{"report_id":"c39a4a25-1768-4c94-88bb-c2e75be20a72","version":6,"status":"done","tags":[],"date":"2026-02-14T02:52:35Z","url":{"schema":"https","addr":"get-trump-memes.xyz/","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"172.67.145.177","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"get-trump-memes.xyz/","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"title":"The Official Trump Meme | GetTrumpMemes","dom":{"size":80996,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1691)","md5":"4f42c88986c23bfe1c8811f87e3d8034","sha1":"fe1b9d69a59b44d1b71f76d6920c74fd14b3830c","sha256":"90474ce74f55b96655abee871f3393dd9dad9900db4ba1d6c98eafbfa6ef9bf7","sha512":"ba52593979d1b1b7b87342202db3c7a831778e079ec378db57f4c6322d6aa61ef2c344ea04b824a70c0184555e406196dc2141536aeb842011db92a24c19e669","ssdeep":"768:RCJld3qUe5bgNgc2/InUEr8l13hUgQSOIwAWJBfLlytYZyEURb0MJAh/uvMg7bYM:4UErIJLIINaBfLlytYZyEURbSg7/X","tlshash":"71835f6264f11137519380c5aba67f2b7f95e847ca0bca413aac57d48fd3e82cd9324e","dom_hash":"domhash84dbf6f6d2cec05548374027dad01148","first_seen":"2026-02-14T02:52:40.428055Z","last_seen":"2026-02-14T02:52:40.428055Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"get-trump-memes.xyz/","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"172.67.145.177","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T02:52:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-trump-memes.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"gettrumpmemes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"get-trump-memes.xyz","ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-28","domain_rank":0,"first_seen":"2026-01-05T13:19:01.298807Z","last_seen":"2026-02-13T12:47:47.441062Z","alert_count":40,"request_count":40,"received_data":4998090,"sent_data":18971,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"gettrumpmemes.com","ip":{"addr":"104.18.7.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-12-21","domain_rank":339259,"first_seen":"2025-01-18T19:05:07Z","last_seen":"2026-02-13T12:47:47.589249Z","alert_count":1,"request_count":1,"received_data":112484,"sent_data":449,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":11393,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2026-02-08T22:42:04.305696Z","alert_count":0,"request_count":2,"received_data":103344,"sent_data":1020,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"get-trump-memes.xyz/secureproxy?c=%2F%40v1%2Fcdn%2Fjs%2Fvite.plus.esm.js%3Ft%3D29517292%26u%3DzOJmwGbWCTcWK2UPGDY5NGFiNDU5MzIyNmMwZWNmMWFlMTg5MHK9FQe3pTxoWU3Hcw","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","size":656642,"data":"","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-08-04T05:59:25.953933Z","times_seen":2650,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-trump-memes.xyz/nock.esm.js","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a2e3afdec3323649a7deb0418a765635","sha1":"95f235f2135f5c77a3af0304e3631606125808eb","sha256":"a72ae5ec2bf6dc5787f5fdb3e8ffc6672e0e1322ee65d91b2b248409c4a611ec","sha512":"07e9d3375e19610736caed39e69c19c448819cab2fa7963d42695ac9bb3d69240a7c97858f764492f663a07b9a8e6f8e7d3c1c0499b675cefe0e2fec32f7f5e0","ssdeep":"3072:eR5ZeprfrDHHxbolowHJZ90VMSPMIy7EW8nbOVMpuGxoPri83tGQ38dH5szUNZqR:eRTcTr7dolowHJXSPMIy79ito7GaWrzK","tlshash":"2684746313f76262c2c142b78ed27098f99db929c2604c4ff551f186e8a8d65f3ef186","size":401996,"data":"","first_seen":"2026-01-05T13:19:06.701322Z","last_seen":"2026-02-14T02:52:40.455423Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-trump-memes.xyz/nock.esm.js","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a2e3afdec3323649a7deb0418a765635","sha1":"95f235f2135f5c77a3af0304e3631606125808eb","sha256":"a72ae5ec2bf6dc5787f5fdb3e8ffc6672e0e1322ee65d91b2b248409c4a611ec","sha512":"07e9d3375e19610736caed39e69c19c448819cab2fa7963d42695ac9bb3d69240a7c97858f764492f663a07b9a8e6f8e7d3c1c0499b675cefe0e2fec32f7f5e0","ssdeep":"3072:eR5ZeprfrDHHxbolowHJZ90VMSPMIy7EW8nbOVMpuGxoPri83tGQ38dH5szUNZqR:eRTcTr7dolowHJXSPMIy79ito7GaWrzK","tlshash":"2684746313f76262c2c142b78ed27098f99db929c2604c4ff551f186e8a8d65f3ef186","size":401996,"data":"","first_seen":"2026-01-05T13:19:06.701322Z","last_seen":"2026-02-14T02:52:40.455423Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-trump-memes.xyz/","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"05ff9f03c434ae522c0fb67dbc5d0d99","sha1":"8651679c87e40798a38e3e122e3ded1176069a93","sha256":"1d2c29a94d35f18d9bdadc686eb9d94236190cb9c1b13d6e48b552a58bc44b4f","sha512":"766d30a1ba8008fd50696a763c3b2a94024e8c0a268304168f53afe37fb84840bcb0c092eae13d987676414e7b06876a9b5199d78edd4cd3e832d7304f754d15","ssdeep":"6144:6dVsxiQNCTuPMI4TmzjtwTxPzoq8goCUAZYcipX0j+G:yTg8uPMI46zjtwTxPkqthUA1MX0j+G","tlshash":"5984736313fb6262c2c1527b8ed27069f99db929c2204c4ff451f146e8a8d65f3ef186","size":394816,"data":"","first_seen":"2026-01-05T13:19:06.724998Z","last_seen":"2026-02-14T02:52:40.486085Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-trump-memes.xyz/","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"816c4ff97cb50235a9a8e0714ab6354f","sha1":"0189d98c8d1d3b9531c327808df714bcc373bdb3","sha256":"4b0037040a91ef1d24d2242f51640e46883a21c1838fc78c995df404724c01ca","sha512":"bf2ab5dba5497f5e971578a2d6658aed4bc1044d5add5a3cd160dfaae30d4f9ca2a1a7bb4406e19e47e676acea1eaff063c75f2d64bdefe76d41d917dbf20f29","ssdeep":"","tlshash":"b1b02b2f0c8550049d738430b43790006cb1050e1ec18350408010209f012300ca1d9c","size":128,"data":"","first_seen":"2026-02-13T12:47:49.951517Z","last_seen":"2026-02-14T02:52:40.487146Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-trump-memes.xyz/","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"05ff9f03c434ae522c0fb67dbc5d0d99","sha1":"8651679c87e40798a38e3e122e3ded1176069a93","sha256":"1d2c29a94d35f18d9bdadc686eb9d94236190cb9c1b13d6e48b552a58bc44b4f","sha512":"766d30a1ba8008fd50696a763c3b2a94024e8c0a268304168f53afe37fb84840bcb0c092eae13d987676414e7b06876a9b5199d78edd4cd3e832d7304f754d15","ssdeep":"6144:6dVsxiQNCTuPMI4TmzjtwTxPzoq8goCUAZYcipX0j+G:yTg8uPMI46zjtwTxPkqthUA1MX0j+G","tlshash":"5984736313fb6262c2c1527b8ed27069f99db929c2204c4ff451f146e8a8d65f3ef186","size":394816,"data":"","first_seen":"2026-01-05T13:19:06.724998Z","last_seen":"2026-02-14T02:52:40.486085Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/api.js","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d4a61fa35059c9e19e71cb1f5a77bfe","sha1":"680142959bbbf9920601ff8559405c010920b9e5","sha256":"dbe8c6990993e30d76285ec5e857573487b36256127a6c72f0c402ed8f0fa5f6","sha512":"42709c6925f0e6b52a2ab5bd20ecb956723e8f8e5e8829822b7005cc53fc490e7af187e336c5b77b360f0a8a0aa7596bb093658d694a36a76475ad475a375404","ssdeep":"768:NCMIW2oMv79fuxBFZeXDhnyaSP0TNTTOGnx7sMAeGsONUgg1JW37+CfkmEt6wUaf:j2pv79fuxDZeXxuqvneG1ggPN","tlshash":"1a333b583156393227dd80e4617ba3437325793ae94ccc90e827dd66266cdcad233fba","size":51151,"data":"","first_seen":"2026-02-11T10:51:04.774988Z","last_seen":"2026-03-01T17:49:40.024397Z","times_seen":15318,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-trump-memes.xyz/","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"daa90548cb44937d00b734312fe98e32","sha1":"90212c2b6b7f6f0552fe45d2b59920215e53a38f","sha256":"7e698678b251a6244196c19b757bcdc1ef16af79b8afe0301c9dc0f52cace15a","sha512":"6ae24023a3e705dc1256b8fdc2fe646cdf4b6022a6f8f11bf22450ea159375facb096aeee7440eb632e5c4acf0e7ee739395934826a9ece2ffdcee4da5d38a46","ssdeep":"","tlshash":"3bc02b5e087950009d37547075279000bab1081f0d81c2507c4100306f002300ce4fcd","size":136,"data":"","first_seen":"2026-01-05T13:19:06.723135Z","last_seen":"2026-02-14T02:52:40.489653Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-trump-memes.xyz/secureproxy?c=%2F%40v1%2Fcdn%2Fjs%2Fvite.plus.esm.js%3Ft%3D29517292%26u%3DzOJmwGbWCTcWK2UPGDY5NGFiNDU5MzIyNmMwZWNmMWFlMTg5MHK9FQe3pTxoWU3Hcw","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","size":656642,"data":"","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-08-04T05:59:25.953933Z","times_seen":2650,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-trump-memes.xyz/","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3cfba673848834bd08fffdfc401208fb","sha1":"1caf18be624a3a6b5818c213088e0817d1d6f764","sha256":"a94bde03419b2807916892f29ab426f629912c1e682ceea3226e4bfe2cc5a497","sha512":"5a3d4e0a0a398987f3ec3301683dfc3611f85120f7a0a0d7d8c6b76b04cfaf521d26cf292f2c5ee22c353105150c1cab45fc4f36609abb7f4978da6fa4db0ee7","ssdeep":"96:SCvY16VnQFCMsNqPOFvEyec9Kw+lNSEuqFLyvsHqIn:fvY16VnPNNqPaxecKw+lNwqFLyUHqIn","tlshash":"b891345b91f1003644fb34ad93cbab5c7724508b9044dd463e9dcb4d0fa2aa055f2beb","size":4584,"data":"","first_seen":"2026-01-05T13:19:06.723989Z","last_seen":"2026-02-14T02:52:40.490671Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-trump-memes.xyz/","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"05ff9f03c434ae522c0fb67dbc5d0d99","sha1":"8651679c87e40798a38e3e122e3ded1176069a93","sha256":"1d2c29a94d35f18d9bdadc686eb9d94236190cb9c1b13d6e48b552a58bc44b4f","sha512":"766d30a1ba8008fd50696a763c3b2a94024e8c0a268304168f53afe37fb84840bcb0c092eae13d987676414e7b06876a9b5199d78edd4cd3e832d7304f754d15","ssdeep":"6144:6dVsxiQNCTuPMI4TmzjtwTxPzoq8goCUAZYcipX0j+G:yTg8uPMI46zjtwTxPkqthUA1MX0j+G","tlshash":"5984736313fb6262c2c1527b8ed27069f99db929c2204c4ff451f146e8a8d65f3ef186","size":394816,"data":"","first_seen":"2026-01-05T13:19:06.724998Z","last_seen":"2026-02-14T02:52:40.486085Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-trump-memes.xyz/nock.esm.js","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a2e3afdec3323649a7deb0418a765635","sha1":"95f235f2135f5c77a3af0304e3631606125808eb","sha256":"a72ae5ec2bf6dc5787f5fdb3e8ffc6672e0e1322ee65d91b2b248409c4a611ec","sha512":"07e9d3375e19610736caed39e69c19c448819cab2fa7963d42695ac9bb3d69240a7c97858f764492f663a07b9a8e6f8e7d3c1c0499b675cefe0e2fec32f7f5e0","ssdeep":"3072:eR5ZeprfrDHHxbolowHJZ90VMSPMIy7EW8nbOVMpuGxoPri83tGQ38dH5szUNZqR:eRTcTr7dolowHJXSPMIy79ito7GaWrzK","tlshash":"2684746313f76262c2c142b78ed27098f99db929c2604c4ff551f186e8a8d65f3ef186","size":401996,"data":"","first_seen":"2026-01-05T13:19:06.701322Z","last_seen":"2026-02-14T02:52:40.455423Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-trump-memes.xyz/","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"178c54f41cceada6c3fd150fc8b59900","sha1":"2d542d19818ecf8d8ae039dcdc8be3df78f8c60e","sha256":"40d5888c71ac7a5995bf9fa77f2ffa9fde080e2f5d72cfd3613e40bcf1ca8413","sha512":"b1a2564a17acf35774781ec7f7eaa253afa491d55202398fc1a781ab9486b9c6d17de77b1753e2361728df69ef72d3cbac06fb856898f5d60b36d4c0b0db9340","ssdeep":"","tlshash":"cac09b5e087650649d375064b52ad0456fe5160f5dc282513c4d4151ef102792d99e6c","size":139,"data":"","first_seen":"2026-01-05T13:19:06.725913Z","last_seen":"2026-02-14T02:52:40.491627Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-trump-memes.xyz/secureproxy?c=%2F%40v1%2Fcdn%2Fjs%2Fvite.plus.esm.js%3Ft%3D29517292%26u%3DzOJmwGbWCTcWK2UPGDY5NGFiNDU5MzIyNmMwZWNmMWFlMTg5MHK9FQe3pTxoWU3Hcw","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","size":656642,"data":"","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-08-04T05:59:25.953933Z","times_seen":2650,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"get-trump-memes.xyz/secureproxy?c=%2F%40v1%2Fcdn%2Fjs%2Fvite.plus.esm.js%3Ft%3D29517292%26u%3DzOJmwGbWCTcWK2UPGDY5NGFiNDU5MzIyNmMwZWNmMWFlMTg5MHK9FQe3pTxoWU3Hcw","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://get-trump-memes.xyz/","date":"2026-02-14T02:52:14.