{"report_id":"d088b5f3-f88a-434e-a72e-9d538be7ec5c","version":6,"status":"done","tags":[],"date":"2026-02-14T16:01:07Z","url":{"schema":"https","addr":"xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump","fqdn":"xn--pmp-hoa.fun","domain":"xn--pmp-hoa.fun","tld":"fun"},"ip":{"addr":"172.67.203.192","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump","fqdn":"xn--pmp-hoa.fun","domain":"xn--pmp-hoa.fun","tld":"fun"},"title":"pump","dom":{"size":43107,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (42313)","md5":"1efc79b414407701fa55f425f846cede","sha1":"29071ce0d0758ce99b56dcadaf2ae503bbd02366","sha256":"14947a7c450d9e8ddb2ec33f0600a68a6935682096ce2d9f1d64b6ac14f995ec","sha512":"de30bc737ced5aa767ade3777e99a54c7f64f450da818a2a3d6f1cb603e5f7a8fa0efee26334a6d8ed320c3f9ef87b3b914742e43c04081b2be152e74a050f4e","ssdeep":"768:1YL13GsRTOYWHu0GW3BgYYQYzA2EXQB10Sw4YahqQajF:uAg7ATABm","tlshash":"7113c77032402a3d751387e0f260f77ea29ee29ada5fd40cb2bc02a167c6d95dd663d4","dom_hash":"domhash4bf99a0eb4b55b1fa7b87475cd4edac5","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump","fqdn":"xn--pmp-hoa.fun","domain":"xn--pmp-hoa.fun","tld":"fun"},"ip":{"addr":"172.67.203.192","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T16:01:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":3,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-14T16:00:46Z","timestamp":1771084846,"ip_dst":{"addr":"104.26.1.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":56436,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO External IP Address Lookup Domain (get .geojs .io) in TLS SNI","source":"{\"timestamp\":\"2026-02-14T16:00:46.076763+0000\",\"flow_id\":804248131394618,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.10\",\"src_port\":56436,\"dest_ip\":\"104.26.1.100\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2039595,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (get .geojs .io) in TLS SNI\",\"category\":\"Device Retrieving External IP Address Detected\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_10_28\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2025_04_17\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_10_28\"]}},\"tls\":{\"sni\":\"get.geojs.io\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":914,\"bytes_toclient\":3509,\"start\":\"2026-02-14T16:00:46.056378+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-14T16:00:46Z","timestamp":1771084846,"ip_dst":{"addr":"208.65.177.248","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":57820,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)","source":"{\"timestamp\":\"2026-02-14T16:00:46.208286+0000\",\"flow_id\":2225439924747016,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.10\",\"src_port\":57820,\"dest_ip\":\"208.65.177.248\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058825,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"rpc.ankr.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":914,\"bytes_toclient\":4434,\"start\":\"2026-02-14T16:00:46.129800+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-14T16:00:46Z","timestamp":1771084846,"ip_dst":{"addr":"208.65.177.248","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":57810,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)","source":"{\"timestamp\":\"2026-02-14T16:00:46.211314+0000\",\"flow_id\":1115349792520739,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.10\",\"src_port\":57810,\"dest_ip\":\"208.65.177.248\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058825,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"rpc.ankr.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":4434,\"start\":\"2026-02-14T16:00:46.129571+0000\"}}"}],"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"xn--pmp-hoa.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"xn--pmp-hoa.fun","ip":{"addr":"172.67.203.