565d6f44307387474758a191706ea61a91965554cf934d7506521c67267bc2f86b7f7a557a64c839151a0935042e071bbf9398236e0ae3fa443e7342756","ssdeep":"","tlshash":"1f2194ab87b491adb66851ec34b3ee61d80f6d100d25136f3b87ba88647a0976d42682","first_seen":"2024-12-06T22:27:57.071009Z","last_seen":"2026-07-17T09:57:30.976976Z","times_seen":157,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/img/coins/TON.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:28.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/img/coins/TON.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:28 GMT\r\ncontent-length: 24181\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DrHVXnxva4DKlCO8dmdKODwpC7qNvSAmT%2F9pL9R%2Bv5rP3FkbAbYsG9jZFxHccX9QLrgwf1ArNFqUC8FMy1rekW1MxRRompntNQ%3D%3D\"}]}\r\ncf-ray: 9b80b486c9ba712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24181,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"1e864e18e2e3a14b3407889b0e7fb1d4","sha1":"6498cdc01f17a9c51007bedb1eed9e28ef98bd90","sha256":"d8ffe78edcfb9ad030ef0f932ea5a25c89acab7c11d6cf03b32cd4913de14053","sha512":"5b0555db16debaafbad44fb6e10cd8f3ee414c8bd272ba47734fcdb44b32a5828cc0776c43dfea0c40c81d9718ebbee8d9f3fbfca17f08a5e45e193cb9497f31","ssdeep":"384:WU5AJju7MoJSV2L783TGNX2H3PLIE0eq8x343eNZCPkArJTMUno/JBWRCrasz5Px:/AA7MoUV2P83TGNGH3PLIE0t8+ONYP4F","tlshash":"40b2e128d57e8291b694f1b827cb5c8f0f738cd23c711e50ee550ea0a7922651cefa0e","first_seen":"2024-12-04T15:05:15.931067Z","last_seen":"2026-08-01T18:09:33.216323Z","times_seen":488,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__83.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__83.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1175\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m8BNIh2MlUIfYX%2BE7Qg2GOKbfACKHSmj8Rzl09Xw7AI1da%2FlRi4M9mWiGemW2NtevVU7G8HS6NyveXKwitudw4qlWnGbpqezmQ%3D%3D\"}]}\r\ncf-ray: 9b80b48eca8c712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1175,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"564765291e71e2e3a6cc543a40b65548","sha1":"de712ea89fa95bb9c9994e96f804b1676673ed5a","sha256":"2869e4c8912785059529abd6817339639f5f3398fa7fc37628e37d1890467c2b","sha512":"9d030870449923e6d22f904d1d3194ad331e30daabca95a92c96295595b0f51ab3d71e5b11a020a29254a8971dfcd4c1fe6bde33bc4aaca7c3dac279d9549f99","ssdeep":"","tlshash":"552175474751446858949b2d83095ad2ec030ee6bd53530a805bb6197239e3f4678da0","first_seen":"2024-12-06T22:27:57.076211Z","last_seen":"2026-07-17T09:57:30.989044Z","times_seen":157,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__90.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__90.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1127\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dl8Qd6qp%2FaWQMqcbOjmzH17DGKYmrbw55DluLxdinc%2F%2FQSgtASya4xAQTBdroQ%2FnYlMCEvb2LrFJuxei1%2B5mVZovsyrua7rQgw%3D%3D\"}]}\r\ncf-ray: 9b80b48f0a93712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1127,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"661559d919ea7aef1f7887ce598376b2","sha1":"c28b02ecb24b5484ddafbe5837e840493226545f","sha256":"b8d9cde6830d09df938f59aa13e88d5f7f0a75c658e7a0c91be97a39dfb9b779","sha512":"c4645565d6f44307387474758a191706ea61a91965554cf934d7506521c67267bc2f86b7f7a557a64c839151a0935042e071bbf9398236e0ae3fa443e7342756","ssdeep":"","tlshash":"1f2194ab87b491adb66851ec34b3ee61d80f6d100d25136f3b87ba88647a0976d42682","first_seen":"2024-12-06T22:27:57.071009Z","last_seen":"2026-07-17T09:57:30.976976Z","times_seen":157,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__136.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__136.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2459\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z1QTaIXmgnokr2Vn6ABGkJzeWo%2BRkXbW%2BdW46pTtI6nfKmEDF3onmNH0lO5wxdXzE6yOlD1ju%2BdXgcmrwMoSLhJ%2BKKSVfsBpaQ%3D%3D\"}]}\r\ncf-ray: 9b80b48faac2712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2459,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"50741bfc626893d14d4b6595b62f3f43","sha1":"9d1b22f81824acda4d3303ff04094aa50e2c6e62","sha256":"5673c4c4033a61d6d2caffb525d3c013df04e34ff6ebe26e98c751312b7b8d92","sha512":"0a78cb039cb36f9aea9a47ca774efd0654408520a3b61b42e8861793e34559ec77a2e3dd16032283534b20261e3d8c1d86ac20e937058c5535bc176dbf6b9016","ssdeep":"","tlshash":"f35139c3fb1580a163472eebcaa19c6d015f4f25cca520f75201b1a971fc09a5fe96ed","first_seen":"2024-12-06T22:27:57.095029Z","last_seen":"2026-07-17T09:57:30.947031Z","times_seen":157,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__174.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__174.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2543\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dOMH7wGWjXP3j%2BT%2B5xT%2BHWC6iAjR3oPjp7rIn7aTpdLUaeIT7rr%2BCplEz5Vd3BQfM56bGD1zXwv6JhHfXOMetYMARKpqz0MaoQ%3D%3D\"}]}\r\ncf-ray: 9b80b4901aea712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2543,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"442debe82512cd5550528ce377bd5182","sha1":"92600a508ed36fcb763f6999b0fec6bf7fda6818","sha256":"619351a77b896faeb26aedc24c3c4a6b0ddf900f2be0b5fa56496fc7f1275586","sha512":"c9b5cb481d415c114f62a2c4d4b27dd27790a462df25a1550717ae9b1bcdd93676478f01bd672be56919fb0aeab91f5deedf01559af93b8abb61bd794a5a8e40","ssdeep":"","tlshash":"cc513a16de6474f959d86632a53305a01380df11b98bb550d30aba877bb3405f86451c","first_seen":"2024-12-06T22:27:57.093947Z","last_seen":"2026-07-17T09:57:30.950573Z","times_seen":157,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:28.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.7.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://puffdex.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-155ed\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 03 Jan 2026 07:15:28 GMT\r\nage: 2657719\r\nx-served-by: cache-lga21978-LGA, cache-hel1410033-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 27, 159466\r\nx-timer: S1767424529.538242,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30336\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":87533,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-01T18:44:07.559399Z","times_seen":183319,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":59,"dns":1,"connect":30,"send":0,"wait":27,"receive":9,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/lvdian.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/lvdian.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 377\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HM2ms2mWEvvDUx%2FDA1awrNDRmPfHOBz7B8lRlrCNqhlaZKm8DWSrbIR2B1ikp5FIVgf2T%2FZ6PZyfMHAVczT%2FkbNqjrU0TIgJFQ%3D%3D\"}]}\r\ncf-ray: 9b80b48c69f1712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":377,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 17 x 18, 8-bit/color RGBA, non-interlaced","md5":"ca65390238888d192830dea8c7a01b76","sha1":"f75c18924701177f871ae98aef82f678e485f916","sha256":"e4f579f689379ca1e85152e53d2acc34cd964aee3a553cb87282a0c3f7f7bd0a","sha512":"726a4994019116c881ffeb4ded234990bde64a4ac3b0ef9d0e6caa93ecb97a685613d50f831eec9935f765a5b555a55b8ce81d1c17e7089e20dc25676d8b6a7b","ssdeep":"","tlshash":"f6e0c0d3671ca1bde5c25136ee160c45251fe3cc4223de91a863bc65d230de029942d7","first_seen":"2024-12-06T22:27:57.043117Z","last_seen":"2026-07-17T09:57:30.96706Z","times_seen":168,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoguang.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoguang.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 3491\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2oa9cAhd5Pyv2b592%2BHwIUyVIwdWdjEUEaB5Nb1lB4YhZTVmDe16lDMThJzENTEYA3cTkIsh7R%2FS38R40CQkfC6rz9cOi6dcYQ%3D%3D\"}]}\r\ncf-ray: 9b80b48c79f4712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3491,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 178 x 452, 8-bit colormap, non-interlaced","md5":"d73f747dc379a6cbcc92a4ef2dc52b01","sha1":"4d941406fc8f2c5dbf537d49dd3320ce52fc3eef","sha256":"925fa78562dfeef68f5d9fcd677a42c62001446fffc4939f20917e5dbe7b6cac","sha512":"c8526b42c067bb2ffceafc189c617bc7b75a04eedb5de2452c221b62574222fd0632a2693473a6db5fc881b111ff4973070c0e47c8bacf0bfe0b15984ae71283","ssdeep":"","tlshash":"52713bbb0a604eb2c81fd3b91126e26cb5079494aee9d1a3d6482817f4f754be7e3181","first_seen":"2024-12-06T22:27:57.044226Z","last_seen":"2026-07-17T09:57:30.987672Z","times_seen":168,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__37.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__37.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1161\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=evdjxaLdGINqabaYquud4pdTHhgR2F9U7%2FzMSXhtMUalPcq05yOvk4x6nrOr7Uxtr9vMNV5Mv5FaUFHBSo1u%2F30lHeiLdl%2Fmow%3D%3D\"}]}\r\ncf-ray: 9b80b48dea37712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1161,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"e50c044ba3552cd6cc0360be3b1c8556","sha1":"c62adf647bc3b965624b60c571c8bc3cdb94305c","sha256":"8c4a348cd473994e5b0569588bd3997085eb51e0e434959379ed8b0c6f29312e","sha512":"0cb3f436341349091a811a3ba791decc54759c64a87474c38f506aa9f4bcffb08502b17855155908f0e2e291a27d2d9e44f0c84327e9249f182b7da7a753d0cb","ssdeep":"","tlshash":"a921a84d9a4170e0e9b91c050a161130814bbd241d276b4f9a7d3faa3636bba44fd015","first_seen":"2024-12-06T22:27:57.082236Z","last_seen":"2026-07-17T09:57:30.973126Z","times_seen":157,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__53.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__53.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1129\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tPSeqGdzZXG3SKbnHdHNW0ASA%2Bc6NTU%2BLRktNJQ2PlGlx6XRErG3GkWAzf4Al1Xt%2BHXGcYBmfXB5O%2FyWtDc12r492r3wwg01MA%3D%3D\"}]}\r\ncf-ray: 9b80b48e4a68712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1129,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"3cbff16023a3738f74fa0f3c620ee35d","sha1":"e4cde715e08c03d9178230a74b666ddb6acd8a81","sha256":"68245287bc0046e97ca7010a57ca6845265b7783db419585cd865e7e5b65f0fa","sha512":"86f1063d01cad2508a7938022a6c1cd2256cb81f4fb0b033c768211a3683e902448a2175ea35f66740c45cf0694ce539027b008d8892f44ad0edc50d12cd06c8","ssdeep":"","tlshash":"272165aa734dac789b882753a348562c96994d292a610623d5e77c0f59f720e8d90750","first_seen":"2024-12-06T22:27:57.064878Z","last_seen":"2026-07-17T09:57:30.95355Z","times_seen":157,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__62.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__62.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1117\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AkJKkK%2Fuv8oJ6LZTr75VlbbogeNd69%2FLr6iye56S0vkn3J6MXzisC2kK0tTYCRl75LaazNuXDIsr9ac0DWoS0tjZaVrXdktKmw%3D%3D\"}]}\r\ncf-ray: 9b80b48e6a75712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1117,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"397412fe707f80f1106f544f25c841ed","sha1":"1ff59de33d9785f6ef75bddf201453eebc27c9a3","sha256":"2fb75535b7a097b9b71606c92f237955fb81e90530238a9b51548cf17833506d","sha512":"434099b41bd6f0a75c6d5d51da7f6d9d64fe390008911884bad7a36c9e211e6c7819760cd6807bafbfb9ad784cdc4aa2b45c24a7a9c163b8220476baabcf5730","ssdeep":"","tlshash":"fa2165e72c4c9ff8c4d421f14aee929a87b15f91bc005157d8a3f492047248388b3291","first_seen":"2024-12-06T22:27:57.074226Z","last_seen":"2026-07-17T09:57:30.941854Z","times_seen":157,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__68.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__68.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1093\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rBIwum4vWxlur2rUPehYvlRE9E%2Bsyc0n7OkYvtXNQ8yzDAMcrBF1k%2BIp5A7b7Jz8rmO8hL0NjkyadIwuef5cd0FZG3tSWMFfig%3D%3D\"}]}\r\ncf-ray: 9b80b48e8a7d712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1093,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"2083e1ff8b48312098bbd8247f3c42f0","sha1":"7d958c8a1c3ef4aa2aedf6b15759532f081c8f6b","sha256":"01a6dbc53976398d47220bab14117b4f95526159664afccf2a3c9985c3f557fb","sha512":"812083096b1a10301091e7197dd49fe809d2ee54e9115f6df23c0f78420651c745abf55b8291749d198244cae649d8980a81b08b79d6c77bdf1b1668c617f097","ssdeep":"","tlshash":"441108e0ffa8e48a389f78a3005ba02740058e1569a0ac8a092eb30f1d3010ea4cdc62","first_seen":"2024-12-06T22:27:57.068056Z","last_seen":"2026-07-17T09:57:30.96946Z","times_seen":157,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__176.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__176.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2521\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5uEhQVwvrtyRAot%2BcywrLT79PATkJYVURXDtjC%2Fid0r3mss4ybDiB9hyhIu1gWgsFDO3oGI84O0LNT%2BOrCuBP2uxdDB5AnFSZg%3D%3D\"}]}\r\ncf-ray: 9b80b4901aec712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2521,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"fa67807a96a067ecdf1f9e8f149ef9a2","sha1":"7778bfe4e7e00898a0ebd8b67e37e8e4ee8ca199","sha256":"2b11d4e566612651b277dff0a58701c2da5355b4c167ee07868a97e98f3d3942","sha512":"4b71c5ac28548ee033691e1087ec4f055b0f4aaa151d3613917922c0ce5df1e9c2bc3f1c3ba3f6d35ed73bcd47d8f73e85658960c4567bd3f5e7e76f83e09683","ssdeep":"","tlshash":"a5515b9765b28ce89705c4e7e606d136fe306c0b908493328f5379bd0d39a9813a8765","first_seen":"2024-12-06T22:27:57.089719Z","last_seen":"2026-07-17T09:57:30.963373Z","times_seen":157,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/fonts/inter/Inter-Regular.ttf","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:28.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /fonts/inter/Inter-Regular.ttf HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/assets/css/root.css?v=3\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: font/ttf;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:28 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d858Z0GKSkChfdbCAzaPyBgFTVXQD11Blup7%2F5iwM4B4R%2BneFHkBU0ajei6IuZoBgTwKHw4Aw4ltqFqQREqNMVNxhgi7nvrBIQ%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9b80b48939e2712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":309828,"size_decoded":0,"mime_type":"font/ttf; charset=UTF-8","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 33 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)InterRegular3.019;RSMS;I","md5":"079af0e2936ccb99b391ddc0bbb73dcb","sha1":"7237d9cf55f177702066a28a4dde1e4c7e8ab576","sha256":"41ab0f707a2bfab8133ccdfcdab52282f5f79e5751f43a264805451c7bb95fb8","sha512":"0dc66e3ea9fe00ebdba8636f563842e4170f21fe3dadd57ba59cab416ca3326dc887332644b0ec47cf0911d7396557beb420908d3e90a5ea7830efc4f0a482fa","ssdeep":"6144:AyKMOMxMmABlNGowmBNn6m4zHkA4atw21za0dkh6w/yOjs:AyKfMxMmABlNGwBNn6m4DkJak0fw/w","tlshash":"88645b23f363c35dc5172d3687e2c7a0b367bc512a12e10af7283a55daab1b41d9b4d4","first_seen":"2023-05-09T01:02:40Z","last_seen":"2026-08-01T13:57:27.114249Z","times_seen":4389,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=BNBUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.164.248.171","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 13 Dec 2024 00:00:00 GMT","end":"Tue, 13 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:5E:B6:FE:3E:A9:63:38:16:AB:57:DA:E0:4F:51:4B:FA:2B:49:43","sha256":"AC:E7:4C:8F:D2:FB:EB:5E:41:DF:BA:9F:C5:FA:44:FB:25:36:FD:A5:BF:21:D1:F5:3B:AF:7D:14:A3:D8:FF:37"}}},"request":{"raw":"GET /api/v3/klines?symbol=BNBUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://puffdex.com/\r\nOrigin: https://puffdex.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1242\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 4c4ae849-589f-422a-beeb-410ebc2f11af\r\nx-mbx-used-weight: 14\r\nx-mbx-used-weight-1m: 14\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 784f462b4ee4e847ccfe44db65f51a9c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: sbs_GdzU3sBVZsZa9f0EpT8ZvVdG18YJcOtESObyD-FSn0cO23RLsw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4081,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"2fa9193786226c8c990b83c44bb4f250","sha1":"cf3c0619f35c6323a2c8bc1547a35eff16b7a0d3","sha256":"c11ff276b6340108b2e120061ea044646bc616e276192cb23ded7fb596e09957","sha512":"c35d8eed9b4fedc3a105f0298f267aae9e4fd729ee5694c091933d46dd96026fd6e6576f8a678270ce0ee45f396186d72703f6147dfcb68003377b7e4badcb6f","ssdeep":"","tlshash":"a581e1520298c764fb3a8d1a23a3b8e3962b7067deca5cd0ccd167a748f54713b08706","first_seen":"2026-01-03T07:16:21.799538Z","last_seen":"2026-01-03T07:16:21.799538Z","times_seen":1,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/dunmian.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/dunmian.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 43316\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wt30Hp0yFv%2B1CpDR1ErgpCYsNgIvOCGW5aL8Od60n7gFvVUSj%2Bc22wHneNdjvOjgJmRG6kacxiSU4a0VuSfCF3Gc8fwslTGI1g%3D%3D\"}]}\r\ncf-ray: 9b80b48cb9fc712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43316,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 332 x 411, 8-bit/color RGBA, non-interlaced","md5":"2f671e8c36ac6c4735bae0238043fac4","sha1":"4f44711091c8dd62ebb57a83d5be419842385437","sha256":"78c2723ce75d20996385fccb0ec93212d5c9049cc5be7945f99b0fdd4e48c120","sha512":"0eb0f7f681e80246a29c561991da123fd33793eee3e8b15563caaf718748393c38c703959a90e42681cf7a4f1ac60dfb0e97126be8ae001331219bfbbc1ae23f","ssdeep":"768:aywhy0faB9x/RO+D2p7GT3DyTKYJ3bPT/Zirwx53CoToQZ18zB+7D/BeLcUETSRC:aywYx5EimyTOTpJ3bcG6QIBgD/McUET5","tlshash":"a613f22a1e92f4c1c010ef5ce2c8b6b24d7e31cd6db5d2e266c5dd26621037b5e1af18","first_seen":"2024-12-06T22:27:57.127249Z","last_seen":"2026-07-17T09:57:31.021485Z","times_seen":168,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__1.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__1.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1129\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oiI05vL5ZqRjzyOFTRTkFNfOz7WfPFbrQeYSY0uzvMT3qqDw0gWPeZgW3bWi%2BMds8k%2BWpIMaHO%2BLDHpByLz%2Bl8FoYTA5lI%2BpWg%3D%3D\"}]}\r\ncf-ray: 9b80b48d3a0f712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1129,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"3cbff16023a3738f74fa0f3c620ee35d","sha1":"e4cde715e08c03d9178230a74b666ddb6acd8a81","sha256":"68245287bc0046e97ca7010a57ca6845265b7783db419585cd865e7e5b65f0fa","sha512":"86f1063d01cad2508a7938022a6c1cd2256cb81f4fb0b033c768211a3683e902448a2175ea35f66740c45cf0694ce539027b008d8892f44ad0edc50d12cd06c8","ssdeep":"","tlshash":"272165aa734dac789b882753a348562c96994d292a610623d5e77c0f59f720e8d90750","first_seen":"2024-12-06T22:27:57.064878Z","last_seen":"2026-07-17T09:57:30.95355Z","times_seen":157,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__8.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__8.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1085\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gwy7xfLx%2BKuCXfmTs1xs2jgMUENfGScshYk5B3tgahB512%2Fed8jHPv%2BvGJcvfEigBScdmbHteBWXZiIbIrZCElldgXLyxPdh1A%3D%3D\"}]}\r\ncf-ray: 9b80b48d5a16712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1085,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"27f8387852fc4141a627c5c4b65b791c","sha1":"ebfacab627e3fc57d066dc041ccfe4d686a5bc6d","sha256":"e6c2f05cbd041c1ec03ff6a38e1e74ce9176d9cb09b2feb0968bf017f3f4cb4f","sha512":"ea16dc2cb4b05cfab36749d84fb9ad5b722f841d3c4f3cf2c503ed67d425c3e8a77fc1dcc049c7b734ba8c8d89076bd46bd691597470232b7035ef0b10f8f27b","ssdeep":"","tlshash":"1011c8d82730dc3fc29476f5a2294160dce34e08028391475c46f81c60360cba497747","first_seen":"2024-12-06T22:27:57.079336Z","last_seen":"2026-07-17T09:57:30.9456Z","times_seen":157,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__67.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__67.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1095\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ulbn0UKe7iHSNAKIa54UyHBYIBLRd1eRWTJXP84HNgfGLOpUwA5Qhw2vqZE1M7Ko8TkzO1u2WEKk4j4w%2F0t0w7g3ci9K%2FzmGpw%3D%3D\"}]}\r\ncf-ray: 9b80b48e7a7c712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1095,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"3b3e2ccbff9209b2012b53b091045763","sha1":"7d8145d03947788abc4689ac1ee24ca8a364b9ab","sha256":"cd7ab1ce9e85c923fd9ce8f2f64a29d7ef7849a6573e2f365f6f080ba41e76a6","sha512":"87d37e4db8e5f0f300a054b2967078113ee1e2715b4bc0b2711fdaf47b6272cdab9d3f4f7cbde780cfbd98f9b03f5e0f98a6c55b770fe8188f35125121a0e927","ssdeep":"","tlshash":"eb11c4c4161bbfb6c44a571784228bc9cff28c6cf004c00b46307c1978f62dae93e482","first_seen":"2024-12-06T22:27:57.065973Z","last_seen":"2026-07-17T09:57:30.968541Z","times_seen":157,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__206.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__206.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:30 GMT\r\ncontent-length: 2501\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G2OznnfISbn7qvmwgqnqMSxArpGd73OdJ7wgYNO2F81CzQigY4OBEJxV3HqaxPYOdnBzk90yHXmfqAFhORSLylUfZsIpFaouyA%3D%3D\"}]}\r\ncf-ray: 9b80b4906b0b712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2501,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"8e9ec66f80915f8c5766545d02c40a17","sha1":"a79d55e49aca03a2b3301df15110716dfe39d5fb","sha256":"d09935298290d607f4ad422dd60e9b77b2d5c958435b48e9200d8d6d0dbf6231","sha512":"8c26c93a7e7d53ff6f534a6a97dbe82cca0f84fc2eccf2ddee82d68f86ec4d84d089b636b1c947533d34b1582194feda318ead2b53a9b7970f505dc25209652d","ssdeep":"","tlshash":"d2511b84d8f972aa11d354f454c1eb8598b9bef81c1a774770253e2e64310c6ce7c8be","first_seen":"2024-12-06T22:27:57.09193Z","last_seen":"2026-07-17T09:57:30.978735Z","times_seen":157,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/img/trading-right-away.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:28.