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-trump-memes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 18:52:29 GMT","end":"Sat, 28 Mar 2026 19:49:57 GMT"},"fingerprint":{"sha1":"07:EC:20:E6:44:AF:37:06:CB:36:5C:65:8B:79:3F:80:4E:11:29:D0","sha256":"C9:AB:03:04:F3:28:1D:8E:16:5E:E2:5C:F9:8D:43:3C:B4:5E:0D:3F:E5:14:BF:93:7D:B0:67:CB:3F:B6:BD:F6"}}},"request":{"raw":"GET /secureproxy?c=%2F%40v1%2Fcdn%2Fjs%2Fvite.plus.esm.js%3Ft%3D29517292%26u%3DzOJmwGbWCTcWK2UPGDY5NGFiNDU5MzIyNmMwZWNmMWFlMTg5MHK9FQe3pTxoWU3Hcw HTTP/1.1\r\nHost: get-trump-memes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-trump-memes.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:52:16 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623838\r\ncdn-requestcountrycode: NL\r\nvary: Accept-Encoding\r\ncache-control: max-age=2592000, must-revalidate\r\netag: W/\"a0502-14+i6Bt7XM8ofHk8WpmFyqoPYWI\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=vite.plus.esm.js\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 02/14/2026 02:52:16\r\ncdn-edgestorageid: 883\r\ncdn-requestid: 13bb26addd5401ca93378adae396403d\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bg%2BRZbaigHqDxRndvW%2B3UNwn4oieIZcYvgbIhMuheuCb5P6Nb1o1O%2B0LnPMQ0qHtBtJ4GK4zz98OS4HPDsAiqJmLPVC2In1wgfmKq4G1pqSaYpQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd944adfc97b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":656642,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-08-04T05:59:25.953933Z","times_seen":2650,"resource_available":true,"data":null}},"time_used":2378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2180,"receive":198,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-trump-memes.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-trump-memes.xyz/secureproxy?c=%2F%40v1%2Fcdn%2Fjs%2Fvite.plus.esm.js%3Ft%3D29517292%26u%3DzOJmwGbWCTcWK2UPGDY5NGFiNDU5MzIyNmMwZWNmMWFlMTg5MHK9FQe3pTxoWU3Hcw","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://get-trump-memes.xyz/","date":"2026-02-14T02:52:14.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-trump-memes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 18:52:29 GMT","end":"Sat, 28 Mar 2026 19:49:57 GMT"},"fingerprint":{"sha1":"07:EC:20:E6:44:AF:37:06:CB:36:5C:65:8B:79:3F:80:4E:11:29:D0","sha256":"C9:AB:03:04:F3:28:1D:8E:16:5E:E2:5C:F9:8D:43:3C:B4:5E:0D:3F:E5:14:BF:93:7D:B0:67:CB:3F:B6:BD:F6"}}},"request":{"raw":"GET /secureproxy?c=%2F%40v1%2Fcdn%2Fjs%2Fvite.plus.esm.js%3Ft%3D29517292%26u%3DzOJmwGbWCTcWK2UPGDY5NGFiNDU5MzIyNmMwZWNmMWFlMTg5MHK9FQe3pTxoWU3Hcw HTTP/1.1\r\nHost: get-trump-memes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-trump-memes.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:52:16 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623838\r\ncdn-requestcountrycode: NL\r\nvary: Accept-Encoding\r\ncache-control: max-age=2592000, must-revalidate\r\netag: W/\"a0502-14+i6Bt7XM8ofHk8WpmFyqoPYWI\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=vite.plus.esm.js\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 02/14/2026 02:52:16\r\ncdn-edgestorageid: 883\r\ncdn-requestid: 13bb26addd5401ca93378adae396403d\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n5yI8%2FQR%2F1EB04OtVcImcxOaFwdc59Kg4LOuwyU5DvgoDO%2FzwBOp4n1SfxBUXgVNIkIovYsmBYof6%2BOArrDdFlVvQgho%2FQzL%2BJ5q%2FtHMHbIVi5k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd944ae0c9cb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":656642,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-08-04T05:59:25.953933Z","times_seen":2650,"resource_available":true,"data":null}},"time_used":2366,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2169,"receive":197,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-trump-memes.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-trump-memes.xyz/secureproxy?e=ping_proxy","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://get-trump-memes.xyz/","date":"2026-02-14T02:52:13.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-trump-memes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 18:52:29 GMT","end":"Sat, 28 Mar 2026 19:49:57 GMT"},"fingerprint":{"sha1":"07:EC:20:E6:44:AF:37:06:CB:36:5C:65:8B:79:3F:80:4E:11:29:D0","sha256":"C9:AB:03:04:F3:28:1D:8E:16:5E:E2:5C:F9:8D:43:3C:B4:5E:0D:3F:E5:14:BF:93:7D:B0:67:CB:3F:B6:BD:F6"}}},"request":{"raw":"GET /secureproxy?e=ping_proxy HTTP/1.1\r\nHost: get-trump-memes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://get-trump-memes.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:52:13 GMT\r\ncontent-type: text/html; charset=utf-8\r\npriority: u=4,i=?0\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 0\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nlast-modified: Sat, 14 Feb 2026 02:52:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z6W9GAbb%2FRrmwuqFxhpu%2FD1kyw6Hy14VSq9K4W51wvSoupiR%2Fpp0HvOIlKS7FhCdh%2FhqgVi0%2FU0IlUNmW%2BuwNFiZF5x1R%2BNwntORcYteIl4xI%2Bc%3D\"}]}\r\ncf-ray: 9cd944a97bc0b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"6fdb087aa3fbfbcb8287a593a0919e61","sha1":"0e514a0662bcb69dc863953d1ce26e3d40e81a87","sha256":"9795c5ff8937f23526ccb207a5684c1fc94a7854e19c021b39d944e51f5baef2","sha512":"be5457d14c930b51b47ab152850c1ceaafe6ef88c8671b48164abbc83410b0c07a1e178540f6cdeac5f2672cadb1d1cbbb3434b3e39bc2c50c4646a2bae57437","ssdeep":"","tlshash":"fe300000300000000000000c0000000000000000000000000000000000300000000000","first_seen":"2023-04-12T09:14:15Z","last_seen":"2026-08-20T21:14:00.862245Z","times_seen":9049,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-trump-memes.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-trump-memes.xyz/Grain_50p.png","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-trump-memes.xyz/","date":"2026-02-14T02:52:13.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-trump-memes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 18:52:29 GMT","end":"Sat, 28 Mar 2026 19:49:57 GMT"},"fingerprint":{"sha1":"07:EC:20:E6:44:AF:37:06:CB:36:5C:65:8B:79:3F:80:4E:11:29:D0","sha256":"C9:AB:03:04:F3:28:1D:8E:16:5E:E2:5C:F9:8D:43:3C:B4:5E:0D:3F:E5:14:BF:93:7D:B0:67:CB:3F:B6:BD:F6"}}},"request":{"raw":"GET /Grain_50p.png HTTP/1.1\r\nHost: get-trump-memes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-trump-memes.xyz/relume-template---sept-20-ecece4197fc38.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:52:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 58973\r\ncast-mode: default\r\nlast-modified: Wed, 07 Jan 2026 18:40:46 GMT\r\netag: \"695ea8ae-e65d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=smUvmMdKXWncj0MAVnIjhU%2FeW96SAfBQE3npfSU02xFKY%2F4FZEihwiXlbJzipezkMDpj4OFZ6cNDn7TaQyYju0gJ5oFxcaiHKfKUaL7lnT2DjlU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd944aafbfeb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58973,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"a1842ea6327239975672bd95afff6618","sha1":"f7558c864d826a7ce5187a2cffd5f78c9d5d42e6","sha256":"2e7e8a5a2d93df71b06528739f115aee4e23dcab4b5969245a35b4f412d47038","sha512":"6447bfeca3402832480b99d8d8aa5a0a84b9e7f0f219dc81380c791d99b499a8e25dfe771bb225367b242edd6d4395d6da31a5eedf6de471e209f422d9516435","ssdeep":"1536:GdjJBnr3HMRO2ATcQBcdRLp7K7QKxzz5+/BOnaNV629+izdwH:Ca3Aw7R1O7QKtU/BIO629+2SH","tlshash":"094302545c58aa2d342843bd1bcc9ae31377978af901684787bf26b4f721a05ff213e5","first_seen":"2025-01-27T12:55:31.857467Z","last_seen":"2026-06-27T21:51:15.650595Z","times_seen":34,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-trump-memes.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-trump-memes.xyz/trump-silhouette.png","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-trump-memes.xyz/","date":"2026-02-14T02:52:13.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-trump-memes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 18:52:29 GMT","end":"Sat, 28 Mar 2026 19:49:57 GMT"},"fingerprint":{"sha1":"07:EC:20:E6:44:AF:37:06:CB:36:5C:65:8B:79:3F:80:4E:11:29:D0","sha256":"C9:AB:03:04:F3:28:1D:8E:16:5E:E2:5C:F9:8D:43:3C:B4:5E:0D:3F:E5:14:BF:93:7D:B0:67:CB:3F:B6:BD:F6"}}},"request":{"raw":"GET /trump-silhouette.png HTTP/1.1\r\nHost: get-trump-memes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-trump-memes.xyz/relume-template---sept-20-ecece4197fc38.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:52:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 10583\r\ncast-mode: default\r\nlast-modified: Wed, 07 Jan 2026 18:40:46 GMT\r\netag: \"695ea8ae-2957\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7YSbnp0qb2fMkw6p48OqHwkee3NH0Ymj7yCHJyQLrmbWDUzacwSuX46jFDx6s5j2zb7H7J6FfklRkm1kAR6Izn2AWGDZncgAE9uFmLljk5QvxT0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd944ab0c03b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10583,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 236, 8-bit/color RGBA, non-interlaced","md5":"b30d1b35292d0686b2e31a06e9e4c226","sha1":"de84a565db1882aa8ffb18d5a4d00f4ecd2569df","sha256":"b46ce0eb8c27668bab00162b82de59630b6ca9f128ceeb101ffcf11f3190539e","sha512":"500ce7302917230544e8911b543cf45affcd42e8ec1103f1bf07b8267f432bbc68807ee2739a47a125575aaa85c1566e0e64f766b2d256d0c4a977104e089edb","ssdeep":"192:4IIHUCD4wa3S61h63c8lGxihPyuS4HGTyKV+Rh032G9gOTiy64e/N4FHkA:G0wDbGchC4mUCVe7yfeV4z","tlshash":"4e22cfaff1a4b99a440d48acb51e9608d72be748221e4f4cf8ea770fd315661582bf12","first_seen":"2025-01-27T12:55:31.848373Z","last_seen":"2026-06-27T21:51:15.658542Z","times_seen":28,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-trump-memes.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-trump-memes.xyz/l-6","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://get-trump-memes.xyz/","date":"2026-02-14T02:52:13.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-trump-memes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 18:52:29 GMT","end":"Sat, 28 Mar 2026 19:49:57 GMT"},"fingerprint":{"sha1":"07:EC:20:E6:44:AF:37:06:CB:36:5C:65:8B:79:3F:80:4E:11:29:D0","sha256":"C9:AB:03:04:F3:28:1D:8E:16:5E:E2:5C:F9:8D:43:3C:B4:5E:0D:3F:E5:14:BF:93:7D:B0:67:CB:3F:B6:BD:F6"}}},"request":{"raw":"GET /l-6 HTTP/1.1\r\nHost: get-trump-memes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-trump-memes.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:52:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 26420\r\ncast-mode: default\r\nlast-modified: Wed, 07 Jan 2026 18:40:46 GMT\r\netag: \"695ea8ae-6734\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6PUQstXC57qyqEARvl53sKd4%2B%2FLFyOQMe%2FS7x0xMjlarcyipkA6m0MIKyr75yODJEo2%2BpSQCkFbZeSyQg%2FHO%2FoWbyIGq8OY%2FItFNhlxSp9r6q9I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd944ab1c0cb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26420,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 26420, version 1.0","md5":"4769f8f5af3a0142c01d4e6e0ea79a98","sha1":"7a1bd5eb9efcca1a96c3e9fd4eef55868a249212","sha256":"970585a0ab7ef1cd0c3f7af9c90fafb0278b676ee10f51df605762041fc9afd3","sha512":"3f5191ad6e4e63ed1877700b963897e3cd83b6d522001a686d7577418346b305d9fff8d4fd5386a0e20dba758470b69bba05a656596913261c7ba224cad99224","ssdeep":"768:JJUdm2OHOOvrrEzFLOgvOzrVzTNLALSmnHnDGf8az:kTa/EBbvOzBntUjGf8az","tlshash":"b1c2e0c6643af7a3c8c24e32167d7eac39f5aa9afad5dac736830552d94c80b214f405","first_seen":"2024-12-21T15:45:08.357953Z","last_seen":"2026-08-16T18:58:07.435687Z","times_seen":204,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-trump-memes.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-trump-memes.xyz/l-10","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://get-trump-memes.xyz/","date":"2026-02-14T02:52:13.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-trump-memes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 18:52:29 GMT","end":"Sat, 28 Mar 2026 19:49:57 GMT"},"fingerprint":{"sha1":"07:EC:20:E6:44:AF:37:06:CB:36:5C:65:8B:79:3F:80:4E:11:29:D0","sha256":"C9:AB:03:04:F3:28:1D:8E:16:5E:E2:5C:F9:8D:43:3C:B4:5E:0D:3F:E5:14:BF:93:7D:B0:67:CB:3F:B6:BD:F6"}}},"request":{"raw":"GET /l-10 HTTP/1.1\r\nHost: get-trump-memes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-trump-memes.