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-29","domain_rank":0,"first_seen":"2026-02-14T16:01:10.024896Z","last_seen":"2026-02-14T16:01:10.024896Z","alert_count":16,"request_count":16,"received_data":5609187,"sent_data":8100,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"solana.publicnode.com","ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-08-16","domain_rank":0,"first_seen":"2025-10-03T14:04:26.693295Z","last_seen":"2026-02-13T02:33:06.802775Z","alert_count":0,"request_count":2,"received_data":1450,"sent_data":1019,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"tokens.jup.ag","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2021-09-15","domain_rank":3826033,"first_seen":"2024-07-17T13:58:37Z","last_seen":"2026-02-04T18:55:29.189878Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":481,"comment":"","tags":null,"fingerprints":null},{"fqdn":"raw.githubusercontent.com","ip":{"addr":"185.199.110.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2014-02-06","domain_rank":22021,"first_seen":"2014-03-01T07:08:08Z","last_seen":"2026-02-11T14:34:15.523478Z","alert_count":0,"request_count":1,"received_data":32999,"sent_data":530,"comment":"","tags":null,"fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.dexscreener.com","ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-06-11","domain_rank":1560830,"first_seen":"2023-07-13T11:22:42Z","last_seen":"2026-02-08T17:26:23.166751Z","alert_count":0,"request_count":1,"received_data":20336,"sent_data":488,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"get.geojs.io","ip":{"addr":"104.26.1.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-02-18","domain_rank":99948,"first_seen":"2017-03-30T18:44:25Z","last_seen":"2026-02-11T15:17:36.121683Z","alert_count":0,"request_count":1,"received_data":932,"sent_data":448,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"imagedelivery.net","ip":{"addr":"104.18.3.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-04-09","domain_rank":15876,"first_seen":"2021-09-20T12:34:55Z","last_seen":"2026-02-11T16:27:14.728084Z","alert_count":0,"request_count":1,"received_data":3246,"sent_data":524,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.dexscreener.com","ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-06-11","domain_rank":2085659,"first_seen":"2022-05-19T18:07:24Z","last_seen":"2026-02-13T22:57:13.79941Z","alert_count":0,"request_count":1,"received_data":3326,"sent_data":499,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"aahdjjsivunugynqjvyfbhqnjekniyfboma.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2025-10-12","domain_rank":0,"first_seen":"2025-10-27T02:34:24.089252Z","last_seen":"2026-02-11T00:49:16.324927Z","alert_count":0,"request_count":3,"received_data":659164,"sent_data":1603,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"rpc.ankr.com","ip":{"addr":"208.65.177.248","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2007-04-23","domain_rank":541361,"first_seen":"2021-10-24T12:41:06Z","last_seen":"2026-02-08T06:44:44.051972Z","alert_count":0,"request_count":2,"received_data":1415,"sent_data":1064,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.dicebear.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2013-06-21","domain_rank":868285,"first_seen":"2021-11-13T12:04:00Z","last_seen":"2026-02-08T15:31:30.115969Z","alert_count":0,"request_count":1,"received_data":2510,"sent_data":493,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"corsproxy.io","ip":{"addr":"104.26.6.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-01-30","domain_rank":175528,"first_seen":"2016-05-19T01:27:08Z","last_seen":"2026-02-09T18:39:27.670913Z","alert_count":0,"request_count":1,"received_data":742,"sent_data":553,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pump.mypinata.cloud","ip":{"addr":"172.64.155.