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/img/trading-right-away.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:28 GMT\r\ncontent-length: 4425\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ly%2FKVTwFoer8XxLUDzab6AzKZo63%2FUN3KySNDxEkpA9Ifl3Qiun82rl5x6dUNW08jWbfnzTZxVH8vEWc%2FjQrsE5Gh9ljvW8vGw%3D%3D\"}]}\r\ncf-ray: 9b80b48999e5712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4425,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 233 x 150, 8-bit/color RGBA, non-interlaced","md5":"ec223dbdbc5af64f78247e5fbfb0ca8d","sha1":"648b60b14d3bdc24c473fa6fdad342b6b6403369","sha256":"80f9867a4fcbbc41bd985ebd713482688d5b06439a6d5e21d38f6142238c444f","sha512":"34496e4e1addc636bc678746a42fe6fe023d84f8a5544874546d1607c561789edc04ece27f236eaa0c36820f3bf02f306c7bfe77470773b40cbd7d4af3e4c8ee","ssdeep":"96:9/iCjPBfewk87CM8QKTR7H88qDyyWwEc4EMfXbfRI3e6s7eZKqItjg2U:ZHRF8t70yyWwEc2aO6QctsTU","tlshash":"76917d153414fa9aa13c0fd91630e3152a678745de9ca7087cc7798d337bb1ac953647","first_seen":"2024-10-18T13:48:19.499029Z","last_seen":"2026-07-17T09:57:31.019601Z","times_seen":181,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__109.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__109.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2543\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nkjAybjWtqif2QxZJ8eeGrN1raju5drwIWkeoNPaN9xVWVl%2FyXmhPBAJEodMAjGqQ4bOhKIy5kBELETX%2F%2Bplb3cDB6RRgxUuVA%3D%3D\"}]}\r\ncf-ray: 9b80b48f4aa7712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2543,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"442debe82512cd5550528ce377bd5182","sha1":"92600a508ed36fcb763f6999b0fec6bf7fda6818","sha256":"619351a77b896faeb26aedc24c3c4a6b0ddf900f2be0b5fa56496fc7f1275586","sha512":"c9b5cb481d415c114f62a2c4d4b27dd27790a462df25a1550717ae9b1bcdd93676478f01bd672be56919fb0aeab91f5deedf01559af93b8abb61bd794a5a8e40","ssdeep":"","tlshash":"cc513a16de6474f959d86632a53305a01380df11b98bb550d30aba877bb3405f86451c","first_seen":"2024-12-06T22:27:57.093947Z","last_seen":"2026-07-17T09:57:30.950573Z","times_seen":157,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__153.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__153.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2530\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MjyNvXQS0JlZpSeoz6sN7YoAa%2FnN9qNTT1U2mwcsXI7Iz9RFyh%2FGF2JjPAAUHHGl6YyagTF3tIUfRrFvRibIxq50UQTsp5qXwA%3D%3D\"}]}\r\ncf-ray: 9b80b48fdad4712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2530,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"e13151c32d29b50f25e946b72ccac569","sha1":"c49420114727d2a20799004c47d43960a25c1d0c","sha256":"4f1d41a99c167e12b07ee5b919683497ac4fd3b1a456020714e9640eab28419e","sha512":"1297a1f11e1779a678cc91bd36a137eca7f47b0e513208ab62ed24e365261f0ed023c97e444490e24f103f8791f404aae2280ef5b1792d9c74a989181dd655f0","ssdeep":"","tlshash":"74516de9bd256c29ff8f9d1fc5d01986dfe48c07816c251e744276e892f6c08ebb08a5","first_seen":"2024-12-06T22:27:57.090895Z","last_seen":"2026-07-17T09:57:30.960505Z","times_seen":157,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/domain_icons/16_1761714095403.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /domain_icons/16_1761714095403.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 29 Oct 2025 05:01:35 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=6,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:30 GMT\r\ncontent-length: 15207\r\nserver: cloudflare\r\nage: 2\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZqCuDQxo17dr%2FlVKN4DpzFUbYKB6yqXh39jRfIeiYfd4tP7OYPBIAC7p1pemUFYHftHG4XqmdjJgHwYwZp6CtI7UOGxLc36pQw%3D%3D\"}]}\r\ncf-ray: 9b80b4939b19712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15207,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"47317a0dc83ced1a284198c1e00e0416","sha1":"4c9ba31a3b1acda66c02902f726a18f5a452d907","sha256":"1d81324930ade3c19588f3d412568843ee3d4f8e64cdf970b731ed6b2da5c380","sha512":"e3970293deb4eba7c189454914d9de440b1d21a55a4b56cbbde45290c26252c53dee0951c816a6db07ea2761a0036cf55c1f7208a0fa6c3778ee8357a27042e8","ssdeep":"384:7AqulEyELdJwlqmy5s18RrM5WU/5UfRYao5xUKC2Mp:ErDCEV8R5UxUfRnKCTp","tlshash":"6662cf9c5aadf391f31279f5fe4b883c398b289111ed75add48c4c0a356defe6111062","first_seen":"2026-01-03T07:16:21.802254Z","last_seen":"2026-01-03T07:16:21.802254Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/domain_icons/16_1761714095403.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:28.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /domain_icons/16_1761714095403.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 29 Oct 2025 05:01:35 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:28 GMT\r\ncontent-length: 15207\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Gp8S5JU5f%2BLN55qOhm4ftnc1h1E6BF4zuhzv%2B0RGM7C0WMAndS03DGPPVcWdlmkuANSuf7oRocUH9e9ctE7YAPMiRmzJiknmg%3D%3D\"}]}\r\ncf-ray: 9b80b486b9ae712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15207,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"47317a0dc83ced1a284198c1e00e0416","sha1":"4c9ba31a3b1acda66c02902f726a18f5a452d907","sha256":"1d81324930ade3c19588f3d412568843ee3d4f8e64cdf970b731ed6b2da5c380","sha512":"e3970293deb4eba7c189454914d9de440b1d21a55a4b56cbbde45290c26252c53dee0951c816a6db07ea2761a0036cf55c1f7208a0fa6c3778ee8357a27042e8","ssdeep":"384:7AqulEyELdJwlqmy5s18RrM5WU/5UfRYao5xUKC2Mp:ErDCEV8R5UxUfRnKCTp","tlshash":"6662cf9c5aadf391f31279f5fe4b883c398b289111ed75add48c4c0a356defe6111062","first_seen":"2026-01-03T07:16:21.802254Z","last_seen":"2026-01-03T07:16:21.802254Z","times_seen":1,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/js/noti.js?v=3","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:28.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/js/noti.js?v=3 HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/javascript;charset=UTF-8\r\npriority: u=3,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:28 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QP5gM7FpVCu%2F7K0B71ilS1TunISKNiUda5cuJ3n5uLfjmyvVYKWQsYCRI5%2BMRvq3HEoDMJZ8xKQMXXDL4yVpq1BJamvJ8PGA8A%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9b80b486d9c5712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12111,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (344), with CRLF line terminators","md5":"6df3802945529795d74dbf9ac7f7afcd","sha1":"2a5bf6c00baa2869769f629fe74009ba7f14976f","sha256":"da7bfecee787dd36b914c1bcbba8290ca09f5eb63cf65ccd37394a8b9c21985c","sha512":"7aa37dceb01cc94ca3e4c5bb0512f69b7f80ef2a717b12a3c21aa566146655af59f4787868bb3dcd452fff0e7843e048193cd91e0e867af5907299cee7b121cc","ssdeep":"192:Pu2zR+wyioZAP34P+AN7bkaJPLYFdack34PT7rjaR7Fb71SLdqa34P17rjaR7Fb8:moz/ARdJTYD5exFb71SJ4exFboSzVqeO","tlshash":"3742725420ca1922457f63b8da925a5dfb22d20b93072aa13afc46d32ff7c14c2c3b1d","first_seen":"2025-06-22T10:42:51.761799Z","last_seen":"2026-08-01T13:57:27.122056Z","times_seen":290,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__28.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__28.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1095\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7A%2F95AAc9QIhz1i9EY17ZNSu%2Bm44n70eV36hFk80X7Va7x8f1M486J2iMRli%2BONtM8PA4%2FISk27KBLqH3o5FD%2BsWHGnZTeBJmA%3D%3D\"}]}\r\ncf-ray: 9b80b48dba2d712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1095,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"3b3e2ccbff9209b2012b53b091045763","sha1":"7d8145d03947788abc4689ac1ee24ca8a364b9ab","sha256":"cd7ab1ce9e85c923fd9ce8f2f64a29d7ef7849a6573e2f365f6f080ba41e76a6","sha512":"87d37e4db8e5f0f300a054b2967078113ee1e2715b4bc0b2711fdaf47b6272cdab9d3f4f7cbde780cfbd98f9b03f5e0f98a6c55b770fe8188f35125121a0e927","ssdeep":"","tlshash":"eb11c4c4161bbfb6c44a571784228bc9cff28c6cf004c00b46307c1978f62dae93e482","first_seen":"2024-12-06T22:27:57.065973Z","last_seen":"2026-07-17T09:57:30.968541Z","times_seen":157,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__99.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__99.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1085\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4OlRrqcoZQrbIHeVp5PQqnZktTyAyQTDqfXd9IB9BrzOu6BIbxy9Dm29YLwY7RVtgo8bMvlQH%2BDKLw6VNuBYfAgIPTCZBpiz5Q%3D%3D\"}]}\r\ncf-ray: 9b80b48f3a9c712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1085,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"27f8387852fc4141a627c5c4b65b791c","sha1":"ebfacab627e3fc57d066dc041ccfe4d686a5bc6d","sha256":"e6c2f05cbd041c1ec03ff6a38e1e74ce9176d9cb09b2feb0968bf017f3f4cb4f","sha512":"ea16dc2cb4b05cfab36749d84fb9ad5b722f841d3c4f3cf2c503ed67d425c3e8a77fc1dcc049c7b734ba8c8d89076bd46bd691597470232b7035ef0b10f8f27b","ssdeep":"","tlshash":"1011c8d82730dc3fc29476f5a2294160dce34e08028391475c46f81c60360cba497747","first_seen":"2024-12-06T22:27:57.079336Z","last_seen":"2026-07-17T09:57:30.9456Z","times_seen":157,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__126.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__126.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2519\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5xHH89Tgx4x%2BpMsoSrjcj%2BVMcY%2FJF9ZJHoN%2BSac6n3gLLJ9yM6xNKRvCjPrZvGVgAtyAJMB0AErZRVSf%2BC0VJBO9h9WqwfZDYw%3D%3D\"}]}\r\ncf-ray: 9b80b48f8ab8712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2519,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"adf7ea7ba32b52d9d1d351900e3acadd","sha1":"8c7d2d33fac5ee6c836ab2f6f9fd9e78d8ee3d14","sha256":"9a2498779f3d889c8e2260202d6186a1124cd743c0a3bb2c8cf1e64d66f59705","sha512":"21b7aacbdfa49415ab52660015328593646af45d26161956b9f3a14e096cb80c58d2e15306e134426ae922d8d6f85465e281cbcb0a9fcf8a4d4c8b025f6ca255","ssdeep":"","tlshash":"98511b83f4fbcf7788750a0b0a4a120103577d259275899bde857c9722fe0bfa25c015","first_seen":"2024-12-06T22:27:57.096118Z","last_seen":"2026-07-17T09:57:30.970028Z","times_seen":157,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__125.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__125.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2496\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M9fyuKUbXMhPDO6bq9OmU97Y3nrP26aDGQKDh%2B7%2B2Acb4PbRGEGVNjGx9fyyLPpnHPM8M17JfNSDZSvSUjYzvhvL2cqIbMwsPQ%3D%3D\"}]}\r\ncf-ray: 9b80b48f7ab7712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2496,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"992da572d0eeab68de7e123b557fcaa9","sha1":"663782959996919942a7c1ed657545a29231d8c5","sha256":"a6e12a53275c9e16fad5ad380035fb843eff53aeea8e27399b3e06ea590638c0","sha512":"d21309b4a57659e19f2c760404a945ae587eb3d44d9a1363a06424066cb5ffa48657125432b611185c6fc407ce096cbd61b74d956b9270409694e12eebb02d51","ssdeep":"","tlshash":"41513a79984c20166c9f0af0ba1304686f478d645bfa41e54837f82ca8f71c06837721","first_seen":"2024-12-06T22:27:57.097189Z","last_seen":"2026-07-17T09:57:30.959959Z","times_seen":157,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__168.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__168.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2574\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gFP%2BHm8vYHvqILgoXTVionoLIrhl6JC40oHsYxeNoeUmQB4%2F8aiwPiOhdtHf7L8DHwQmplyHcQ6J2u9dxH3an9pJD2p3%2Flo0Mg%3D%3D\"}]}\r\ncf-ray: 9b80b48ffae3712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2574,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"8d591f68a09077fcafa0b05ae40473e4","sha1":"add27caff55e10c8205e31004ecabd1a5a6cf0df","sha256":"9b427e6c8f08fcda3b6057a2185b63759c319e3f83b40ff8d0871baf34371544","sha512":"883433f2368e70edc09e30d0eec94507c5ee61bd8bc4051145c29a6132650e63d19ff72572219ebe238f1cf294431bd48e014ddd4b66b3fe0f89636257b953d5","ssdeep":"","tlshash":"9d512abfeac30d80e79941629665c4bcd7c26e10e4c33f67506abb22a0b0450f02c9e3","first_seen":"2024-12-06T22:27:57.09293Z","last_seen":"2026-07-17T09:57:30.981761Z","times_seen":157,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__196.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__196.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:30 GMT\r\ncontent-length: 2521\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GJfu68t7FHBYAIZdU3y1mjt3k8vPx%2FS6mPbVkpk8NH6PpPWpSJU9FChoB7rNagxrJPTS4wwCx4wVCewi5N%2Bd1%2Fek%2FgWsyDTuWg%3D%3D\"}]}\r\ncf-ray: 9b80b4904b01712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2521,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"67e87a046547d37d3d6ff7c1457d99a0","sha1":"912d5edfe351304cd868fa2a6cf82c8a766c345d","sha256":"d475374d44a909777d599d557b1f386d521c6611d21c396beb1c43d6606274d4","sha512":"4c4b842b334c7d62b3516652ab86fc89633f087139e4bc55f9a65ee5b3fe4fadb414c8279a42235ade342587bb0b1be84d1dcf0d6c1c7b578dcfe06e4e1a529b","ssdeep":"","tlshash":"74510ae24e5da83aaf4f601dc9ce9a106a631c3c2a8131595ce8be1dd6b2e224749537","first_seen":"2024-12-06T22:27:57.086375Z","last_seen":"2026-07-17T09:57:30.943107Z","times_seen":157,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=ETHUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.164.248.171","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 13 Dec 2024 00:00:00 GMT","end":"Tue, 13 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:5E:B6:FE:3E:A9:63:38:16:AB:57:DA:E0:4F:51:4B:FA:2B:49:43","sha256":"AC:E7:4C:8F:D2:FB:EB:5E:41:DF:BA:9F:C5:FA:44:FB:25:36:FD:A5:BF:21:D1:F5:3B:AF:7D:14:A3:D8:FF:37"}}},"request":{"raw":"GET /api/v3/klines?symbol=ETHUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://puffdex.com/\r\nOrigin: https://puffdex.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1370\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: b55f87b7-c0d1-411a-b38c-8c07077e62f8\r\nx-mbx-used-weight: 10\r\nx-mbx-used-weight-1m: 10\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 784f462b4ee4e847ccfe44db65f51a9c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: UvBxxC1EWDOQ03_otSsHtLu5xLQryeGueqXHJz13ucEmBm9qK8K_6w==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4245,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"a756089db122681a509e8c33c9913110","sha1":"a4dc9313bba1414f6be564681ed1aed353015d9e","sha256":"a435a18662bf7d1ba606c3998f3bb43ea9915eacad2425e5c9d25528fe4882fd","sha512":"2038b13666e7de9a29d6ea706d72334c752a6b8ca80ba0b33a5014d10ea4a0890f60646f1903aaee2a1f6a4c854452210dca05e5f125badae50122f8eaeac562","ssdeep":"96:Pl0QLTIqWuNUzsG+fVpQvE6ZX4lHs1nOUPJK8zg+1Iy7gzQ:POkTIqbNo9+fVpEE6p4+H5D","tlshash":"f4919a4313898260fa3c8c0a3782f86d585a306bfeca5cd099f222b35cf16796b98715","first_seen":"2026-01-03T07:16:21.804101Z","last_seen":"2026-01-03T07:16:21.804101Z","times_seen":1,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=BNBUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.164.248.171","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 13 Dec 2024 00:00:00 GMT","end":"Tue, 13 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:5E:B6:FE:3E:A9:63:38:16:AB:57:DA:E0:4F:51:4B:FA:2B:49:43","sha256":"AC:E7:4C:8F:D2:FB:EB:5E:41:DF:BA:9F:C5:FA:44:FB:25:36:FD:A5:BF:21:D1:F5:3B:AF:7D:14:A3:D8:FF:37"}}},"request":{"raw":"GET /api/v3/klines?symbol=BNBUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://puffdex.com/\r\nOrigin: https://puffdex.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1242\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: b55f87b7-c0d1-411a-b38c-8c07077e62f8\r\nx-mbx-used-weight: 8\r\nx-mbx-used-weight-1m: 8\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 784f462b4ee4e847ccfe44db65f51a9c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: AthRd9kt-FlDkdNzamshFYlV8OWThqry8Dgi2twFFZm2OZrnGjK4nw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4081,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"2fa9193786226c8c990b83c44bb4f250","sha1":"cf3c0619f35c6323a2c8bc1547a35eff16b7a0d3","sha256":"c11ff276b6340108b2e120061ea044646bc616e276192cb23ded7fb596e09957","sha512":"c35d8eed9b4fedc3a105f0298f267aae9e4fd729ee5694c091933d46dd96026fd6e6576f8a678270ce0ee45f396186d72703f6147dfcb68003377b7e4badcb6f","ssdeep":"","tlshash":"a581e1520298c764fb3a8d1a23a3b8e3962b7067deca5cd0ccd167a748f54713b08706","first_seen":"2026-01-03T07:16:21.799538Z","last_seen":"2026-01-03T07:16:21.799538Z","times_seen":1,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__86.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__86.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1085\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=na1kD8Qs%2B%2B3smw3ZfmJyVpRM1Lvznq6jxvnm597NtgppHAqyuJ7Gy3aKlZLWoa4TVe4y%2BNRh67n2R6Msg798Eh93Sop9Iqs2eA%3D%3D\"}]}\r\ncf-ray: 9b80b48eca8f712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1085,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"27f8387852fc4141a627c5c4b65b791c","sha1":"ebfacab627e3fc57d066dc041ccfe4d686a5bc6d","sha256":"e6c2f05cbd041c1ec03ff6a38e1e74ce9176d9cb09b2feb0968bf017f3f4cb4f","sha512":"ea16dc2cb4b05cfab36749d84fb9ad5b722f841d3c4f3cf2c503ed67d425c3e8a77fc1dcc049c7b734ba8c8d89076bd46bd691597470232b7035ef0b10f8f27b","ssdeep":"","tlshash":"1011c8d82730dc3fc29476f5a2294160dce34e08028391475c46f81c60360cba497747","first_seen":"2024-12-06T22:27:57.079336Z","last_seen":"2026-07-17T09:57:30.9456Z","times_seen":157,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/lottie-web/5.12.2/lottie.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:28.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/lottie-web/5.12.2/lottie.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://puffdex.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 07:15:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 63677\r\ncf-ray: 9b80b486ecf6569c-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"659c9856-f8bd\"\r\nlast-modified: Tue, 09 Jan 2024 01:50:30 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1295345\r\nexpires: Thu, 24 Dec 2026 07:15:28 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=RoCsgY7ugXeCbaY0DMTf7vkgjOL5kks8BChUjrCt1V7rxBt6WC1DtKQEef9Mo1XLbAPFO3P%2BIktlU0CODiaiXzEhykNswXitgw2Uookb8Jq5jgGvLsYwTf5bxHzj48Kh82HNGbXT\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":305543,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"55bf86203909151984bef8cbe4739d64","sha1":"543e646b2ff86405b77bd2514b1aede8a8b4cbd8","sha256":"a0757321f974527bda3cc2593bf56cc7ffe4578421249ced6ae49ffb1c529f90","sha512":"8c49ee0edea37de7028ed850009f9e774313540fbee592a69547260c606fdaf508fd1127e85b88762c4b367413faf2aeb04da18539368acddc16fbf9c00f9282","ssdeep":"3072:xnEwejqNqAvPSIoPayIYzfq526QGK2y0mbsZmml+39xzKMTlB6k:xUjqNqAvPSIoPayIYzfq52tU1l4fRRBl","tlshash":"a85419597254343805c540a9806f0a4bb736292e246ac49cb76cf4ffacbde8d31beb75","first_seen":"2023-07-18T12:10:25Z","last_seen":"2026-08-01T13:57:27.093653Z","times_seen":2310,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":10,"dns":3,"connect":4,"send":0,"wait":11,"receive":3,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__3.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__3.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1093\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D2%2Fe8DLZznXNw9qi0nGQd6WvwqtspgHWStc9NAjdbkqhDuXkB7ECYp2xjYS02Aa7IFl1mF6JquaJz1VxldcccfBj6kGG3CUfeQ%3D%3D\"}]}\r\ncf-ray: 9b80b48d4a11712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1093,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"2083e1ff8b48312098bbd8247f3c42f0","sha1":"7d958c8a1c3ef4aa2aedf6b15759532f081c8f6b","sha256":"01a6dbc53976398d47220bab14117b4f95526159664afccf2a3c9985c3f557fb","sha512":"812083096b1a10301091e7197dd49fe809d2ee54e9115f6df23c0f78420651c745abf55b8291749d198244cae649d8980a81b08b79d6c77bdf1b1668c617f097","ssdeep":"","tlshash":"441108e0ffa8e48a389f78a3005ba02740058e1569a0ac8a092eb30f1d3010ea4cdc62","first_seen":"2024-12-06T22:27:57.068056Z","last_seen":"2026-07-17T09:57:30.96946Z","times_seen":157,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__81.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__81.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1093\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pHiWzMLtxBz5%2BYY0%2Fe%2BDo7K7rwRU2OsezZoDkTRNeOE8dpnl76lEMYcK%2Bj2FhPvWBbrPJklAsWsEiBfx1Zoim4e9hn4D4tqCBA%3D%3D\"}]}\r\ncf-ray: 9b80b48eba8a712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1093,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"2083e1ff8b48312098bbd8247f3c42f0","sha1":"7d958c8a1c3ef4aa2aedf6b15759532f081c8f6b","sha256":"01a6dbc53976398d47220bab14117b4f95526159664afccf2a3c9985c3f557fb","sha512":"812083096b1a10301091e7197dd49fe809d2ee54e9115f6df23c0f78420651c745abf55b8291749d198244cae649d8980a81b08b79d6c77bdf1b1668c617f097","ssdeep":"","tlshash":"441108e0ffa8e48a389f78a3005ba02740058e1569a0ac8a092eb30f1d3010ea4cdc62","first_seen":"2024-12-06T22:27:57.068056Z","last_seen":"2026-07-17T09:57:30.96946Z","times_seen":157,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__97.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__97.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1146\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RCvcFCE%2FxRj9Pak7%2Bn7cNcls%2FC9Md2RtXqq%2F%2BOV6sy%2BhMZM8k42Ijh8%2BLQsXvgcfNWxeeILkdaJWtaYbKp%2FEEA5sEPrlc%2Fktxw%3D%3D\"}]}\r\ncf-ray: 9b80b48f2a9a712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1146,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"8a6d89eeb884ff17869546bf9363d8b1","sha1":"5884c7083b9e71f8f5c436a82d4f79e84deedf69","sha256":"7eaf8fcc7b9b9326219f5b2f37e8135c7ae5960f07ea48594445710045c9ff18","sha512":"7309ccd0af2423148f1a2ffb5230abb880b52cfe5196a10d036ddf6eae918c61f78d3284fbcfbcbb773b11690f4f5684eb5ee13eec9fd279d43f21f590007973","ssdeep":"","tlshash":"2d21a5b72948f49ce939b9d11131b0b1864e9f60154f34fb10c7b1218bb020d6eaec61","first_seen":"2024-12-06T22:27:57.080393Z","last_seen":"2026-07-17T09:57:30.96439Z","times_seen":157,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__108.