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:52:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 26700\r\ncast-mode: default\r\nlast-modified: Wed, 07 Jan 2026 18:40:46 GMT\r\netag: \"695ea8ae-684c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9iJiBD6Stut%2Fd%2B5tvRbIPc453DdYaARA0rfR1OKMwyWWeL8jWdDGIkOGXUkwKe1TqWDsESXQUnDPdmYXcEaZgh2pjBT2fd28fDfjF6G3frK8mwI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd944ab2c13b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26700,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 26700, version 1.0","md5":"19839ed8ab781f132b4a8e73681bb0a4","sha1":"b3678d3aac860d09e03a44bae52e342a224d6ded","sha256":"2ad26cc015da894a3bb34fd42e2d09b969d99c20f1dac0b9c16a5ad1eacdf91d","sha512":"861bf8769b34d6de01a4850c83274a2abe573bd0b56076bc2df9d79a9862d000a21e016a0d0dd96049d69653d2bda3fae676a78954c607289e51d353ae330b95","ssdeep":"384:LIl7Ch5VRbuPL1iWYUAKyoto+/62m+XMZmdeqRdlOKBvSoqHE5PoQFWmLS11/stE:LINChPKZVtBtF7lOKsoqH1mdLe126OJy","tlshash":"e1c2e1c91d48903df61fbdb01e284a4afcfbb1b47e35e68b811e9466d0c7364ea51523","first_seen":"2025-05-31T19:03:03.434817Z","last_seen":"2026-07-31T08:00:24.233282Z","times_seen":10,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-trump-memes.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-trump-memes.xyz/","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T02:52:12.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-trump-memes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 18:52:29 GMT","end":"Sat, 28 Mar 2026 19:49:57 GMT"},"fingerprint":{"sha1":"07:EC:20:E6:44:AF:37:06:CB:36:5C:65:8B:79:3F:80:4E:11:29:D0","sha256":"C9:AB:03:04:F3:28:1D:8E:16:5E:E2:5C:F9:8D:43:3C:B4:5E:0D:3F:E5:14:BF:93:7D:B0:67:CB:3F:B6:BD:F6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: get-trump-memes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 02:52:12 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 07 Jan 2026 18:40:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VPRl7DfqYr6yTxxJedULNjr%2B6mf942EzPOknSsGHwv04cjtGR28EGXVpLwYbYlZr1gfeAu2n3cf6UEZkRbX85ZHgkc5H5Yxv3iXcCcC2%2BCMLOJo%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9cd944a1eeb432fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82590,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1507)","md5":"0a70bc88194c88c803ed6119b190b103","sha1":"05cb743b3f27dcb7a9ebaa31ec1f24fbe65016d3","sha256":"50306d4c34c1e9ce4c0a4d8b73a029b1a898f15e56e994dc204924f4c9da49f1","sha512":"89ef34840367fae82169dcb165cd1e05d32f5cb12f034b6be82428efbad6a5efcc34eba9782f54bba504e45bd7634ef12d881b5c6271eee3e74f0eaf2675bed3","ssdeep":"768:vsCJld3qUe5bgNgc2785UEr8l13hUgQmIwAWJfvFlytQZyEURz0MXAh/uvO7nY1g:1UErIJLfINMfvFlytQZyEURz27LH","tlshash":"a383506164f11137519380c5aba77b2b7f95e847ca0bca813aac57d48fd3e82cd9324e","first_seen":"2026-02-13T12:47:49.944974Z","last_seen":"2026-02-14T02:52:40.44534Z","times_seen":2,"resource_available":false,"data":null}},"time_used":447,"timings":{"blocked":77,"dns":53,"connect":4,"send":0,"wait":290,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-trump-memes.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-trump-memes.xyz/T-Fight-Figure-3_1T-Fight-Figure-3.webp","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://get-trump-memes.xyz/","date":"2026-02-14T02:52:12.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-trump-memes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 18:52:29 GMT","end":"Sat, 28 Mar 2026 19:49:57 GMT"},"fingerprint":{"sha1":"07:EC:20:E6:44:AF:37:06:CB:36:5C:65:8B:79:3F:80:4E:11:29:D0","sha256":"C9:AB:03:04:F3:28:1D:8E:16:5E:E2:5C:F9:8D:43:3C:B4:5E:0D:3F:E5:14:BF:93:7D:B0:67:CB:3F:B6:BD:F6"}}},"request":{"raw":"GET /T-Fight-Figure-3_1T-Fight-Figure-3.webp HTTP/1.1\r\nHost: get-trump-memes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-trump-memes.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:52:13 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Wed, 07 Jan 2026 18:40:46 GMT\r\netag: W/\"695ea8ae-8456\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GWh%2BPT88I24o4gENTlAhP1Memolu2a3tOWnqazjr03LKsOq9TYoTtQCKsIKkcd3ji40Z2Ap58mCLzbaBD8ER9JU1MgjUVJTkNY8BDWCVLgMo8tg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd944a4eafcb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33878,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2c3dc9d8cef4dd47e61b9fa0585aee38","sha1":"1a1577e95fe843d0f87bfb83c09da0d194f0af03","sha256":"e8c0660e9fab4b94f63dcfe1a28b1a96d583ac6164703f19422f4dffd81fcb2a","sha512":"f4136ced6d2de446752fadecbdeb56d9d5b399d3e22b7680f8a444756371362f5031cbf90ba4adf3e93b92b89a5fba1296c0571d1e86105aa81c0144ef3ebdac","ssdeep":"768:tnidjEaWLq7j5De8hpSES+Robeq5niZXSPemM9Z7K4IwGcXeZ7:tidjjNtDe8hcEbobeq5iZXeem4Zv8p","tlshash":"7be2f1dad56ca1e3b3cf61461aa4f117b91a23d887add81e70325eefc9c99480c4ed08","first_seen":"2025-01-27T12:55:31.840484Z","last_seen":"2026-05-02T13:34:17.234987Z","times_seen":45,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-trump-memes.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-trump-memes.xyz/stars-stripes-3_1stars-stripes-3.webp","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-trump-memes.xyz/","date":"2026-02-14T02:52:13.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-trump-memes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 18:52:29 GMT","end":"Sat, 28 Mar 2026 19:49:57 GMT"},"fingerprint":{"sha1":"07:EC:20:E6:44:AF:37:06:CB:36:5C:65:8B:79:3F:80:4E:11:29:D0","sha256":"C9:AB:03:04:F3:28:1D:8E:16:5E:E2:5C:F9:8D:43:3C:B4:5E:0D:3F:E5:14:BF:93:7D:B0:67:CB:3F:B6:BD:F6"}}},"request":{"raw":"GET /stars-stripes-3_1stars-stripes-3.webp HTTP/1.1\r\nHost: get-trump-memes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-trump-memes.xyz/relume-template---sept-20-ecece4197fc38.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:52:13 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Wed, 07 Jan 2026 18:40:46 GMT\r\netag: W/\"695ea8ae-10582\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6l3Y7EXS5avEbbLsLDAN78xOq1hOLkBtbTbyilTliFOWps5k%2BhZTKDsvmc5KoOk1exXf5kxQXRayD%2Bw9xGnRxasc1rHcHn%2FkVTH5R4e%2FoRjdjAc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd944a9abcbb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":66946,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a201afd345bfefbb0c8d7d67a291cc7d","sha1":"4bcf8ec905d022d8e63339d1d7a472cdb522dfbc","sha256":"496f3b3de83bb73299fc8ab7986ff40a169548cb0df4fba529a75687fae360eb","sha512":"d274b09bc5fa23da314fbd10702ef649138dbb649345912b0eb70a32b63a0e4f4dc16050b53f83ca820c22464e1a6d06c5f290cba479a44a87ae5f62ccf30be9","ssdeep":"1536:o1/6gDDAEAIalvAslew4mg1laC+5rsxt3:CXAEApt4fvaC+exl","tlshash":"9b63f042d5f1276583b78300b5835dd71e57dfe29b02e8d999850bae2cbec06e830e97","first_seen":"2025-01-27T12:55:31.858635Z","last_seen":"2026-06-27T21:51:15.657107Z","times_seen":38,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-trump-memes.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-trump-memes.xyz/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://get-trump-memes.xyz/","date":"2026-02-14T02:52:13.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-trump-memes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 18:52:29 GMT","end":"Sat, 28 Mar 2026 19:49:57 GMT"},"fingerprint":{"sha1":"07:EC:20:E6:44:AF:37:06:CB:36:5C:65:8B:79:3F:80:4E:11:29:D0","sha256":"C9:AB:03:04:F3:28:1D:8E:16:5E:E2:5C:F9:8D:43:3C:B4:5E:0D:3F:E5:14:BF:93:7D:B0:67:CB:3F:B6:BD:F6"}}},"request":{"raw":"GET /memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: get-trump-memes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-trump-memes.xyz/css.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:52:14 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 48320\r\ncast-mode: default\r\nlast-modified: Wed, 07 Jan 2026 18:40:46 GMT\r\netag: \"695ea8ae-bcc0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ziZJmby2ZP2w82vAA3JuNsBxtIHSlmpm2wt4R2ruW0qDhcD2mkmtyg8ehbL3qdcunESfavvXxjnR%2FO5JJc5%2F3LRNOz%2Ba4x0WWtuMcWV1m8JcYac%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd944ab5c1fb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-08-20T22:31:25.36645Z","times_seen":331172,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":132,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-trump-memes.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-trump-memes.xyz/favicon.png","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-trump-memes.xyz/","date":"2026-02-14T02:52:14.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-trump-memes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 18:52:29 GMT","end":"Sat, 28 Mar 2026 19:49:57 GMT"},"fingerprint":{"sha1":"07:EC:20:E6:44:AF:37:06:CB:36:5C:65:8B:79:3F:80:4E:11:29:D0","sha256":"C9:AB:03:04:F3:28:1D:8E:16:5E:E2:5C:F9:8D:43:3C:B4:5E:0D:3F:E5:14:BF:93:7D:B0:67:CB:3F:B6:BD:F6"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: get-trump-memes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-trump-memes.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:52:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 5850\r\ncast-mode: default\r\nlast-modified: Wed, 07 Jan 2026 18:40:46 GMT\r\netag: \"695ea8ae-16da\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4nv6u%2BwWNivs5k%2Fo5jGBgSoCJ3jSrmLPHhYdvi%2BxdyRmgKznSq4MvfnGz2Kxps591DqkAzWWWKr38Wlh%2BaHLtZ7HCD4FXxJLqHb6w6l5mstnI20%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9cd944addc95b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5850,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"7bb47473ab236adae5e694447b334452","sha1":"6670d1129499b0c024b840e18c77eaea39386afa","sha256":"247a6fb8bc50f38c5529a327ba803c6a42eb1e9d620227e97e16b7f956d0d52b","sha512":"d9c47be0ef4baccf8a6023e5e2404959134b76e9e11ca91f716f1f1c0874b92f91306e384bbc00bdfb11e164d84e8790ea20ffcc85249a41b519576b984c298a","ssdeep":"96:FllcHitlIxv9vk7C1+I4wWHLihk/xZSOsWRIHJIQnae6Aspw43z38cAR3F:+IIHUCD4wa3SOsW8FnEpw4jWF","tlshash":"f9c17dc89468450b00070798ad4bac95c5b7674452601e2dbdfed33fe318d9578b2abb","first_seen":"2025-01-27T12:55:31.898719Z","last_seen":"2026-05-02T13:34:17.2304Z","times_seen":36,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-trump-memes.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-trump-memes.xyz/secureproxy?c=%2F%40v1%2Fcdn%2Fjs%2Fvite.plus.esm.js%3Ft%3D29517292%26u%3DzOJmwGbWCTcWK2UPGDY5NGFiNDU5MzIyNmMwZWNmMWFlMTg5MHK9FQe3pTxoWU3Hcw","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://get-trump-memes.xyz/","date":"2026-02-14T02:52:14.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-trump-memes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 18:52:29 GMT","end":"Sat, 28 Mar 2026 19:49:57 GMT"},"fingerprint":{"sha1":"07:EC:20:E6:44:AF:37:06:CB:36:5C:65:8B:79:3F:80:4E:11:29:D0","sha256":"C9:AB:03:04:F3:28:1D:8E:16:5E:E2:5C:F9:8D:43:3C:B4:5E:0D:3F:E5:14:BF:93:7D:B0:67:CB:3F:B6:BD:F6"}}},"request":{"raw":"GET /secureproxy?c=%2F%40v1%2Fcdn%2Fjs%2Fvite.plus.esm.js%3Ft%3D29517292%26u%3DzOJmwGbWCTcWK2UPGDY5NGFiNDU5MzIyNmMwZWNmMWFlMTg5MHK9FQe3pTxoWU3Hcw HTTP/1.1\r\nHost: get-trump-memes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-trump-memes.