{"report_id":"a3087c2f-f939-4bf5-8b86-d35ce0eaa22d","version":6,"status":"done","tags":["scam","fraud","crypto"],"date":"2026-05-14T15:18:28Z","url":{"schema":"http","addr":"meridianyield.com","fqdn":"meridianyield.com","domain":"meridianyield.com","tld":"com"},"ip":{"addr":"172.67.149.63","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"meridianyield.com/","fqdn":"meridianyield.com","domain":"meridianyield.com","tld":"com"},"title":"Meridian — Yield Opportunities","dom":{"size":94321,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (23000)","md5":"da96c45c1f0b9282abde99d7b8aa3a83","sha1":"576285fae33682550f65e1aa12b667ff2cea2047","sha256":"06d6501bd9fbad2ae59391663128fa871d810a8308c05a96218f211896e44147","sha512":"7af26420ae429a28060e041835dab80785b1d755aa812dea92baaa5cc008a1ff6c358617c3e8ce178ff29aa9b1c50a79011b0ab8bb8ed0aa08a6be9231199308","ssdeep":"1536:0Jrlwac8gd6+Um39k/XcuuBwIkiYLgPNRShIbBLp46Y3:0JE39qguhqD46Y3","tlshash":"2f93e8306ae01076a83b83d677c6eb08b3949003d9365a19f9fdc049cfc6fad5616b79","dom_hash":"domhash024ec5356b88c1fbb3a0b2278d7db0ea","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"meridianyield.com","fqdn":"meridianyield.com","domain":"meridianyield.com","tld":"com"},"ip":{"addr":"172.67.149.63","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-18T15:18:28Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"meridianyield.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null},{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]},"summary":[{"fqdn":"meridianyield.com","ip":{"addr":"104.21.29.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":16,"request_count":8,"received_data":6643448,"sent_data":3471,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-10T22:17:57.86744Z","alert_count":0,"request_count":7,"received_data":179340,"sent_data":3799,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-10T22:20:44.526759Z","alert_count":0,"request_count":2,"received_data":38601,"sent_data":1063,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"min-api.cryptocompare.com","ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-11-03","domain_rank":433733,"first_seen":"2017-01-31T12:53:23Z","last_seen":"2026-05-13T13:33:23.253555Z","alert_count":0,"request_count":1,"received_data":780,"sent_data":521,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"serverok.xyz","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-25","domain_rank":0,"first_seen":"2026-05-14T15:18:33.899322Z","last_seen":"2026-05-14T15:18:33.899322Z","alert_count":0,"request_count":4,"received_data":113448,"sent_data":2048,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"meridianyield.com/shared/i18n.js","fqdn":"meridianyield.com","domain":"meridianyield.com","tld":"com"},"ip":{"addr":"104.21.29.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"14b5d8fca3b7ddf4ef918071ee6ded1d","sha1":"13d7d38c041c6fcc967c134eeb41df76a440b7fd","sha256":"00e324fd0e9d7dc25467b9ae74ae7bb8c84295cb60486053580fdfffaf3a7585","sha512":"be50413e87dab555d3f08ca79d8a5eb7c9c9de2bcf2f0b634f0cce6d3b12fce1e019c24f13032eb7cff66e0575a086b01d9d49f053a3312c6d37ce4e2da72be7","ssdeep":"96:UxkrNAzDSybNZ7D42P8HepYvCd1uEkk+GS3VCw:AvhVs2P8+ivCa7ZGSQw","tlshash":"61a1402e7af76076403360beabaf6a457035301b1449e9043f5c86501fc1c726bb2eee","size":4656,"data":"","first_seen":"2026-05-14T15:18:39.113843Z","last_seen":"2026-05-14T15:19:52.3742Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meridianyield.com/","fqdn":"meridianyield.com","domain":"meridianyield.com","tld":"com"},"ip":{"addr":"104.21.29.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0d89876dfbb8bfe9a943d613667f300a","sha1":"656d926db65ed9dbfc8feaacd3af589e0584e6b2","sha256":"6be0106844202785e21cc583774f38d106e9e9eb4985a1e3fd36ed2cd8900041","sha512":"10eee2752c93f43856e83e9f6877cb63685f2444c1d56a8da5b236969cfb287499352070d732b7e2cdf2870a6a801a85f2e246e97a889830db513e55d8566a1a","ssdeep":"192:56JLQganqcilR9RuVrHmYjvc9w7ie3oE0PYdo+qz+eAfhY84EIVFDElJjXndxVrx:54L2qBjm3/1kE73SW","tlshash":"d852d5ba3ae3347a743391ea514fa754397960134209e8007dacd481afd4c36ab79ff8","size":13996,"data":"","first_seen":"2026-05-14T15:18:39.127268Z","last_seen":"2026-05-14T15:19:52.388639Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meridianyield.com/assets/w-loader.js","fqdn":"meridianyield.com","domain":"meridianyield.com","tld":"com"},"ip":{"addr":"104.21.29.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b64ec349c7eeb4324f4e7c20eb7fc98","sha1":"c09046d05daa28ef73e4bf3b58bd6518ce98a271","sha256":"801d62fc02f89e7c1b414392e066dcda139ea3154cb3a48da721ff9a9df49f1f","sha512":"e92c61f409b0a56e41654c1f867089473bed649bf3a8d7167fd1a179993295863f20d0a63b20c5e2c20ba6ee55dab82802c06591cd39d188489a479deefc8b23","ssdeep":"768:sCoOXPhfU4Ui8YG7uOFQgauwF4ifTSQoc8S:SOXXwYG7XQTd4irgS","tlshash":"5b13b8f957a0a8f089a787d5aa131e09fa159c77c7624315f2bc274dbfd2e0cc806e91","size":41716,"data":"","first_seen":"2023-10-17T15:07:19Z","last_seen":"2026-06-06T14:52:18.36822Z","times_seen":376,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meridianyield.com/locales.js","fqdn":"meridianyield.com","domain":"meridianyield.com","tld":"com"},"ip":{"addr":"104.21.29.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"901c27fa93b188773cd9fac801ef1060","sha1":"f94e0d508503c3bdf7416acd044cb54d539d6ed6","sha256":"704e854432bc867ea259e00edecf33cefb3ab3dc87d8fa83acf06c2187f7e6b5","sha512":"2eda285edfaf6b76b408468fd8c3c1422ee2255dec5b3fe2d0f6f7fa01d1f8057ed60c36ee7100195f84341ec538344f33a9bf66f1cf2ea866d4f8cfa1d8db79","ssdeep":"3072:qYYIv1v+O4ik747+pGrY4zIrDII9mwBsEWofM2:qY/p+U73sAArBE2","tlshash":"a1c3fa1a58c1239545865392b2864553f32d8087ab48722cf7acc1295f8f4afd2bfbfd","size":123075,"data":"","first_seen":"2026-05-14T15:18:39.100122Z","last_seen":"2026-05-14T15:19:52.355373Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meridianyield.com/assets/w-modal.js","fqdn":"meridianyield.com","domain":"meridianyield.com","tld":"com"},"ip":{"addr":"104.21.29.