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__108.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2532\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ptnqaOBQWXdb4OewCJmq%2BdN4R2jIa4NGmya8BJsw23fQ0DLJsCcwnwqCzhCT5l5PanHqN7cc90tKatEH5eHtf6NvpeE0kOiMXg%3D%3D\"}]}\r\ncf-ray: 9b80b48f4aa6712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2532,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"e355727213ea7aefac63c70f888c3b7c","sha1":"3d44fcdad9ff14633cbe99693dc2739778fe7ad9","sha256":"2a16100972b15829065588b0908adf16b26d0994a93e1445d56496ec2378da69","sha512":"ea991dcfc07fb0003aba9bd186c2eddf709d588b0af3575f55d49936c644e64e02194ffab6e9e3911107a84716a4818d4f7ca03b1972e13dec2bd31c6f6665ef","ssdeep":"","tlshash":"e1513b85259e444682a348d94c931afc7e19cee3453ed80302717cd4e4f273e12b63af","first_seen":"2024-12-06T22:27:57.085308Z","last_seen":"2026-07-17T09:57:30.97406Z","times_seen":157,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/img/coins/BTC.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:28.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/img/coins/BTC.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:28 GMT\r\ncontent-length: 1125\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G2W5DhyTLymQ0W53lqiWru9SflEw5j8YvOlV3ewuLZtOavrGbM9jiu6DkR%2BfGCGYLU5Fk3sjCakLhEny9TyiR7CdjB4aTfpUnQ%3D%3D\"}]}\r\ncf-ray: 9b80b486c9b6712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1125,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"75f196b437f9d87fdc198bc904c66c4c","sha1":"79b6e300761520f7ad41856878999dbc1fafc137","sha256":"f72b9a231c13012613217eec2bec27b923204e8c6cebc2b2ae51485d2b5d679d","sha512":"de4633885db64868d13a4a4699631acf0b00af0b2cda542c5be26b4dce3a1f8b4e071949280ddd9f3c59eb7a236d5d8d7003ffcb9633e0749fb62d46c780ac60","ssdeep":"","tlshash":"2421f9d3df09102ec4029c9cd4730c6bcc287a963410445b5f7c823fcc0b6496864b67","first_seen":"2023-05-07T19:16:41Z","last_seen":"2026-08-01T18:09:33.188022Z","times_seen":1836,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__84.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__84.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1146\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fQOdfCEYHMMSeHFDJfIhaSRUJDFvCmVGnPCk%2F%2F2vFFgS3DhsEDkz8ZsRMx2gvlL9EfRj3Z9VW7pc8KcEADa2E5JwYzjdb2500Q%3D%3D\"}]}\r\ncf-ray: 9b80b48eca8d712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1146,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"8a6d89eeb884ff17869546bf9363d8b1","sha1":"5884c7083b9e71f8f5c436a82d4f79e84deedf69","sha256":"7eaf8fcc7b9b9326219f5b2f37e8135c7ae5960f07ea48594445710045c9ff18","sha512":"7309ccd0af2423148f1a2ffb5230abb880b52cfe5196a10d036ddf6eae918c61f78d3284fbcfbcbb773b11690f4f5684eb5ee13eec9fd279d43f21f590007973","ssdeep":"","tlshash":"2d21a5b72948f49ce939b9d11131b0b1864e9f60154f34fb10c7b1218bb020d6eaec61","first_seen":"2024-12-06T22:27:57.080393Z","last_seen":"2026-07-17T09:57:30.96439Z","times_seen":157,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__104.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__104.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1161\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yu2eywkaOJaE9kaoBZN%2BOZw6A2tcFEjwp%2BSuVfD4feQ4ZlPFBNZcSZlkKzBMgc0uB%2BMVBeswqagPsKRZ8hJ2yL%2FrSx5j5aByDQ%3D%3D\"}]}\r\ncf-ray: 9b80b48f3aa1712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1161,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"e50c044ba3552cd6cc0360be3b1c8556","sha1":"c62adf647bc3b965624b60c571c8bc3cdb94305c","sha256":"8c4a348cd473994e5b0569588bd3997085eb51e0e434959379ed8b0c6f29312e","sha512":"0cb3f436341349091a811a3ba791decc54759c64a87474c38f506aa9f4bcffb08502b17855155908f0e2e291a27d2d9e44f0c84327e9249f182b7da7a753d0cb","ssdeep":"","tlshash":"a921a84d9a4170e0e9b91c050a161130814bbd241d276b4f9a7d3faa3636bba44fd015","first_seen":"2024-12-06T22:27:57.082236Z","last_seen":"2026-07-17T09:57:30.973126Z","times_seen":157,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__145.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__145.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2379\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=77nUHgQSrKXjAeFbuwgFEm79xiCYw7lizM4n76gDXL%2BFTatM9d%2BQLw758ZXbrY1d4B4yefwEBv2er%2FfwziEgDTtd7Y6YFDBfRA%3D%3D\"}]}\r\ncf-ray: 9b80b48fbacc712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2379,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"fd7aa9cb135ed0372c742822ba53ae06","sha1":"1da731da9d7b334674d5d811648acfe55c3e2053","sha256":"e8b076bd916db67db55245e7a8de004cc840ff1106c27a8dbe54f46555e27697","sha512":"dd6f7bae5d834f2ad3e36a9be7c287b2f113b7d21741936f8913cd3ebb4f61030a29087c1474641520af1e9d0e0ca337d9e76caa94ed63d73e0ae6b1345c222d","ssdeep":"","tlshash":"404119a3d1117d13ee0c746b8e19d141433a4e43a923b99d3fa87e199e710856a72681","first_seen":"2024-12-06T22:27:57.098149Z","last_seen":"2026-07-17T09:57:30.962501Z","times_seen":157,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/chart.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:28.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/chart.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 07:15:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 71722\r\ncf-ray: 9b80b486fc9e723c-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 4.5.1\r\nx-jsd-version-type: version\r\netag: W/\"32e8a-y1VYFBBM+4v4jk0bIQM7SVw8Wnc\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230181-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 25586\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=SxqVwXLmugN73Y8fz8Ze%2BarBYdmmR99xbndBp78rSQjoYOmEULbiPS0%2BvljZg9CSFhyobG9Lt9nCzDY4DzILZgOWYdCNlGlqdL7E0%2FDnYUtpehf3Z8YGund3pr1zz%2FYktIc%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":208522,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (56990)","md5":"e6452e2b454b091f857a45cce7624eae","sha1":"cb555814104cfb8bf88e4d1b21033b495c3c5a77","sha256":"48444a82d4edcb5bec0f1965faacdde18d9c17db3063d042abada2f705c9f54a","sha512":"5a85622a1283e2a2365abb9266abfdfa4bcce167c585431008b3784250d3b79694e7a7cb432da0628c5622a9449d7a89cbff80739abf864d6859faa730387030","ssdeep":"6144:Iy2IGjjkD/6w7tKuhSGmexa2FiKqU/1eFRQ1T9mkb0h3N+2HJ8l/mXI:v+kD/6w74uhSGmexa2FiBeeFRQ1T9mCH","tlshash":"3d14f5d53342b12282e256d2583a050ae33666483547899cf6bc5ddf3c6a98b71fff38","first_seen":"2025-10-13T17:57:35.280368Z","last_seen":"2026-08-01T18:55:33.046921Z","times_seen":5507,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":10,"receive":2,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youtai.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youtai.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 13595\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NI0IpG2YoTWwgpd%2B5TVHrh%2B2zf%2BwS1QGofdrZPUjTRZqidwFnjNN1lJ9qyAMPeskxxg70dbW%2FajqyISHwzYW5yQ6pmy8ZYzT%2FQ%3D%3D\"}]}\r\ncf-ray: 9b80b48d0a07712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13595,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 275 x 252, 8-bit colormap, non-interlaced","md5":"daf784f4211b3754e96c325ba9cf4fa4","sha1":"c59505665d2856881316beac7b2c71a3000ab2d7","sha256":"a8aa32ff5b9767b36f4ec5eca725c0cdcf561a30d77421a86cca0d2be3e10723","sha512":"1e4f74036dc4aeb68e9f2283f01c9049ffde68be20eb80ca237d8d5ed40e9c134290999ae94deff0d0a8a9a30c9a9e92d47b621381068b558c5f4b7a6ad97602","ssdeep":"384:1zJhmUk777hj7vcserVy7omZBM7oUO01bivUXbpt:FDkbhjohy7omZKoUD","tlshash":"0652c0843c794660b6aa42404185ec409693ef3abed37ee1c9eeef73ac04c64016cf70","first_seen":"2024-12-06T22:27:57.070032Z","last_seen":"2026-07-17T09:57:31.013747Z","times_seen":168,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__78.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__78.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1165\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pqLEQseSpU0%2Fnb5k3%2FaHo9tHXuihHbNikmbvA0stlShGCyYsUJEUqxFJps3VgTTBOscrcqOgmpZT1gB9vuXeh%2BODTW5ipyWwMA%3D%3D\"}]}\r\ncf-ray: 9b80b48eba87712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1165,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"50333973529f140a38862b5e59223c23","sha1":"ca772352821ce63cc8d52b58b4dff1bcbe92b6d6","sha256":"ae37bc4c761654d71faa919cdb2bcc500d39f14f3747c2124a67f7eafe4116e3","sha512":"93152b60013a15a74c510b75bf4c4d11f27cab49234bb7980c9bb245935673d6adc119cf598a648c29ba5bfad9e4cf730988f224e352cab3c65728fe9318bfe8","ssdeep":"","tlshash":"9121a5f530731d399a089789f51c68b85d126f08ae9496164444f8f4f8f6b49e048ab2","first_seen":"2024-12-06T22:27:57.061496Z","last_seen":"2026-07-17T09:57:30.946495Z","times_seen":157,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__96.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__96.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1175\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ro2Oyq7%2Bva08nnM%2FW%2FPbj%2FIYhzSx8JnP1nDLN%2FEgRLFnaBetCHRw6XmDcvxSvc%2BkrTyjyCnjbFgSxIGfMQZiFZz7N0L7xQC1hw%3D%3D\"}]}\r\ncf-ray: 9b80b48f2a99712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1175,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"564765291e71e2e3a6cc543a40b65548","sha1":"de712ea89fa95bb9c9994e96f804b1676673ed5a","sha256":"2869e4c8912785059529abd6817339639f5f3398fa7fc37628e37d1890467c2b","sha512":"9d030870449923e6d22f904d1d3194ad331e30daabca95a92c96295595b0f51ab3d71e5b11a020a29254a8971dfcd4c1fe6bde33bc4aaca7c3dac279d9549f99","ssdeep":"","tlshash":"552175474751446858949b2d83095ad2ec030ee6bd53530a805bb6197239e3f4678da0","first_seen":"2024-12-06T22:27:57.076211Z","last_seen":"2026-07-17T09:57:30.989044Z","times_seen":157,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/img/why-we-1.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:28.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/img/why-we-1.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:28 GMT\r\ncontent-length: 12834\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dPxwS8hBjnzxrjbgfUe6BsKpJTr0wFm97bvzuH3zyR1w%2B38FHta0FXOUqOO0%2F3vFaKoweo9iFm5ARetIk5u3TO7vGv6pUZmdAQ%3D%3D\"}]}\r\ncf-ray: 9b80b486c9bc712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12834,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 436 x 378, 8-bit colormap, non-interlaced","md5":"eb45fc67aad9ae7def6a56816bd0a898","sha1":"45defeded6011e48448cf9833d985f6e73cb5461","sha256":"07aa2ef2ee9bb569954601ccd1e881ac21853ca1dbe4b405b165879df0b05b0d","sha512":"28c58b0a6614ceb5c50462bcc9c64dd4838ebbdadb999a956ec890e2a95a21658a7e168439cb89ad92c026f8b93aef5e654db291334bd286a87adad59a871f34","ssdeep":"192:6Se6fEotO4b0G6nlB1m1Qpu4M9AgfveGMVZpL9zOZXQYAzjyxTI63SmN3:1XfEodH+ewKWTTOtQ/zGTI10","tlshash":"2042cf5ebc810076037c077280a6e366c4da0c0f943a5f7292cb3d71ab33b0a21c95f6","first_seen":"2024-12-06T22:27:57.019511Z","last_seen":"2026-07-17T09:57:31.008337Z","times_seen":178,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zhongguang.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zhongguang.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 12444\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wdXKijC64tilMHpWQYbEe33BP7iwc2OVLDzUItYTcup%2FE5xMJKrgLWb%2F8ny5l3CEoggGP0ggb2YrSq7t%2Fzd9ruaJ%2FlTDJYiFrQ%3D%3D\"}]}\r\ncf-ray: 9b80b48c79f5712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12444,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 347 x 581, 8-bit colormap, non-interlaced","md5":"1d21e5ef041a609160189913f734e545","sha1":"e4d77c8609e7dd8d0fd31564207b5a4353860a0b","sha256":"4988ae4013e24211d8f8545998ca7dd06bf0b3abcecc28003400a0714dcf8dec","sha512":"6596fa833230734b93801cc6bfda6d582e9b7f4a7712adccebffa3e02f063a916324aa3b666c4260ec4000fc8511fa347de32fb474b6b51ba8a6ca0c22f96ee4","ssdeep":"192:TYCtCJ1J5qmh4Ojon/+0Oxxz7I/A1DT6eRzDJAfhBspbvYVmfrKstWVUACnh:TUJ1JhbemDxXI/A1RzYh+rOsYVAh","tlshash":"8242bf5c9af15b332ff9a9a0649750634683e4284284be477601af7e91ace814d1ecbb","first_seen":"2024-12-06T22:27:57.049002Z","last_seen":"2026-07-17T09:57:30.986819Z","times_seen":168,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuohuan1.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuohuan1.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 4528\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9nOUjBtnlydk0GMbw%2F8dI81ewlxAtlC%2Fp4gcHAHTN6MIi7rfAp0g2MWrFHl73j0IjZTztlZdLpWk2KQmh0iOX7fzAg3Ndd4yHQ%3D%3D\"}]}\r\ncf-ray: 9b80b48c99f8712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4528,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 295 x 155, 8-bit/color RGBA, non-interlaced","md5":"176861f481d652d0b30df6ad1f9c1748","sha1":"76ed7a16a35a925797d57ab6af4a7164be7af457","sha256":"abeb5d931b0b1e48def3ca1f6e61fe26a24e103c77eefe4c45ceaa106e51cc01","sha512":"027f3742436ea256471adf2f095e072acb6c684fe99f1fe3fbcd2742be3903283cca76eaa05022602c90e20a3633eb26596de46ee2f0bc17c3eab705d28a5937","ssdeep":"96:0G7igL3xjxPrn2KWfw5DxxrLRISYq0HRgCekR1zVp+Zo:0G7/L3xdRWI5DxxrLj0HJewzVZ","tlshash":"8e918edec3bf5c1e2e0974750f0a554d4e79bbc9876f097cdd488227d8f4064668d988","first_seen":"2024-12-06T22:27:57.046532Z","last_seen":"2026-07-17T09:57:30.977866Z","times_seen":168,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__14.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__14.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1129\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9zYLEjGQgg8UFXWH%2FYf%2BC%2F7IUSPG5t5NiHqYcJ3q%2Fe4LVd6rk%2B1A%2FzeLWqKSIocVpXpph%2FUgh83koJ2SmHD4nZjzfOFBQVrFRw%3D%3D\"}]}\r\ncf-ray: 9b80b48d7a1c712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1129,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"3cbff16023a3738f74fa0f3c620ee35d","sha1":"e4cde715e08c03d9178230a74b666ddb6acd8a81","sha256":"68245287bc0046e97ca7010a57ca6845265b7783db419585cd865e7e5b65f0fa","sha512":"86f1063d01cad2508a7938022a6c1cd2256cb81f4fb0b033c768211a3683e902448a2175ea35f66740c45cf0694ce539027b008d8892f44ad0edc50d12cd06c8","ssdeep":"","tlshash":"272165aa734dac789b882753a348562c96994d292a610623d5e77c0f59f720e8d90750","first_seen":"2024-12-06T22:27:57.064878Z","last_seen":"2026-07-17T09:57:30.95355Z","times_seen":157,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__103.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__103.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1161\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BrLg5df1SXW34nEtqJIeoj1jREeewst%2BNLtBkTrnly7ZJ%2BNAnNrxS8%2B7QM0oEBgtZGl8EWOFu4t3Ma9JA3CEcVQMYgqiaoYR2w%3D%3D\"}]}\r\ncf-ray: 9b80b48f3aa0712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1161,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"e50c044ba3552cd6cc0360be3b1c8556","sha1":"c62adf647bc3b965624b60c571c8bc3cdb94305c","sha256":"8c4a348cd473994e5b0569588bd3997085eb51e0e434959379ed8b0c6f29312e","sha512":"0cb3f436341349091a811a3ba791decc54759c64a87474c38f506aa9f4bcffb08502b17855155908f0e2e291a27d2d9e44f0c84327e9249f182b7da7a753d0cb","ssdeep":"","tlshash":"a921a84d9a4170e0e9b91c050a161130814bbd241d276b4f9a7d3faa3636bba44fd015","first_seen":"2024-12-06T22:27:57.082236Z","last_seen":"2026-07-17T09:57:30.973126Z","times_seen":157,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__116.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__116.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2574\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GFnZ%2B8SjZMc5ldEAMbs2KFqrznJzGBsza%2BlzPHTYyrZq3qvgn%2FWMxkbTqEpCAvQp%2FSvN8vjvQS4W%2BizzXInuljIE%2BBAR8PB4Sg%3D%3D\"}]}\r\ncf-ray: 9b80b48f6aae712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2574,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"8d591f68a09077fcafa0b05ae40473e4","sha1":"add27caff55e10c8205e31004ecabd1a5a6cf0df","sha256":"9b427e6c8f08fcda3b6057a2185b63759c319e3f83b40ff8d0871baf34371544","sha512":"883433f2368e70edc09e30d0eec94507c5ee61bd8bc4051145c29a6132650e63d19ff72572219ebe238f1cf294431bd48e014ddd4b66b3fe0f89636257b953d5","ssdeep":"","tlshash":"9d512abfeac30d80e79941629665c4bcd7c26e10e4c33f67506abb22a0b0450f02c9e3","first_seen":"2024-12-06T22:27:57.09293Z","last_seen":"2026-07-17T09:57:30.981761Z","times_seen":157,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__165.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__165.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2519\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FeFRxN5nkaTj%2B4F6t3nEFl%2FAup7Pdm2geHYLrJ15Yx%2BedBRdMs0P3aCRJVCicq3JI9EHwy97N2c223elcChFdMN4cVVb08qnhw%3D%3D\"}]}\r\ncf-ray: 9b80b48ffae0712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2519,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"adf7ea7ba32b52d9d1d351900e3acadd","sha1":"8c7d2d33fac5ee6c836ab2f6f9fd9e78d8ee3d14","sha256":"9a2498779f3d889c8e2260202d6186a1124cd743c0a3bb2c8cf1e64d66f59705","sha512":"21b7aacbdfa49415ab52660015328593646af45d26161956b9f3a14e096cb80c58d2e15306e134426ae922d8d6f85465e281cbcb0a9fcf8a4d4c8b025f6ca255","ssdeep":"","tlshash":"98511b83f4fbcf7788750a0b0a4a120103577d259275899bde857c9722fe0bfa25c015","first_seen":"2024-12-06T22:27:57.096118Z","last_seen":"2026-07-17T09:57:30.970028Z","times_seen":157,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/js/toastr.js","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:28.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/js/toastr.js HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/javascript;charset=UTF-8\r\npriority: u=3,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:28 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=plBqAWGbIsLvzPBDoBh%2FOGGaMkDAd7Co86pU6V25eJw4Q8yNsnalI%2Fs4jLv9dZJHdyGZFEiDT0uRh4%2FbJslQsNk1vqrBlCkqKw%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9b80b486d9c6712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24855,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (327), with CRLF line terminators","md5":"a02ccbbcf3073559037a62af82bfdd24","sha1":"4d5f7b3f3f280698aa26b10e1d7c6dd5708d64aa","sha256":"27f959b17ddfe77ca20a31b9950ebc3fbe8030c3ac376eec7355b2d7925e364c","sha512":"35acaadcc160935be74fb1492b1b0ca205aed6b61d8bd8edf4e26254c7772da02941ec53de59e3d66ce1695cc12de4ed9cf32b750e04659c7c0e2521b4697f22","ssdeep":"192:JJZWM9gzM3t3QrpJvxl6Xs8cZ9tID6CqQwPjOoOg6yS21tl3jWq5T14:JY45Kk7cZDItqLNO6S21tNA","tlshash":"deb20a08695263654cb7737c8aab800cfb769323458a96067dbc92d82f70714d6f6fec","first_seen":"2023-07-07T00:40:59Z","last_seen":"2026-08-01T13:57:27.113686Z","times_seen":964,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__134.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__134.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2532\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6B9KxeA%2F%2F9QG9N66h1oNIQqjFoj71n%2BCPoD7km2PwGoHg6OV63B6%2BTnbzXymuRxGxuR6iTIqm7V3mxcAdc0m7HtKbi72qBWmyA%3D%3D\"}]}\r\ncf-ray: 9b80b48faac0712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2532,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"e355727213ea7aefac63c70f888c3b7c","sha1":"3d44fcdad9ff14633cbe99693dc2739778fe7ad9","sha256":"2a16100972b15829065588b0908adf16b26d0994a93e1445d56496ec2378da69","sha512":"ea991dcfc07fb0003aba9bd186c2eddf709d588b0af3575f55d49936c644e64e02194ffab6e9e3911107a84716a4818d4f7ca03b1972e13dec2bd31c6f6665ef","ssdeep":"","tlshash":"e1513b85259e444682a348d94c931afc7e19cee3453ed80302717cd4e4f273e12b63af","first_seen":"2024-12-06T22:27:57.085308Z","last_seen":"2026-07-17T09:57:30.97406Z","times_seen":157,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/img/coins/XRP.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:28.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/img/coins/XRP.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:28 GMT\r\ncontent-length: 953\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2ruYHXg5DgA1o3YKTEvd1y2tBhpLPuSVhByfHm8uwQodzHSBLQhfHkgvDT5AyRboCMp3RATbeCcaF0OFcAeO2KOoG1I4twRTFQ%3D%3D\"}]}\r\ncf-ray: 9b80b486c9bd712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":953,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"92f9d15be55070c0f267e7b9609211da","sha1":"d25e8395244487e169b16cb9508e434ea1ea61dd","sha256":"0e7d0965ce52308846834de79ad8305ea31542444a1ba54888843fc0214418f4","sha512":"d39d1087b689cf8f8d543a282dfc802e0e996ddbdb0553b7376958b0be63dd8f6230451cc3cd3df7d63748ab2165e8e82433c35d4131a7a2c137445ecfeee95b","ssdeep":"","tlshash":"e91188a14b659e01632bcd7fcb2a0142b20b22efb465d716a88f533d0795d871059f85","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-08-01T18:09:33.18851Z","times_seen":1619,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youzhongguang.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youzhongguang.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1508\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V%2FSh5QtZOKGqRIxFUc9%2FnGBbmhn%2BAay8n9zJ3vaUDa74h6Cbauo%2By8Ziunh0J3dQnbhmPePYrJHgWuJHaqumLW3Yp6iVcJjWBg%3D%3D\"}]}\r\ncf-ray: 9b80b48d1a08712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1508,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 144 x 88, 8-bit colormap, non-interlaced","md5":"b886d5f3b6e31dd10a4738257f041676","sha1":"924ac9e498ea06ad7c1275f22176b249817177b6","sha256":"142e765e5ceccc6f1b2924583bb2fec03f9b4ee5d0f2063eb0ff540d51b3d171","sha512":"2586342f97a806c6a712a21bbb1f55b57661dd04d17965984a294049bca39d28b6f2bb82b2b9297724b1bce3532f5a7ae7b2dee5f5a8f7fe64a50c09d1ad3c7b","ssdeep":"","tlshash":"8c31d85292422b268a8f5ad07d92dab581bb0a4927c113c3ed30c8935ef7b897b458c2","first_seen":"2024-12-06T22:27:57.063897Z","last_seen":"2026-07-17T09:57:30.967962Z","times_seen":168,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/css/root.css?v=3","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:28.