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:52:16 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623838\r\ncdn-requestcountrycode: NL\r\nvary: Accept-Encoding\r\ncache-control: max-age=2592000, must-revalidate\r\netag: W/\"a0502-14+i6Bt7XM8ofHk8WpmFyqoPYWI\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=vite.plus.esm.js\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 02/14/2026 02:52:16\r\ncdn-edgestorageid: 883\r\ncdn-requestid: 13bb26addd5401ca93378adae396403d\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Clc01ATcQC3%2Fsxxl9%2F2kb3WWbuUQAnCgd%2BmPV0uoP4GAYI2AusGih%2BOZ1CAjRnfdAquyB0ExW9y49ZNEaKUuI%2BKV5uBkrKzMXtL0lbMXrzYpnSk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd944ae2ca0b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":656642,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-08-04T05:59:25.953933Z","times_seen":2650,"resource_available":true,"data":null}},"time_used":2329,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2146,"receive":183,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-trump-memes.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-trump-memes.xyz/Community5_1Community5.webp","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-trump-memes.xyz/","date":"2026-02-14T02:52:13.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-trump-memes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 18:52:29 GMT","end":"Sat, 28 Mar 2026 19:49:57 GMT"},"fingerprint":{"sha1":"07:EC:20:E6:44:AF:37:06:CB:36:5C:65:8B:79:3F:80:4E:11:29:D0","sha256":"C9:AB:03:04:F3:28:1D:8E:16:5E:E2:5C:F9:8D:43:3C:B4:5E:0D:3F:E5:14:BF:93:7D:B0:67:CB:3F:B6:BD:F6"}}},"request":{"raw":"GET /Community5_1Community5.webp HTTP/1.1\r\nHost: get-trump-memes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-trump-memes.xyz/relume-template---sept-20-ecece4197fc38.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:52:14 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Wed, 07 Jan 2026 18:40:46 GMT\r\netag: W/\"695ea8ae-3b3c4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n6uoNOcmKz7rhKb3uxy3NFjinKV6GXxgLiIC4bBqY3l0ouza9vo%2B%2B%2FnBr%2Bu19QA0FHJHd264epjk6WfDaHDgpm48WoqvCSNWAje3uSL8C6BUvvI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd944ab1c09b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":242628,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d0619180167d00e51fcb1071b0417081","sha1":"d19752c83b492c69f7446f076c7a637820c44322","sha256":"0c7c956550818d505ebd14c5ae8e5d926c6707b6f29ac314b7730fb69d76571f","sha512":"b3356ca0be57748e3f043f1450a73fd77ee1eeb6d58590d564aa74929739dcc6160d4a2d1b957de6cf8938ebaf9fad02552e6d00102022cc7ca03d36e2fc9bde","ssdeep":"6144:cBBn914c3Pb8suPpHBK34oJOwxZUKZMsjdgY0xD:eB91hTCpHB24o/8KdjiYu","tlshash":"4734227ed12b0c1a52b3c9f56153988dbacf3acc24d47a6c996c39b3e9a4346c80c45f","first_seen":"2025-01-27T12:55:31.865044Z","last_seen":"2026-03-26T06:04:27.138678Z","times_seen":31,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":133,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-trump-memes.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gettrumpmemes.com/images/webclip.png","fqdn":"gettrumpmemes.com","domain":"gettrumpmemes.com","tld":"com"},"ip":{"addr":"104.18.7.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-trump-memes.xyz/","date":"2026-02-14T02:52:14.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gettrumpmemes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 00:15:45 GMT","end":"Sat, 09 May 2026 01:15:43 GMT"},"fingerprint":{"sha1":"E0:5B:50:F9:C5:3C:C3:2E:5F:68:A4:CF:51:FA:A0:36:A7:87:C4:CA","sha256":"DC:83:99:12:17:D2:BF:06:01:2C:C5:12:10:C5:75:0B:09:24:58:6B:D8:1E:03:C0:AC:5C:B9:C7:56:B8:4A:D7"}}},"request":{"raw":"GET /images/webclip.png HTTP/1.1\r\nHost: gettrumpmemes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-trump-memes.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 02:52:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 111544\r\ncf-ray: 9cd944ae1d782678-OSL\r\netag: \"1b3b8-64862d8f20b00\"\r\nlast-modified: Thu, 15 Jan 2026 01:07:24 GMT\r\nnel: {\"report_to\":\"heroku-nel\",\"response_headers\":[\"Via\"],\"max_age\":3600,\"success_fraction\":0.01,\"failure_fraction\":0.1}\r\nreport-to: {\"group\":\"heroku-nel\",\"endpoints\":[{\"url\":\"https://nel.heroku.com/reports?s=Gmt9ALpKBM46UxXUxDck8FBSYiNWPLo%2FBBtXV0iMav4%3D\\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\\u0026ts=1768447004\"}],\"max_age\":3600}\r\nreporting-endpoints: heroku-nel=\"https://nel.heroku.com/reports?s=Gmt9ALpKBM46UxXUxDck8FBSYiNWPLo%2FBBtXV0iMav4%3D\u0026sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d\u0026ts=1768447004\"\r\nvia: 2.0 heroku-router\r\ncf-cache-status: REVALIDATED\r\nexpires: Sat, 14 Feb 2026 06:52:14 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111544,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"ed9222a34ac2d5447de2204202e8529a","sha1":"39e6afc6b224fd9889414ad07fdb1603250b77c6","sha256":"1112b2f016db063d78805af57181a0d4434ba5ae008f0a9e6cdc388dc6ebc4bb","sha512":"ea08735cf2c9624f54e89065da1d50eb443e18e7e87b4963953ce81c66b4b1ed2d0f91dbb88e61139629718a9c3fc323bca0d875aac0ddc06cf1deb328840ba7","ssdeep":"1536:tcMU9VJc9r4pZU7n6EPpEYL0/41W2S7pECpGLZjfBlXhtS9a7aCZVf1zkG9hm:xU9VJct4T4PeYtw2MfI9jfBlXh73hkum","tlshash":"bab302d623f5b00e619886ac0165cf73d4e88e6129f66669fce8e8d1e81fcb11861e5c","first_seen":"2025-01-27T12:55:31.900617Z","last_seen":"2026-05-02T13:34:17.231275Z","times_seen":33,"resource_available":false,"data":null}},"time_used":473,"timings":{"blocked":-1,"dns":7,"connect":1,"send":0,"wait":428,"receive":12,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"gettrumpmemes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-trump-memes.xyz/nock.esm.js","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://get-trump-memes.xyz/","date":"2026-02-14T02:52:12.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-trump-memes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 18:52:29 GMT","end":"Sat, 28 Mar 2026 19:49:57 GMT"},"fingerprint":{"sha1":"07:EC:20:E6:44:AF:37:06:CB:36:5C:65:8B:79:3F:80:4E:11:29:D0","sha256":"C9:AB:03:04:F3:28:1D:8E:16:5E:E2:5C:F9:8D:43:3C:B4:5E:0D:3F:E5:14:BF:93:7D:B0:67:CB:3F:B6:BD:F6"}}},"request":{"raw":"GET /nock.esm.js HTTP/1.1\r\nHost: get-trump-memes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-trump-memes.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:52:13 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Wed, 07 Jan 2026 18:40:46 GMT\r\netag: W/\"695ea8ae-6224c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l7434H3xoInWtaipTvMULv7qf%2FaIwfMz18sDW7kDg99s2h%2BoyXSsd4sX3aZiN4o4YkZINcfqIPLiX%2F5Fj8ryP%2BQmBa5wOtZCzaupDVsXJRD9lTg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd944a4daf2b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":401996,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65159)","md5":"a2e3afdec3323649a7deb0418a765635","sha1":"95f235f2135f5c77a3af0304e3631606125808eb","sha256":"a72ae5ec2bf6dc5787f5fdb3e8ffc6672e0e1322ee65d91b2b248409c4a611ec","sha512":"07e9d3375e19610736caed39e69c19c448819cab2fa7963d42695ac9bb3d69240a7c97858f764492f663a07b9a8e6f8e7d3c1c0499b675cefe0e2fec32f7f5e0","ssdeep":"3072:eR5ZeprfrDHHxbolowHJZ90VMSPMIy7EW8nbOVMpuGxoPri83tGQ38dH5szUNZqR:eRTcTr7dolowHJXSPMIy79ito7GaWrzK","tlshash":"2684746313f76262c2c142b78ed27098f99db929c2604c4ff551f186e8a8d65f3ef186","first_seen":"2026-01-05T13:19:06.701322Z","last_seen":"2026-02-14T02:52:40.455423Z","times_seen":3,"resource_available":true,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-trump-memes.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/60138c04e6b2/api.js","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://get-trump-memes.xyz/","date":"2026-02-14T02:52:12.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"GET /turnstile/v0/g/60138c04e6b2/api.js HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://get-trump-memes.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=.XpLul2XI7U.NjJAzBacCMKFSjoazTB07O7Wjaom0g0-1771037532.963863-1.0.1.1-FAQzoRQSGEJKAcRQdHRsR3BeyIoWa4c98q9BWNYvtIE\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 02:52:12 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nlast-modified: Tue, 10 Feb 2026 16:17:54 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cd944a53c540daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51151,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (51150)","md5":"0d4a61fa35059c9e19e71cb1f5a77bfe","sha1":"680142959bbbf9920601ff8559405c010920b9e5","sha256":"dbe8c6990993e30d76285ec5e857573487b36256127a6c72f0c402ed8f0fa5f6","sha512":"42709c6925f0e6b52a2ab5bd20ecb956723e8f8e5e8829822b7005cc53fc490e7af187e336c5b77b360f0a8a0aa7596bb093658d694a36a76475ad475a375404","ssdeep":"768:NCMIW2oMv79fuxBFZeXDhnyaSP0TNTTOGnx7sMAeGsONUgg1JW37+CfkmEt6wUaf:j2pv79fuxDZeXxuqvneG1ggPN","tlshash":"1a333b583156393227dd80e4617ba3437325793ae94ccc90e827dd66266cdcad233fba","first_seen":"2026-02-11T10:51:04.774988Z","last_seen":"2026-03-01T17:49:40.024397Z","times_seen":15318,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-trump-memes.xyz/secureproxy?e=ping_proxy","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://get-trump-memes.xyz/","date":"2026-02-14T02:52:13.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-trump-memes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 18:52:29 GMT","end":"Sat, 28 Mar 2026 19:49:57 GMT"},"fingerprint":{"sha1":"07:EC:20:E6:44:AF:37:06:CB:36:5C:65:8B:79:3F:80:4E:11:29:D0","sha256":"C9:AB:03:04:F3:28:1D:8E:16:5E:E2:5C:F9:8D:43:3C:B4:5E:0D:3F:E5:14:BF:93:7D:B0:67:CB:3F:B6:BD:F6"}}},"request":{"raw":"GET /secureproxy?e=ping_proxy HTTP/1.1\r\nHost: get-trump-memes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://get-trump-memes.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:52:13 GMT\r\ncontent-type: text/html; charset=utf-8\r\npriority: u=4,i=?0\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 0\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nlast-modified: Sat, 14 Feb 2026 02:52:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z%2Fc2u2Pt0N5n7JMtp%2FvVTjaTlOZlyvGPPI8MmaK1d8gvqsfsz2KhFseWTDep%2F6E%2B6rPHR%2BFYLeQ7vcp%2BpMDkTij1O1Zfij692tfHHT5WvzV9LiM%3D\"}]}\r\ncf-ray: 9cd944aacbf7b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"6fdb087aa3fbfbcb8287a593a0919e61","sha1":"0e514a0662bcb69dc863953d1ce26e3d40e81a87","sha256":"9795c5ff8937f23526ccb207a5684c1fc94a7854e19c021b39d944e51f5baef2","sha512":"be5457d14c930b51b47ab152850c1ceaafe6ef88c8671b48164abbc83410b0c07a1e178540f6cdeac5f2672cadb1d1cbbb3434b3e39bc2c50c4646a2bae57437","ssdeep":"","tlshash":"fe300000300000000000000c0000000000000000000000000000000000300000000000","first_seen":"2023-04-12T09:14:15Z","last_seen":"2026-08-20T21:14:00.862245Z","times_seen":9049,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-trump-memes.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-trump-memes.xyz/docusaurus.slim.esm.js","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://get-trump-memes.xyz/","date":"2026-02-14T02:52:13.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-trump-memes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 18:52:29 GMT","end":"Sat, 28 Mar 2026 19:49:57 GMT"},"fingerprint":{"sha1":"07:EC:20:E6:44:AF:37:06:CB:36:5C:65:8B:79:3F:80:4E:11:29:D0","sha256":"C9:AB:03:04:F3:28:1D:8E:16:5E:E2:5C:F9:8D:43:3C:B4:5E:0D:3F:E5:14:BF:93:7D:B0:67:CB:3F:B6:BD:F6"}}},"request":{"raw":"GET /docusaurus.slim.esm.js HTTP/1.1\r\nHost: get-trump-memes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-trump-memes.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:52:13 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Wed, 07 Jan 2026 18:40:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 0\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NGn6Yqskk72tP8q4QHDBoq%2BjmlQ19ioyw3Fel3MM5MAKN2gJzrVlwnFiVunZnvlqCpU2Ha96VcSwqMUL%2FXlheZvqKzvxIvGzB3fwM6nKpr3wJO4%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9cd944aaebfcb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T22:30:42.60301Z","times_seen":18000396,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-trump-memes.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-trump-memes.xyz/l-2","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://get-trump-memes.xyz/","date":"2026-02-14T02:52:13.