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eed7d4b80780bb8adee3cbc67d7f98ff","sha1":"20f450d0eaf88312c005763e9036aeed80a225a0","sha256":"5e0ebe3158a15aba5a5e00e9bb2327769203ed6c28b6fd7aca2155d7e05cadc4","sha512":"66c43c8d29392d3e8435d8273fa23c2653e3cf4a36d875f97195100121e59ba73c1b8c7430c41a01a765893f4f0b97b3c153ede123d688ba3f00fcbe7fd74d96","ssdeep":"384:yuWDxb0OzbJ3vF/ll0blqHuCUCaDr/S1ziayMkrN21GecFZPtDQseaTrHyhfdsG2:KV39Nl08O/CaDbS1/k97rShZFc/","tlshash":"acf286f02bec12b4853f434376592d74bb1114fa9ebabf4575fe1a828f96e0c412a4d2","size":37639,"data":"","first_seen":"2024-05-02T20:25:27Z","last_seen":"2026-06-06T14:52:18.350701Z","times_seen":180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meridianyield.com/assets/main.js","fqdn":"meridianyield.com","domain":"meridianyield.com","tld":"com"},"ip":{"addr":"104.21.29.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae9178fc69743f15a528d9ee01cff4f3","sha1":"ec220ecd76d8e237bbdd0aa49a2977910b79763e","sha256":"7ce6f33d7e734bf7d4858c9b3148630e007441c4fa6380ea28468ab4d9bdb492","sha512":"0b660029d70372947199203b20a89009c7f177514a024c27804890ca53a8a6a5f64953b42a245f99e50f2f7e95cfc50a0d72f07e8a2ae0a809d660649e0cfcfa","ssdeep":"6144:CaOogEislmNzmAcrDx68K5Jp7a4AkhAkVCkXhnnGTi1+DgTpXxy90gjglI3bbAao:eopislmNzmAcrDx68K5Jp7a4AkhAkVCI","tlshash":"fc44d8105ea5989c234a5ffe7107bde0c80a395e25844dab9148fc25d2ebb63f7f4a34","size":276428,"data":"","first_seen":"2026-05-14T15:18:39.107423Z","last_seen":"2026-05-14T15:19:52.383781Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meridianyield.com/assets/modules.js","fqdn":"meridianyield.com","domain":"meridianyield.com","tld":"com"},"ip":{"addr":"104.21.29.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd7888c17d986b6122e6a9397cf907d6","sha1":"b4d8de352083413f9352fdb221525c81540a6a0a","sha256":"e531262f2af00276370279551348f4949a9d28b26af6be5f9a64cc496ac0b78a","sha512":"79f4a147849ba685e56a07f91c574d9970c5cb743ef6081fd2b4760e8656f760b92ead577d55004ab46158599d8c7cf554c3d53304070bf47b2ae97a2c944854","ssdeep":"49152:BC0EJoL7vMPaypp3JZ4CQmB0Rcj206bYF2Xi/Mf4hPGnN9EYtwkak9CGglx:Mmy3zQkA6mEwtwyjax","tlshash":"ff567dd073a0b0a5439752d0442bd005f339a82a644c449ff6efe8e76fa9e899537f39","size":6101525,"data":"","first_seen":"2025-05-16T16:12:44.565992Z","last_seen":"2026-05-21T05:00:59.324565Z","times_seen":80,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"meridianyield.com/","fqdn":"meridianyield.com","domain":"meridianyield.com","tld":"com"},"ip":{"addr":"104.21.29.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-14T15:18:05.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meridianyield.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 07:15:03 GMT","end":"Tue, 04 Aug 2026 07:15:02 GMT"},"fingerprint":{"sha1":"97:73:21:4E:39:EA:C1:2B:9D:31:B3:E9:8A:47:CD:6A:CF:F8:76:F7","sha256":"34:48:98:E7:6A:74:5A:02:AD:CC:5C:7E:B5:7D:C2:17:4F:4A:28:F7:D0:18:94:E2:39:59:61:0F:50:D5:DE:D0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: meridianyield.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 14 May 2026 15:18:06 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Thu, 14 May 2026 11:03:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5XglWmTe42GzNiDHW5BpKw9TQrPi1VoATEkIrODBu5FZ4mAlVw1ZOyp7Xag9NOAYbpYsPk%2F13tOB8GGdbktIQgc7wjtUkpqEznm487VfjB54XL3XpA3vdvfokbkRJxcEmHzQlg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9fbadf9f3f985689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51998,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (350)","md5":"b515b013360af1b36c6ad57c1225f155","sha1":"04586f33cf15590f291e5cf0f1ac185caed7ca40","sha256":"f27063be4e8a0a04a1634edb8316bb47582fccb333b70c7b601e5b7cb2ab1995","sha512":"f8eef9c56b384a5437e4fb196f0eddbb8249cdceff1d859b199c817469e29d8594bbaabd61f83cb399caed1d9413a5f9ab89bfc31b66fbfaaf9eb104b854fd46","ssdeep":"1536:iJrlwac8gdf8uOwIkiQfAVRHhIbBLp46Y7:iJqf8hqD46Y7","tlshash":"8633d525b6f011766823a7d5778ba7697358e103c10a86347aec4018cfc8ef5ab17fad","first_seen":"2026-05-14T15:18:39.096979Z","last_seen":"2026-05-14T15:19:52.351061Z","times_seen":2,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":19,"dns":1,"connect":1,"send":0,"wait":86,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"meridianyield.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"meridianyield.com/locales.js","fqdn":"meridianyield.com","domain":"meridianyield.com","tld":"com"},"ip":{"addr":"104.21.29.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://meridianyield.com/","date":"2026-05-14T15:18:06.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meridianyield.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 07:15:03 GMT","end":"Tue, 04 Aug 2026 07:15:02 GMT"},"fingerprint":{"sha1":"97:73:21:4E:39:EA:C1:2B:9D:31:B3:E9:8A:47:CD:6A:CF:F8:76:F7","sha256":"34:48:98:E7:6A:74:5A:02:AD:CC:5C:7E:B5:7D:C2:17:4F:4A:28:F7:D0:18:94:E2:39:59:61:0F:50:D5:DE:D0"}}},"request":{"raw":"GET /locales.js HTTP/1.1\r\nHost: meridianyield.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://meridianyield.