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/css/root.css?v=3 HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/css;charset=UTF-8\r\npriority: u=2,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:28 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BAvprmC6sqbYo8goblhXWdIwVKdXgnkg5Q3ol9nc8z4emjFFImItxzgmPuLgdWyXzWRunAGmjgP1M3mju1Wchqa%2FTDBV%2Fm7x5w%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9b80b486b9ad712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1468667,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (11070), with CRLF line terminators","md5":"0fc364e15ee6f32151377a63b6540318","sha1":"58f54df394df10de715911acbb23e7452e9be5cb","sha256":"0fb3decbe5d15ea34879201f3f0019e294dec46a6986c6409bfc2344c604c016","sha512":"c67df6edaa9d10907d9526477b43cd54c1ada5f90c42f4947511f8cbc034ca7fd1219a28fb05d8c4928704eab3b19e24b17db751547324b7718fdc11da54e892","ssdeep":"12288:mMlXqMlJMlXqMlXOMlX6MlaMl9lQbjM9MleMl7MlUMlkOMlJMlMMleMlX7MlXfMw:L","tlshash":"922583b7e546140341739a7b9bd3a378db7c40278b0160a639eeb5448ff42958b93e8f","first_seen":"2025-09-12T01:55:01.880517Z","last_seen":"2026-04-06T12:02:02.518581Z","times_seen":19,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":172,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=BTCUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.164.248.171","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 13 Dec 2024 00:00:00 GMT","end":"Tue, 13 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:5E:B6:FE:3E:A9:63:38:16:AB:57:DA:E0:4F:51:4B:FA:2B:49:43","sha256":"AC:E7:4C:8F:D2:FB:EB:5E:41:DF:BA:9F:C5:FA:44:FB:25:36:FD:A5:BF:21:D1:F5:3B:AF:7D:14:A3:D8:FF:37"}}},"request":{"raw":"GET /api/v3/klines?symbol=BTCUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://puffdex.com/\r\nOrigin: https://puffdex.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1425\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 5792ff5c-0cb2-44fa-b43f-4b38512bf7aa\r\nx-mbx-used-weight: 2\r\nx-mbx-used-weight-1m: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 784f462b4ee4e847ccfe44db65f51a9c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: wPH6IQnd-Mi3_Qh_fR6scP6zVACwTZgNQ4SewPjVXbQFJG8rmxbzlg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4295,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"790f4e6a5115e2fa579dbd2c0ecd3f2b","sha1":"1be8ccfedc51d00a7a2ee84ea4bb50c156b46332","sha256":"bc23a77fc4501d8d4fd7b9941c1b298c450a62faed2adb84556e1c374c92adb2","sha512":"f7b72b1fd7b4568e9b560fdbe214b74e3915f671356f228b9c449011328898f617bcc8df5b6e7f79e8a81532b91741e30dc5c7ca57a082d5fe3d4b47f5e58e3c","ssdeep":"96:6QDbu54fCJ8Wtr2RNQjAbytzJeULegl5IoS5TvIcigzZJsbmbFFVpD7:JZqJ8cAWcbiJH1l5IoiIchzZJimbfVpn","tlshash":"c8918f52134897b4fa39881f2bd7b9d149ab701addce4cf0edd326bb08e15b16a18306","first_seen":"2026-01-03T07:16:21.812239Z","last_seen":"2026-01-03T07:16:21.812239Z","times_seen":1,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__12.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__12.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1127\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z7teltIpR71eywh2h68QGP73T03jqSbrYxL4MlR6dIO5sSXrr2QCKp1H6PhhT%2BTlApe1l3LVT57a0ELLrCZrCXRir9WYIus3Rg%3D%3D\"}]}\r\ncf-ray: 9b80b48d7a1a712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1127,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"661559d919ea7aef1f7887ce598376b2","sha1":"c28b02ecb24b5484ddafbe5837e840493226545f","sha256":"b8d9cde6830d09df938f59aa13e88d5f7f0a75c658e7a0c91be97a39dfb9b779","sha512":"c4645565d6f44307387474758a191706ea61a91965554cf934d7506521c67267bc2f86b7f7a557a64c839151a0935042e071bbf9398236e0ae3fa443e7342756","ssdeep":"","tlshash":"1f2194ab87b491adb66851ec34b3ee61d80f6d100d25136f3b87ba88647a0976d42682","first_seen":"2024-12-06T22:27:57.071009Z","last_seen":"2026-07-17T09:57:30.976976Z","times_seen":157,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__79.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__79.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1129\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZBnTDWjS8aVYBclaAxkVbz6D43u25HgvcpRc%2FQGwBZl8zMU2ZxLbC8RD1mhF4bvJnKpPaaVCF1lt12BioJw%2Fr8xUqGjYHy3oaw%3D%3D\"}]}\r\ncf-ray: 9b80b48eba88712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1129,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"3cbff16023a3738f74fa0f3c620ee35d","sha1":"e4cde715e08c03d9178230a74b666ddb6acd8a81","sha256":"68245287bc0046e97ca7010a57ca6845265b7783db419585cd865e7e5b65f0fa","sha512":"86f1063d01cad2508a7938022a6c1cd2256cb81f4fb0b033c768211a3683e902448a2175ea35f66740c45cf0694ce539027b008d8892f44ad0edc50d12cd06c8","ssdeep":"","tlshash":"272165aa734dac789b882753a348562c96994d292a610623d5e77c0f59f720e8d90750","first_seen":"2024-12-06T22:27:57.064878Z","last_seen":"2026-07-17T09:57:30.95355Z","times_seen":157,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__142.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__142.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2574\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q0D%2Fg3Iaa8TjdzysEH2GYwlD2mgVrup%2FbF%2BJYBFsloX9hsoGusIYHvA4aHWJOGXhuue%2BzO2ZGDQBcItYadIHI9nnjBynh2w%2BnQ%3D%3D\"}]}\r\ncf-ray: 9b80b48fbac8712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2574,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"8d591f68a09077fcafa0b05ae40473e4","sha1":"add27caff55e10c8205e31004ecabd1a5a6cf0df","sha256":"9b427e6c8f08fcda3b6057a2185b63759c319e3f83b40ff8d0871baf34371544","sha512":"883433f2368e70edc09e30d0eec94507c5ee61bd8bc4051145c29a6132650e63d19ff72572219ebe238f1cf294431bd48e014ddd4b66b3fe0f89636257b953d5","ssdeep":"","tlshash":"9d512abfeac30d80e79941629665c4bcd7c26e10e4c33f67506abb22a0b0450f02c9e3","first_seen":"2024-12-06T22:27:57.09293Z","last_seen":"2026-07-17T09:57:30.981761Z","times_seen":157,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__170.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__170.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2521\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gZZCuNoccedWb12NeRAu7xMiNy99HcRvafBDJwMRVgvAOdIyZZhIysXmeNm8Jp3F1l7PxCnif3rBCwSanqWqPHxfZNX9G852Hg%3D%3D\"}]}\r\ncf-ray: 9b80b4900ae5712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2521,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"67e87a046547d37d3d6ff7c1457d99a0","sha1":"912d5edfe351304cd868fa2a6cf82c8a766c345d","sha256":"d475374d44a909777d599d557b1f386d521c6611d21c396beb1c43d6606274d4","sha512":"4c4b842b334c7d62b3516652ab86fc89633f087139e4bc55f9a65ee5b3fe4fadb414c8279a42235ade342587bb0b1be84d1dcf0d6c1c7b578dcfe06e4e1a529b","ssdeep":"","tlshash":"74510ae24e5da83aaf4f601dc9ce9a106a631c3c2a8131595ce8be1dd6b2e224749537","first_seen":"2024-12-06T22:27:57.086375Z","last_seen":"2026-07-17T09:57:30.943107Z","times_seen":157,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:28.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:40 GMT","end":"Wed, 25 Feb 2026 15:49:39 GMT"},"fingerprint":{"sha1":"A1:49:37:FE:E0:3E:26:88:A3:64:37:DC:04:D7:8D:D1:D3:F3:91:75","sha256":"BB:61:22:1A:6C:67:5D:C0:C8:A6:73:93:B9:53:82:98:95:54:B5:52:8B:33:FC:08:58:01:D2:3B:FF:E6:35:12"}}},"request":{"raw":"GET /gtag/js?id= HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\nexpires: Sat, 03 Jan 2026 07:15:29 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 03 Jan 2026 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 74343\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":200838,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3248)","md5":"1fe14c193af13e31363ece33d89f7391","sha1":"eeff30620bd13addc41065981419206ffa1e696a","sha256":"e397133834a6a1f5bd97c73c159623b85d04b2e7dffd37634db1fef9720ca07a","sha512":"4893ab398df30699746d4e8e502e35de44809076f0a99e84eef9170d884957c9b5f50dff0019cca7d89f9137a68a14c6c43edc1f56ab4a560d1c07d79377236c","ssdeep":"3072:ElsVUDrPYH0/ivPUawWprNWG962FK42DIZGTzqd5NlDrwlERJJ4TvbsSftvy:lUfwLvPUspQ42NTzqdZeERJJ4TvgSfty","tlshash":"f11418c9b7ca7066439375bc502f014bb17a7992f84cd8d0e182d8d42e74aaa12b7f7d","first_seen":"2026-01-02T08:18:11.595588Z","last_seen":"2026-01-03T07:16:21.813123Z","times_seen":39,"resource_available":true,"data":null}},"time_used":360,"timings":{"blocked":146,"dns":8,"connect":15,"send":0,"wait":35,"receive":28,"ssl":125},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__4.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__4.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1128\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=okHTHzM5jt6G9IJIHZxf1MoF79rRWLpRtDimVO3GAd%2FHnvO0WafsvS8DRR%2FmsJmQK%2FzfYAGDFKn0j6HmUczfnzbvkJpH8RqAbQ%3D%3D\"}]}\r\ncf-ray: 9b80b48d4a12712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1128,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"8d4530793f2161abdb48afd9212910a7","sha1":"55359cf1e4ede8bf209d28697edb82a16868f8e6","sha256":"2472bf51de60d02b6c6e7d85946feb178260ea213315de58e2e6c3fd141fc882","sha512":"4da06101e1c46df21142a7754094b40d610f8f065cf686463f660e68949cecafb199e4f3d9de899068ffb15d7820b3c71f1c67463bbb31cb52d6c7423e789bfa","ssdeep":"","tlshash":"9721c4c10ba00578c08e78b098df1d64a528ad1b2e23de7ad801f32867bb1088fe42b0","first_seen":"2024-12-06T22:27:57.078299Z","last_seen":"2026-07-17T09:57:30.954499Z","times_seen":157,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__75.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__75.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1117\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YOp9ga61yUqtjzBUq6ZWGT1vuR8bWlMeJ3pJVYgrbw%2BCeV1Nq4w7sxvBdsU%2Bdbscsnas6Kbn1OOFaLCXq384VvYmR90CsicWtA%3D%3D\"}]}\r\ncf-ray: 9b80b48eaa84712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1117,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"397412fe707f80f1106f544f25c841ed","sha1":"1ff59de33d9785f6ef75bddf201453eebc27c9a3","sha256":"2fb75535b7a097b9b71606c92f237955fb81e90530238a9b51548cf17833506d","sha512":"434099b41bd6f0a75c6d5d51da7f6d9d64fe390008911884bad7a36c9e211e6c7819760cd6807bafbfb9ad784cdc4aa2b45c24a7a9c163b8220476baabcf5730","ssdeep":"","tlshash":"fa2165e72c4c9ff8c4d421f14aee929a87b15f91bc005157d8a3f492047248388b3291","first_seen":"2024-12-06T22:27:57.074226Z","last_seen":"2026-07-17T09:57:30.941854Z","times_seen":157,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106_.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106_.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2605\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YXqbQHTq6dSnzB%2FUZKRkrqu4ErVP%2FbBx9FehQsqsdLsTSoH0b4REBtpF6I5WhAGsn524C37f%2BuPztfgVsLITtRrbYROBTN%2F2Ww%3D%3D\"}]}\r\ncf-ray: 9b80b48f3aa2712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2605,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"b28e49aac00b6054373887a863314cac","sha1":"e8d65a43411cc569823097105a78b44e238dff8a","sha256":"faa834f50cdf37acf578c2c4f2e9df776e20978cfa419d5315a9b5e23b5c4f74","sha512":"8524d75aa0e1234bfce1305b1a3c5bf51638bba864cb1bd4c1003030e867176a379673ea81a054c413749db2bb4c1f5c056dc81a1e91495f66cbd0d2a7da38ef","ssdeep":"","tlshash":"ca512b96f27184c9e7a57643a7e54003a0263c964454489caecabf915f7f05a5847b06","first_seen":"2024-12-06T22:27:57.087555Z","last_seen":"2026-07-17T09:57:30.979222Z","times_seen":157,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__148.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__148.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2543\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F%2BuZeOUWjUIvdQOGQ%2FjJC7D0Vs%2BIUui%2B2XDDn2CEseSgDlpJqbqlv7ia8ek6ZzBY8z%2BkxOLxjKG1skY1RKcbvgOe0YyHD1oCVw%3D%3D\"}]}\r\ncf-ray: 9b80b48fcacf712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2543,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"442debe82512cd5550528ce377bd5182","sha1":"92600a508ed36fcb763f6999b0fec6bf7fda6818","sha256":"619351a77b896faeb26aedc24c3c4a6b0ddf900f2be0b5fa56496fc7f1275586","sha512":"c9b5cb481d415c114f62a2c4d4b27dd27790a462df25a1550717ae9b1bcdd93676478f01bd672be56919fb0aeab91f5deedf01559af93b8abb61bd794a5a8e40","ssdeep":"","tlshash":"cc513a16de6474f959d86632a53305a01380df11b98bb550d30aba877bb3405f86451c","first_seen":"2024-12-06T22:27:57.093947Z","last_seen":"2026-07-17T09:57:30.950573Z","times_seen":157,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__156.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__156.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2605\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Obxvd2UrO5pKOBPOgMmrobrcJsut6nKE3Q3Yt7insUUVC9u8U6Br9Jo0caQD3qsuLBuKsB%2BbbrmYbcERnw76RUQHIuHSh2i3FA%3D%3D\"}]}\r\ncf-ray: 9b80b48fead7712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2605,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"b28e49aac00b6054373887a863314cac","sha1":"e8d65a43411cc569823097105a78b44e238dff8a","sha256":"faa834f50cdf37acf578c2c4f2e9df776e20978cfa419d5315a9b5e23b5c4f74","sha512":"8524d75aa0e1234bfce1305b1a3c5bf51638bba864cb1bd4c1003030e867176a379673ea81a054c413749db2bb4c1f5c056dc81a1e91495f66cbd0d2a7da38ef","ssdeep":"","tlshash":"ca512b96f27184c9e7a57643a7e54003a0263c964454489caecabf915f7f05a5847b06","first_seen":"2024-12-06T22:27:57.087555Z","last_seen":"2026-07-17T09:57:30.979222Z","times_seen":157,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__171.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__171.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2379\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7aFUHR8W8IWIVqH756HUXPF2wtk3XjHXzd9OmTZbw3ia%2BHj81MWKIrUWNb79txg3mntzya9uQp86cmoupxBRc9guynWCuqF%2BRw%3D%3D\"}]}\r\ncf-ray: 9b80b4900ae6712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2379,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"fd7aa9cb135ed0372c742822ba53ae06","sha1":"1da731da9d7b334674d5d811648acfe55c3e2053","sha256":"e8b076bd916db67db55245e7a8de004cc840ff1106c27a8dbe54f46555e27697","sha512":"dd6f7bae5d834f2ad3e36a9be7c287b2f113b7d21741936f8913cd3ebb4f61030a29087c1474641520af1e9d0e0ca337d9e76caa94ed63d73e0ae6b1345c222d","ssdeep":"","tlshash":"404119a3d1117d13ee0c746b8e19d141433a4e43a923b99d3fa87e199e710856a72681","first_seen":"2024-12-06T22:27:57.098149Z","last_seen":"2026-07-17T09:57:30.962501Z","times_seen":157,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/img/coins/TRX.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:28.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/img/coins/TRX.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:28 GMT\r\ncontent-length: 1315\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ofd9KEWiPazD3TGSynDS87YhsaTc%2BJIo5ezKH1pbcKQBxM7hu0yP%2FrwL7x28o6ot%2F%2BoqGTgxAJLaJxG4c15iAiXF7qF9jO2vQw%3D%3D\"}]}\r\ncf-ray: 9b80b486c9be712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1315,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"79cbcbdfcc32e9ed14054fb9f306d76b","sha1":"d0fe46ecc0664340d7027500d23cb6ee7b8de4f6","sha256":"ac3824adc2a37e25d5e63fe30c4de623c0985730450f3e12b58bcc58677d107d","sha512":"98eb00b634f4214e5d546aff3c51c6e889a337ed9e9a59d96b2dc189bb822352d01d2d53e02db22255c2c3f44836ce30c52c8e22199eca10c8e431d17560cedd","ssdeep":"","tlshash":"1f21f8b87b5d652cc209c890e8364aa77098f9ae0512041e3830ec3dfee098be2567c3","first_seen":"2023-05-04T03:36:11Z","last_seen":"2026-08-01T18:09:33.211861Z","times_seen":1106,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/img/mobiles.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:28.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/img/mobiles.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/assets/css/root.css?v=3\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:28 GMT\r\ncontent-length: 369880\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0aI7Xh%2BKEB8VAtlRH6V5wP5%2B9%2FaDqWgiodWkUBmakOaBZzEdWRPrsFR%2FO56%2F2AoYhxxGlcynKZVAIs1VECb4HapSmEpTFlUMwQ%3D%3D\"}]}\r\ncf-ray: 9b80b48999e4712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":369880,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 1734 x 864, 8-bit/color RGBA, non-interlaced","md5":"3da829ea84dd8a69db31b0af1054be29","sha1":"5d42e3a3fe4da5142aad727fe035c40188271cbe","sha256":"3d5b2e209afbe226941a349ab2b457dee6b36aeb368ba94c99bf0d540c23ea93","sha512":"f967714c6306050d8dd3fd07d7b0681ea9ff8fa6d8537b7757c873d712cf11ef69fc340f5ae4f4b9d9e43fb1e6df7ff7e55825d3b94851275f1763bdd1002f05","ssdeep":"6144:NByLmVunDtUOnhXZGXWEPqj2LAXtjug/Xfrxaw2bmZu1LNDbEr5RgyGWhEncX7sM:byM6D1IX3qjGYuMfrxbXZuRWr5Rgdtnq","tlshash":"0e74234e59aac7afdd5371b67730cb9f7b7a27012c08c8090fb69803a68a765761cd13","first_seen":"2024-12-06T22:27:57.036061Z","last_seen":"2026-07-17T09:57:30.952668Z","times_seen":178,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":120,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/huangdian.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/huangdian.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 444\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7VIzVEodu7GI7EPpPItETE2NdGjtSB%2B1cpb0WvMjBxkLz47f%2FM3MvKTjXqWJHKpbTfWhd%2B8QAwIs2KAFJDVNHQG52OkgAlj0ug%3D%3D\"}]}\r\ncf-ray: 9b80b48c69f2712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":444,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"cc0e871a6a3c373cdf50081932a09b84","sha1":"11c55ba981764fb7d132b015945c6a4dc81976ba","sha256":"62c26f0576efc99720f7ed6f2da6eeb9eb2f264882c92d177755cb2997c56911","sha512":"ee4bf0f055466e2a3d3eabb2c621d9a4c52fef6d692b5b260a59fa19395a37c09144064340073f69e81844e8e37ff929c582c01ee3fed4822538009e16f64db0","ssdeep":"","tlshash":"6cf0dc8682c280def66740a44a1c540d11b3f8d5853d0e58ba5cd4ab1dfca08b2a960b","first_seen":"2024-12-06T22:27:57.039383Z","last_seen":"2026-07-17T09:57:30.961395Z","times_seen":168,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/dundi.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/dundi.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 7244\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vZHw99c0fw3kHSlAnRcVRR%2B5fOj7mVTJMZGnb4UVm0n5MyTSBz%2FkZUEz%2Fkx0usiqPA4s%2B9tY8k7ZzLRmNoHneyWwZcpqfpXEqg%3D%3D\"}]}\r\ncf-ray: 9b80b48cb9fd712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7244,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 332 x 417, 8-bit colormap, non-interlaced","md5":"3d7c48c3a8bf8921455b31e95715b568","sha1":"271ea3f8da2b2456b9f5e2d60a97de720f4b81d5","sha256":"3b42c3fa696ebebd10727ce85eca02a29bed7f2ca7d84a14c3affcedbf1214b1","sha512":"4250a2ea294bc157974aa7ed38c3f8e339cd3241d32f826321b857b8485da511e2308e02990460468edb100fe84c952eb1c5d1e1670c9c43b6f155092a1c5575","ssdeep":"192:4DUGW+8HStLcmVutTBoOYzz5Pf+fLbpSO/h:qA+82wautWhzdfSLkKh","tlshash":"ebe18e69490bbc748a534da1191f7ad6f02d9ae03f3f97d2a240a0a4a5170f6cff190e","first_seen":"2024-12-06T22:27:57.047883Z","last_seen":"2026-07-17T09:57:30.981279Z","times_seen":168,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__133.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__133.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2452\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oZdhOuA7RVIS0cMnNG3AZxVA9M6x2sNCy0zFX71ifPvOPUvRnqjGXyme3dAWTUoyNhDCEntq9z0mPL13VsA%2Bp9iD6utnwoOoWA%3D%3D\"}]}\r\ncf-ray: 9b80b48f9abf712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2452,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"2172cc0521a905b8a287030e0c6a4d86","sha1":"89aba1cad3b13ca2e4906e37d846f83adb6a0c0d","sha256":"e1ba04dc4d4e4a772e0deffd14e24d2653ed0800b3c02bac58fbbc570abcba23","sha512":"5fc1830df97b2087c97d45182fb45302d406a53fee1dfa11b1a3d0aa848ca277bd2e41b094d9f72f7aa49918910d518e0c9365a50ebe5081596161b14fc8842d","ssdeep":"","tlshash":"43516ddd58140a23366649ac9b99e3f1320a7fe95e0bd0043467f2be8f728cd01db504","first_seen":"2024-12-06T22:27:57.088699Z","last_seen":"2026-07-17T09:57:30.94974Z","times_seen":157,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/img/why-we-2.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:28.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/img/why-we-2.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:28 GMT\r\ncontent-length: 11063\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O848S4xqXejTRLt4k8KC5kncFoVAWFauX5YK31nJP6gR0e2LjCHAVjRreC%2BxdZgX9cBEfGOZfCDfQYBYwucH3J8%2Fc%2FbWakt4Xg%3D%3D\"}]}\r\ncf-ray: 9b80b486c9bf712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11063,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 436 x 378, 8-bit colormap, non-interlaced","md5":"708c0dfea5f5feaed5501b01c1c0f387","sha1":"0658f5cc13ae4f972913e0066986a3e0b5d472d4","sha256":"53332df3792420c1a7dfd18854330dc2033f1dd49f3d3659f315263d3b3162d8","sha512":"62e5c13672221ef5bdfeeef22da135915d905a288b576ae038b12297abd9ae02616a5bee9abd01db53d73ad4a277a64fd28a5561bd346cbd276fc52cd4ee3015","ssdeep":"192:6SmLsOmhczgfRDepWKH0VyqqvWT5olZx/27acRBjstxJCgtAsxBHjuf/Ia6S:16mh7f+WKSqvWTqlLGjszQjsHHy7","tlshash":"0532afb0591530410d9a7487e9b6e11f674b2e8c788a27073a4d7c6bed3b0a23f1ad0c","first_seen":"2024-12-06T22:27:57.020644Z","last_seen":"2026-07-17T09:57:30.947831Z","times_seen":179,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/img/chat.svg","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:28.