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-trump-memes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 18:52:29 GMT","end":"Sat, 28 Mar 2026 19:49:57 GMT"},"fingerprint":{"sha1":"07:EC:20:E6:44:AF:37:06:CB:36:5C:65:8B:79:3F:80:4E:11:29:D0","sha256":"C9:AB:03:04:F3:28:1D:8E:16:5E:E2:5C:F9:8D:43:3C:B4:5E:0D:3F:E5:14:BF:93:7D:B0:67:CB:3F:B6:BD:F6"}}},"request":{"raw":"GET /l-2 HTTP/1.1\r\nHost: get-trump-memes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-trump-memes.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:52:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 25824\r\ncast-mode: default\r\nlast-modified: Wed, 07 Jan 2026 18:40:46 GMT\r\netag: \"695ea8ae-64e0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X7hKxxMC7rMdtmqZr3o%2BONtJ7fySMpVtrMeqE7yXHkFQTsvJHGbQjgHWFQtWpLxcYXa1EIQLJm%2FNGWANEvaHhLqgFHS7x9liW8lb2NojyeNsBzw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd944ab2c16b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25824,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 25824, version 1.0","md5":"d017d5a86bb162b7e444b857a884ad58","sha1":"5a3e89f273a892ee20f2ccdef3f6f0025d5ed8d3","sha256":"adfdf3c3638f09d7a9e3abe920c66ff378dde1cbd83d9468b3cc8b3e46330d24","sha512":"5304b52987b34bd66f23be357329c591982cc91013fdeb2c727bafef742ef5dbb3dc3347058cb8ee070e0a6c8c1a43f817aa4600422910079a0956e0717ce8b2","ssdeep":"768:V0JCs+FvkbT4u1y5rXQqFZBeyEqfhgzT8U95hc:V0Qs+JkbTjCrQqI7qfhqTt9Tc","tlshash":"36c2e1d8bff11b60e32725303bd0d9b1ecdb7e62d698ab1b58f5f84913918390074866","first_seen":"2024-12-11T15:01:14.461951Z","last_seen":"2026-08-19T02:27:59.372302Z","times_seen":733,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-trump-memes.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-trump-memes.xyz//secureproxy?c=%2Fjmpd%2F","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://get-trump-memes.xyz/","date":"2026-02-14T02:52:17.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-trump-memes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 18:52:29 GMT","end":"Sat, 28 Mar 2026 19:49:57 GMT"},"fingerprint":{"sha1":"07:EC:20:E6:44:AF:37:06:CB:36:5C:65:8B:79:3F:80:4E:11:29:D0","sha256":"C9:AB:03:04:F3:28:1D:8E:16:5E:E2:5C:F9:8D:43:3C:B4:5E:0D:3F:E5:14:BF:93:7D:B0:67:CB:3F:B6:BD:F6"}}},"request":{"raw":"POST //secureproxy?c=%2Fjmpd%2F HTTP/1.1\r\nHost: get-trump-memes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://get-trump-memes.xyz/\r\ncontent-type: application/json\r\nContent-Length: 2207\r\nOrigin: https://get-trump-memes.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2207,"data":"{\"route\":\"8XUwkBv9vhPYfVpD1fxb7EC65sUXJdqr\",\"payload\":\"3Me3PnMBSZxTCgANtthhc7u2bTwsaF3MT3QtwJGVY1X9F6VSDEo7QEZ38Lbuiag6SsBiD5m3cVmXahueDqscRkFpzuBEv3ZSiVsETEcx16kvaBGVZQBsAgGSyU88Yz2qB2cZiarCi4khvmqHvfsKCgAGzjZPF8UdUYvWsdoGDwijdDWbQKNEj371F8t2AsTUHZ9npdAToG7KYJqSrJfWMUW7CJe7tzx23naHnVAP9CYYEjuy4uPHSTNxPqBo64A7aeW8yjq9ZfUBVYWYQX2u7yAVvDyfFKcsouj2CZLJHAvfFKwv4te6nUx4dgYrQpALT8D9ryXGDjvMCwMNDvqjsXL2gxK8oWi6z6bkG9g3fyrPPujFxAeUz5abjT6uSKNayeuSis11hA8dDauZFCxpxUHPugPdiiue61bbjpJBAZeT6quFxoezGJhutEbfCffaV35NmZyjPFT77j8aetXzzDZZ9c1rdMt8LKkGMWYjQzvKzLgzVpUp9q7N4Qn6qBH2JbrG4ZmubBttafXuCeZ6FsCPjhHr7sxYZYbXxh7i2BH2JEzorLkvGK87wFQUTRa154M8Us2RX8WCi1iT392SWF4sCwZQXe5PGjE9JgYXamvKp39cSN8NrEMvfXXXk3uESLNYVZstwMQNVJDYcRwpsg1NchiaXmdv94rPpnSrpbkkzoxDBQZLs8GeFPRXxRAeM5NTAzixSrhfWNY2Ljd71VvMJWqAg2Ziui6V1HrVmQGr1TSZz1rFKvro1jsTsamZhzGGehZyq8HUtnaGQouRZ5vnLD3XWXy3wJtztHBSWk1SxuMQNknbKoVWYyLQSTUCvtTciqf6AXYsKoE1GNPv7e2FetgwBAfqTsih2AdTLfR32GeURuua2BPxs283J8m9BfKYTpQdELsEShN1SL6v65nQRXxNhypd2FGudmSegGkToqgVvT7kZUwmpKqJAPQEivKVee9TTXdhAyAa9t5J5GxRAzYH9FCnb5oJFLFnyUmJ8Pgc5uoP2DyENP35HXM3xTa2QyHd4jjt1GnvbPgwavHrm37pHeCtGDdtdt52k6hosEkFBVffGqm3f1N7o7ucg7TUhM7KHygHDEsVESWdh6Kqd8CPnAf33WpnXLWZyoRwwDex8DeTPtvUob1KerJg4wTgvH2ewMqBBp5B5V2uYzCuBJggkX1kkHd3PunL2nCL1QB6hhNfyn91q4xbwaS6Y65QVpcTH3cMVx3Md5TJ3a4JJzmwNLNxCxsc44xhY3nr5DSLonN3e68oXAJSNDcuo2LLfGWub1MGdGKMqyTnYEFEUV3RuZaFW1MDyHp2SxZubVGTxCKmdEnVEmWiWiuDJ4s6Dq7pms4YPay3pqeFzPGQmp9NQt7xcref4SJN6QePDEXyaq5hidwEGMnrvUaThbqnwcE41eJNaSAo7HpNQWTuPTEJZbku7dMtTyF3kAGeHTe9AxQJfxwgLysHiMsbbZm8MhpiKX5dxtyo25iQniFe25c3iWVgPtddmiR445B8Rt71DEDtEkATWumMEGAgrbKifGkDriZq8sjrJmsDHYxHbAzXowHukxp1jvz9JYyJyTeoTqiVA9WAg9t2wD7252kmo6SiFxHJZ2UmGxBhHEQvQLRTuN4T7XSzx5qzzba3bUNScR6WFmYTWWMviX4oqkBceJ4E7xYJJvM225aYGi7wzpSfVhzd7LEje9U8unMqVn2ywNpm2ko1SPEhoh8Acv6KMcEkm24E25jsPWDYVrxwKuvxh5RsKHSKeb9QAxTqouX3saxoToGU2JGbeusPjHVdRSGX8QTDipv3RJwbnZwmkcksezbyRQr7FJF2TV52N3MbuSLedwZYTgd76FtB9pLtZwp1yDYcZj2MWyciA6cEkR5nGQ8j2hY8suCZhjBg7Cp1KpyrZsrkXqfLHQThKBeHZw927UXxqvRwtDMdwyedqXM92FShaCsRmneDzSf7cjXUpRr7hpeaCDn6dKuhnGkmewzgu79KMaYY23Rzt8DxsgdpdHJQCNvvCai8sY6eW3VbxXhHf55mbDJdGK57VTrvPM3LPuYP25stuidyCChCk3AxXStb3TZ7cEgreHM3vzwNKPpcwJuzXzZrVTo84ZxKh5yQnhVwLsNa6K41fKFKf3ZGkJ4xpBK3DL\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:52:17 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623838\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"db-kWIGbB6W3ShBbIRkB6Z/76U3i2s\"\r\nx-ratelimit-limit: 10000\r\nx-ratelimit-remaining: 9999\r\nx-ratelimit-reset: 1771037597286\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 02/14/2026 02:52:17\r\ncdn-edgestorageid: 879\r\ncdn-requestid: ffc3efd53f094b61dbdfbc155a91ac15\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=imiti0i%2BhfD0L7FOmA4dFBTEUeCjYBfWmiTq58Vc0klfNkpMRHQbwaJjA0aAWaZTHdAzyJL83G6i3oKFpjbyGhlEb05EhVJxK3HKLcBDdVhtzLc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd944bf7ebcb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":219,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c44c2bbf960a0061d6437334866bd98e","sha1":"9162066c1e96dd28416c846407a67fefa5378b6b","sha256":"ea03abca78dde30b5e6063f6290c9814c4f0e02b80293542a84d51d620fef2b6","sha512":"a7b1072ed68987555c77391bb891a99a03af9fa6eb716f2edb4c272d2f5e8502b1d4a5f2aaeff5703803d97dcffaa902da132c2397648845088bf95181b43d50","ssdeep":"","tlshash":"cfd02384a9014b7330d605fc26d499a557167c4575c527677f9005ecd5d14a43cf4f37","first_seen":"2026-02-14T02:52:40.460855Z","last_seen":"2026-02-14T02:52:40.460855Z","times_seen":1,"resource_available":false,"data":null}},"time_used":467,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":466,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-trump-memes.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-trump-memes.xyz/relume-template---sept-20-ecece4197fc38.css","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://get-trump-memes.xyz/","date":"2026-02-14T02:52:12.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-trump-memes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 18:52:29 GMT","end":"Sat, 28 Mar 2026 19:49:57 GMT"},"fingerprint":{"sha1":"07:EC:20:E6:44:AF:37:06:CB:36:5C:65:8B:79:3F:80:4E:11:29:D0","sha256":"C9:AB:03:04:F3:28:1D:8E:16:5E:E2:5C:F9:8D:43:3C:B4:5E:0D:3F:E5:14:BF:93:7D:B0:67:CB:3F:B6:BD:F6"}}},"request":{"raw":"GET /relume-template---sept-20-ecece4197fc38.css HTTP/1.1\r\nHost: get-trump-memes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-trump-memes.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:52:13 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Wed, 07 Jan 2026 18:40:46 GMT\r\netag: W/\"695ea8ae-373ee\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4KIin84QGqUoC5wXVpzCMo%2FZp3ACe%2FWIL0qHRfXKaUXKt4OK3QUF1ncRRqtCPqo6EqPPvkZNnVRvUs17pUvIZeLDEU8e9MV6cSNwy2%2F2XrxNEaQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd944a4daf5b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":226286,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with very long lines (554)","md5":"e98d6bb7df3df7b998f0e3084b92f0fa","sha1":"a03a2578338539da612ca228c9a54f0c8976ddcc","sha256":"af0d8e2a6d0e530f418fd14bf721dd56592fdf394cf1a97a1f50674ebf516a0c","sha512":"77222ce0693a4cdc3c82c520f82551c2fb525ccb140e3e6a22dd0623acadc6c69e2090dde9352237c147a7fd09389c0523bf17d3f4dc2a05bb9489aa28107411","ssdeep":"3072:ERYYJhiAbXaBG3PelROCKf8daNNMCTSUn5e0ZgVEu6:ERQKOIrO+n5e0ZgVEu6","tlshash":"7624940037b95889786b04f8dae7b7c0735a9842cd4ecff579e920a9df8459530b27ac","first_seen":"2026-01-05T13:19:06.711119Z","last_seen":"2026-02-14T02:52:40.463917Z","times_seen":3,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":286,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-trump-memes.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-trump-memes.xyz/css.css","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://get-trump-memes.xyz/","date":"2026-02-14T02:52:12.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-trump-memes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 18:52:29 GMT","end":"Sat, 28 Mar 2026 19:49:57 GMT"},"fingerprint":{"sha1":"07:EC:20:E6:44:AF:37:06:CB:36:5C:65:8B:79:3F:80:4E:11:29:D0","sha256":"C9:AB:03:04:F3:28:1D:8E:16:5E:E2:5C:F9:8D:43:3C:B4:5E:0D:3F:E5:14:BF:93:7D:B0:67:CB:3F:B6:BD:F6"}}},"request":{"raw":"GET /css.css HTTP/1.1\r\nHost: get-trump-memes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-trump-memes.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:52:13 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Wed, 07 Jan 2026 18:40:46 GMT\r\netag: W/\"695ea8ae-19381\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bMFIbsWsFLCHyEWyrsb9xNEmj%2FqCIH0Zb0kZoPdCQ27V83dc4bvXFZFNa2IN4EzpSudOmIVBnFq5dEulZHN60wT57YR5gVA59tK8aDWwWW3cL0k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd944a4daf7b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":103297,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1572)","md5":"a5a107aed1f69e0933887f23ebc84128","sha1":"1039fe7d01e8956c9236ff6d267b7b5f8180f80a","sha256":"5f3f8981c79b338f292e195d948f43a4ad087c4dea515e25c98d37a37bab3e9f","sha512":"434589fd0bc4a8d61f8156c0307a6b65f50a97c108008872d0ec416d835ebe37b2ac1e68542324ace3b4b9ecb951bbaf4afd469b1ad802004a930b3cf018202d","ssdeep":"384:cL+k3u3633kRh6k0Ipknn0kq2Dk9dGkQU1kzjAkWSfhPb3oDmJcnqWxDOM4dFvxO:ieaBPbLk+2Xz0ppOo6GLvHXFS6soj5ef","tlshash":"00a3eb50042b6040a3972cd273cf3e31de8eb294b04899346ffe569aeddaca563b535d","first_seen":"2026-01-05T13:19:06.698263Z","last_seen":"2026-02-14T02:52:40.465142Z","times_seen":3,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-trump-memes.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/api.js","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://get-trump-memes.xyz/","date":"2026-02-14T02:52:12.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"GET /turnstile/v0/api.js HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-trump-memes.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sat, 14 Feb 2026 02:52:12 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public\r\ncross-origin-resource-policy: cross-origin\r\nlocation: /turnstile/v0/g/60138c04e6b2/api.js\r\nset-cookie: _cfuvid=.XpLul2XI7U.NjJAzBacCMKFSjoazTB07O7Wjaom0g0-1771037532.963863-1.0.1.1-FAQzoRQSGEJKAcRQdHRsR3BeyIoWa4c98q9BWNYvtIE; HttpOnly; SameSite=None; Secure; Path=/; Domain=challenges.cloudflare.com\r\nserver: cloudflare\r\ncf-ray: 9cd944a50c030daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51151,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T22:30:42.60301Z","times_seen":18000396,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":3,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-trump-memes.xyz/nock.esm.js","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://get-trump-memes.xyz/","date":"2026-02-14T02:52:13.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-trump-memes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 18:52:29 GMT","end":"Sat, 28 Mar 2026 19:49:57 GMT"},"fingerprint":{"sha1":"07:EC:20:E6:44:AF:37:06:CB:36:5C:65:8B:79:3F:80:4E:11:29:D0","sha256":"C9:AB:03:04:F3:28:1D:8E:16:5E:E2:5C:F9:8D:43:3C:B4:5E:0D:3F:E5:14:BF:93:7D:B0:67:CB:3F:B6:BD:F6"}}},"request":{"raw":"GET /nock.esm.js HTTP/1.1\r\nHost: get-trump-memes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-trump-memes.