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 14 May 2026 15:18:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 04 May 2026 12:59:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69f89826-1e0cd\"\r\nexpires: Sat, 13 Jun 2026 15:18:06 GMT\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kpqZMMTgQDn3HjD9uo%2B%2FTqBlzCmX6mjl2uwmXpjUVSdzWOYXzPuut1fnl%2B%2B1ylmhI%2FgnJEINFwZL9FmT3vH5bnVhTd0lV4JIYVbq3xxusAbkQ%2BrMy2s6OH7seY92Mt%2BUqMsaTQ%3D%3D\"}]}\r\ncf-ray: 9fbadfa0bae95699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":123085,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (531)","md5":"901c27fa93b188773cd9fac801ef1060","sha1":"f94e0d508503c3bdf7416acd044cb54d539d6ed6","sha256":"704e854432bc867ea259e00edecf33cefb3ab3dc87d8fa83acf06c2187f7e6b5","sha512":"2eda285edfaf6b76b408468fd8c3c1422ee2255dec5b3fe2d0f6f7fa01d1f8057ed60c36ee7100195f84341ec538344f33a9bf66f1cf2ea866d4f8cfa1d8db79","ssdeep":"3072:qYYIv1v+O4ik747+pGrY4zIrDII9mwBsEWofM2:qY/p+U73sAArBE2","tlshash":"a1c3fa1a58c1239545865392b2864553f32d8087ab48722cf7acc1295f8f4afd2bfbfd","first_seen":"2026-05-14T15:18:39.100122Z","last_seen":"2026-05-14T15:19:52.355373Z","times_seen":2,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"meridianyield.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"meridianyield.com/assets/modules.js","fqdn":"meridianyield.com","domain":"meridianyield.com","tld":"com"},"ip":{"addr":"104.21.29.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://meridianyield.com/","date":"2026-05-14T15:18:06.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meridianyield.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 07:15:03 GMT","end":"Tue, 04 Aug 2026 07:15:02 GMT"},"fingerprint":{"sha1":"97:73:21:4E:39:EA:C1:2B:9D:31:B3:E9:8A:47:CD:6A:CF:F8:76:F7","sha256":"34:48:98:E7:6A:74:5A:02:AD:CC:5C:7E:B5:7D:C2:17:4F:4A:28:F7:D0:18:94:E2:39:59:61:0F:50:D5:DE:D0"}}},"request":{"raw":"GET /assets/modules.js HTTP/1.1\r\nHost: meridianyield.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://meridianyield.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 14 May 2026 15:18:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 05 May 2026 20:58:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69fa59e2-5d1a20\"\r\nexpires: Sat, 13 Jun 2026 15:18:06 GMT\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G%2FABEr%2BvQmHVxGM5Zuz%2F9pD4stFaiy%2FcRCgL1FTC5x4BZtKeDJcbk5mKvqg0SEDrrYaV%2B%2B9u91C6n5vf3Ll9HhMIgXVzxZDm5pQL4YOXr50PEU9tmzwRmx536BpPjtv%2B1bt48g%3D%3D\"}]}\r\ncf-ray: 9fbadfa0baec5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6101536,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"3b213a32f63e7967e9c2a5535806df09","sha1":"2198e24da34b883543f6b2bb3b3e315cfc5452b0","sha256":"1c56392da634c53a1450bcebb75428d63339a9bdc0e7e4602c0b674dbf27696f","sha512":"1a44f17a2865c14c3570dffb931bdcf07e5d8b7670fcb5154d1088d6fd10d4406acab0e00d666528882f9d91abc635f96b139f64a467c540b695c2c69a70f8a3","ssdeep":"12288:BMGk0Eqoh8EYL7qjs30amseucfju2ZAyppl:BZk0EJGEYL7v0F7Payppl","tlshash":"c9254a8473a1f076439725a4543f100af239b86c384d446cf768eceb7da9989963bf39","first_seen":"2025-07-27T10:34:55.50581Z","last_seen":"2026-05-20T17:35:46.271227Z","times_seen":139,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":297,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"meridianyield.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://meridianyield.com/","date":"2026-05-14T15:18:06.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:40 GMT","end":"Mon, 13 Jul 2026 08:36:39 GMT"},"fingerprint":{"sha1":"7F:B3:C1:48:F4:27:B8:68:3C:19:02:13:E1:6F:23:04:AC:C8:65:17","sha256":"FC:08:6D:DD:C4:AF:25:5E:6A:51:A0:A1:4E:27:4A:FF:E3:A5:37:ED:A4:1A:33:C1:27:48:DE:AB:71:AE:5D:2D"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://meridianyield.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 10 May 2026 10:09:59 GMT\r\nexpires: Mon, 10 May 2027 10:09:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 364087\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-06-07T08:01:58.574778Z","times_seen":26854,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":114,"dns":2,"connect":15,"send":0,"wait":16,"receive":13,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=DM+Serif+Display:ital@0;1\u0026family=Manrope:wght@300;400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://meridianyield.com/","date":"2026-05-14T15:18:06.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css2?family=DM+Serif+Display:ital@0;1\u0026family=Manrope:wght@300;400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://meridianyield.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 14 May 2026 15:18:06 GMT\r\ndate: Thu, 14 May 2026 15:18:06 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12513,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"d6d5bd7b27d667440e49878ee07ecadf","sha1":"cc183d95384d1cdf08cd049a6e8d506487864bc0","sha256":"90638e335c287ade6486d63fff06fd9e7e1af9d021776a80d30a4c303208f1d4","sha512":"0708c57d09e5420ccf5c8737a16c3fa594b25b8831c92a4440e779375062c1e75f58e2e2fb995a998843f78dfa9021b33388011c6fd48e1530919d25f5bf3c69","ssdeep":"192:KODpO3/nkJi5V3PP8wiJDEV3WW89RJ8rV3118+4JlOV3MM8b/JGNV3TT80s:Ks/mkwU+ME02w","tlshash":"9342c990002be804eb470cd277ce7e3aad5e61567441d5ba5bfe1cd8addbd222320b5e","first_seen":"2026-05-14T15:18:39.104949Z","last_seen":"2026-05-14T15:19:52.360223Z","times_seen":2,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":109,"dns":1,"connect":21,"send":0,"wait":33,"receive":0,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meridianyield.com/assets/main.js","fqdn":"meridianyield.com","domain":"meridianyield.com","tld":"com"},"ip":{"addr":"104.21.29.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://meridianyield.com/","date":"2026-05-14T15:18:06.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meridianyield.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 07:15:03 GMT","end":"Tue, 04 Aug 2026 07:15:02 GMT"},"fingerprint":{"sha1":"97:73:21:4E:39:EA:C1:2B:9D:31:B3:E9:8A:47:CD:6A:CF:F8:76:F7","sha256":"34:48:98:E7:6A:74:5A:02:AD:CC:5C:7E:B5:7D:C2:17:4F:4A:28:F7:D0:18:94:E2:39:59:61:0F:50:D5:DE:D0"}}},"request":{"raw":"GET /assets/main.js HTTP/1.1\r\nHost: meridianyield.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://meridianyield.