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/img/chat.svg HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:28 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pcx5c9UyvieKSKHYRLM064O5cLLU4XzXj7SCtZZpuTGDjkeIkAoHg7ISCadlCSRKYpdXtt8g08NqcYpfh%2FI%2Fmy46HmgjjaoPLw%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9b80b486d9c1712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1143,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"856a385d230e560529fe4f70a442cea9","sha1":"c9669d3c47705149e26efd24e0d3ed738fc03069","sha256":"c2b05ce3c22fd9b07bc627c2ace70217eb0e3dc2183d9d4aa58bd482dcd8d7d5","sha512":"10308be3d10aa5ea28b1c8a026b6008c530aea11658680ca9b54af0e06e4f7e7d7b1831326d13cc915f83bbc4d1e8b5e67e630a42b8bb898c713875ee3fb2959","ssdeep":"","tlshash":"fd2168e66fec96a6d35e833063f41fa62b4730bdb6408d5f8680dfb0db051aa4144ad8","first_seen":"2025-02-15T17:58:10.491189Z","last_seen":"2026-08-01T13:57:27.109426Z","times_seen":518,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:28.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://puffdex.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 19:22:36 GMT\r\nexpires: Wed, 30 Dec 2026 19:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 301972\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-01T18:55:04.597189Z","times_seen":952218,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":148,"dns":0,"connect":9,"send":0,"wait":11,"receive":6,"ssl":140},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=ETHUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.164.248.171","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 13 Dec 2024 00:00:00 GMT","end":"Tue, 13 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:5E:B6:FE:3E:A9:63:38:16:AB:57:DA:E0:4F:51:4B:FA:2B:49:43","sha256":"AC:E7:4C:8F:D2:FB:EB:5E:41:DF:BA:9F:C5:FA:44:FB:25:36:FD:A5:BF:21:D1:F5:3B:AF:7D:14:A3:D8:FF:37"}}},"request":{"raw":"GET /api/v3/klines?symbol=ETHUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://puffdex.com/\r\nOrigin: https://puffdex.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1370\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 98586eb7-f8ea-4215-a755-510263a52c0b\r\nx-mbx-used-weight: 12\r\nx-mbx-used-weight-1m: 12\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 784f462b4ee4e847ccfe44db65f51a9c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: yanCWdmX4CrpG5DalrGTZA2DxfFXMEVziFtO7aPFlKUsA4veYyG0Yw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4245,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"a756089db122681a509e8c33c9913110","sha1":"a4dc9313bba1414f6be564681ed1aed353015d9e","sha256":"a435a18662bf7d1ba606c3998f3bb43ea9915eacad2425e5c9d25528fe4882fd","sha512":"2038b13666e7de9a29d6ea706d72334c752a6b8ca80ba0b33a5014d10ea4a0890f60646f1903aaee2a1f6a4c854452210dca05e5f125badae50122f8eaeac562","ssdeep":"96:Pl0QLTIqWuNUzsG+fVpQvE6ZX4lHs1nOUPJK8zg+1Iy7gzQ:POkTIqbNo9+fVpEE6p4+H5D","tlshash":"f4919a4313898260fa3c8c0a3782f86d585a306bfeca5cd099f222b35cf16796b98715","first_seen":"2026-01-03T07:16:21.804101Z","last_seen":"2026-01-03T07:16:21.804101Z","times_seen":1,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zhongtai.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zhongtai.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 25955\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HETUTRAK1ASzDDDeQ%2Bk4LMNdE%2Fo%2Bl85QIMkrPPNsaOfzwcugGAdStwyhusj144PvWBPVM6UTfus6duFUtxvbuREGcYzLAuiCxw%3D%3D\"}]}\r\ncf-ray: 9b80b48d1a0a712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25955,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 456 x 388, 8-bit colormap, non-interlaced","md5":"6601552cdb4ce9b6f34c2e2d28639179","sha1":"f9f8743306c57bae37b5bfd0a141f1384c73baae","sha256":"adcd90b13f160f8a0d4371e8512b73c370ff8623c8a3069efe159a50c03586c6","sha512":"34612da3b6834f927aeb6fbbd5656251a494fcb9cc5665c987edf9d8ad1cb5832b11e8df13d4efc9473da273759b0b3b2cf131209ca43a51c05e409c74c3504e","ssdeep":"768:W6umfBxtuWaGw6pcgRGWEDS4r6Wu3H47YMCb8YccFGW:hHBxkuwu1RGWf8x7W","tlshash":"9ac2e0233521893e5f32315f4875236f927bfda48241a248c707ed9969f79b0b4315ee","first_seen":"2024-12-06T22:27:57.067016Z","last_seen":"2026-07-17T09:57:30.984586Z","times_seen":168,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__13.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__13.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1165\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GL6ZXILfWCLkxjpASgUtEJCfIXM3PxhpMhfA05IZSVgAWOxpdQdST0tqCBe06g3N7AYlqOujTTqNwHgAayouE8MjlZQVxC4LLA%3D%3D\"}]}\r\ncf-ray: 9b80b48d7a1b712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1165,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"50333973529f140a38862b5e59223c23","sha1":"ca772352821ce63cc8d52b58b4dff1bcbe92b6d6","sha256":"ae37bc4c761654d71faa919cdb2bcc500d39f14f3747c2124a67f7eafe4116e3","sha512":"93152b60013a15a74c510b75bf4c4d11f27cab49234bb7980c9bb245935673d6adc119cf598a648c29ba5bfad9e4cf730988f224e352cab3c65728fe9318bfe8","ssdeep":"","tlshash":"9121a5f530731d399a089789f51c68b85d126f08ae9496164444f8f4f8f6b49e048ab2","first_seen":"2024-12-06T22:27:57.061496Z","last_seen":"2026-07-17T09:57:30.946495Z","times_seen":157,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__54.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__54.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1095\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0x3%2FZMhqjAtfiALG%2F7C3Ud9CALSbgz0iyo0flDW5ojSOLWnGaCix9IrrlXQcP%2BgOOxBkX5sa%2BOq5XyXULZGr3ptR%2BqclbT%2BdoQ%3D%3D\"}]}\r\ncf-ray: 9b80b48e4a6b712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1095,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"3b3e2ccbff9209b2012b53b091045763","sha1":"7d8145d03947788abc4689ac1ee24ca8a364b9ab","sha256":"cd7ab1ce9e85c923fd9ce8f2f64a29d7ef7849a6573e2f365f6f080ba41e76a6","sha512":"87d37e4db8e5f0f300a054b2967078113ee1e2715b4bc0b2711fdaf47b6272cdab9d3f4f7cbde780cfbd98f9b03f5e0f98a6c55b770fe8188f35125121a0e927","ssdeep":"","tlshash":"eb11c4c4161bbfb6c44a571784228bc9cff28c6cf004c00b46307c1978f62dae93e482","first_seen":"2024-12-06T22:27:57.065973Z","last_seen":"2026-07-17T09:57:30.968541Z","times_seen":157,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__147.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__147.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2532\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GFTeWYt2lHso%2F9w3Nk3xSIWJTQ6P4EUP4uFL3o16Cg1fGZmxaasxEvpXzKm9B%2F1tbF44yVJhUe3qELWc9qXExFJRgqoKN%2B7FkA%3D%3D\"}]}\r\ncf-ray: 9b80b48fcace712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2532,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"e355727213ea7aefac63c70f888c3b7c","sha1":"3d44fcdad9ff14633cbe99693dc2739778fe7ad9","sha256":"2a16100972b15829065588b0908adf16b26d0994a93e1445d56496ec2378da69","sha512":"ea991dcfc07fb0003aba9bd186c2eddf709d588b0af3575f55d49936c644e64e02194ffab6e9e3911107a84716a4818d4f7ca03b1972e13dec2bd31c6f6665ef","ssdeep":"","tlshash":"e1513b85259e444682a348d94c931afc7e19cee3453ed80302717cd4e4f273e12b63af","first_seen":"2024-12-06T22:27:57.085308Z","last_seen":"2026-07-17T09:57:30.97406Z","times_seen":157,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__5.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__5.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1175\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h7HDqVMl1JhksmzslmX6HKPslQvqJscDmZJpFJChDY8vXXmB3e8EC8OCqZmbvjolR9EAU09lB4xMtl4QpMCkSURFwG2pQ%2FsiIw%3D%3D\"}]}\r\ncf-ray: 9b80b48d4a13712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1175,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"564765291e71e2e3a6cc543a40b65548","sha1":"de712ea89fa95bb9c9994e96f804b1676673ed5a","sha256":"2869e4c8912785059529abd6817339639f5f3398fa7fc37628e37d1890467c2b","sha512":"9d030870449923e6d22f904d1d3194ad331e30daabca95a92c96295595b0f51ab3d71e5b11a020a29254a8971dfcd4c1fe6bde33bc4aaca7c3dac279d9549f99","ssdeep":"","tlshash":"552175474751446858949b2d83095ad2ec030ee6bd53530a805bb6197239e3f4678da0","first_seen":"2024-12-06T22:27:57.076211Z","last_seen":"2026-07-17T09:57:30.989044Z","times_seen":157,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__42.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__42.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1093\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gkyXIF1KjkGkO3wuYHA8FvlLfRL89aPXTd7OU8qURdEVuvpwcJxCaUtc9bGwOiywlajzNfGLMV5e%2BnSz07EXUccIpMSY3zPkNQ%3D%3D\"}]}\r\ncf-ray: 9b80b48e1a4d712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1093,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"2083e1ff8b48312098bbd8247f3c42f0","sha1":"7d958c8a1c3ef4aa2aedf6b15759532f081c8f6b","sha256":"01a6dbc53976398d47220bab14117b4f95526159664afccf2a3c9985c3f557fb","sha512":"812083096b1a10301091e7197dd49fe809d2ee54e9115f6df23c0f78420651c745abf55b8291749d198244cae649d8980a81b08b79d6c77bdf1b1668c617f097","ssdeep":"","tlshash":"441108e0ffa8e48a389f78a3005ba02740058e1569a0ac8a092eb30f1d3010ea4cdc62","first_seen":"2024-12-06T22:27:57.068056Z","last_seen":"2026-07-17T09:57:30.96946Z","times_seen":157,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__59.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__59.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1076\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jegV3Xisj7dsyiTRvpZ0AQL6ECdf6niImXf%2BhSNKNpGD44SDeSWMH3Nnvm6HA%2FYYn8oAcUIdU77eOARQYX9FuWhiJdPP1%2FlWgA%3D%3D\"}]}\r\ncf-ray: 9b80b48e6a71712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1076,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"0b3074990371bd83962bb56860f860a5","sha1":"7a368b9124d8064c68fd5f5b55af78174b1e5e1c","sha256":"fc668937a6369ced1814294a22f0fbd772ba5ea2049d9d4d0df721efb4a751cd","sha512":"8d72fb2bc062f4aeb72367e3707f5827c158f7e84c554397041aaeabf8525d22d70265aa1863d32a8e15063f1eba4753f816d227a30cef59fe611d1db0e134ed","ssdeep":"","tlshash":"541184fa16b07aa0d1cc83374328f6a087410f1ab860b68f90def5da24b454ccdd6304","first_seen":"2024-12-06T22:27:57.072103Z","last_seen":"2026-07-17T09:57:30.955129Z","times_seen":157,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__152.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__152.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2519\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LitLTIWMiqRCqGVv2sHegYBysKQaTjcCv%2F1bpOy6Sik7qt9T7KmtCiV%2BCwn9dUhiUyOwOHbzCD7R1%2BalpXQfTyldm%2BsmIvWWyg%3D%3D\"}]}\r\ncf-ray: 9b80b48fdad3712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2519,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"adf7ea7ba32b52d9d1d351900e3acadd","sha1":"8c7d2d33fac5ee6c836ab2f6f9fd9e78d8ee3d14","sha256":"9a2498779f3d889c8e2260202d6186a1124cd743c0a3bb2c8cf1e64d66f59705","sha512":"21b7aacbdfa49415ab52660015328593646af45d26161956b9f3a14e096cb80c58d2e15306e134426ae922d8d6f85465e281cbcb0a9fcf8a4d4c8b025f6ca255","ssdeep":"","tlshash":"98511b83f4fbcf7788750a0b0a4a120103577d259275899bde857c9722fe0bfa25c015","first_seen":"2024-12-06T22:27:57.096118Z","last_seen":"2026-07-17T09:57:30.970028Z","times_seen":157,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__159.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__159.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2452\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rac4qy%2ByT2JY3g3p%2FhGc0Kesu%2BK6d5WcimrYrPZU49LHp52DlG0nHtM39NLO2F2PdlomOIyblpft4e1jYFpRkqz6DJfrIX8U6Q%3D%3D\"}]}\r\ncf-ray: 9b80b48feada712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2452,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"2172cc0521a905b8a287030e0c6a4d86","sha1":"89aba1cad3b13ca2e4906e37d846f83adb6a0c0d","sha256":"e1ba04dc4d4e4a772e0deffd14e24d2653ed0800b3c02bac58fbbc570abcba23","sha512":"5fc1830df97b2087c97d45182fb45302d406a53fee1dfa11b1a3d0aa848ca277bd2e41b094d9f72f7aa49918910d518e0c9365a50ebe5081596161b14fc8842d","ssdeep":"","tlshash":"43516ddd58140a23366649ac9b99e3f1320a7fe95e0bd0043467f2be8f728cd01db504","first_seen":"2024-12-06T22:27:57.088699Z","last_seen":"2026-07-17T09:57:30.94974Z","times_seen":157,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__199.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__199.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:30 GMT\r\ncontent-length: 2532\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9pbCfDNdkW%2BJf3FbnuNxA5H1Dzgtd0tTXUX533V%2BPyzJpDo%2BiCGDfNZNyGmLZwKfvl9De5NpYai8w44CkOefbYFYJK2eAre5Rw%3D%3D\"}]}\r\ncf-ray: 9b80b4904b04712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2532,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"e355727213ea7aefac63c70f888c3b7c","sha1":"3d44fcdad9ff14633cbe99693dc2739778fe7ad9","sha256":"2a16100972b15829065588b0908adf16b26d0994a93e1445d56496ec2378da69","sha512":"ea991dcfc07fb0003aba9bd186c2eddf709d588b0af3575f55d49936c644e64e02194ffab6e9e3911107a84716a4818d4f7ca03b1972e13dec2bd31c6f6665ef","ssdeep":"","tlshash":"e1513b85259e444682a348d94c931afc7e19cee3453ed80302717cd4e4f273e12b63af","first_seen":"2024-12-06T22:27:57.085308Z","last_seen":"2026-07-17T09:57:30.97406Z","times_seen":157,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.164.248.171","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:28.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 13 Dec 2024 00:00:00 GMT","end":"Tue, 13 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:5E:B6:FE:3E:A9:63:38:16:AB:57:DA:E0:4F:51:4B:FA:2B:49:43","sha256":"AC:E7:4C:8F:D2:FB:EB:5E:41:DF:BA:9F:C5:FA:44:FB:25:36:FD:A5:BF:21:D1:F5:3B:AF:7D:14:A3:D8:FF:37"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://puffdex.com/\r\nOrigin: https://puffdex.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 77\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\naccept-ranges: bytes\r\nserver: nginx\r\nlast-modified: Wed, 22 Jan 2025 08:49:06 GMT\r\netag: \"6790b102-4d\"\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 784f462b4ee4e847ccfe44db65f51a9c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: 53-Z39scQ9q3wW8w57bIHjzCX5Vu6oX3XpkbMWwBhBKsiSWjbtJs5w==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":77,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"136f5552348d90a36b6c9a49046926c1","sha1":"b992325f95e0076c147ebf6593433f938b244f4e","sha256":"a60bafa499acbab1b73b92511707557400155adf5fd6a186cd56a2b822935ba7","sha512":"b790d85cf0597615435cf72e9384f8e640642a1cc3cc3564010a006eedbf5bcb956120cb81ebef9254d4675e785091a07d2cd79c66381fdc39b80ee5f4e48b8e","ssdeep":"","tlshash":"baa001f9a5a62009e92076c01cd532941c8983a030d24a102ac13969b55562ada06299","first_seen":"2023-12-04T13:46:15Z","last_seen":"2026-08-01T13:57:27.111401Z","times_seen":537,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":58,"dns":31,"connect":8,"send":0,"wait":253,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__22.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__22.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1082\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q4q%2FoD0UM90bY1ttg94MGqjjalEqTTos8kv8gU6nXlFmRuWT38PH%2BZISICXDJIxI4%2Bo6n9zjIlMea4Gpqe3BvbqQBT68TwFBNA%3D%3D\"}]}\r\ncf-ray: 9b80b48daa27712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1082,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"67fe2793ea27441b173869a156d3a020","sha1":"70adef4cf030eec04027921efeb86583552fc2c9","sha256":"f748c5cdbc3c42753e90626fa56cc20408ee32a570986f4d40985f237daf8bbf","sha512":"d9b0b37ab89684c5a38661f8d4ea08af23dac9639549845d72f2f0b69d14323f6f9f93e634e43150e2f05dff4ba1604338cf873c87c4cab97e3c66d5cbb9fe98","ssdeep":"","tlshash":"1e11b7e1e2d02a17c8e4d9be2326207f9b441d165388278e860ab358273b1c9d07f4b7","first_seen":"2024-12-06T22:27:57.073178Z","last_seen":"2026-07-17T09:57:30.949254Z","times_seen":157,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__31.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__31.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1175\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AkNAycndJbrNiT8MTPiyhkWWTewsz944XhVUmlIzVuDFXyhj6D8dJbCgRVQBXrckewS0nhn%2Foq5naTaXaTN98OoaVrHMoLK50A%3D%3D\"}]}\r\ncf-ray: 9b80b48dca30712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1175,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"564765291e71e2e3a6cc543a40b65548","sha1":"de712ea89fa95bb9c9994e96f804b1676673ed5a","sha256":"2869e4c8912785059529abd6817339639f5f3398fa7fc37628e37d1890467c2b","sha512":"9d030870449923e6d22f904d1d3194ad331e30daabca95a92c96295595b0f51ab3d71e5b11a020a29254a8971dfcd4c1fe6bde33bc4aaca7c3dac279d9549f99","ssdeep":"","tlshash":"552175474751446858949b2d83095ad2ec030ee6bd53530a805bb6197239e3f4678da0","first_seen":"2024-12-06T22:27:57.076211Z","last_seen":"2026-07-17T09:57:30.989044Z","times_seen":157,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__106.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__106.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2379\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FEHvI5wi%2B5QQn9ibpUTg0PlV1DjnxYI9V9XmCqKi0YrkEVhC1Kvgq0nVLr6Qe91PmLYsfvSoZzgcq03toiWQK%2BoReQ4ztyOyzQ%3D%3D\"}]}\r\ncf-ray: 9b80b48f4aa4712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2379,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"fd7aa9cb135ed0372c742822ba53ae06","sha1":"1da731da9d7b334674d5d811648acfe55c3e2053","sha256":"e8b076bd916db67db55245e7a8de004cc840ff1106c27a8dbe54f46555e27697","sha512":"dd6f7bae5d834f2ad3e36a9be7c287b2f113b7d21741936f8913cd3ebb4f61030a29087c1474641520af1e9d0e0ca337d9e76caa94ed63d73e0ae6b1345c222d","ssdeep":"","tlshash":"404119a3d1117d13ee0c746b8e19d141433a4e43a923b99d3fa87e199e710856a72681","first_seen":"2024-12-06T22:27:57.098149Z","last_seen":"2026-07-17T09:57:30.962501Z","times_seen":157,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__122.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__122.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2543\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UZ1xqc1djoj%2BFBzU3Fiv2gDJ9SBZapPFtxAAR9ER6tpi7JB%2FCnte2JWWkcGHwwg52Gc7jxVA%2FGH9oCSuFoY0FB2GP8irB1WxUw%3D%3D\"}]}\r\ncf-ray: 9b80b48f7ab4712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2543,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"442debe82512cd5550528ce377bd5182","sha1":"92600a508ed36fcb763f6999b0fec6bf7fda6818","sha256":"619351a77b896faeb26aedc24c3c4a6b0ddf900f2be0b5fa56496fc7f1275586","sha512":"c9b5cb481d415c114f62a2c4d4b27dd27790a462df25a1550717ae9b1bcdd93676478f01bd672be56919fb0aeab91f5deedf01559af93b8abb61bd794a5a8e40","ssdeep":"","tlshash":"cc513a16de6474f959d86632a53305a01380df11b98bb550d30aba877bb3405f86451c","first_seen":"2024-12-06T22:27:57.093947Z","last_seen":"2026-07-17T09:57:30.950573Z","times_seen":157,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__163.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__163.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2521\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YQdW7TECMj%2FkaQKCe377AYGb6kTesiWhL0VSu1AGXVdHtU7%2BBcgOwIvVKtACSqdpfVaf5ELd1uq1T2UWY9zNOhSggNjIZ94HDg%3D%3D\"}]}\r\ncf-ray: 9b80b48ffade712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2521,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"fa67807a96a067ecdf1f9e8f149ef9a2","sha1":"7778bfe4e7e00898a0ebd8b67e37e8e4ee8ca199","sha256":"2b11d4e566612651b277dff0a58701c2da5355b4c167ee07868a97e98f3d3942","sha512":"4b71c5ac28548ee033691e1087ec4f055b0f4aaa151d3613917922c0ce5df1e9c2bc3f1c3ba3f6d35ed73bcd47d8f73e85658960c4567bd3f5e7e76f83e09683","ssdeep":"","tlshash":"a5515b9765b28ce89705c4e7e606d136fe306c0b908493328f5379bd0d39a9813a8765","first_seen":"2024-12-06T22:27:57.089719Z","last_seen":"2026-07-17T09:57:30.963373Z","times_seen":157,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__195.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__195.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:30 GMT\r\ncontent-length: 2605\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XrvTES1BFQRp65ETeJNHXdw%2FzW1eK3nSLuBKvr3AMqB4PE9sjojA%2BlM7kkyuWKs86ZtYL8vQJ%2BYKkORHJs7W5w6%2BXOvfhuXRmQ%3D%3D\"}]}\r\ncf-ray: 9b80b4904b00712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2605,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"b28e49aac00b6054373887a863314cac","sha1":"e8d65a43411cc569823097105a78b44e238dff8a","sha256":"faa834f50cdf37acf578c2c4f2e9df776e20978cfa419d5315a9b5e23b5c4f74","sha512":"8524d75aa0e1234bfce1305b1a3c5bf51638bba864cb1bd4c1003030e867176a379673ea81a054c413749db2bb4c1f5c056dc81a1e91495f66cbd0d2a7da38ef","ssdeep":"","tlshash":"ca512b96f27184c9e7a57643a7e54003a0263c964454489caecabf915f7f05a5847b06","first_seen":"2024-12-06T22:27:57.087555Z","last_seen":"2026-07-17T09:57:30.979222Z","times_seen":157,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__138.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__138.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2496\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mUC6zRNB5it8H4cBV36dbtBYsFhazEcUEpMjcYDSHutbzH8aY8xku2tbkNoWWvTawLjCCAAHTMUdhv1lpVChiIsXXjkW28a0CA%3D%3D\"}]}\r\ncf-ray: 9b80b48fbac4712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2496,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"992da572d0eeab68de7e123b557fcaa9","sha1":"663782959996919942a7c1ed657545a29231d8c5","sha256":"a6e12a53275c9e16fad5ad380035fb843eff53aeea8e27399b3e06ea590638c0","sha512":"d21309b4a57659e19f2c760404a945ae587eb3d44d9a1363a06424066cb5ffa48657125432b611185c6fc407ce096cbd61b74d956b9270409694e12eebb02d51","ssdeep":"","tlshash":"41513a79984c20166c9f0af0ba1304686f478d645bfa41e54837f82ca8f71c06837721","first_seen":"2024-12-06T22:27:57.097189Z","last_seen":"2026-07-17T09:57:30.959959Z","times_seen":157,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__150.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__150.