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:52:13 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Wed, 07 Jan 2026 18:40:46 GMT\r\netag: W/\"695ea8ae-6224c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lftjV7WAvk3ezG9zuYdezQDyEG2IlpT6yURagA%2BpU9qRH3ojUopO3l32P48X9Q1bMmE6dT11eFKMpWiFY3QJA35mP99FMKkKpEs8RQZWl9oH44o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd944a83b9ab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":401996,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65159)","md5":"a2e3afdec3323649a7deb0418a765635","sha1":"95f235f2135f5c77a3af0304e3631606125808eb","sha256":"a72ae5ec2bf6dc5787f5fdb3e8ffc6672e0e1322ee65d91b2b248409c4a611ec","sha512":"07e9d3375e19610736caed39e69c19c448819cab2fa7963d42695ac9bb3d69240a7c97858f764492f663a07b9a8e6f8e7d3c1c0499b675cefe0e2fec32f7f5e0","ssdeep":"3072:eR5ZeprfrDHHxbolowHJZ90VMSPMIy7EW8nbOVMpuGxoPri83tGQ38dH5szUNZqR:eRTcTr7dolowHJXSPMIy79ito7GaWrzK","tlshash":"2684746313f76262c2c142b78ed27098f99db929c2604c4ff551f186e8a8d65f3ef186","first_seen":"2026-01-05T13:19:06.701322Z","last_seen":"2026-02-14T02:52:40.455423Z","times_seen":3,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-trump-memes.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-trump-memes.xyz/nock.esm.js","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://get-trump-memes.xyz/","date":"2026-02-14T02:52:13.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-trump-memes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 18:52:29 GMT","end":"Sat, 28 Mar 2026 19:49:57 GMT"},"fingerprint":{"sha1":"07:EC:20:E6:44:AF:37:06:CB:36:5C:65:8B:79:3F:80:4E:11:29:D0","sha256":"C9:AB:03:04:F3:28:1D:8E:16:5E:E2:5C:F9:8D:43:3C:B4:5E:0D:3F:E5:14:BF:93:7D:B0:67:CB:3F:B6:BD:F6"}}},"request":{"raw":"GET /nock.esm.js HTTP/1.1\r\nHost: get-trump-memes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-trump-memes.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:52:13 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Wed, 07 Jan 2026 18:40:46 GMT\r\netag: W/\"695ea8ae-6224c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nrv%2FGTyz8zizi0hF7B1FwLv%2BPHbCwGp88GUaJLX3XtBtSYHAl9dmmN88P0dGLk81ypF2zkSpQO6%2FgxHX6N7p81SWVhUMu5i9I%2FA6f%2FIjtd%2B3t7A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd944a99bc7b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":401996,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65159)","md5":"a2e3afdec3323649a7deb0418a765635","sha1":"95f235f2135f5c77a3af0304e3631606125808eb","sha256":"a72ae5ec2bf6dc5787f5fdb3e8ffc6672e0e1322ee65d91b2b248409c4a611ec","sha512":"07e9d3375e19610736caed39e69c19c448819cab2fa7963d42695ac9bb3d69240a7c97858f764492f663a07b9a8e6f8e7d3c1c0499b675cefe0e2fec32f7f5e0","ssdeep":"3072:eR5ZeprfrDHHxbolowHJZ90VMSPMIy7EW8nbOVMpuGxoPri83tGQ38dH5szUNZqR:eRTcTr7dolowHJXSPMIy79ito7GaWrzK","tlshash":"2684746313f76262c2c142b78ed27098f99db929c2604c4ff551f186e8a8d65f3ef186","first_seen":"2026-01-05T13:19:06.701322Z","last_seen":"2026-02-14T02:52:40.455423Z","times_seen":3,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-trump-memes.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-trump-memes.xyz/iStock-2156293682.jpg","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-trump-memes.xyz/","date":"2026-02-14T02:52:13.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-trump-memes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 18:52:29 GMT","end":"Sat, 28 Mar 2026 19:49:57 GMT"},"fingerprint":{"sha1":"07:EC:20:E6:44:AF:37:06:CB:36:5C:65:8B:79:3F:80:4E:11:29:D0","sha256":"C9:AB:03:04:F3:28:1D:8E:16:5E:E2:5C:F9:8D:43:3C:B4:5E:0D:3F:E5:14:BF:93:7D:B0:67:CB:3F:B6:BD:F6"}}},"request":{"raw":"GET /iStock-2156293682.jpg HTTP/1.1\r\nHost: get-trump-memes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-trump-memes.xyz/relume-template---sept-20-ecece4197fc38.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:52:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 162734\r\ncast-mode: default\r\nlast-modified: Wed, 07 Jan 2026 18:40:46 GMT\r\netag: \"695ea8ae-27bae\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S0nx1B5INCIY06vr7wHllIcg0dRlPrZN5f2Gm0q4afewjdMd%2FEqvfsUKVsNsXcNnQB03xZ8JpoLxeGnulOED55fgj2w2Kp5g%2Bc2nmjmjHslsoFU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd944ab0c01b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162734,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 1366x768, components 3","md5":"f662436bdc7a61613720ce41e3ef79d5","sha1":"507215cb26c2a565a54ca681c821c89856145506","sha256":"58952e42d7bad27ae16baf5fdb71a0155b5de3aaca844434ce1af3c3a7309e3f","sha512":"1d370e465ff04eb95f7e2c5fca88d5aba33b63110cdd0f7be0dec40d3b3db1535179b9cde6317305518de19e0205a82bcb4696777f387f0876a88c85b8470a96","ssdeep":"3072:EP+ZhjtfQlAneA6VIwqhsO7oI/XxOpEBgEH0d4rDTMWdtr/XkyhwH5:EesAneA6awqhsyvklNd4XTpdVky+Z","tlshash":"7bf3124d6a4320cb0a48dc6fbcde6d00a6079cd9acf41b25ee4bfc4fd441b364e28996","first_seen":"2025-01-27T12:55:31.863678Z","last_seen":"2026-06-27T21:51:15.644829Z","times_seen":38,"resource_available":false,"data":null}},"time_used":438,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":160,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-trump-memes.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-trump-memes.xyz/Black-gold-wave_1Black-gold-wave.webp","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-trump-memes.xyz/","date":"2026-02-14T02:52:13.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-trump-memes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 18:52:29 GMT","end":"Sat, 28 Mar 2026 19:49:57 GMT"},"fingerprint":{"sha1":"07:EC:20:E6:44:AF:37:06:CB:36:5C:65:8B:79:3F:80:4E:11:29:D0","sha256":"C9:AB:03:04:F3:28:1D:8E:16:5E:E2:5C:F9:8D:43:3C:B4:5E:0D:3F:E5:14:BF:93:7D:B0:67:CB:3F:B6:BD:F6"}}},"request":{"raw":"GET /Black-gold-wave_1Black-gold-wave.webp HTTP/1.1\r\nHost: get-trump-memes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-trump-memes.xyz/relume-template---sept-20-ecece4197fc38.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:52:14 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Wed, 07 Jan 2026 18:40:46 GMT\r\netag: W/\"695ea8ae-16a8e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1uVt%2FtQH9fynnYZ1d1U9xTEV6i3fLZpAdxaApMRkz5lOBEkrUID%2BgssmKQb99ECz7%2F3HRYGbtZM2cv8CSS9AXkvYxTvgri3StxjroYwtGfDpHKw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd944ab1c07b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":92814,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x675, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b001ad114365920f86f810b7b432a088","sha1":"bbd908472e08d63a8fb264e79a43efd22ce4e183","sha256":"fc92ee73aee730e397a9fd1653788a22f4f4fd3718dad08100481119eff2545c","sha512":"cffbc88a50d002e87b267a8e51e55569c5970163903511d8618396fde9e6b1bb869d2b4f6e45403365367c6753fd54d0b42f9f9ece220a263beac250c763dfb5","ssdeep":"1536:D7GRDhQL/XWmeD9ePMHEfSDnRNf58aTYGaNkDIP8UuXWmrd7+DuVhAFo4gTXPNZ9:/GlqXVCQPkYSDnRvbaS/omrFzVhAS4u1","tlshash":"bf9312ce91383b2af9ff377c1829ce1776834e494502543ada4918e7784d92a253c62e","first_seen":"2025-01-27T12:55:31.856326Z","last_seen":"2026-06-27T21:51:15.652808Z","times_seen":34,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-trump-memes.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-trump-memes.xyz/normalize.css","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://get-trump-memes.xyz/","date":"2026-02-14T02:52:12.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-trump-memes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 18:52:29 GMT","end":"Sat, 28 Mar 2026 19:49:57 GMT"},"fingerprint":{"sha1":"07:EC:20:E6:44:AF:37:06:CB:36:5C:65:8B:79:3F:80:4E:11:29:D0","sha256":"C9:AB:03:04:F3:28:1D:8E:16:5E:E2:5C:F9:8D:43:3C:B4:5E:0D:3F:E5:14:BF:93:7D:B0:67:CB:3F:B6:BD:F6"}}},"request":{"raw":"GET /normalize.css HTTP/1.1\r\nHost: get-trump-memes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-trump-memes.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:52:13 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Wed, 07 Jan 2026 18:40:46 GMT\r\netag: W/\"695ea8ae-1e5c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LuHFyhXAo6y288lodzUguiUg6MmWaNZpomstsRrQtlmilQmrqOXb01e56vUXAZZbhbeh5Dv1LS8Es9RCeSeVyUrzLxrB8DQud9inhSIRPsBBV34%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd944a4daf3b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7772,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"afb4942e5838a7dc3b63d00ffcc87c9d","sha1":"f1a4ae2fbaa13ef9d9500648d5a16f7adaa88d30","sha256":"0d336a97efd52a4ef44ef3270e71eac24ba405d4450016f9d3e943256e9e58c8","sha512":"8b897ca084c9e5aba585a3c8036ca2b9e10243e262e93f0761635db00d1da2544803f8937163d278e94c4d6ff6b23031f87660b55a9000a72211bb27a3ebab7e","ssdeep":"96:MrWcFPpkRUwojaszRO5LVSrwnTgPjnRo5wUEKs2NE4P+49NaN71UB9:M/9pVjasdEvQnRo2UEKsSBP+W67w","tlshash":"82f1b59923a04b9252395df5f3a7938533481127832c7c6eb4d240fc8fc8b5553baf99","first_seen":"2023-04-05T04:08:19Z","last_seen":"2026-08-20T19:30:21.420519Z","times_seen":3779,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-trump-memes.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-trump-memes.xyz/secureproxy?e=ping_proxy","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://get-trump-memes.xyz/","date":"2026-02-14T02:52:13.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-trump-memes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 18:52:29 GMT","end":"Sat, 28 Mar 2026 19:49:57 GMT"},"fingerprint":{"sha1":"07:EC:20:E6:44:AF:37:06:CB:36:5C:65:8B:79:3F:80:4E:11:29:D0","sha256":"C9:AB:03:04:F3:28:1D:8E:16:5E:E2:5C:F9:8D:43:3C:B4:5E:0D:3F:E5:14:BF:93:7D:B0:67:CB:3F:B6:BD:F6"}}},"request":{"raw":"GET /secureproxy?e=ping_proxy HTTP/1.1\r\nHost: get-trump-memes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://get-trump-memes.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:52:13 GMT\r\ncontent-type: text/html; charset=utf-8\r\npriority: u=4,i=?0\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 14 Feb 2026 02:52:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bas1Deo6l%2FDU86HiEXESenovV9hvh83JH0N7nyr70g%2BmlXhpWeNeznffcratrOIh5uf95jHTJ14O34MnoRiwQLdawwxIDwruvGa0rX67%2FZlccyI%3D\"}]}\r\ncf-ray: 9cd944a83b99b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"6fdb087aa3fbfbcb8287a593a0919e61","sha1":"0e514a0662bcb69dc863953d1ce26e3d40e81a87","sha256":"9795c5ff8937f23526ccb207a5684c1fc94a7854e19c021b39d944e51f5baef2","sha512":"be5457d14c930b51b47ab152850c1ceaafe6ef88c8671b48164abbc83410b0c07a1e178540f6cdeac5f2672cadb1d1cbbb3434b3e39bc2c50c4646a2bae57437","ssdeep":"","tlshash":"fe300000300000000000000c0000000000000000000000000000000000300000000000","first_seen":"2023-04-12T09:14:15Z","last_seen":"2026-08-20T21:14:00.862245Z","times_seen":9049,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":201,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-trump-memes.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-trump-memes.xyz/dt_signature.svg","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-trump-memes.xyz/","date":"2026-02-14T02:52:13.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-trump-memes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 18:52:29 GMT","end":"Sat, 28 Mar 2026 19:49:57 GMT"},"fingerprint":{"sha1":"07:EC:20:E6:44:AF:37:06:CB:36:5C:65:8B:79:3F:80:4E:11:29:D0","sha256":"C9:AB:03:04:F3:28:1D:8E:16:5E:E2:5C:F9:8D:43:3C:B4:5E:0D:3F:E5:14:BF:93:7D:B0:67:CB:3F:B6:BD:F6"}}},"request":{"raw":"GET /dt_signature.svg HTTP/1.1\r\nHost: get-trump-memes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-trump-memes.xyz/relume-template---sept-20-ecece4197fc38.