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 14 May 2026 15:18:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 05 May 2026 20:58:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69fa59e2-437cc\"\r\nexpires: Sat, 13 Jun 2026 15:18:06 GMT\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kDCeObEjDl5CCxE6eAXHjqiw7nWkU86HbJL1sfVJFBrNq96ceJLw%2FxvocnWzlWyZc4AHR4KLr7IagVU9KeqWZpOdpvzuANdm4yoetHZwT7hL%2FasOm1wcPUQD6s7Mw%2BM3hdb16g%3D%3D\"}]}\r\ncf-ray: 9fbadfa0baed5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":276428,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (64831), with no line terminators","md5":"ae9178fc69743f15a528d9ee01cff4f3","sha1":"ec220ecd76d8e237bbdd0aa49a2977910b79763e","sha256":"7ce6f33d7e734bf7d4858c9b3148630e007441c4fa6380ea28468ab4d9bdb492","sha512":"0b660029d70372947199203b20a89009c7f177514a024c27804890ca53a8a6a5f64953b42a245f99e50f2f7e95cfc50a0d72f07e8a2ae0a809d660649e0cfcfa","ssdeep":"6144:CaOogEislmNzmAcrDx68K5Jp7a4AkhAkVCkXhnnGTi1+DgTpXxy90gjglI3bbAao:eopislmNzmAcrDx68K5Jp7a4AkhAkVCI","tlshash":"fc44d8105ea5989c234a5ffe7107bde0c80a395e25844dab9148fc25d2ebb63f7f4a34","first_seen":"2026-05-14T15:18:39.107423Z","last_seen":"2026-05-14T15:19:52.383781Z","times_seen":4,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"meridianyield.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmserifdisplay/v17/-nFnOHM81r4j6k0gjAW3mujVU2B2G_Bx0g.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://meridianyield.com/","date":"2026-05-14T15:18:06.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:40 GMT","end":"Mon, 13 Jul 2026 08:36:39 GMT"},"fingerprint":{"sha1":"7F:B3:C1:48:F4:27:B8:68:3C:19:02:13:E1:6F:23:04:AC:C8:65:17","sha256":"FC:08:6D:DD:C4:AF:25:5E:6A:51:A0:A1:4E:27:4A:FF:E3:A5:37:ED:A4:1A:33:C1:27:48:DE:AB:71:AE:5D:2D"}}},"request":{"raw":"GET /s/dmserifdisplay/v17/-nFnOHM81r4j6k0gjAW3mujVU2B2G_Bx0g.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://meridianyield.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24744\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 14 May 2026 05:59:47 GMT\r\nexpires: Fri, 14 May 2027 05:59:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 33499\r\nlast-modified: Wed, 10 Sep 2025 16:58:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24744,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24744, version 1.0","md5":"c27d5a47c09ebe91c013817e32b69043","sha1":"3d2a435525b8b356551cce6d09a86282a4e598d8","sha256":"fdf61e20fd2c0108e0ea28da4daca0035205b4b7fc031a3974b865b704de160a","sha512":"869245b6bd6a148eb79f10b5c2b56f622ff00a1ecaf0e16d687fb33a7d3b36397e27a4b88a1d53cbfb4f75ec5100d5f0cce31f6939114f24f0bcf651a190894a","ssdeep":"768:rJdlGwx37Ri555B9zR+J5uYlG/PwCEp24tZdD09wJ7:l6m37Ri3BRw5u2KwjJtiwF","tlshash":"55b2f18502a4e449cf1ce95b0795bebe6b1209776c069b30e533948851fd360b27d5af","first_seen":"2025-09-11T21:26:17.489332Z","last_seen":"2026-06-07T07:08:40.112688Z","times_seen":4171,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":193,"dns":0,"connect":0,"send":0,"wait":15,"receive":3,"ssl":167},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://meridianyield.com/","date":"2026-05-14T15:18:06.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:40 GMT","end":"Mon, 13 Jul 2026 08:36:39 GMT"},"fingerprint":{"sha1":"7F:B3:C1:48:F4:27:B8:68:3C:19:02:13:E1:6F:23:04:AC:C8:65:17","sha256":"FC:08:6D:DD:C4:AF:25:5E:6A:51:A0:A1:4E:27:4A:FF:E3:A5:37:ED:A4:1A:33:C1:27:48:DE:AB:71:AE:5D:2D"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://meridianyield.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 10 May 2026 10:09:59 GMT\r\nexpires: Mon, 10 May 2027 10:09:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 364087\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-06-07T08:01:58.574778Z","times_seen":26854,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":115,"dns":2,"connect":27,"send":0,"wait":28,"receive":7,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meridianyield.com/favicon.ico","fqdn":"meridianyield.com","domain":"meridianyield.com","tld":"com"},"ip":{"addr":"104.21.29.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meridianyield.com/","date":"2026-05-14T15:18:07.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meridianyield.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 07:15:03 GMT","end":"Tue, 04 Aug 2026 07:15:02 GMT"},"fingerprint":{"sha1":"97:73:21:4E:39:EA:C1:2B:9D:31:B3:E9:8A:47:CD:6A:CF:F8:76:F7","sha256":"34:48:98:E7:6A:74:5A:02:AD:CC:5C:7E:B5:7D:C2:17:4F:4A:28:F7:D0:18:94:E2:39:59:61:0F:50:D5:DE:D0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: meridianyield.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://meridianyield.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Thu, 14 May 2026 15:18:07 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xdvu%2FVSpkqXzCbAM0KLkaYVdu6%2FLe%2B1i6qvFygoarQykN1igGPAbUmdOy5QqqyVTtxejMflx1mS0DSkegrLi2RK3JoRF1LLRgYvV5yBaHCCIkCwprOcHn%2FozfvTIy0DmSgZodQ%3D%3D\"}]}\r\npriority: u=6,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbadfa7fb705699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"1b7c22a214949975556626d7217e9a39","sha1":"d01c97e2944166ed23e47e4a62ff471ab8fa031f","sha256":"340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87","sha512":"ba64847cf1d4157d50abe4f4a1e5c1996fe387c5808e2f758c7fb3213bfefe1f3712d343f0c30a16819749840954654a70611d2250fd0f7b032429db7afd2cc5","ssdeep":"","tlshash":"59c08c6e2613bd4cc6a3217522c3b490c09aa3a7a4ea46214840805331cb29a8ac7396","first_seen":"2023-03-10T20:17:28Z","last_seen":"2026-06-07T08:12:13.126713Z","times_seen":45080,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"meridianyield.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"min-api.cryptocompare.com/data/pricemulti?fsyms=ETH,BNB,MATIC,AVAX,ARB,FTM,OP\u0026tsyms=USD","fqdn":"min-api.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://meridianyield.com/","date":"2026-05-14T15:18:07.