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2521\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jO8kAemt4DP%2FHZ1Yy%2BPQRqs0ZeZ9tNopFYHLqs8nBBNNfmjK9%2B8XeRdzF8aSFMDGU3FLwxSWZUXgCRj0ZCEFfFIFqCyXYocP0A%3D%3D\"}]}\r\ncf-ray: 9b80b48fcad1712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2521,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"fa67807a96a067ecdf1f9e8f149ef9a2","sha1":"7778bfe4e7e00898a0ebd8b67e37e8e4ee8ca199","sha256":"2b11d4e566612651b277dff0a58701c2da5355b4c167ee07868a97e98f3d3942","sha512":"4b71c5ac28548ee033691e1087ec4f055b0f4aaa151d3613917922c0ce5df1e9c2bc3f1c3ba3f6d35ed73bcd47d8f73e85658960c4567bd3f5e7e76f83e09683","ssdeep":"","tlshash":"a5515b9765b28ce89705c4e7e606d136fe306c0b908493328f5379bd0d39a9813a8765","first_seen":"2024-12-06T22:27:57.089719Z","last_seen":"2026-07-17T09:57:30.963373Z","times_seen":157,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__155.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__155.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2574\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FEv2CDLWUcXxHcWm1QONdpzH5wLUrMkDjCRPdMxG%2BrrfZA6dc4Pew%2FtBK5GoKfpHLC%2Bzp7zwfd4KCR5j1m%2FTeH0cduXpPaEbUQ%3D%3D\"}]}\r\ncf-ray: 9b80b48fead6712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2574,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"8d591f68a09077fcafa0b05ae40473e4","sha1":"add27caff55e10c8205e31004ecabd1a5a6cf0df","sha256":"9b427e6c8f08fcda3b6057a2185b63759c319e3f83b40ff8d0871baf34371544","sha512":"883433f2368e70edc09e30d0eec94507c5ee61bd8bc4051145c29a6132650e63d19ff72572219ebe238f1cf294431bd48e014ddd4b66b3fe0f89636257b953d5","ssdeep":"","tlshash":"9d512abfeac30d80e79941629665c4bcd7c26e10e4c33f67506abb22a0b0450f02c9e3","first_seen":"2024-12-06T22:27:57.09293Z","last_seen":"2026-07-17T09:57:30.981761Z","times_seen":157,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__183.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__183.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2521\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jwBuAN7kf6S105gsnFZo7VTreAYEibw6ViIjcCe6IgrIyfNJLAWBDzyIHubjCpTJTwI%2BzwjS%2BOY%2FIqohhuczDVQZ09hDIKKpOg%3D%3D\"}]}\r\ncf-ray: 9b80b4902af3712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2521,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"67e87a046547d37d3d6ff7c1457d99a0","sha1":"912d5edfe351304cd868fa2a6cf82c8a766c345d","sha256":"d475374d44a909777d599d557b1f386d521c6611d21c396beb1c43d6606274d4","sha512":"4c4b842b334c7d62b3516652ab86fc89633f087139e4bc55f9a65ee5b3fe4fadb414c8279a42235ade342587bb0b1be84d1dcf0d6c1c7b578dcfe06e4e1a529b","ssdeep":"","tlshash":"74510ae24e5da83aaf4f601dc9ce9a106a631c3c2a8131595ce8be1dd6b2e224749537","first_seen":"2024-12-06T22:27:57.086375Z","last_seen":"2026-07-17T09:57:30.943107Z","times_seen":157,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/js/main.js?v=6","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:28.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/js/main.js?v=6 HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: text/javascript;charset=UTF-8\r\npriority: u=3,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:28 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X3p9sWt%2BY93OkGeJdxVYVs4JiBqz0dIiWNGApzCqyV7c6B3eGIjooGmZsbW4kACosU0d2POICoogsR9wsHsMR0rd1%2FeNJShvMg%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9b80b486d9c7712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21573,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (430), with CRLF line terminators","md5":"a07361f38ac15b4cda4f3b6ec77889ec","sha1":"f68b585821bb867ba7314f368d58aca6f3925458","sha256":"ab5c07b6f866cd214207fa8c80072348e3884b9d3717d911ab9e81cbbb5b962f","sha512":"2dedebeec56a25ee92a7538d41ee0ac105d64a691dfd68d765450387edf36422df1d6ffd4e4e1fc0f644996cabb1bfb27ac4223633636f2913032af95c6a46d6","ssdeep":"192:GVHfaVY5ZcNv48zKAXEWOho7Y/YJYScEElXRe0wlWORznvlpL1OECuJAtYnnThxO:GOKlo7s8RElXRnwlWsjdKECuFbK7roO","tlshash":"e8a28298b12129aa813b7379be775646fb380027d341d349bd6c1de11fb2180d9a3f6e","first_seen":"2025-09-12T01:55:01.906964Z","last_seen":"2026-04-06T12:02:02.524739Z","times_seen":19,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/bilizhao.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/bilizhao.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 7463\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fs3zuVmZMQLlYlcLti%2FvOGueOvLqsEsOeToocqdJ9tU%2BFfAj%2FpjYPbU7YXNZF3curMuP7AbImn57dh%2BZW1CRGtGmtiUtsbbI7Q%3D%3D\"}]}\r\ncf-ray: 9b80b48cea04712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7463,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 280 x 296, 8-bit colormap, non-interlaced","md5":"44ee985ca4bd03a10ad2a0ac98effeaa","sha1":"4ed84dc20640e36b17bf1c01231ba3f24a4562fd","sha256":"78533863d18e0541dabc1bc64a0d4f87ced2e9d56e5ff4a4f9f1f233d6352c37","sha512":"99e6940093f755763269349e0e9d49f71fe500b32406aaa645940357c4c56293b4bb4eb2cc31f4d8ff2899e8588446ccd8d5426f81822e80f6be13fbc7d3dd03","ssdeep":"192:Cve3GC3dHSdmsEnFFClp8rPFIKSl2UGvCnQFcmAPaT:CAtcmsmWr8rPFmkCnccE","tlshash":"a6f1aeab1d01592ed79ad65fdc4295a2af83f8258f0187bb5b3cf8da3c18f050c2c081","first_seen":"2024-12-06T22:27:57.055677Z","last_seen":"2026-07-17T09:57:30.997225Z","times_seen":168,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__17.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__17.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1128\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iDCGjONo7tnvqpvxnH8qiNbJYGAe2AHhzige2N8XDT9LnRrNdkrYPRet%2BDRx7dOTxtDacppEW9u5SuZKf%2B5%2F4oNGA0TxpqGqlg%3D%3D\"}]}\r\ncf-ray: 9b80b48d8a20712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1128,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"8d4530793f2161abdb48afd9212910a7","sha1":"55359cf1e4ede8bf209d28697edb82a16868f8e6","sha256":"2472bf51de60d02b6c6e7d85946feb178260ea213315de58e2e6c3fd141fc882","sha512":"4da06101e1c46df21142a7754094b40d610f8f065cf686463f660e68949cecafb199e4f3d9de899068ffb15d7820b3c71f1c67463bbb31cb52d6c7423e789bfa","ssdeep":"","tlshash":"9721c4c10ba00578c08e78b098df1d64a528ad1b2e23de7ad801f32867bb1088fe42b0","first_seen":"2024-12-06T22:27:57.078299Z","last_seen":"2026-07-17T09:57:30.954499Z","times_seen":157,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__44.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__44.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1175\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FdkYzQcA2B5JjaeMef5NddDj1vejdzzwF28bhTEOOfn3olp1JSsQOAQerXiotisirddO2kYmVVqIVxJ%2Bmb17UpewxswpF9BQmQ%3D%3D\"}]}\r\ncf-ray: 9b80b48e1a5f712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1175,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"564765291e71e2e3a6cc543a40b65548","sha1":"de712ea89fa95bb9c9994e96f804b1676673ed5a","sha256":"2869e4c8912785059529abd6817339639f5f3398fa7fc37628e37d1890467c2b","sha512":"9d030870449923e6d22f904d1d3194ad331e30daabca95a92c96295595b0f51ab3d71e5b11a020a29254a8971dfcd4c1fe6bde33bc4aaca7c3dac279d9549f99","ssdeep":"","tlshash":"552175474751446858949b2d83095ad2ec030ee6bd53530a805bb6197239e3f4678da0","first_seen":"2024-12-06T22:27:57.076211Z","last_seen":"2026-07-17T09:57:30.989044Z","times_seen":157,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__58.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__58.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1146\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cdlpJqrN6zM%2B%2Flhtt8g14dGphXhTpqs8IySxMx9CNeQirRWuwVLMRPh2qEly0JKh4ALNTV6E4m2LyWZECxUxpmPL3FMZjU6Rcg%3D%3D\"}]}\r\ncf-ray: 9b80b48e5a70712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1146,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"8a6d89eeb884ff17869546bf9363d8b1","sha1":"5884c7083b9e71f8f5c436a82d4f79e84deedf69","sha256":"7eaf8fcc7b9b9326219f5b2f37e8135c7ae5960f07ea48594445710045c9ff18","sha512":"7309ccd0af2423148f1a2ffb5230abb880b52cfe5196a10d036ddf6eae918c61f78d3284fbcfbcbb773b11690f4f5684eb5ee13eec9fd279d43f21f590007973","ssdeep":"","tlshash":"2d21a5b72948f49ce939b9d11131b0b1864e9f60154f34fb10c7b1218bb020d6eaec61","first_seen":"2024-12-06T22:27:57.080393Z","last_seen":"2026-07-17T09:57:30.96439Z","times_seen":157,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__85.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__85.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1076\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RqUuz2dRbqxqTIJjULY5xyCqXsFJ6200hUvjM1OenfKx6WKO9B3puYm9jhADqcxvS8WJuXzKizdXAlB7qtFGDoWgNVk9AGgGow%3D%3D\"}]}\r\ncf-ray: 9b80b48eca8e712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1076,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"0b3074990371bd83962bb56860f860a5","sha1":"7a368b9124d8064c68fd5f5b55af78174b1e5e1c","sha256":"fc668937a6369ced1814294a22f0fbd772ba5ea2049d9d4d0df721efb4a751cd","sha512":"8d72fb2bc062f4aeb72367e3707f5827c158f7e84c554397041aaeabf8525d22d70265aa1863d32a8e15063f1eba4753f816d227a30cef59fe611d1db0e134ed","ssdeep":"","tlshash":"541184fa16b07aa0d1cc83374328f6a087410f1ab860b68f90def5da24b454ccdd6304","first_seen":"2024-12-06T22:27:57.072103Z","last_seen":"2026-07-17T09:57:30.955129Z","times_seen":157,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__91.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__91.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1165\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bL088opscZTJKyvjnzuZpfJfqqmukYrkZdzgPDUTg%2FmtfOIOf%2BpnUtQXdDEBFfSODxSriN%2F%2FukCbR%2BMjaXd5LmgFm42kyskflQ%3D%3D\"}]}\r\ncf-ray: 9b80b48f0a94712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1165,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"50333973529f140a38862b5e59223c23","sha1":"ca772352821ce63cc8d52b58b4dff1bcbe92b6d6","sha256":"ae37bc4c761654d71faa919cdb2bcc500d39f14f3747c2124a67f7eafe4116e3","sha512":"93152b60013a15a74c510b75bf4c4d11f27cab49234bb7980c9bb245935673d6adc119cf598a648c29ba5bfad9e4cf730988f224e352cab3c65728fe9318bfe8","ssdeep":"","tlshash":"9121a5f530731d399a089789f51c68b85d126f08ae9496164444f8f4f8f6b49e048ab2","first_seen":"2024-12-06T22:27:57.061496Z","last_seen":"2026-07-17T09:57:30.946495Z","times_seen":157,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__18.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__18.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1175\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pxLhzrdPA%2BM%2BcQDK2Ohu0jJIZHeX8GjN1WwThYMin%2BU4OBBDuE3KdTK3L6Uj7GGGPaHqxJz0WB4g7yhlNga3oNlPJHTgN32xlA%3D%3D\"}]}\r\ncf-ray: 9b80b48d8a21712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1175,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"564765291e71e2e3a6cc543a40b65548","sha1":"de712ea89fa95bb9c9994e96f804b1676673ed5a","sha256":"2869e4c8912785059529abd6817339639f5f3398fa7fc37628e37d1890467c2b","sha512":"9d030870449923e6d22f904d1d3194ad331e30daabca95a92c96295595b0f51ab3d71e5b11a020a29254a8971dfcd4c1fe6bde33bc4aaca7c3dac279d9549f99","ssdeep":"","tlshash":"552175474751446858949b2d83095ad2ec030ee6bd53530a805bb6197239e3f4678da0","first_seen":"2024-12-06T22:27:57.076211Z","last_seen":"2026-07-17T09:57:30.989044Z","times_seen":157,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__56.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__56.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1128\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BOHSjAcWOwheCij6YY%2BSKMrXsD5TtvPOl5kNgHrXGolpWOCcOrVGeOA9k5b1HijHRR0FN4cPoLyEaeI5LRDTQO6YMTZ3iwfhQA%3D%3D\"}]}\r\ncf-ray: 9b80b48e5a6e712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1128,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"8d4530793f2161abdb48afd9212910a7","sha1":"55359cf1e4ede8bf209d28697edb82a16868f8e6","sha256":"2472bf51de60d02b6c6e7d85946feb178260ea213315de58e2e6c3fd141fc882","sha512":"4da06101e1c46df21142a7754094b40d610f8f065cf686463f660e68949cecafb199e4f3d9de899068ffb15d7820b3c71f1c67463bbb31cb52d6c7423e789bfa","ssdeep":"","tlshash":"9721c4c10ba00578c08e78b098df1d64a528ad1b2e23de7ad801f32867bb1088fe42b0","first_seen":"2024-12-06T22:27:57.078299Z","last_seen":"2026-07-17T09:57:30.954499Z","times_seen":157,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__128.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__128.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2501\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f%2FnlF%2BBPk%2BNikpUHqtZp7ton3GR2cSz8ZJZVR3tJ7cd8XiieomTwFYyuQXAYDybGezmnIdYrgL2WMPvl4a081HZk8QWvyMXerw%3D%3D\"}]}\r\ncf-ray: 9b80b48f8aba712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2501,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"8e9ec66f80915f8c5766545d02c40a17","sha1":"a79d55e49aca03a2b3301df15110716dfe39d5fb","sha256":"d09935298290d607f4ad422dd60e9b77b2d5c958435b48e9200d8d6d0dbf6231","sha512":"8c26c93a7e7d53ff6f534a6a97dbe82cca0f84fc2eccf2ddee82d68f86ec4d84d089b636b1c947533d34b1582194feda318ead2b53a9b7970f505dc25209652d","ssdeep":"","tlshash":"d2511b84d8f972aa11d354f454c1eb8598b9bef81c1a774770253e2e64310c6ce7c8be","first_seen":"2024-12-06T22:27:57.09193Z","last_seen":"2026-07-17T09:57:30.978735Z","times_seen":157,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__137.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__137.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2521\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NHA37V7JTonHLP2kwRpwFV93ntLImtHhTOopieLKrtm9oz8IwYhLG6zSndTSJOHZAh6puIJ5FYK9KXU%2BX7%2FLd9HwTtRXBwbz2A%3D%3D\"}]}\r\ncf-ray: 9b80b48fbac3712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2521,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"fa67807a96a067ecdf1f9e8f149ef9a2","sha1":"7778bfe4e7e00898a0ebd8b67e37e8e4ee8ca199","sha256":"2b11d4e566612651b277dff0a58701c2da5355b4c167ee07868a97e98f3d3942","sha512":"4b71c5ac28548ee033691e1087ec4f055b0f4aaa151d3613917922c0ce5df1e9c2bc3f1c3ba3f6d35ed73bcd47d8f73e85658960c4567bd3f5e7e76f83e09683","ssdeep":"","tlshash":"a5515b9765b28ce89705c4e7e606d136fe306c0b908493328f5379bd0d39a9813a8765","first_seen":"2024-12-06T22:27:57.089719Z","last_seen":"2026-07-17T09:57:30.963373Z","times_seen":157,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__166.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__166.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2530\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vkqrWg1rHEDlcaCz2xt0UFvk17e28C9Ippil4RltHA8O93Wit3E1TkVzgm0EwDAret2TTl0H91hY91YzvxugnrQsVpw%2BpHhD8Q%3D%3D\"}]}\r\ncf-ray: 9b80b48ffae1712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2530,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"e13151c32d29b50f25e946b72ccac569","sha1":"c49420114727d2a20799004c47d43960a25c1d0c","sha256":"4f1d41a99c167e12b07ee5b919683497ac4fd3b1a456020714e9640eab28419e","sha512":"1297a1f11e1779a678cc91bd36a137eca7f47b0e513208ab62ed24e365261f0ed023c97e444490e24f103f8791f404aae2280ef5b1792d9c74a989181dd655f0","ssdeep":"","tlshash":"74516de9bd256c29ff8f9d1fc5d01986dfe48c07816c251e744276e892f6c08ebb08a5","first_seen":"2024-12-06T22:27:57.090895Z","last_seen":"2026-07-17T09:57:30.960505Z","times_seen":157,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__178.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__178.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2519\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7el4EIkcBMXW8EfgnTDuraN%2B0LdRFKjARFenk5W%2Fjt0bw5o5ikNPzwtkJFDuJwnkfsxbDr92ASogh%2FY5f6r9jGMI4QaCIP1FXQ%3D%3D\"}]}\r\ncf-ray: 9b80b4901aee712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2519,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"adf7ea7ba32b52d9d1d351900e3acadd","sha1":"8c7d2d33fac5ee6c836ab2f6f9fd9e78d8ee3d14","sha256":"9a2498779f3d889c8e2260202d6186a1124cd743c0a3bb2c8cf1e64d66f59705","sha512":"21b7aacbdfa49415ab52660015328593646af45d26161956b9f3a14e096cb80c58d2e15306e134426ae922d8d6f85465e281cbcb0a9fcf8a4d4c8b025f6ca255","ssdeep":"","tlshash":"98511b83f4fbcf7788750a0b0a4a120103577d259275899bde857c9722fe0bfa25c015","first_seen":"2024-12-06T22:27:57.096118Z","last_seen":"2026-07-17T09:57:30.970028Z","times_seen":157,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__182.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__182.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2605\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e0wcKvoWmsO7DC4sLx0xBXZfM3VxAxRv0T2iQmAl6LwnC0dhek3S9rI2XWs62Fq%2FOQseTrvyh39un1WrIIBcnZgFdDUsieiLVw%3D%3D\"}]}\r\ncf-ray: 9b80b4902af4712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2605,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"b28e49aac00b6054373887a863314cac","sha1":"e8d65a43411cc569823097105a78b44e238dff8a","sha256":"faa834f50cdf37acf578c2c4f2e9df776e20978cfa419d5315a9b5e23b5c4f74","sha512":"8524d75aa0e1234bfce1305b1a3c5bf51638bba864cb1bd4c1003030e867176a379673ea81a054c413749db2bb4c1f5c056dc81a1e91495f66cbd0d2a7da38ef","ssdeep":"","tlshash":"ca512b96f27184c9e7a57643a7e54003a0263c964454489caecabf915f7f05a5847b06","first_seen":"2024-12-06T22:27:57.087555Z","last_seen":"2026-07-17T09:57:30.979222Z","times_seen":157,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__189.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__189.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2521\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0kMZkrB5A4H1XcgKFOFn0AK%2BNHo1HEvsUmwNHV1ddQysPFxa7WHt%2FuAcFKW2WJGxuUR3ze1h4dxUbIGzuLkOh85TL55c0n%2FVMw%3D%3D\"}]}\r\ncf-ray: 9b80b4903afa712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2521,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"fa67807a96a067ecdf1f9e8f149ef9a2","sha1":"7778bfe4e7e00898a0ebd8b67e37e8e4ee8ca199","sha256":"2b11d4e566612651b277dff0a58701c2da5355b4c167ee07868a97e98f3d3942","sha512":"4b71c5ac28548ee033691e1087ec4f055b0f4aaa151d3613917922c0ce5df1e9c2bc3f1c3ba3f6d35ed73bcd47d8f73e85658960c4567bd3f5e7e76f83e09683","ssdeep":"","tlshash":"a5515b9765b28ce89705c4e7e606d136fe306c0b908493328f5379bd0d39a9813a8765","first_seen":"2024-12-06T22:27:57.089719Z","last_seen":"2026-07-17T09:57:30.963373Z","times_seen":157,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__16.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__16.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1093\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r%2BVkgL%2FxrGrRkUWr0X9SJjJ9VQ6Odo32mvp%2FL9%2Bs3JnPfN82iRdM%2F6GVsudC5hs8KZrIWHueAbbRzh0qA93ZRZypLQ5ZpOrHuw%3D%3D\"}]}\r\ncf-ray: 9b80b48d8a1f712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1093,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"2083e1ff8b48312098bbd8247f3c42f0","sha1":"7d958c8a1c3ef4aa2aedf6b15759532f081c8f6b","sha256":"01a6dbc53976398d47220bab14117b4f95526159664afccf2a3c9985c3f557fb","sha512":"812083096b1a10301091e7197dd49fe809d2ee54e9115f6df23c0f78420651c745abf55b8291749d198244cae649d8980a81b08b79d6c77bdf1b1668c617f097","ssdeep":"","tlshash":"441108e0ffa8e48a389f78a3005ba02740058e1569a0ac8a092eb30f1d3010ea4cdc62","first_seen":"2024-12-06T22:27:57.068056Z","last_seen":"2026-07-17T09:57:30.96946Z","times_seen":157,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__181.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__181.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:30 GMT\r\ncontent-length: 2574\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FtnD0SJ9mbajWCc5KOU25EPWkscPppVBUoSRTuLu0LC3Cyr48iiJLO6fkbaynhxph2O1zQjpTDmGnSBPQI2R0ZDTJJH%2FTbvC9Q%3D%3D\"}]}\r\ncf-ray: 9b80b4902af2712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2574,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"8d591f68a09077fcafa0b05ae40473e4","sha1":"add27caff55e10c8205e31004ecabd1a5a6cf0df","sha256":"9b427e6c8f08fcda3b6057a2185b63759c319e3f83b40ff8d0871baf34371544","sha512":"883433f2368e70edc09e30d0eec94507c5ee61bd8bc4051145c29a6132650e63d19ff72572219ebe238f1cf294431bd48e014ddd4b66b3fe0f89636257b953d5","ssdeep":"","tlshash":"9d512abfeac30d80e79941629665c4bcd7c26e10e4c33f67506abb22a0b0450f02c9e3","first_seen":"2024-12-06T22:27:57.09293Z","last_seen":"2026-07-17T09:57:30.981761Z","times_seen":157,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuohuan3.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuohuan3.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 999\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iifs5kLvG061MG96ndBDLHVgYc%2F%2B26KhpqPuj1YMJgd3talHVT09JreYJdSvmaQoPk%2BObHUUs2r8F3PHFoS7AliplfZ0JvD%2BQw%3D%3D\"}]}\r\ncf-ray: 9b80b48c89f6712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":999,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 87 x 49, 8-bit/color RGBA, non-interlaced","md5":"653430d55fcb718d6174f5cdff6126bf","sha1":"d941d849178994023e003eb1efcc33ee6f2f9174","sha256":"6dfcee1d5cf1d61e616f0af2f4b83f1849942d81c8f5b56cc4ee18d906b533f4","sha512":"cb0b313447a60df835778d187e9503926fd82e7546175639a5a7950b2d9fe60273d05da475697bc5ba144620b369fb125d64f44487e2e7d3884d4f66d1beafc5","ssdeep":"","tlshash":"8711a5121f98d8a4a13e79f183231c01f641f7dc9315ba1e558ca5598ef11bc61e9413","first_seen":"2024-12-06T22:27:57.045336Z","last_seen":"2026-07-17T09:57:30.958511Z","times_seen":168,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__23.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__23.