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:52:14 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 07 Jan 2026 18:40:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"695ea8ae-2e557\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uml4WdwSZ0JncDIB9IKSu%2B7wlbUgK5qspJ%2FWivg9j2Rul%2BkjD6s81jDGeHdURZXxExrM3vMDs1yeehzpRXOTTBTIbNf%2BUxJOlIZ0MsUH74ioclc%3D\"}]}\r\ncf-ray: 9cd944aafbfdb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":189783,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8545a33bd9c8dab4044ba2ce311aa3dc","sha1":"0ac497dc035efab803728dd56892f4f9efae23ad","sha256":"972e736563341cc7c6952775f0e2b962bfbd92370a3541bc773bae52a1129891","sha512":"3323a107bc957878a41720375af1d6717722816e2c10cd1fe930b076c6840019749fdd3610c6264e87580c1079d66f3b6bcde7abf08c18857b5099300e8370bc","ssdeep":"3072:tuFM6ZBufTj7+swuTubBJxOhDugGqodnzg9diyE3/NnjMyYp5k:UFdO7j7muSBOh5E0Elwyi5k","tlshash":"8f040254e211efbcdb984938f1029ea57cf3d8cec85763ec831596a347a8a148b85df4","first_seen":"2025-01-27T12:55:31.922327Z","last_seen":"2026-03-26T06:04:27.146482Z","times_seen":33,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-trump-memes.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-trump-memes.xyz/stars-stripes-2_1stars-stripes-2.webp","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-trump-memes.xyz/","date":"2026-02-14T02:52:13.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-trump-memes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 18:52:29 GMT","end":"Sat, 28 Mar 2026 19:49:57 GMT"},"fingerprint":{"sha1":"07:EC:20:E6:44:AF:37:06:CB:36:5C:65:8B:79:3F:80:4E:11:29:D0","sha256":"C9:AB:03:04:F3:28:1D:8E:16:5E:E2:5C:F9:8D:43:3C:B4:5E:0D:3F:E5:14:BF:93:7D:B0:67:CB:3F:B6:BD:F6"}}},"request":{"raw":"GET /stars-stripes-2_1stars-stripes-2.webp HTTP/1.1\r\nHost: get-trump-memes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-trump-memes.xyz/relume-template---sept-20-ecece4197fc38.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:52:14 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Wed, 07 Jan 2026 18:40:46 GMT\r\netag: W/\"695ea8ae-9e5a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Orgq%2FRaBCmw%2BOteGB523fDryw2AAEjDuYb%2FLBROsuFN6EMiiLOUc9x4WxKbuk4Pf0OH07rYMvBYhM8%2Fcf1x7T4U42GJWtbuZ8OpneyssLPs2PlU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd944ab1c08b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40538,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2000x1125, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d75f4481cba25d76d3725fa4f1a29b92","sha1":"dca2713fe15bcac2659dedc238033db67a5691e1","sha256":"4d2261785b0d347120fdad245cf2ef3372e4f26376b0e8ae60871daa3fd3b707","sha512":"3bd594eaf314190d0cc31b1cc15b4733221253dd264dd90e4d5f867201d1cc29bcffb9dd678d5375425ae5dbc7a6fce87865df5eb9fe4b9eb8b01a8fe5fba219","ssdeep":"768:CUnApRtbFNJS2xOd6p6jiinspizsylm9lCyrfwIFtpg8O98O9mB4E7:CUApRxFN2fjAizgEyrf17bBT7","tlshash":"400302c70226eee98b251bf3c4cb1fb98511e7a5725943dc249f23bbf0193081319a6e","first_seen":"2025-01-27T12:55:31.854725Z","last_seen":"2026-06-27T21:51:15.64631Z","times_seen":38,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-trump-memes.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-trump-memes.xyz/icon_chevron_up.svg","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://get-trump-memes.xyz/","date":"2026-02-14T02:52:14.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-trump-memes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 18:52:29 GMT","end":"Sat, 28 Mar 2026 19:49:57 GMT"},"fingerprint":{"sha1":"07:EC:20:E6:44:AF:37:06:CB:36:5C:65:8B:79:3F:80:4E:11:29:D0","sha256":"C9:AB:03:04:F3:28:1D:8E:16:5E:E2:5C:F9:8D:43:3C:B4:5E:0D:3F:E5:14:BF:93:7D:B0:67:CB:3F:B6:BD:F6"}}},"request":{"raw":"GET /icon_chevron_up.svg HTTP/1.1\r\nHost: get-trump-memes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-trump-memes.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:52:14 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 07 Jan 2026 18:40:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"695ea8ae-205\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GYkFc%2BF8YTJJDs7KTe7O7wEzk5po2JTjy3DiErPkTGHhKAKWLDgoSWrN0TdMTg3FnNlFaHJqGinDF%2FCt9WDjNY1tvMHmCudyPRtufeMmQDE0%2FmM%3D\"}]}\r\ncf-ray: 9cd944abbc2fb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":517,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a1c20c3a544031bc27c8313dc8c1e07b","sha1":"fa3db64c5cbcc4ee836f48a92d2b08a84045fb10","sha256":"fab87f3a9d32e5595fc3d39a1fe3b2c0642e0bba92fb21c3de4d8d7035105fc0","sha512":"8992a4b99646e2de861f3abe739bd4783340677507322853e3205d47ef017ffe0f12a4912f07e702ed833f89a78b12a6115836a292b32e17175c29be2fd768b8","ssdeep":"","tlshash":"0ef050f361cb56e7158c87f4f73c18b9345711e41448c8d0a380a448f4e29cc6cd9e6b","first_seen":"2025-01-27T12:55:31.869994Z","last_seen":"2026-07-19T19:43:04.600696Z","times_seen":43,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-trump-memes.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-trump-memes.xyz/api.min.css","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://get-trump-memes.xyz/","date":"2026-02-14T02:52:12.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-trump-memes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 18:52:29 GMT","end":"Sat, 28 Mar 2026 19:49:57 GMT"},"fingerprint":{"sha1":"07:EC:20:E6:44:AF:37:06:CB:36:5C:65:8B:79:3F:80:4E:11:29:D0","sha256":"C9:AB:03:04:F3:28:1D:8E:16:5E:E2:5C:F9:8D:43:3C:B4:5E:0D:3F:E5:14:BF:93:7D:B0:67:CB:3F:B6:BD:F6"}}},"request":{"raw":"GET /api.min.css HTTP/1.1\r\nHost: get-trump-memes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-trump-memes.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:52:13 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Wed, 07 Jan 2026 18:40:46 GMT\r\netag: W/\"695ea8ae-2592\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c2SBWGfPAxUjjLIw1LCCDL2NYPrXiX5y9WtouDHZtZYc4qy3Q4wnBRu%2BVuZApRVO5Fhgn4s6QYApx%2BOacy5Oa4JwM9H4JOrM%2BDjKOEGtApldVEE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd944a4daf8b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9618,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9574)","md5":"f70a956b890a768c0fcd0df36c3584e5","sha1":"5bbab7185169c5dacdd79f371a1ef5e1734e5f95","sha256":"32ebc5710b65011f247941afa18c223d44076d895f6a3a3f9cd6018f2ca00b91","sha512":"799c0dc1a0a553e10079258d5318e48d97d6e0bc4d3f5243534fc7ef1cfdef8c331ff4121fe511f329951b0f9d7cd419b8b91f80481d54c5e2b6e6a8894a09a0","ssdeep":"96:1Zxk3ZiB06lqPEe1Zhl46dN16mlK6HXbz2FeJ7sG0KepYLsOZA:zxXBYRki26fepqG","tlshash":"e4128e8c4aa000464193c36bcac54e74877ecaa265761cdf3356684f4f8aa9c93fe667","first_seen":"2026-01-05T13:19:06.693964Z","last_seen":"2026-02-14T02:52:40.475865Z","times_seen":3,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-trump-memes.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-trump-memes.xyz/TMC-Allocation-Report-6.webp","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://get-trump-memes.xyz/","date":"2026-02-14T02:52:12.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-trump-memes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 18:52:29 GMT","end":"Sat, 28 Mar 2026 19:49:57 GMT"},"fingerprint":{"sha1":"07:EC:20:E6:44:AF:37:06:CB:36:5C:65:8B:79:3F:80:4E:11:29:D0","sha256":"C9:AB:03:04:F3:28:1D:8E:16:5E:E2:5C:F9:8D:43:3C:B4:5E:0D:3F:E5:14:BF:93:7D:B0:67:CB:3F:B6:BD:F6"}}},"request":{"raw":"GET /TMC-Allocation-Report-6.webp HTTP/1.1\r\nHost: get-trump-memes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-trump-memes.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:52:13 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Wed, 07 Jan 2026 18:40:46 GMT\r\netag: W/\"695ea8ae-1e6e0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XrkxZC4IbT6wutkCiSmpoIvXkLhuP236GngUS3x6Q2jIuTwKWeIbuP%2BtwzxB3D%2FZp5BQKKt0Wyn5SnM%2FfFRbG%2F3jVamFRDhVH8Z8lBh922AgGtw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd944a4eafeb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":124640,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1500x2434, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"48ef73d87348e5fff9655f930eb617b6","sha1":"a56ada6855fc79081f1c3bd1b87e0014bf3babae","sha256":"6d2173a9a6f95decbfdd7c28ccbb1e482a2206b57b3fbce825103956ec3e1504","sha512":"2e623721ec6bd753c913df5629e3e51fd9be94fa8570a88b43b134d534c4460fb989cbaf4c79d12b17d9039b1fa576573587823ba2ad787c10be74330a9d67f8","ssdeep":"3072:0Pu9XtFYu2jspGWfYSQDq8mFViHVpBB+kDwLWPP4vZy0:02X6u2jspGWgSQDqn8HVpBB+kDcWPKZP","tlshash":"fdc3021ab8a625f2c6baccbb53528df36e1574e11027493679fe2086fcde5434582f30","first_seen":"2025-11-17T18:27:21.518477Z","last_seen":"2026-03-31T13:37:29.467196Z","times_seen":10,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-trump-memes.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-trump-memes.xyz/docusaurus.slim.esm.js","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://get-trump-memes.xyz/","date":"2026-02-14T02:52:12.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-trump-memes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 18:52:29 GMT","end":"Sat, 28 Mar 2026 19:49:57 GMT"},"fingerprint":{"sha1":"07:EC:20:E6:44:AF:37:06:CB:36:5C:65:8B:79:3F:80:4E:11:29:D0","sha256":"C9:AB:03:04:F3:28:1D:8E:16:5E:E2:5C:F9:8D:43:3C:B4:5E:0D:3F:E5:14:BF:93:7D:B0:67:CB:3F:B6:BD:F6"}}},"request":{"raw":"GET /docusaurus.slim.esm.js HTTP/1.1\r\nHost: get-trump-memes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-trump-memes.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:52:13 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Wed, 07 Jan 2026 18:40:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=frF1CYEV0gZYt2UKfMMmGQAHMwSeOOuc6k2TMRnMUCxcyLYuybjk%2FZMlANquKmzBwr%2FRelsSrV0lZtF08vzfXPijwG7WcBaZOUxD7yBoSOqS7jw%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9cd944a4fb00b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T22:30:42.60301Z","times_seen":18000396,"resource_available":true,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-trump-memes.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-trump-memes.xyz/intothe-rainbow-9.svg","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-trump-memes.xyz/","date":"2026-02-14T02:52:13.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-trump-memes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 18:52:29 GMT","end":"Sat, 28 Mar 2026 19:49:57 GMT"},"fingerprint":{"sha1":"07:EC:20:E6:44:AF:37:06:CB:36:5C:65:8B:79:3F:80:4E:11:29:D0","sha256":"C9:AB:03:04:F3:28:1D:8E:16:5E:E2:5C:F9:8D:43:3C:B4:5E:0D:3F:E5:14:BF:93:7D:B0:67:CB:3F:B6:BD:F6"}}},"request":{"raw":"GET /intothe-rainbow-9.svg HTTP/1.1\r\nHost: get-trump-memes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-trump-memes.xyz/relume-template---sept-20-ecece4197fc38.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:52:14 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 07 Jan 2026 18:40:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"695ea8ae-697\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QmGyLEcIDjq%2F5WZhvYKqdS27Yb%2BlYYYRZUGyrjfAg0%2F%2FZ5mYOlpXvqp662IFy1Jc4gqjuUhgPTAYc7FROLVJMW%2FXa5h7BLiOK13V64gcGZU80xY%3D\"}]}\r\ncf-ray: 9cd944ab0c05b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1687,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e7c9505f5bdfe50488571bc74fac3b29","sha1":"3817712bbe0eba230459bab424d42ae18ebcda48","sha256":"eeeb7f2dcf7a4e8b56fb7f730ffd6880152b253fab71e565916589be6720d7fc","sha512":"cf4b94068cf9e48c6689c19ff32dd9f106c8e5bcc00aa330caa7794815feb5fd44beeb1f912c1a530489e0d1e052bc2c0d6c0070aa9bb04847fd0cf99244e1bc","ssdeep":"","tlshash":"4a317b2ad8e6412fe72a8476f84c4c2e2a65d2741b4284c4b09c5f0ff19894d043f32f","first_seen":"2025-03-06T13:25:43.525867Z","last_seen":"2026-06-27T21:51:15.659791Z","times_seen":37,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-trump-memes.