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 16:47:22 GMT","end":"Wed, 22 Jul 2026 17:47:13 GMT"},"fingerprint":{"sha1":"2E:DD:BD:BE:41:8E:5D:61:D5:7D:F5:38:C2:AE:75:A4:D0:05:93:C6","sha256":"91:97:69:F7:C0:9F:1F:CB:DF:8D:1A:88:BB:E7:BA:82:64:A0:2C:46:5D:B8:07:51:0A:92:BE:1F:F4:B0:DD:F2"}}},"request":{"raw":"GET /data/pricemulti?fsyms=ETH,BNB,MATIC,AVAX,ARB,FTM,OP\u0026tsyms=USD HTTP/1.1\r\nHost: min-api.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://meridianyield.com/\r\nOrigin: https://meridianyield.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 14 May 2026 15:18:08 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncontent-security-policy: frame-ancestors 'none'\r\naccess-control-allow-origin: https://meridianyield.com\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Cookie, Set-Cookie, Authorization\r\naccess-control-allow-credentials: true\r\ncache-control: public, max-age=10\r\nx-cryptocompare-cache-hit: false\r\nx-cryptocompare-server-id: cc-api-min-v2-29\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9fbadfabd8c41a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":148,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"055cffaf7be3b7e782c4e5d12627ff8d","sha1":"2f77b1325b5468e07553a50d39d22000ab1f2990","sha256":"0454e45f0c0b39f7099f950af4f13a6c2a3d05751ef3c99838f5a5f14ca3aaa4","sha512":"be66f008267047d056a81ca423ed3da3360b3e2779dbacb07410ba4f0f83d4ecc4e2473695fc5ff05f382fdf6df21323510f67ee861992d19e7c92294869167a","ssdeep":"","tlshash":"0ac04889addea168a3562d232dd0f2f6e4448868ef844120a0588eaea8d84ac68cd441","first_seen":"2026-05-14T15:18:39.111804Z","last_seen":"2026-05-14T15:18:39.111804Z","times_seen":1,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":23,"dns":5,"connect":1,"send":0,"wait":79,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meridianyield.com/shared/i18n.js","fqdn":"meridianyield.com","domain":"meridianyield.com","tld":"com"},"ip":{"addr":"104.21.29.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://meridianyield.com/","date":"2026-05-14T15:18:06.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meridianyield.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 07:15:03 GMT","end":"Tue, 04 Aug 2026 07:15:02 GMT"},"fingerprint":{"sha1":"97:73:21:4E:39:EA:C1:2B:9D:31:B3:E9:8A:47:CD:6A:CF:F8:76:F7","sha256":"34:48:98:E7:6A:74:5A:02:AD:CC:5C:7E:B5:7D:C2:17:4F:4A:28:F7:D0:18:94:E2:39:59:61:0F:50:D5:DE:D0"}}},"request":{"raw":"GET /shared/i18n.js HTTP/1.1\r\nHost: meridianyield.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://meridianyield.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 14 May 2026 15:18:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 04 May 2026 12:06:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69f88bda-1230\"\r\nexpires: Sat, 13 Jun 2026 15:18:06 GMT\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=in9DRzjb5BCQ%2BmeXOevyG9i9ymapF2q9XaOkE%2FpGdtL8U28Bgts%2BKWewJXPyhVGY1ykSCyDpV56ZwxcOQv%2FdI0n3vgIHodmsFDgjwLCnuk03xt4cuOlvJOityunQP%2FhvKhyNlA%3D%3D\"}]}\r\ncf-ray: 9fbadfa0bae85699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4656,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"14b5d8fca3b7ddf4ef918071ee6ded1d","sha1":"13d7d38c041c6fcc967c134eeb41df76a440b7fd","sha256":"00e324fd0e9d7dc25467b9ae74ae7bb8c84295cb60486053580fdfffaf3a7585","sha512":"be50413e87dab555d3f08ca79d8a5eb7c9c9de2bcf2f0b634f0cce6d3b12fce1e019c24f13032eb7cff66e0575a086b01d9d49f053a3312c6d37ce4e2da72be7","ssdeep":"96:UxkrNAzDSybNZ7D42P8HepYvCd1uEkk+GS3VCw:AvhVs2P8+ivCa7ZGSQw","tlshash":"61a1402e7af76076403360beabaf6a457035301b1449e9043f5c86501fc1c726bb2eee","first_seen":"2026-05-14T15:18:39.113843Z","last_seen":"2026-05-14T15:19:52.3742Z","times_seen":4,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"meridianyield.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmserifdisplay/v17/-nFhOHM81r4j6k0gjAW3mujVU2B2G_VB0PD2.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://meridianyield.com/","date":"2026-05-14T15:18:06.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:40 GMT","end":"Mon, 13 Jul 2026 08:36:39 GMT"},"fingerprint":{"sha1":"7F:B3:C1:48:F4:27:B8:68:3C:19:02:13:E1:6F:23:04:AC:C8:65:17","sha256":"FC:08:6D:DD:C4:AF:25:5E:6A:51:A0:A1:4E:27:4A:FF:E3:A5:37:ED:A4:1A:33:C1:27:48:DE:AB:71:AE:5D:2D"}}},"request":{"raw":"GET /s/dmserifdisplay/v17/-nFhOHM81r4j6k0gjAW3mujVU2B2G_VB0PD2.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://meridianyield.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24572\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 10 May 2026 13:16:56 GMT\r\nexpires: Mon, 10 May 2027 13:16:56 GMT\r\ncache-control: public, max-age=31536000\r\nage: 352870\r\nlast-modified: Wed, 10 Sep 2025 17:03:20 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24572,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24572, version 1.0","md5":"581414e1e5772fb61dd2de0efe6746c6","sha1":"b4de16f725d7403de71766d74cb79ee7fc47d1b9","sha256":"ed8b291611e32fa2d2900488dd48fc95faf0957b2ef7ddf1527e8d21dd9cf2df","sha512":"9f934be123abb4de1047c95021effd867b5f3cd352431fd2ce65a18d5866b487549531bbf0bf839770ad0c6fec2f5c37af650dd7d3bd9f11dd115c740145f7d8","ssdeep":"384:sTBxfZpbHUP71Xrp6tdJfuz4PQdl9J1pQGQl5SQUADVOlhsyF:sTBhb0P71sNf0xdl9s7Olhs+","tlshash":"2ab2e185177e2b48dd4221325d5fffd22d1e4be644fab386e82f27e14d640176e80687","first_seen":"2025-09-23T02:11:44.907793Z","last_seen":"2026-06-07T07:08:40.119753Z","times_seen":444,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":109,"dns":6,"connect":15,"send":0,"wait":28,"receive":7,"ssl":88},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://meridianyield.com/","date":"2026-05-14T15:18:06.