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1117\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8fK%2B%2Bt%2BlNCxuW7QubCg8esXrXQt0V4qyWOHGqx1ZnOqRejfc%2FAoVTp6%2BXY6FtS66oQQs2X3GET0Adb7XT2hqfvtwIOBErwolWg%3D%3D\"}]}\r\ncf-ray: 9b80b48daa28712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1117,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"397412fe707f80f1106f544f25c841ed","sha1":"1ff59de33d9785f6ef75bddf201453eebc27c9a3","sha256":"2fb75535b7a097b9b71606c92f237955fb81e90530238a9b51548cf17833506d","sha512":"434099b41bd6f0a75c6d5d51da7f6d9d64fe390008911884bad7a36c9e211e6c7819760cd6807bafbfb9ad784cdc4aa2b45c24a7a9c163b8220476baabcf5730","ssdeep":"","tlshash":"fa2165e72c4c9ff8c4d421f14aee929a87b15f91bc005157d8a3f492047248388b3291","first_seen":"2024-12-06T22:27:57.074226Z","last_seen":"2026-07-17T09:57:30.941854Z","times_seen":157,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__61.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__61.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1082\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w1%2FKw%2BtA2Tks%2BACcS4jQ3zr4NkSUm5iJTwkjsz2qfsxSEhRpXXa2u9O1TH6ZgO0KSTmrHKIRZUmqKujA%2BFruSim%2BShli%2FLg33Q%3D%3D\"}]}\r\ncf-ray: 9b80b48e6a74712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1082,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"67fe2793ea27441b173869a156d3a020","sha1":"70adef4cf030eec04027921efeb86583552fc2c9","sha256":"f748c5cdbc3c42753e90626fa56cc20408ee32a570986f4d40985f237daf8bbf","sha512":"d9b0b37ab89684c5a38661f8d4ea08af23dac9639549845d72f2f0b69d14323f6f9f93e634e43150e2f05dff4ba1604338cf873c87c4cab97e3c66d5cbb9fe98","ssdeep":"","tlshash":"1e11b7e1e2d02a17c8e4d9be2326207f9b441d165388278e860ab358273b1c9d07f4b7","first_seen":"2024-12-06T22:27:57.073178Z","last_seen":"2026-07-17T09:57:30.949254Z","times_seen":157,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/huan.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/huan.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 8572\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=thW9CkiI26k26lL%2BR5ybv0pRl7OX8X96teNWFyrLRLr6x2ehq9viKcs8vbBnT0GR%2FH5DfmhnrQEHlbLhWcAAQ1tqYhOxx8WRFg%3D%3D\"}]}\r\ncf-ray: 9b80b48cc9fe712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8572,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 1186 x 623, 8-bit colormap, non-interlaced","md5":"cc57ed80f628f951d0df6b59fe543188","sha1":"dbc9ffa76ec04396103b8a474fe5975b0c0994e1","sha256":"c34115b0c4968ea674ac63730b14a0275503496a64075d795dedbac2ac0af915","sha512":"90304066517d1a6d4b5bb5fda4258e86dee183d57c8bb14ae6f02d0f194c3e0bd205f363f55a4666e09104a0d31e37f778d621ce7ecb9aa07e4550d64af38f87","ssdeep":"192:mMSw7TY3Qc05tLfmWi5y+8/Ytb6AeoJr1YLmJITzcZ7:mMXYc75i5y+8GGnwr8mJuk","tlshash":"aa029d8c824beca5e64f0166bda1f8f07ca10b17c1db995f8b8292bb7133607b954d03","first_seen":"2024-12-06T22:27:57.052392Z","last_seen":"2026-07-17T09:57:30.948684Z","times_seen":168,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__80.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__80.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1095\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DQwmDnuR19%2BmkqK0MNbMXNSqUrwlL3g6sKJ0n2h2x83WHFglKwJuBdv55Hk2PBQgLwRDrORua2Fv4RCpyoqc5g7N8imFz9PlQQ%3D%3D\"}]}\r\ncf-ray: 9b80b48eba89712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1095,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"3b3e2ccbff9209b2012b53b091045763","sha1":"7d8145d03947788abc4689ac1ee24ca8a364b9ab","sha256":"cd7ab1ce9e85c923fd9ce8f2f64a29d7ef7849a6573e2f365f6f080ba41e76a6","sha512":"87d37e4db8e5f0f300a054b2967078113ee1e2715b4bc0b2711fdaf47b6272cdab9d3f4f7cbde780cfbd98f9b03f5e0f98a6c55b770fe8188f35125121a0e927","ssdeep":"","tlshash":"eb11c4c4161bbfb6c44a571784228bc9cff28c6cf004c00b46307c1978f62dae93e482","first_seen":"2024-12-06T22:27:57.065973Z","last_seen":"2026-07-17T09:57:30.968541Z","times_seen":157,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/domain_icons/16_1761714095403.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /domain_icons/16_1761714095403.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 29 Oct 2025 05:01:35 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=6,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:30 GMT\r\ncontent-length: 15207\r\nserver: cloudflare\r\nage: 2\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mqeprlMWMoYYQPRPbSYPoLNqdQIzaWJ9S7njYOFNXMdZTEmFA3M6Pm0a6gmq2kMSWYxtGehGfoAsbCIf4FlJYMpKZjbZDup9GA%3D%3D\"}]}\r\ncf-ray: 9b80b4939b1a712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15207,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"47317a0dc83ced1a284198c1e00e0416","sha1":"4c9ba31a3b1acda66c02902f726a18f5a452d907","sha256":"1d81324930ade3c19588f3d412568843ee3d4f8e64cdf970b731ed6b2da5c380","sha512":"e3970293deb4eba7c189454914d9de440b1d21a55a4b56cbbde45290c26252c53dee0951c816a6db07ea2761a0036cf55c1f7208a0fa6c3778ee8357a27042e8","ssdeep":"384:7AqulEyELdJwlqmy5s18RrM5WU/5UfRYao5xUKC2Mp:ErDCEV8R5UxUfRnKCTp","tlshash":"6662cf9c5aadf391f31279f5fe4b883c398b289111ed75add48c4c0a356defe6111062","first_seen":"2026-01-03T07:16:21.802254Z","last_seen":"2026-01-03T07:16:21.802254Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__33.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__33.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1076\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p7jbv1eUt%2Bv%2FyBc3hzMzzJZkBh0xRnTut8g3cGVNUMClFx8GCun6jKAabyfQJoIuNjfrneojgclhWru8fNSqKBidPpEDFkoN2Q%3D%3D\"}]}\r\ncf-ray: 9b80b48dda32712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1076,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"0b3074990371bd83962bb56860f860a5","sha1":"7a368b9124d8064c68fd5f5b55af78174b1e5e1c","sha256":"fc668937a6369ced1814294a22f0fbd772ba5ea2049d9d4d0df721efb4a751cd","sha512":"8d72fb2bc062f4aeb72367e3707f5827c158f7e84c554397041aaeabf8525d22d70265aa1863d32a8e15063f1eba4753f816d227a30cef59fe611d1db0e134ed","ssdeep":"","tlshash":"541184fa16b07aa0d1cc83374328f6a087410f1ab860b68f90def5da24b454ccdd6304","first_seen":"2024-12-06T22:27:57.072103Z","last_seen":"2026-07-17T09:57:30.955129Z","times_seen":157,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__131.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__131.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2521\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=keWLUnRbgoxCBr%2BNQgkjmGgbCV7nT5ZyCKQOXAwu59a0Ub6Is5TzFpMtRm33KPlbQ5yUv1gBEeH3lqFJ3BJEfUrEbSSEwQR60g%3D%3D\"}]}\r\ncf-ray: 9b80b48f9abd712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2521,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"67e87a046547d37d3d6ff7c1457d99a0","sha1":"912d5edfe351304cd868fa2a6cf82c8a766c345d","sha256":"d475374d44a909777d599d557b1f386d521c6611d21c396beb1c43d6606274d4","sha512":"4c4b842b334c7d62b3516652ab86fc89633f087139e4bc55f9a65ee5b3fe4fadb414c8279a42235ade342587bb0b1be84d1dcf0d6c1c7b578dcfe06e4e1a529b","ssdeep":"","tlshash":"74510ae24e5da83aaf4f601dc9ce9a106a631c3c2a8131595ce8be1dd6b2e224749537","first_seen":"2024-12-06T22:27:57.086375Z","last_seen":"2026-07-17T09:57:30.943107Z","times_seen":157,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__180.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__180.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2501\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aXkShsw2jfrJsYkMUEDWwXInGq41kbnfOUaBCOVk2Da%2FsHryn608GjUvK5TFKjGsNV6k8vqNeAvB6f1E%2FdhW6d%2FJekmuZQ7Yfw%3D%3D\"}]}\r\ncf-ray: 9b80b4901af1712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2501,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"8e9ec66f80915f8c5766545d02c40a17","sha1":"a79d55e49aca03a2b3301df15110716dfe39d5fb","sha256":"d09935298290d607f4ad422dd60e9b77b2d5c958435b48e9200d8d6d0dbf6231","sha512":"8c26c93a7e7d53ff6f534a6a97dbe82cca0f84fc2eccf2ddee82d68f86ec4d84d089b636b1c947533d34b1582194feda318ead2b53a9b7970f505dc25209652d","ssdeep":"","tlshash":"d2511b84d8f972aa11d354f454c1eb8598b9bef81c1a774770253e2e64310c6ce7c8be","first_seen":"2024-12-06T22:27:57.09193Z","last_seen":"2026-07-17T09:57:30.978735Z","times_seen":157,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__187.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__187.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2543\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bH5fa1ZhWiJHoaNu4cbiw9nqDAiQSIP6SEiEWiNsp40C6%2BO0r4uG2sJUFQexR2wxr5kA%2BxNn5sjabcb7E4PT%2FbqMFuVoRlh%2BQw%3D%3D\"}]}\r\ncf-ray: 9b80b4902af8712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2543,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"442debe82512cd5550528ce377bd5182","sha1":"92600a508ed36fcb763f6999b0fec6bf7fda6818","sha256":"619351a77b896faeb26aedc24c3c4a6b0ddf900f2be0b5fa56496fc7f1275586","sha512":"c9b5cb481d415c114f62a2c4d4b27dd27790a462df25a1550717ae9b1bcdd93676478f01bd672be56919fb0aeab91f5deedf01559af93b8abb61bd794a5a8e40","ssdeep":"","tlshash":"cc513a16de6474f959d86632a53305a01380df11b98bb550d30aba877bb3405f86451c","first_seen":"2024-12-06T22:27:57.093947Z","last_seen":"2026-07-17T09:57:30.950573Z","times_seen":157,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__198.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__198.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2452\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Iz1vlFZQu6ea9y7aLqCCzQ8Q3MQ3WaxcvwzpNrMWdeBL38XczGCzsPCWy1RO6rIY2uvwbFkeAwzrSIf%2BsYkOsKJRauR4MxzNOg%3D%3D\"}]}\r\ncf-ray: 9b80b4904b03712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2452,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"2172cc0521a905b8a287030e0c6a4d86","sha1":"89aba1cad3b13ca2e4906e37d846f83adb6a0c0d","sha256":"e1ba04dc4d4e4a772e0deffd14e24d2653ed0800b3c02bac58fbbc570abcba23","sha512":"5fc1830df97b2087c97d45182fb45302d406a53fee1dfa11b1a3d0aa848ca277bd2e41b094d9f72f7aa49918910d518e0c9365a50ebe5081596161b14fc8842d","ssdeep":"","tlshash":"43516ddd58140a23366649ac9b99e3f1320a7fe95e0bd0043467f2be8f728cd01db504","first_seen":"2024-12-06T22:27:57.088699Z","last_seen":"2026-07-17T09:57:30.94974Z","times_seen":157,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=TONUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.164.248.171","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 13 Dec 2024 00:00:00 GMT","end":"Tue, 13 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:5E:B6:FE:3E:A9:63:38:16:AB:57:DA:E0:4F:51:4B:FA:2B:49:43","sha256":"AC:E7:4C:8F:D2:FB:EB:5E:41:DF:BA:9F:C5:FA:44:FB:25:36:FD:A5:BF:21:D1:F5:3B:AF:7D:14:A3:D8:FF:37"}}},"request":{"raw":"GET /api/v3/klines?symbol=TONUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://puffdex.com/\r\nOrigin: https://puffdex.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1166\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 80ac9b2e-a42f-486b-8697-8cc698cf644c\r\nx-mbx-used-weight: 22\r\nx-mbx-used-weight-1m: 22\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 784f462b4ee4e847ccfe44db65f51a9c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: hkj1wKZNkHytChRoKFrBzU5xL9IF9DpwSuBzz8vbLKh1LcoI90HNrA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3923,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1f167000b828088ed844385edc40839c","sha1":"334185e76e2f232a7765fa487b0669af4ffd105b","sha256":"c1267279fa9a5175db25553327374795a60fc92158f059baa548a736bb0ebea1","sha512":"41f80dbaad9099cfe339700fc9cb8b23a11f54eb08ff1dc5b04a8b0b5624722d4dc87843b702aac81ec37ccc8ab0a21c84322499ed98099148045d12a6f486d2","ssdeep":"","tlshash":"0181f852134cc274fa3a884a37a2fd95997b7017eecb4fe8959236a3f8f04714209f16","first_seen":"2026-01-03T07:16:21.822109Z","last_seen":"2026-01-03T07:16:21.822109Z","times_seen":1,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__140.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__140.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2530\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d%2F28pHcqveAwoWIcVbU8x8ChSfXxnaAQUnqshpKL12rYqLfFSPY2QuFdrqt3gkD0nOGXmoCAnBW4DyF2lqmc%2B5PSLiIh5pZ5Mw%3D%3D\"}]}\r\ncf-ray: 9b80b48fbac6712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2530,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"e13151c32d29b50f25e946b72ccac569","sha1":"c49420114727d2a20799004c47d43960a25c1d0c","sha256":"4f1d41a99c167e12b07ee5b919683497ac4fd3b1a456020714e9640eab28419e","sha512":"1297a1f11e1779a678cc91bd36a137eca7f47b0e513208ab62ed24e365261f0ed023c97e444490e24f103f8791f404aae2280ef5b1792d9c74a989181dd655f0","ssdeep":"","tlshash":"74516de9bd256c29ff8f9d1fc5d01986dfe48c07816c251e744276e892f6c08ebb08a5","first_seen":"2024-12-06T22:27:57.090895Z","last_seen":"2026-07-17T09:57:30.960505Z","times_seen":157,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__179.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__179.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2530\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1krnPONZSZi7QguXnqQRfYRX3Ndvneil5gvCITBp0FkXGHHUMbCzygg9N5lkc29bV6VtWepCMEePp0Be9fYnDPOfM%2FsaatHpdg%3D%3D\"}]}\r\ncf-ray: 9b80b4901af0712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2530,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"e13151c32d29b50f25e946b72ccac569","sha1":"c49420114727d2a20799004c47d43960a25c1d0c","sha256":"4f1d41a99c167e12b07ee5b919683497ac4fd3b1a456020714e9640eab28419e","sha512":"1297a1f11e1779a678cc91bd36a137eca7f47b0e513208ab62ed24e365261f0ed023c97e444490e24f103f8791f404aae2280ef5b1792d9c74a989181dd655f0","ssdeep":"","tlshash":"74516de9bd256c29ff8f9d1fc5d01986dfe48c07816c251e744276e892f6c08ebb08a5","first_seen":"2024-12-06T22:27:57.090895Z","last_seen":"2026-07-17T09:57:30.960505Z","times_seen":157,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__209.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__209.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:30 GMT\r\ncontent-length: 2574\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6jo6uaLZDQcq85fhqnqMFJLDeUIhAs2Qz%2F8vMWxEA%2F0GFSuZPsSaWzn%2FQUAPZVFm0F7PcuLH9b7CWAj65VfJdyWZvapjoPUL5w%3D%3D\"}]}\r\ncf-ray: 9b80b4906b0e712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2574,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"8d591f68a09077fcafa0b05ae40473e4","sha1":"add27caff55e10c8205e31004ecabd1a5a6cf0df","sha256":"9b427e6c8f08fcda3b6057a2185b63759c319e3f83b40ff8d0871baf34371544","sha512":"883433f2368e70edc09e30d0eec94507c5ee61bd8bc4051145c29a6132650e63d19ff72572219ebe238f1cf294431bd48e014ddd4b66b3fe0f89636257b953d5","ssdeep":"","tlshash":"9d512abfeac30d80e79941629665c4bcd7c26e10e4c33f67506abb22a0b0450f02c9e3","first_seen":"2024-12-06T22:27:57.09293Z","last_seen":"2026-07-17T09:57:30.981761Z","times_seen":157,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=SOLUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.164.248.171","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 13 Dec 2024 00:00:00 GMT","end":"Tue, 13 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:5E:B6:FE:3E:A9:63:38:16:AB:57:DA:E0:4F:51:4B:FA:2B:49:43","sha256":"AC:E7:4C:8F:D2:FB:EB:5E:41:DF:BA:9F:C5:FA:44:FB:25:36:FD:A5:BF:21:D1:F5:3B:AF:7D:14:A3:D8:FF:37"}}},"request":{"raw":"GET /api/v3/klines?symbol=SOLUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://puffdex.com/\r\nOrigin: https://puffdex.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1265\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: c283f448-a5d8-4245-8b57-5edcb115df77\r\nx-mbx-used-weight: 4\r\nx-mbx-used-weight-1m: 4\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 784f462b4ee4e847ccfe44db65f51a9c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: vcK-L517_a9Mxt9FXWXpZ4K9ZFK1AujmH5tYUyWWIvvIFSZanLd5Dg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4165,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"e033ba7808a6a1808b140687a4ca18a5","sha1":"aa161bd194f2c7ba956a505d69ee7f3b2bed04dc","sha256":"3a233b5f3a2f51133ab736c4cb81de543a08e559bf01a8177075ce1fc6342328","sha512":"6ff17afe1dafed76a882fad1a964c65bda50c3d31d2119a020d0673f3ae234dee2f3fbd6a88ed40fba21d4454cff9c0d372db931735761dc88f59df75d719de3","ssdeep":"48:iJcD7NWBBLZopLtI+d6nnBPlatd4UfpCca+u5WXjEOlSontBkuAkmn8uRuY4vCU9:cRBxZo/jINlapVLX3W11CTFznb","tlshash":"5c8147411389c3b4fab99d0e33e3bc648e1a705aedcb5ce0c9a03ba748f19b50b48705","first_seen":"2026-01-03T07:16:21.776588Z","last_seen":"2026-01-03T07:16:21.776588Z","times_seen":1,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=XRPUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.164.248.171","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 13 Dec 2024 00:00:00 GMT","end":"Tue, 13 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:5E:B6:FE:3E:A9:63:38:16:AB:57:DA:E0:4F:51:4B:FA:2B:49:43","sha256":"AC:E7:4C:8F:D2:FB:EB:5E:41:DF:BA:9F:C5:FA:44:FB:25:36:FD:A5:BF:21:D1:F5:3B:AF:7D:14:A3:D8:FF:37"}}},"request":{"raw":"GET /api/v3/klines?symbol=XRPUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://puffdex.com/\r\nOrigin: https://puffdex.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1257\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 4fa6112e-e631-49dc-a8fb-9286faa406fd\r\nx-mbx-used-weight: 16\r\nx-mbx-used-weight-1m: 16\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 784f462b4ee4e847ccfe44db65f51a9c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: ps3yxmsc8bFdEqGLsSHIxoErW25nAW_1clgMYDu25K6qddzP_A9wRQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":4049,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"9096cf739b8847f80341d6bf8cbf7e57","sha1":"cd6ef51b16ee5ad4ed3eba80146ad472d7f5c49e","sha256":"4c33319801890d0c9460b659f6d1cacb9a1f1e62e5d209348e7629f8888163b2","sha512":"2213847ede18d83367ca6a14a550f50043083ed62e089a0a7cb6c7b60366a0724dd536926c76d5d9e60e88de4cfb398ed3980e42b86a8995584e893029f14dfd","ssdeep":"","tlshash":"d381385103a4c370f9398d8a2396b9a2557a345eeece5fd4859136eb68f15710b0cf07","first_seen":"2026-01-03T07:16:21.823089Z","last_seen":"2026-01-03T07:16:21.823089Z","times_seen":1,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__35.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__35.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1082\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E2vlaMtyBUiwqr6H0gzxLoaOVCwxf9EiollboA8Mj1c8K5lOvAaqhaQOYHCbmrAHE4S0S40Dh6VIGXJfYSmRJZyw6XhmN4UO2w%3D%3D\"}]}\r\ncf-ray: 9b80b48dda34712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1082,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"67fe2793ea27441b173869a156d3a020","sha1":"70adef4cf030eec04027921efeb86583552fc2c9","sha256":"f748c5cdbc3c42753e90626fa56cc20408ee32a570986f4d40985f237daf8bbf","sha512":"d9b0b37ab89684c5a38661f8d4ea08af23dac9639549845d72f2f0b69d14323f6f9f93e634e43150e2f05dff4ba1604338cf873c87c4cab97e3c66d5cbb9fe98","ssdeep":"","tlshash":"1e11b7e1e2d02a17c8e4d9be2326207f9b441d165388278e860ab358273b1c9d07f4b7","first_seen":"2024-12-06T22:27:57.073178Z","last_seen":"2026-07-17T09:57:30.949254Z","times_seen":157,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__210.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__210.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:30 GMT\r\ncontent-length: 2574\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kJ%2Bisa7svTT7hm9XSpPII8CJcDeM8RyYEKDVsRlkbhAW635onrNj6Pu2MmcfwBRY8PveI0d1c2SL%2BkOeZCoqdn0pgQWeD5gEag%3D%3D\"}]}\r\ncf-ray: 9b80b4906b0f712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2574,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"8d591f68a09077fcafa0b05ae40473e4","sha1":"add27caff55e10c8205e31004ecabd1a5a6cf0df","sha256":"9b427e6c8f08fcda3b6057a2185b63759c319e3f83b40ff8d0871baf34371544","sha512":"883433f2368e70edc09e30d0eec94507c5ee61bd8bc4051145c29a6132650e63d19ff72572219ebe238f1cf294431bd48e014ddd4b66b3fe0f89636257b953d5","ssdeep":"","tlshash":"9d512abfeac30d80e79941629665c4bcd7c26e10e4c33f67506abb22a0b0450f02c9e3","first_seen":"2024-12-06T22:27:57.09293Z","last_seen":"2026-07-17T09:57:30.981761Z","times_seen":157,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:28.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://puffdex.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 19:22:36 GMT\r\nexpires: Wed, 30 Dec 2026 19:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 301972\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-01T18:55:04.597189Z","times_seen":952218,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":95,"dns":1,"connect":7,"send":0,"wait":8,"receive":10,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxiaguang.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxiaguang.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1135\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ors13GuvTYdOqsA%2BPbVzEUlxbgNFqRWcMtqVK3BJr22vMtHn%2BlqjDw0TjBKhUHrUdBbP8ejvo7IGlFLKU%2BXbom%2FAIpxABMIJ%2FA%3D%3D\"}]}\r\ncf-ray: 9b80b48d1a09712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1135,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 120 x 80, 8-bit colormap, non-interlaced","md5":"e83e9febed063035e9be9010bef47f2c","sha1":"a626fb28dc9223ec6f98055e49a87b1d365c521a","sha256":"90635677d137fee428a6911c7280d02b974d8d9d45dc61a5e58b7607a2f0154e","sha512":"1c909f4224c7ff5fd948160d81702730ad3760b8694cd43fd0e84da59b344d7758700d01a995c24f12d6b5f2fc5b7e73c7b62d223a8ca82d3ffe6bd661ec315e","ssdeep":"","tlshash":"b721655bf645469c8ebf1da12a8ece1fe0760242e4c5db1bf8dc24674c3f5833289166","first_seen":"2024-12-06T22:27:57.062647Z","last_seen":"2026-07-17T09:57:30.988187Z","times_seen":168,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__89.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__89.