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-trump-memes.xyz/components.css","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://get-trump-memes.xyz/","date":"2026-02-14T02:52:12.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-trump-memes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 18:52:29 GMT","end":"Sat, 28 Mar 2026 19:49:57 GMT"},"fingerprint":{"sha1":"07:EC:20:E6:44:AF:37:06:CB:36:5C:65:8B:79:3F:80:4E:11:29:D0","sha256":"C9:AB:03:04:F3:28:1D:8E:16:5E:E2:5C:F9:8D:43:3C:B4:5E:0D:3F:E5:14:BF:93:7D:B0:67:CB:3F:B6:BD:F6"}}},"request":{"raw":"GET /components.css HTTP/1.1\r\nHost: get-trump-memes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-trump-memes.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:52:13 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Wed, 07 Jan 2026 18:40:46 GMT\r\netag: W/\"695ea8ae-88be\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mjUUJyTa4zLwZzgvbaDvpuMd9oNi5Ib0ZbNxQq5nnPlYIf6xd14FdQvoJ39KUgNSTqZpkCPnQ14O3Ntm56FBRoDp7tRrCI10ssg8tJ6ow%2BeyUy0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd944a4daf4b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35006,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"5c47ba7c7b431e6c307126f70104cc69","sha1":"1ac8a1c81b75a65700a922fa2b4aef3e571f55ad","sha256":"c6e7e1ee0ab7df6ff79e52b36196841995c7d26d397aa12b2581649fa0d56f47","sha512":"130a6db22cc1c0da548bca757c34c909fa80c7e808ea999b1fb739fc26152673a2ca7deca338cb3995aa228d19db9cdc0defc3a17d400de3cce8e0d7b597eaf1","ssdeep":"768:qRQ/VHrFIfoF7GpFMDw82aWoS+lyKA+vdxxF3F5FiwFt24lLqClUZuaE7WkQtTVJ:qWtHr5KCPxljdRLqCqQekQR","tlshash":"c7f285859bf40630b817c1a56890a365772d4002b74ede28fae1741fdfce2c799b3b5a","first_seen":"2025-09-28T17:21:48.776354Z","last_seen":"2026-03-14T21:09:52.305539Z","times_seen":9,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-trump-memes.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-trump-memes.xyz/Community-top-image_1Community-top-image.webp","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://get-trump-memes.xyz/","date":"2026-02-14T02:52:12.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-trump-memes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 18:52:29 GMT","end":"Sat, 28 Mar 2026 19:49:57 GMT"},"fingerprint":{"sha1":"07:EC:20:E6:44:AF:37:06:CB:36:5C:65:8B:79:3F:80:4E:11:29:D0","sha256":"C9:AB:03:04:F3:28:1D:8E:16:5E:E2:5C:F9:8D:43:3C:B4:5E:0D:3F:E5:14:BF:93:7D:B0:67:CB:3F:B6:BD:F6"}}},"request":{"raw":"GET /Community-top-image_1Community-top-image.webp HTTP/1.1\r\nHost: get-trump-memes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-trump-memes.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:52:13 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Wed, 07 Jan 2026 18:40:46 GMT\r\netag: W/\"695ea8ae-7320\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y0dk01nlvGbdTBG%2FfoxoFZnhsODYd8w2k23ayK1i5zreYwKrum%2BbXJgJupTBL9wHPD2nYidb3neA99wpQpa4ygVeuVaTRGwOgpm%2FsCPaBK52yi4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd944a4eafdb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29472,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"387cb40fb31f79e8762f299580c607fd","sha1":"af71cae0516d551603cb79f799c40b8432b5f1f2","sha256":"bd705d9917c8a6bd0c72c27ac6434231c86105c8b82cb6d8667a822667d3e71e","sha512":"5982fd10047dd670376c5fb76f97ed0310c81c93caac1a47dba6fe5a164ced616214538da96770466d3c087238f6c81216f28a51bee3f4b0ae586d115a70e8bf","ssdeep":"768:BzXbx+Au+AG9A+CO5rchHzHlaHDER7e5YjE:B/Qz+Az+CO5rchTHEG7XA","tlshash":"78d2f1c1607761da3b142ea86f1de4e604d710d52401b36271ea7e856df3e34c1f9bac","first_seen":"2025-01-27T12:55:31.842588Z","last_seen":"2026-05-02T13:34:17.236887Z","times_seen":39,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-trump-memes.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-trump-memes.xyz/Grain_Latest.png","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-trump-memes.xyz/","date":"2026-02-14T02:52:13.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-trump-memes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 18:52:29 GMT","end":"Sat, 28 Mar 2026 19:49:57 GMT"},"fingerprint":{"sha1":"07:EC:20:E6:44:AF:37:06:CB:36:5C:65:8B:79:3F:80:4E:11:29:D0","sha256":"C9:AB:03:04:F3:28:1D:8E:16:5E:E2:5C:F9:8D:43:3C:B4:5E:0D:3F:E5:14:BF:93:7D:B0:67:CB:3F:B6:BD:F6"}}},"request":{"raw":"GET /Grain_Latest.png HTTP/1.1\r\nHost: get-trump-memes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-trump-memes.xyz/relume-template---sept-20-ecece4197fc38.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:52:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 71315\r\ncast-mode: default\r\nlast-modified: Wed, 07 Jan 2026 18:40:46 GMT\r\netag: \"695ea8ae-11693\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=biCC98j3N1xnNG8NgfhwDkPfpsjaUs3ZqUyyaMOZxzrfHtTSDlF7S%2FF9rZ0fCJJiEBAKTPlgUvmdLNOu4FE%2FjTktgtbaZ2soiKYzNb%2BsIYpPV5U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd944a9abcab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":71315,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 4-bit colormap, non-interlaced","md5":"22a2fd16c6f531c26f76651567c0f963","sha1":"e65f881ad291e49b1fc89c1e9d0cef2407825262","sha256":"1c5983ac6b7c04c089d3d3bf8f6dad23b669b7810a906906a895026896058391","sha512":"dfa2c4ee9272455d57e0934e4196c7fd611ba836b9ba7002999c7eea4bc76e7ed8cf5ee14b5ad61170322a9899e97dd9c7d4f87086f032f6e1e779c8fe79f435","ssdeep":"1536:H/amGRf9dUris5QzgnAlaedtgVAUmzeLYT8Ds0rnFABU:fyf9LsugnAljfT8YiFABU","tlshash":"af6312bc9bca12685647ebad5b9330298f0871371ee77372a83985c31fb412d884d8d5","first_seen":"2023-12-05T15:44:26Z","last_seen":"2026-06-27T21:51:15.667386Z","times_seen":46,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-trump-memes.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-trump-memes.xyz/l-11","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://get-trump-memes.xyz/","date":"2026-02-14T02:52:13.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-trump-memes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 18:52:29 GMT","end":"Sat, 28 Mar 2026 19:49:57 GMT"},"fingerprint":{"sha1":"07:EC:20:E6:44:AF:37:06:CB:36:5C:65:8B:79:3F:80:4E:11:29:D0","sha256":"C9:AB:03:04:F3:28:1D:8E:16:5E:E2:5C:F9:8D:43:3C:B4:5E:0D:3F:E5:14:BF:93:7D:B0:67:CB:3F:B6:BD:F6"}}},"request":{"raw":"GET /l-11 HTTP/1.1\r\nHost: get-trump-memes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-trump-memes.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:52:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 24628\r\ncast-mode: default\r\nlast-modified: Wed, 07 Jan 2026 18:40:46 GMT\r\netag: \"695ea8ae-6034\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IwWCNMPBWcE9op1ht5bSlv7whN7hLAyzFVDQD%2BIs3YvyiESooijGAilVPWaKmSHCKUhsQmzZL6Q%2BWCSWEtJ5vjmpMj8ILcosu4aLq%2FwqfLB%2FSyk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd944ab2c11b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24628,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 24628, version 1.0","md5":"21dc1de2ad857813b23ff8b4f3116d41","sha1":"f3e6dc19f22011bb4f120276d7a09d93af6ebb76","sha256":"3da51e8108db25afd22ee660f292a1423a218d04e806616aded83b0feb43025d","sha512":"a4bb4283680da1b4b652ad6df40f8dd365e7ae5198b3a71b9c936fc5cbb0b302deb0cbf64959fcccea38e0b8275ef6ba024ac09ea77da230fe82d92861d3ce2e","ssdeep":"384:Fj1DmCpEodhpUHeSFq2FGzdlbsPMKHdPQ5o+D6cLmLwZFVwND22bRQfBJg7z:F5DmAHUHeQ6zbGPQ51iLgMD20Rwbkz","tlshash":"75b2e11fa8c6cdd5934f2422831b2cf6fb713a1fb9568a5a442bf41ae9b12dd015ec05","first_seen":"2025-06-21T12:07:35.694059Z","last_seen":"2026-07-31T08:00:24.193602Z","times_seen":35,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-trump-memes.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-trump-memes.xyz/l-8","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://get-trump-memes.xyz/","date":"2026-02-14T02:52:13.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-trump-memes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 18:52:29 GMT","end":"Sat, 28 Mar 2026 19:49:57 GMT"},"fingerprint":{"sha1":"07:EC:20:E6:44:AF:37:06:CB:36:5C:65:8B:79:3F:80:4E:11:29:D0","sha256":"C9:AB:03:04:F3:28:1D:8E:16:5E:E2:5C:F9:8D:43:3C:B4:5E:0D:3F:E5:14:BF:93:7D:B0:67:CB:3F:B6:BD:F6"}}},"request":{"raw":"GET /l-8 HTTP/1.1\r\nHost: get-trump-memes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-trump-memes.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:52:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 24820\r\ncast-mode: default\r\nlast-modified: Wed, 07 Jan 2026 18:40:46 GMT\r\netag: \"695ea8ae-60f4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=00V6Vc8x%2FpX7vsr1rkueEC%2BDLH1H9JC4kK4cOU19yTHpOl5D53xlBNcwvUnnK7CN7Qp9K52J2wsUMfhbHhc7oiq0e9WxdVs54gW%2FMuKIbfNUs7M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd944ab2c12b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24820,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), CFF, length 24820, version 1.0","md5":"a681b489cdf7d02864e8af38aca53ca6","sha1":"1ef3fa8e27d346ac880f3bb44928a35ef8d09ffc","sha256":"e9c868845bfe5b3bf488c1c436477de885248c4634cc36d08d11240fc9653290","sha512":"50790cafa8d1e18298f24073e43793bd20f9e79d9d3d1cd58f30462c2805b3070c19b0be67d48bb89ea0bc1807d27a84fc07b99d5c9597da7fdcbce5c3f26be9","ssdeep":"384:T42IwJlqwq172Iw+pAQJYIk2JmHXomXOhhCnxsL0/hG7LeD:c8JlRq172Iw1HXozhK4OILeD","tlshash":"22b2d0689c217ece0c39836fb5283fa7137875719467f809462b26ba429a381f152a37","first_seen":"2023-04-11T07:13:40Z","last_seen":"2026-07-22T21:55:19.303602Z","times_seen":468,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-trump-memes.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-trump-memes.xyz/T-Meme-Logo_1T-Meme-Logo.webp","fqdn":"get-trump-memes.xyz","domain":"get-trump-memes.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://get-trump-memes.xyz/","date":"2026-02-14T02:52:14.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-trump-memes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 18:52:29 GMT","end":"Sat, 28 Mar 2026 19:49:57 GMT"},"fingerprint":{"sha1":"07:EC:20:E6:44:AF:37:06:CB:36:5C:65:8B:79:3F:80:4E:11:29:D0","sha256":"C9:AB:03:04:F3:28:1D:8E:16:5E:E2:5C:F9:8D:43:3C:B4:5E:0D:3F:E5:14:BF:93:7D:B0:67:CB:3F:B6:BD:F6"}}},"request":{"raw":"GET /T-Meme-Logo_1T-Meme-Logo.webp HTTP/1.1\r\nHost: get-trump-memes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-trump-memes.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:52:14 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Wed, 07 Jan 2026 18:40:46 GMT\r\netag: W/\"695ea8ae-21f0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e%2BsJX5uv7jF20nzumhlzvgnqypQ%2FfzxeaL0TeZsZnFgxG1%2BEnpkfmuoiwJjwbnuE3HRgS6%2FFKS7ZSuI6z5X%2BhMs4QwKrW9YugnMZV1W29DywKHI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd944abbc2eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8688,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fad1ef11398effba0edb00a3e8d625e3","sha1":"5d6fcc09691dfd450cdcdfbe5f9438fdad2dd24a","sha256":"965c5979019630fc8b803550625d95e28ecf88f748c660341f36c07eece120d1","sha512":"6d13ee809d05a07d192125f8604c3726ce6031256ed5f05fa22d89264be66d703f1a4d44f7207b78a7d42f7e0c6e6fcbe2e6495f76c748fbd633c4d1f057b955","ssdeep":"192:2lYF4PX+aLV4DxdJAon2g+drMPHuH0HZUi1erba:0YOPX++VUxAlJVMtHJ1v","tlshash":"0a02bfb91eb9dd15c8b24c2331b3c661888b11ad5eae4e48bc12b2dc852b15c621becd","first_seen":"2025-01-27T12:55:31.866282Z","last_seen":"2026-03-20T15:36:59.3991Z","times_seen":28,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":226,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-trump-memes.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}