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:40 GMT","end":"Mon, 13 Jul 2026 08:36:39 GMT"},"fingerprint":{"sha1":"7F:B3:C1:48:F4:27:B8:68:3C:19:02:13:E1:6F:23:04:AC:C8:65:17","sha256":"FC:08:6D:DD:C4:AF:25:5E:6A:51:A0:A1:4E:27:4A:FF:E3:A5:37:ED:A4:1A:33:C1:27:48:DE:AB:71:AE:5D:2D"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://meridianyield.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 10 May 2026 10:09:59 GMT\r\nexpires: Mon, 10 May 2027 10:09:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 364087\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-06-07T08:01:58.574778Z","times_seen":26854,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":205,"dns":1,"connect":30,"send":0,"wait":15,"receive":2,"ssl":175},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026family=Nunito:ital,wght@0,400;0,500;0,600;0,700;1,400;1,500;1,600;1,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://meridianyield.com/","date":"2026-05-14T15:18:08.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026family=Nunito:ital,wght@0,400;0,500;0,600;0,700;1,400;1,500;1,600;1,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://meridianyield.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 14 May 2026 15:18:08 GMT\r\ndate: Thu, 14 May 2026 15:18:08 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24736,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c98488a0e7e032c7dd0338081f4ff8cd","sha1":"e6f277a559e5a1f4f671563b94f8108726967033","sha256":"b3fd86bf7ad0824ddd5f83d983b11464bdef5e2399638740642123195ed4a9fe","sha512":"1313d2b3133f9e610c98209fb3a4da9039e062783597d7fc6badcfc5ef22f3d924228eea9938820bbec7af6b4a7a6ba70f0a960587d3dbc7266855bf281c1f37","ssdeep":"384:vXuM0p2+bb2vbfoMS2kbqBVd2VbhG6c2SbUP5l7QFDPeo:P","tlshash":"79b2ca92001be500ab872cc227cf7e3aed8e61557455c579abfd4cc8acabd631364b1e","first_seen":"2025-09-19T04:34:09.043423Z","last_seen":"2026-06-06T06:06:40.00594Z","times_seen":124,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"serverok.xyz/","fqdn":"serverok.xyz","domain":"serverok.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://meridianyield.com/","date":"2026-05-14T15:18:08.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"serverok.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Apr 2026 22:58:13 GMT","end":"Fri, 24 Jul 2026 22:58:12 GMT"},"fingerprint":{"sha1":"03:3E:7A:31:3B:2A:43:3C:EE:04:03:C9:68:FE:77:2B:96:36:B5:03","sha256":"2F:5A:B7:62:1A:D0:DD:31:29:B4:F6:1A:6C:B8:E8:46:A9:FB:95:8D:A8:0B:8C:E9:EB:14:E2:82:C0:8B:CE:EE"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: serverok.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://meridianyield.com/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 505\r\nOrigin: https://meridianyield.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":505,"data":"v=20012026\u0026s=1\u0026r=2d310220117b1a382a7a7c210721023112101a31291f1e7a121e71222a7a7d25291f2b21040b02232a7a7920291f7c210721023c12100238120f24202a262438121f30230425063e2a1b013b01262c3e2b253c242b247138120b017e2a261e3b2a0b3f212c1006242b247138120b017e0122197a0531013b012579242b7b0620127a1e2e2c00052107220d7b06322f7b06320d7c070c2f790522053b0125062711101a2e120f0e78111b017e12250e3b2b7a1d3b01262c202a0f30242c0e7120120f1a31121006320122383d2c1f303b040b023f111002782a251e31107a0e23120002242b7b0521072512202a0006242e197575"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 14 May 2026 15:18:08 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"bf38-9c0+099ZGxIj98SS8THyqApSSHE\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rcgah3bILQccUptmatvRQfwr87YqhCX5wIeMKqvgE%2FqtiF05cNRuEFZqOJKeu6t3MQaI8kek%2FAIYd0teiOW8IW4k6qR0NPIFJlG4Hos7rdHTvuKszfKOWGHMzvtDRAQ%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9fbadfaf6e910b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":48952,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with very long lines (48952), with no line terminators","md5":"ce2bc60d9b8f5fade87a8b12cf0760af","sha1":"f5cd3ed3df591b1223f7c492f131f2a80a524871","sha256":"8bb0d82e53ee574b4919469b1d7d368cbaeb2e83e0e0b94dbe9933dad09c3ca9","sha512":"df391bc973f7ecce5d6b99beb64feb5364b5a3385424b07f7d3279f61cbe69c60cd31d78fc6e74b12a5b63c6ce3b3457ae8845a8b3741d592a071d004b0b390f","ssdeep":"768:p++kQqQPIck0Hks41ZKbrdpL1MybaEesTvvd5MGPioVZvlMqVqYsK0KNQKcxH:p++bJPbk07PvhRlMqVqYwf","tlshash":"a423f378f94c35f4821f9a25b9dcedfe303b92e2152b54200a0791c32e51bd5ebe593a","first_seen":"2026-05-14T15:18:39.118714Z","last_seen":"2026-05-14T15:19:52.376151Z","times_seen":3,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"serverok.xyz/","fqdn":"serverok.xyz","domain":"serverok.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://meridianyield.com/","date":"2026-05-14T15:18:08.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"serverok.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Apr 2026 22:58:13 GMT","end":"Fri, 24 Jul 2026 22:58:12 GMT"},"fingerprint":{"sha1":"03:3E:7A:31:3B:2A:43:3C:EE:04:03:C9:68:FE:77:2B:96:36:B5:03","sha256":"2F:5A:B7:62:1A:D0:DD:31:29:B4:F6:1A:6C:B8:E8:46:A9:FB:95:8D:A8:0B:8C:E9:EB:14:E2:82:C0:8B:CE:EE"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: serverok.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://meridianyield.com/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 505\r\nOrigin: https://meridianyield.