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1161\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ON47m0B0Sm%2FDI8gT12CqgRo1EqigupMwC9pTddgiH0OS1cG6iwIezbOqMeg9NAabOnzvc5dgwWKK3c5Ox8f0ioCqo%2BC74jgUVg%3D%3D\"}]}\r\ncf-ray: 9b80b48efa92712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1161,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"e50c044ba3552cd6cc0360be3b1c8556","sha1":"c62adf647bc3b965624b60c571c8bc3cdb94305c","sha256":"8c4a348cd473994e5b0569588bd3997085eb51e0e434959379ed8b0c6f29312e","sha512":"0cb3f436341349091a811a3ba791decc54759c64a87474c38f506aa9f4bcffb08502b17855155908f0e2e291a27d2d9e44f0c84327e9249f182b7da7a753d0cb","ssdeep":"","tlshash":"a921a84d9a4170e0e9b91c050a161130814bbd241d276b4f9a7d3faa3636bba44fd015","first_seen":"2024-12-06T22:27:57.082236Z","last_seen":"2026-07-17T09:57:30.973126Z","times_seen":157,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__141.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__141.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2501\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F8cIIDLQ0MGjjUF4faGxtlIx%2FHwUqxfgKc11XYyNmiOjsSeksDFds%2FkZJSgUAUb6GaeDhuEbOAJ4%2BOGNDQnMZ%2FDZls7T5PHLxw%3D%3D\"}]}\r\ncf-ray: 9b80b48fbac7712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2501,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"8e9ec66f80915f8c5766545d02c40a17","sha1":"a79d55e49aca03a2b3301df15110716dfe39d5fb","sha256":"d09935298290d607f4ad422dd60e9b77b2d5c958435b48e9200d8d6d0dbf6231","sha512":"8c26c93a7e7d53ff6f534a6a97dbe82cca0f84fc2eccf2ddee82d68f86ec4d84d089b636b1c947533d34b1582194feda318ead2b53a9b7970f505dc25209652d","ssdeep":"","tlshash":"d2511b84d8f972aa11d354f454c1eb8598b9bef81c1a774770253e2e64310c6ce7c8be","first_seen":"2024-12-06T22:27:57.09193Z","last_seen":"2026-07-17T09:57:30.978735Z","times_seen":157,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__169.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__169.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2605\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e80v%2FVmqzsEeiweJ8aMPA9h2q2LeEMQWRuILp%2Fh6EK%2BBiogexy44ZOUEQ8iPmVPQ0SqfaU3IIohIC7XhMsG2MvP5QfqDGrYfkw%3D%3D\"}]}\r\ncf-ray: 9b80b4900ae4712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2605,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"b28e49aac00b6054373887a863314cac","sha1":"e8d65a43411cc569823097105a78b44e238dff8a","sha256":"faa834f50cdf37acf578c2c4f2e9df776e20978cfa419d5315a9b5e23b5c4f74","sha512":"8524d75aa0e1234bfce1305b1a3c5bf51638bba864cb1bd4c1003030e867176a379673ea81a054c413749db2bb4c1f5c056dc81a1e91495f66cbd0d2a7da38ef","ssdeep":"","tlshash":"ca512b96f27184c9e7a57643a7e54003a0263c964454489caecabf915f7f05a5847b06","first_seen":"2024-12-06T22:27:57.087555Z","last_seen":"2026-07-17T09:57:30.979222Z","times_seen":157,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoshangguang.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoshangguang.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2385\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Drv9QnNeFcan9Pou3W%2B%2Bexl0v1WvHjT1nOaSLtr694a%2BJ0AX%2BDAxrCqKnh%2FcecBytlnX41pgJbrYL7FYa%2Fs0sEvQafCYXDEqA%3D%3D\"}]}\r\ncf-ray: 9b80b48d2a0b712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2385,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 219 x 134, 8-bit colormap, non-interlaced","md5":"c09c80f27f03e0af5ef4d8c1cb71ac34","sha1":"175cbbab84c13f8d870012c9b5b43bde3dc6d870","sha256":"5e58c88cf547d41e4c3720aaa61dfef8e9cd6212ccd1a486f3ccc75d0d2bf2bd","sha512":"a3ac3849f8acf8587d332159989dad0064c1d0c0a57620d0e6e7e904c77a8eafb3dfdffdbbec28ef2a828df13d9ff9c0a04c40706d791ccc1dcbc33d3286afd7","ssdeep":"","tlshash":"404119a273690099da5f122e9b59fc627d1041479ecca0fb9d0f45b35fb3309f18a148","first_seen":"2024-12-06T22:27:57.06904Z","last_seen":"2026-07-17T09:57:31.01582Z","times_seen":168,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__48.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__48.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1082\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VqiFx2fohh6qL6yL2tVutnOzvqokLsPHPgvT9nYdFv1a0PMxh3zwM7lpE0WYFopOYKfJRtX0ZJ%2FBFpVPiuiTfIfP6FyuwRIYXg%3D%3D\"}]}\r\ncf-ray: 9b80b48e3a63712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1082,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"67fe2793ea27441b173869a156d3a020","sha1":"70adef4cf030eec04027921efeb86583552fc2c9","sha256":"f748c5cdbc3c42753e90626fa56cc20408ee32a570986f4d40985f237daf8bbf","sha512":"d9b0b37ab89684c5a38661f8d4ea08af23dac9639549845d72f2f0b69d14323f6f9f93e634e43150e2f05dff4ba1604338cf873c87c4cab97e3c66d5cbb9fe98","ssdeep":"","tlshash":"1e11b7e1e2d02a17c8e4d9be2326207f9b441d165388278e860ab358273b1c9d07f4b7","first_seen":"2024-12-06T22:27:57.073178Z","last_seen":"2026-07-17T09:57:30.949254Z","times_seen":157,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__92.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__92.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1129\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v5YUHpXOb97cry15hZJrqgG4AQw8plsRd76v9yzCcqnIrSmln3QHyVb6YLHZc60eAD067CxNaB3PG4Jpsj%2F%2BcmnIze8%2FcXY94A%3D%3D\"}]}\r\ncf-ray: 9b80b48f1a95712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1129,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"3cbff16023a3738f74fa0f3c620ee35d","sha1":"e4cde715e08c03d9178230a74b666ddb6acd8a81","sha256":"68245287bc0046e97ca7010a57ca6845265b7783db419585cd865e7e5b65f0fa","sha512":"86f1063d01cad2508a7938022a6c1cd2256cb81f4fb0b033c768211a3683e902448a2175ea35f66740c45cf0694ce539027b008d8892f44ad0edc50d12cd06c8","ssdeep":"","tlshash":"272165aa734dac789b882753a348562c96994d292a610623d5e77c0f59f720e8d90750","first_seen":"2024-12-06T22:27:57.064878Z","last_seen":"2026-07-17T09:57:30.95355Z","times_seen":157,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__113.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__113.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2519\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OA81VyYPNp%2FPvtyWy6pm1y6lFpjYS4yNZb55IJERCI5a2C9XECCYIP5XnsYlf1wG0GaCxpXmARmZBJxcGXWRdIAdIaK8MUXqgA%3D%3D\"}]}\r\ncf-ray: 9b80b48f5aab712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2519,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"adf7ea7ba32b52d9d1d351900e3acadd","sha1":"8c7d2d33fac5ee6c836ab2f6f9fd9e78d8ee3d14","sha256":"9a2498779f3d889c8e2260202d6186a1124cd743c0a3bb2c8cf1e64d66f59705","sha512":"21b7aacbdfa49415ab52660015328593646af45d26161956b9f3a14e096cb80c58d2e15306e134426ae922d8d6f85465e281cbcb0a9fcf8a4d4c8b025f6ca255","ssdeep":"","tlshash":"98511b83f4fbcf7788750a0b0a4a120103577d259275899bde857c9722fe0bfa25c015","first_seen":"2024-12-06T22:27:57.096118Z","last_seen":"2026-07-17T09:57:30.970028Z","times_seen":157,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__144.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__144.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2521\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3iQeS4VO3hPl5qLg1HpE8ZTruM4iDJ7vaGNvaIoOfM44DEVkavAaBzYqtFjM4XaPUV0keRP%2Fhq%2FtarpSS7cnnorasrYtLWbytw%3D%3D\"}]}\r\ncf-ray: 9b80b48fbacb712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2521,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"67e87a046547d37d3d6ff7c1457d99a0","sha1":"912d5edfe351304cd868fa2a6cf82c8a766c345d","sha256":"d475374d44a909777d599d557b1f386d521c6611d21c396beb1c43d6606274d4","sha512":"4c4b842b334c7d62b3516652ab86fc89633f087139e4bc55f9a65ee5b3fe4fadb414c8279a42235ade342587bb0b1be84d1dcf0d6c1c7b578dcfe06e4e1a529b","ssdeep":"","tlshash":"74510ae24e5da83aaf4f601dc9ce9a106a631c3c2a8131595ce8be1dd6b2e224749537","first_seen":"2024-12-06T22:27:57.086375Z","last_seen":"2026-07-17T09:57:30.943107Z","times_seen":157,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__175.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__175.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2459\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3G9%2BzTbm05L%2BsaVjwmnhBgr1%2FErVxt8mnRCuCGQ7AS91yZGAK3yuKWSSY34vYxvIPeIneZOC%2BRktx2ZY4dnT8WYwuAku%2FPLW1g%3D%3D\"}]}\r\ncf-ray: 9b80b4901aeb712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2459,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"50741bfc626893d14d4b6595b62f3f43","sha1":"9d1b22f81824acda4d3303ff04094aa50e2c6e62","sha256":"5673c4c4033a61d6d2caffb525d3c013df04e34ff6ebe26e98c751312b7b8d92","sha512":"0a78cb039cb36f9aea9a47ca774efd0654408520a3b61b42e8861793e34559ec77a2e3dd16032283534b20261e3d8c1d86ac20e937058c5535bc176dbf6b9016","ssdeep":"","tlshash":"f35139c3fb1580a163472eebcaa19c6d015f4f25cca520f75201b1a971fc09a5fe96ed","first_seen":"2024-12-06T22:27:57.095029Z","last_seen":"2026-07-17T09:57:30.947031Z","times_seen":157,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/img/header/cross-rates.svg","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:28.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/img/header/cross-rates.svg HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/svg+xml;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:28 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vhnJ3eRvkk22Ea%2Biru%2BvYyrPZKlv5ikIDMUTEfil8PnaBIWLVn8PplYGVci7f9%2FYV5kpUIRSkNoCXw1K5cb5ssyy03mRDm1Nxw%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9b80b486b9b2712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2959,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"9197cda83fe8496d926173548214b18a","sha1":"275be8becf5bf35748b30715fa16a23a3b1fab61","sha256":"f10b465bb31a5e56f2cffb2e43b2dd222b17387ed9ac48e0c8669ee0abceae0b","sha512":"b4ffd9827f1dfdd795497d16dcc6bf068f132162ffadc7f7ce641171e7478e933efd49b8c56e53a33b1810bc6c57060b8245b52378d557178a274fd5c88829bc","ssdeep":"","tlshash":"30510a43e378e674bb4cae5d71503a50667114bbfa30808887b61f6e1c437d7b284d35","first_seen":"2024-12-06T22:27:57.041928Z","last_seen":"2026-07-27T14:59:58.483796Z","times_seen":272,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/lvdi.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/lvdi.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 32577\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z7pgVSz51F8idPVrziuZ%2FSoBF4nDJenGrxrxHxkW1W0r5uKqC5Bx8tIotZDTd4tdzvDx4x6p5syqSbeTa83AgXMMvOYSVD8eMw%3D%3D\"}]}\r\ncf-ray: 9b80b48d2a0c712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32577,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 1076 x 611, 8-bit colormap, non-interlaced","md5":"65e59a05227686e74018c7aa1e77a96e","sha1":"a4e3a8290f3431092dd3f4c291170d834bec9f51","sha256":"607065c74f9dc4846d13d05fd91a4c78be4e94957a4d64a2eb3141bade8ffd68","sha512":"cd06aa98c2a83b85885ed0496cd1c1149ddcb98cf6659c516ce4f630ceefdc8f201d918f4b4f92b525c9ee2770bcba9be7db8964a3936ab2aa1d386c99c7f586","ssdeep":"768:Kiw1ZWPrjVJaUDNaJpbzMM+Xxpre4UdrIQi6:KiEWHupbzj+XXrbUd","tlshash":"f2e2d11880096e01c28fd8f9ea85d5c28f3f50cb46f86997a115cae724afd7f5862e35","first_seen":"2024-12-06T22:27:57.077254Z","last_seen":"2026-07-17T09:57:30.94455Z","times_seen":168,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__32.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__32.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1146\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BEDnbUUMrR2MBwZ0QDkwI1pIs%2FLCu9URml%2BZgGBsROw8ZpBmodlFVaetUMegVXz65fexCM1oFjlnuwgNyXa6tGNTQSguc7ZaEg%3D%3D\"}]}\r\ncf-ray: 9b80b48dda31712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1146,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"8a6d89eeb884ff17869546bf9363d8b1","sha1":"5884c7083b9e71f8f5c436a82d4f79e84deedf69","sha256":"7eaf8fcc7b9b9326219f5b2f37e8135c7ae5960f07ea48594445710045c9ff18","sha512":"7309ccd0af2423148f1a2ffb5230abb880b52cfe5196a10d036ddf6eae918c61f78d3284fbcfbcbb773b11690f4f5684eb5ee13eec9fd279d43f21f590007973","ssdeep":"","tlshash":"2d21a5b72948f49ce939b9d11131b0b1864e9f60154f34fb10c7b1218bb020d6eaec61","first_seen":"2024-12-06T22:27:57.080393Z","last_seen":"2026-07-17T09:57:30.96439Z","times_seen":157,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__39.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__39.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1165\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z7tP6JEE77WMe3%2FxMeomiAJ%2F3XQYukpSmKIMmeHiCkdbTwE3EU4OFn5ne5aPbxH2IJWQwjAVKocoir3pLUTZW4GUodJeT9WgEQ%3D%3D\"}]}\r\ncf-ray: 9b80b48dfa47712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1165,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"50333973529f140a38862b5e59223c23","sha1":"ca772352821ce63cc8d52b58b4dff1bcbe92b6d6","sha256":"ae37bc4c761654d71faa919cdb2bcc500d39f14f3747c2124a67f7eafe4116e3","sha512":"93152b60013a15a74c510b75bf4c4d11f27cab49234bb7980c9bb245935673d6adc119cf598a648c29ba5bfad9e4cf730988f224e352cab3c65728fe9318bfe8","ssdeep":"","tlshash":"9121a5f530731d399a089789f51c68b85d126f08ae9496164444f8f4f8f6b49e048ab2","first_seen":"2024-12-06T22:27:57.061496Z","last_seen":"2026-07-17T09:57:30.946495Z","times_seen":157,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__50.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__50.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1161\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L6WQkyInDVYGLknQF%2FOWnCwC%2FV28jcg3IsbqBj7ygIAMB%2BW9j7CL65W%2Bdw9%2Fy58zcZIBLObuxA7A%2Bs7%2Ftv%2BTN9buhFOiEB5ZpQ%3D%3D\"}]}\r\ncf-ray: 9b80b48e4a65712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1161,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"e50c044ba3552cd6cc0360be3b1c8556","sha1":"c62adf647bc3b965624b60c571c8bc3cdb94305c","sha256":"8c4a348cd473994e5b0569588bd3997085eb51e0e434959379ed8b0c6f29312e","sha512":"0cb3f436341349091a811a3ba791decc54759c64a87474c38f506aa9f4bcffb08502b17855155908f0e2e291a27d2d9e44f0c84327e9249f182b7da7a753d0cb","ssdeep":"","tlshash":"a921a84d9a4170e0e9b91c050a161130814bbd241d276b4f9a7d3faa3636bba44fd015","first_seen":"2024-12-06T22:27:57.082236Z","last_seen":"2026-07-17T09:57:30.973126Z","times_seen":157,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__63.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__63.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1161\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eqmsc4O0ByPpAON1MgMILTWCZFK5iltjQu4j9O4yLo%2B7xp1XAZt%2FnsZ%2FP2B8slPD4VeCcJdGC3FUrdJn1G7jn40WYUOz4ByN%2FA%3D%3D\"}]}\r\ncf-ray: 9b80b48e7a76712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1161,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"e50c044ba3552cd6cc0360be3b1c8556","sha1":"c62adf647bc3b965624b60c571c8bc3cdb94305c","sha256":"8c4a348cd473994e5b0569588bd3997085eb51e0e434959379ed8b0c6f29312e","sha512":"0cb3f436341349091a811a3ba791decc54759c64a87474c38f506aa9f4bcffb08502b17855155908f0e2e291a27d2d9e44f0c84327e9249f182b7da7a753d0cb","ssdeep":"","tlshash":"a921a84d9a4170e0e9b91c050a161130814bbd241d276b4f9a7d3faa3636bba44fd015","first_seen":"2024-12-06T22:27:57.082236Z","last_seen":"2026-07-17T09:57:30.973126Z","times_seen":157,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__65.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__65.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1165\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L7CYu6xnkxPsZ81Mhsxcmug7vBtlJuXRxpq5Tjv41W9wNk0idByxXFlRMiAaMYETe6tYu3iMKTMDQgZp5vSXFLbV8skJpa4Yyw%3D%3D\"}]}\r\ncf-ray: 9b80b48e7a78712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1165,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"50333973529f140a38862b5e59223c23","sha1":"ca772352821ce63cc8d52b58b4dff1bcbe92b6d6","sha256":"ae37bc4c761654d71faa919cdb2bcc500d39f14f3747c2124a67f7eafe4116e3","sha512":"93152b60013a15a74c510b75bf4c4d11f27cab49234bb7980c9bb245935673d6adc119cf598a648c29ba5bfad9e4cf730988f224e352cab3c65728fe9318bfe8","ssdeep":"","tlshash":"9121a5f530731d399a089789f51c68b85d126f08ae9496164444f8f4f8f6b49e048ab2","first_seen":"2024-12-06T22:27:57.061496Z","last_seen":"2026-07-17T09:57:30.946495Z","times_seen":157,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__194.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__194.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2574\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=396qTqM34YB0C5mk5EgzzGe3nLn8%2BbmNg2RKTtBokqs9MK5LJ9PqV8yulhts6PTIPQs%2Fgbg3oDyiZ3uqc6asONq5ArblNyAvfg%3D%3D\"}]}\r\ncf-ray: 9b80b4904aff712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2574,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"8d591f68a09077fcafa0b05ae40473e4","sha1":"add27caff55e10c8205e31004ecabd1a5a6cf0df","sha256":"9b427e6c8f08fcda3b6057a2185b63759c319e3f83b40ff8d0871baf34371544","sha512":"883433f2368e70edc09e30d0eec94507c5ee61bd8bc4051145c29a6132650e63d19ff72572219ebe238f1cf294431bd48e014ddd4b66b3fe0f89636257b953d5","ssdeep":"","tlshash":"9d512abfeac30d80e79941629665c4bcd7c26e10e4c33f67506abb22a0b0450f02c9e3","first_seen":"2024-12-06T22:27:57.09293Z","last_seen":"2026-07-17T09:57:30.981761Z","times_seen":157,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=BTCUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.164.248.171","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 13 Dec 2024 00:00:00 GMT","end":"Tue, 13 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:5E:B6:FE:3E:A9:63:38:16:AB:57:DA:E0:4F:51:4B:FA:2B:49:43","sha256":"AC:E7:4C:8F:D2:FB:EB:5E:41:DF:BA:9F:C5:FA:44:FB:25:36:FD:A5:BF:21:D1:F5:3B:AF:7D:14:A3:D8:FF:37"}}},"request":{"raw":"GET /api/v3/klines?symbol=BTCUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://puffdex.com/\r\nOrigin: https://puffdex.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1425\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 06a0ca1e-58da-47cb-9cec-a28d4598b68a\r\nx-mbx-used-weight: 6\r\nx-mbx-used-weight-1m: 6\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 784f462b4ee4e847ccfe44db65f51a9c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: ygOhGpH84LLC9AzavU8sV9LWqlMFWceOOPTNBqmj2H00ZVSOY79maA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4295,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"790f4e6a5115e2fa579dbd2c0ecd3f2b","sha1":"1be8ccfedc51d00a7a2ee84ea4bb50c156b46332","sha256":"bc23a77fc4501d8d4fd7b9941c1b298c450a62faed2adb84556e1c374c92adb2","sha512":"f7b72b1fd7b4568e9b560fdbe214b74e3915f671356f228b9c449011328898f617bcc8df5b6e7f79e8a81532b91741e30dc5c7ca57a082d5fe3d4b47f5e58e3c","ssdeep":"96:6QDbu54fCJ8Wtr2RNQjAbytzJeULegl5IoS5TvIcigzZJsbmbFFVpD7:JZqJ8cAWcbiJH1l5IoiIchzZJimbfVpn","tlshash":"c8918f52134897b4fa39881f2bd7b9d149ab701addce4cf0edd326bb08e15b16a18306","first_seen":"2026-01-03T07:16:21.812239Z","last_seen":"2026-01-03T07:16:21.812239Z","times_seen":1,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/youxian__00000-00105__76.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:29.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/youxian__00000-00105__76.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 1161\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2AW0VfHD03eFDI9c%2BKm%2FRbo1CKvfLCUtO4qDoYcQe3cG5h8KnbDDRQy0pZlgKEuYlLwi9xj8zhA8%2B6w7AeWAePCZeeZv9AMFyg%3D%3D\"}]}\r\ncf-ray: 9b80b48eba85712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1161,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 151 x 92, 8-bit colormap, non-interlaced","md5":"e50c044ba3552cd6cc0360be3b1c8556","sha1":"c62adf647bc3b965624b60c571c8bc3cdb94305c","sha256":"8c4a348cd473994e5b0569588bd3997085eb51e0e434959379ed8b0c6f29312e","sha512":"0cb3f436341349091a811a3ba791decc54759c64a87474c38f506aa9f4bcffb08502b17855155908f0e2e291a27d2d9e44f0c84327e9249f182b7da7a753d0cb","ssdeep":"","tlshash":"a921a84d9a4170e0e9b91c050a161130814bbd241d276b4f9a7d3faa3636bba44fd015","first_seen":"2024-12-06T22:27:57.082236Z","last_seen":"2026-07-17T09:57:30.973126Z","times_seen":157,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puffdex.com/assets/lottie/img/zuoxian__00000-00106__157.png","fqdn":"puffdex.com","domain":"puffdex.com","tld":"com"},"ip":{"addr":"104.21.50.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puffdex.com/","date":"2026-01-03T07:15:30.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puffdex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Dec 2025 05:22:38 GMT","end":"Fri, 27 Mar 2026 06:21:16 GMT"},"fingerprint":{"sha1":"A2:05:83:D8:3E:FF:B3:73:11:E7:11:D8:6B:CB:0B:83:4A:F7:13:FC","sha256":"6F:9D:C1:37:18:AF:AF:C1:1C:07:74:5D:D6:5B:AF:D9:65:E2:39:8A:F8:11:DF:D7:A8:4F:B2:AE:4A:42:BF:E7"}}},"request":{"raw":"GET /assets/lottie/img/zuoxian__00000-00106__157.png HTTP/1.1\r\nHost: puffdex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://puffdex.com/\r\nCookie: JSESSIONID=ED31E2EBE9F866BCFC0ACF6B70EE320E; lang=en; cookies_accepted=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: Origin, accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 21:57:04 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-type: image/png;charset=UTF-8\r\npriority: u=4,i=?0\r\ndate: Sat, 03 Jan 2026 07:15:29 GMT\r\ncontent-length: 2521\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n8qdIti%2FzZBh67moeO9BZbVzk1o3SUKC1InXS5S13ZVnE64dFFlpEayLJcKTBS4zWlVW4iUZjkqZZtvfIaQ7p3D0Cqvld8pcRA%3D%3D\"}]}\r\ncf-ray: 9b80b48fead8712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2521,"size_decoded":0,"mime_type":"image/png; charset=UTF-8","magic":"PNG image data, 298 x 125, 8-bit colormap, non-interlaced","md5":"67e87a046547d37d3d6ff7c1457d99a0","sha1":"912d5edfe351304cd868fa2a6cf82c8a766c345d","sha256":"d475374d44a909777d599d557b1f386d521c6611d21c396beb1c43d6606274d4","sha512":"4c4b842b334c7d62b3516652ab86fc89633f087139e4bc55f9a65ee5b3fe4fadb414c8279a42235ade342587bb0b1be84d1dcf0d6c1c7b578dcfe06e4e1a529b","ssdeep":"","tlshash":"74510ae24e5da83aaf4f601dc9ce9a106a631c3c2a8131595ce8be1dd6b2e224749537","first_seen":"2024-12-06T22:27:57.086375Z","last_seen":"2026-07-17T09:57:30.943107Z","times_seen":157,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"puffdex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}