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":505,"data":"v=20012026\u0026s=1\u0026r=2d310220117b1a382a7a7c210721023112101a31291f1e7a121e71222a7a7d782b250e222c0b013b01251a3e2a1f0e382a21017e012579242b252423291f0e3d2d1f24242a0f193d117a713c01213f212c7a7131297a1e31107a24230122383d2c1f303b040b02792b7a1e31107a242301222721060c113201213f212a1f1e322b7a0e26121e71782b31017e051c2b7b070c2b7b051c2f7c070c2b7a06213f21117a20202c0e712311101a2001223825111f3032121b3f212c7a0e3b2a0f1e78107a0e23120002242b7b052107257d792a0f3f3b01260a202b261a3d1210022e111f1a232b251e322b31017e12250e3b2b7a1e71"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 15:18:08 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\npriority: u=4,i=?0\r\netag: W/\"f108-xo8Trkh0otPo6r1aWbDNE9NnfMQ\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m4GcK6KvQjNJmv8hgrjA98IO3OkbJIcHJTdsOd5WhF%2BpihzFE4J6EbtSw1sNpVvg%2BG8SoavWJt0gxib2g9P8DTzvGMeDRl6tC%2Fjb5Ox%2F2xDmY5phUUjLxMnL%2BBst1Ak%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9fbadfb0dea05ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61704,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with very long lines (61704), with no line terminators","md5":"44507bfaebcd38207917d12c2a86e16c","sha1":"c68f13ae4874a2d3e8eabd5a59b0cd13d3677cc4","sha256":"2c118fdfca718e0c9ff7372ece457d009a327df36c5243cd93a21f981a93899d","sha512":"3072a04a57c2c22b6ba3f22d75883fb5f41c36618ce9b5a7ae0a1ce5fbef29c528b2428ad678334f16077e58d3194521e3b4b3feae9f8ba17199ab18ad3a8e93","ssdeep":"768:Bt5hgCPKQbtDzct9BBRvTU4vX4k/g/+er5U4w/XO9lbh7bh+er3TIprRB6Kcz3c3:5Q7IK8KPUSg9mdpLvA/Q","tlshash":"3153ab3c3a5a30e4036ee532a684bdbf76174be63d22a4252f8197c256d1bddcde181c","first_seen":"2025-08-13T09:59:32.315516Z","last_seen":"2026-05-14T15:19:52.373158Z","times_seen":12,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":119,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"serverok.xyz/","fqdn":"serverok.xyz","domain":"serverok.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://meridianyield.com/","date":"2026-05-14T15:18:09.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"serverok.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Apr 2026 22:58:13 GMT","end":"Fri, 24 Jul 2026 22:58:12 GMT"},"fingerprint":{"sha1":"03:3E:7A:31:3B:2A:43:3C:EE:04:03:C9:68:FE:77:2B:96:36:B5:03","sha256":"2F:5A:B7:62:1A:D0:DD:31:29:B4:F6:1A:6C:B8:E8:46:A9:FB:95:8D:A8:0B:8C:E9:EB:14:E2:82:C0:8B:CE:EE"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: serverok.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://meridianyield.com/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 577\r\nOrigin: https://meridianyield.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":577,"data":"v=20012026\u0026s=1\u0026r=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"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 14 May 2026 15:18:09 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 40\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\npriority: u=4,i=?0\r\netag: W/\"28-A0PaEo1LoipcJJoXg99CV9g4eCM\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XHMJrcKgPSdDVqyLIqIqF%2Ff701d6VJEjEotLIkpT3DKompHCwyOd4fBClNF1AvbBefBQkB8roate%2FUfv2EoxEbAjaju2P6JacvYCe1GwJBO8s2TLI8HpVyzo1998ego%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9fbadfb2ce0a5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"36c7a47ce320b0936631f4c5de7c47c0","sha1":"0343da128d4ba22a5c249a1783df4257d8387823","sha256":"f0fac7f7534f0bd59a6b6d783cbbbab2f3bccf6d554ebf407999a7d28a53cfbb","sha512":"126e519c260b15de0bd7038cc909a9adfdce7830e402c8020fef9b2b59984bddebc88cd981dc04157bc1c20501fbcde18194a1049f1d9fcfe926fd7deb856c5c","ssdeep":"","tlshash":"059004353c0c4017451001143c5d40750713d7f101c1d01451c043400350701dd74034","first_seen":"2025-08-13T09:59:32.310568Z","last_seen":"2026-05-14T15:19:52.358024Z","times_seen":12,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meridianyield.com/assets/w-modal.js","fqdn":"meridianyield.com","domain":"meridianyield.com","tld":"com"},"ip":{"addr":"104.21.29.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://meridianyield.com/","date":"2026-05-14T15:18:06.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meridianyield.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 07:15:03 GMT","end":"Tue, 04 Aug 2026 07:15:02 GMT"},"fingerprint":{"sha1":"97:73:21:4E:39:EA:C1:2B:9D:31:B3:E9:8A:47:CD:6A:CF:F8:76:F7","sha256":"34:48:98:E7:6A:74:5A:02:AD:CC:5C:7E:B5:7D:C2:17:4F:4A:28:F7:D0:18:94:E2:39:59:61:0F:50:D5:DE:D0"}}},"request":{"raw":"GET /assets/w-modal.js HTTP/1.1\r\nHost: meridianyield.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://meridianyield.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 14 May 2026 15:18:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 05 May 2026 20:58:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69fa59e2-9307\"\r\nexpires: Sat, 13 Jun 2026 15:18:06 GMT\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pMKBnc7ZAOhS%2BSDjV0BjqqDaLV3XEXSvfgfHp6Fl8GmxEnq9FKMwsV1bM8k4IVtxoASdvHPzFFe8Io6jHR3%2Bti9I2KX%2BfXbbu8Q%2FFt88GQ2wiPJaGQHP5vR%2Fn0JKk3Nd4P6Jow%3D%3D\"}]}\r\ncf-ray: 9fbadfa0baea5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37639,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (2304), with CRLF line terminators","md5":"eed7d4b80780bb8adee3cbc67d7f98ff","sha1":"20f450d0eaf88312c005763e9036aeed80a225a0","sha256":"5e0ebe3158a15aba5a5e00e9bb2327769203ed6c28b6fd7aca2155d7e05cadc4","sha512":"66c43c8d29392d3e8435d8273fa23c2653e3cf4a36d875f97195100121e59ba73c1b8c7430c41a01a765893f4f0b97b3c153ede123d688ba3f00fcbe7fd74d96","ssdeep":"384:yuWDxb0OzbJ3vF/ll0blqHuCUCaDr/S1ziayMkrN21GecFZPtDQseaTrHyhfdsG2:KV39Nl08O/CaDbS1/k97rShZFc/","tlshash":"acf286f02bec12b4853f434376592d74bb1114fa9ebabf4575fe1a828f96e0c412a4d2","first_seen":"2024-05-02T20:25:27Z","last_seen":"2026-06-06T14:52:18.350701Z","times_seen":180,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"meridianyield.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"meridianyield.com/assets/w-loader.js","fqdn":"meridianyield.com","domain":"meridianyield.com","tld":"com"},"ip":{"addr":"104.21.29.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://meridianyield.com/","date":"2026-05-14T15:18:06.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meridianyield.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 May 2026 07:15:03 GMT","end":"Tue, 04 Aug 2026 07:15:02 GMT"},"fingerprint":{"sha1":"97:73:21:4E:39:EA:C1:2B:9D:31:B3:E9:8A:47:CD:6A:CF:F8:76:F7","sha256":"34:48:98:E7:6A:74:5A:02:AD:CC:5C:7E:B5:7D:C2:17:4F:4A:28:F7:D0:18:94:E2:39:59:61:0F:50:D5:DE:D0"}}},"request":{"raw":"GET /assets/w-loader.js HTTP/1.1\r\nHost: meridianyield.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://meridianyield.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 14 May 2026 15:18:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 05 May 2026 20:58:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69fa59e2-a2f4\"\r\nexpires: Sat, 13 Jun 2026 15:18:06 GMT\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cq4A84Y4hSfzBvBUOLzxQT31BQ7gs0bKVtIbs3AyF%2B2XN9G4TOWhJ72M4ahBzU4e%2BElgTJkwvhXRYkW7p2TJ9Z4swSDXDu4snFWYS10JojggxnlW%2BWZdsOtfeWRbutsQOYJ7Sg%3D%3D\"}]}\r\ncf-ray: 9fbadfa0baeb5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41716,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2342), with CRLF line terminators","md5":"4b64ec349c7eeb4324f4e7c20eb7fc98","sha1":"c09046d05daa28ef73e4bf3b58bd6518ce98a271","sha256":"801d62fc02f89e7c1b414392e066dcda139ea3154cb3a48da721ff9a9df49f1f","sha512":"e92c61f409b0a56e41654c1f867089473bed649bf3a8d7167fd1a179993295863f20d0a63b20c5e2c20ba6ee55dab82802c06591cd39d188489a479deefc8b23","ssdeep":"768:sCoOXPhfU4Ui8YG7uOFQgauwF4ifTSQoc8S:SOXXwYG7XQTd4irgS","tlshash":"5b13b8f957a0a8f089a787d5aa131e09fa159c77c7624315f2bc274dbfd2e0cc806e91","first_seen":"2023-10-17T15:07:19Z","last_seen":"2026-06-06T14:52:18.36822Z","times_seen":376,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-14","alert":"Sinkholed","trigger":"meridianyield.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://meridianyield.com/","date":"2026-05-14T15:18:06.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:40 GMT","end":"Mon, 13 Jul 2026 08:36:39 GMT"},"fingerprint":{"sha1":"7F:B3:C1:48:F4:27:B8:68:3C:19:02:13:E1:6F:23:04:AC:C8:65:17","sha256":"FC:08:6D:DD:C4:AF:25:5E:6A:51:A0:A1:4E:27:4A:FF:E3:A5:37:ED:A4:1A:33:C1:27:48:DE:AB:71:AE:5D:2D"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://meridianyield.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 10 May 2026 10:09:59 GMT\r\nexpires: Mon, 10 May 2027 10:09:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 364087\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-06-07T08:01:58.574778Z","times_seen":26854,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":89,"dns":1,"connect":32,"send":0,"wait":34,"receive":4,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://meridianyield.com/","date":"2026-05-14T15:18:06.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:40 GMT","end":"Mon, 13 Jul 2026 08:36:39 GMT"},"fingerprint":{"sha1":"7F:B3:C1:48:F4:27:B8:68:3C:19:02:13:E1:6F:23:04:AC:C8:65:17","sha256":"FC:08:6D:DD:C4:AF:25:5E:6A:51:A0:A1:4E:27:4A:FF:E3:A5:37:ED:A4:1A:33:C1:27:48:DE:AB:71:AE:5D:2D"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://meridianyield.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 10 May 2026 10:09:59 GMT\r\nexpires: Mon, 10 May 2027 10:09:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 364087\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-06-07T08:01:58.574778Z","times_seen":26854,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":71,"dns":0,"connect":0,"send":0,"wait":29,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"serverok.xyz/","fqdn":"serverok.xyz","domain":"serverok.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://meridianyield.com/","date":"2026-05-14T15:18:08.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"serverok.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Apr 2026 22:58:13 GMT","end":"Fri, 24 Jul 2026 22:58:12 GMT"},"fingerprint":{"sha1":"03:3E:7A:31:3B:2A:43:3C:EE:04:03:C9:68:FE:77:2B:96:36:B5:03","sha256":"2F:5A:B7:62:1A:D0:DD:31:29:B4:F6:1A:6C:B8:E8:46:A9:FB:95:8D:A8:0B:8C:E9:EB:14:E2:82:C0:8B:CE:EE"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: serverok.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://meridianyield.com/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 489\r\nOrigin: https://meridianyield.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":489,"data":"v=20012026\u0026s=1\u0026r=2d310220117b1a382a7a7c210721023112101a31291f1e7a121e7138120b013b01251a3e2a1f0e382a21017e012579242b252423291f0e3d2d1f24242a0f193d117a713c01213f212c7a7131297a1e31107a24230122383d2c1f303b040b02792b7a1e31107a24230122383d2c1f303b040b023c12100632111f2c24107b1a320122273006322b7c06322b30070c2f7c050c017a040b0222290f0e78107a1a202c0f0d21072512202a000624040b027b111f303b12101a2e111f1a232b251e322b31017e2a261e3b2a0b3f212b0f0e312c0f7d242b247120120f1a311210063201223825111f303212107875"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 14 May 2026 15:18:08 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"48-qnAQ+hl8uCNPGjcS+wAZlPuVuP0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5aUEBdZ17Z8WkQgiXEfBEvoEE%2FznMYd3IsI9NzeiX3k2GL2EErBmNG9wOYXsskcDkmCn6VwMcj4LUFPh0vm2iO7OS6bmQ0uN9uyKoKq0AzEiNg1vIZfCSVCZC6rXbC8%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9fbadfacebf60b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"374f951909855e152355c84c60c3249e","sha1":"aa7010fa197cb8234f1a3712fb001994fb95b8fd","sha256":"b05b756cff6b9a5dcdae2fd8b788ba167891f8181d071203cd172d48cb6ef763","sha512":"5d850fd59098fcd1e93c27c19a6a60cf0289c33f5c08a211428c7e95b46d7f63f4d948e99184c83c86dbb91ca55e0364e59b0963392bff319b16ce80c12b15ab","ssdeep":"","tlshash":"e9a002ae280c4436872d1b212cddd5a50516e7f212c1e4556b8362c022d078bfff6234","first_seen":"2026-05-14T15:18:39.12574Z","last_seen":"2026-05-14T15:18:39.12574Z","times_seen":1,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":111,"dns":93,"connect":1,"send":0,"wait":103,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}