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-01-28","domain_rank":1441738,"first_seen":"2024-04-12T07:11:46Z","last_seen":"2026-02-09T20:58:16.873044Z","alert_count":0,"request_count":1,"received_data":1663,"sent_data":524,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.mainnet-beta.solana.com","ip":{"addr":"74.63.225.119","port":443,"asn":46475,"as":"LIMESTONENETWORKS","country":"United States","country_code":"US"},"domain_registered":"1993-04-16","domain_rank":1956745,"first_seen":"2020-02-22T02:19:07Z","last_seen":"2026-02-04T18:55:29.267812Z","alert_count":0,"request_count":2,"received_data":1104,"sent_data":1082,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump","fqdn":"xn--pmp-hoa.fun","domain":"xn--pmp-hoa.fun","tld":"fun"},"ip":{"addr":"172.67.203.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5fe941e8b3070c2be07d01a543ca590b","sha1":"89be0efce1bf716dae553fce5c359feb6841864b","sha256":"3b3e30f09b425ae327ab19eb2820a61aa2cb47b3bbbfae05fe7a6de793b11199","sha512":"fa6d37643493f873ce535beb7f012fab9ddf9ebaf5193394fa26ef64ee0ee1771db0421865edfd8e11336687290bc62a474fede73e0eb8d4621fd07ed315b89e","ssdeep":"6144:QffaCt0wAPF+xONGPOmwy1OOmeVvevkOmG9xphL8kP9IjZ:Qff+PFAONGPOmwy1OOmeVvevkOmG9xpI","tlshash":"d1640dc72ff952504bd233abd826b176b4c068e9cb7d496dfd30b22fb0d464669d20a4","size":322389,"data":"","first_seen":"2026-02-04T18:55:33.911736Z","last_seen":"2026-02-18T23:20:24.981462Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--pmp-hoa.fun/config.optimized.js","fqdn":"xn--pmp-hoa.fun","domain":"xn--pmp-hoa.fun","tld":"fun"},"ip":{"addr":"172.67.203.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"62a99728b6c1b886692fad7de3e5b0b4","sha1":"f150886a7e9179d4c894bfb5fa886aaa21f322f0","sha256":"051349cc4cff36f33f9ebe15f0b12003955c7f58b1d4667c690eb5c911ecb75f","sha512":"c994f5a1198689c90f258259576f42718c6fd5104000fc6d240437f510044d80b5ad43d9e6ec2637dd3de93064808db96468a35899d863fd9815b982373c6796","ssdeep":"6144:ab7iLYfpUTw0pFix2NGPOmSy1OOmeVvevkOmG9xphL8kP9IP1:E74Y2pFk2NGPOmSy1OOmeVvevkOmG9xW","tlshash":"b86430c72bf9525457d233ebd825b07ab4c464e9cb7d896dfe30b25fb0d8a4668c10a0","size":329753,"data":"","first_seen":"2026-02-04T18:55:33.904711Z","last_seen":"2026-02-21T20:57:46.780095Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--pmp-hoa.fun/assets/index-BSHRDJSn.js","fqdn":"xn--pmp-hoa.fun","domain":"xn--pmp-hoa.fun","tld":"fun"},"ip":{"addr":"172.67.203.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3715a261ed2c03b940de358d95716e1f","sha1":"53a314e20403bf842c9e2921c6db16fd367fbd1a","sha256":"12257b05add3460483c21452ddad8e62454b621492838fcd8525d68d12ee21c5","sha512":"1e0df95ff77af0d4fc78a016b6205fbdb4d0d699c5c9a338dce7753ff1ae204e61b40cbd834e88df59799008d86ea7ba2dac121ac318820c64c6ce7a47a0efbd","ssdeep":"12288:R8/B5aSL7w3hCa+6vZG/MPbBigB5aXbGbbaX+fomAm3IhPfKHcHOxRHFoI+EoOSR:C/BcSL7wV+6A/MPbZBHbaX+fomAm3Ihj","tlshash":"28c45cd472a5716657a715f0003f200bf27cbc29684c8864f668ecfa3ab8549657ffb8","size":576247,"data":"","first_seen":"2026-02-04T18:55:33.900025Z","last_seen":"2026-02-18T23:20:24.959151Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aahdjjsivunugynqjvyfbhqnjekniyfboma.com/@v1/cdn/js/popper.lite.esm.js?t=29518080\u0026u=2jr9M5CpbRoJ0qsrGDY5MmYxYWJiOTZhZjZlNjg1ODNjNjJlZKm3basrWpuBwsEB5g","fqdn":"aahdjjsivunugynqjvyfbhqnjekniyfboma.com","domain":"aahdjjsivunugynqjvyfbhqnjekniyfboma.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","size":656642,"data":"","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-06-07T04:15:26.458958Z","times_seen":2555,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"api.dexscreener.com/latest/dex/tokens/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump","fqdn":"api.dexscreener.com","domain":"dexscreener.com","tld":"com"},"ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump","date":"2026-02-14T16:00:47.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexscreener.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:42:49 GMT","end":"Sun, 26 Apr 2026 03:42:47 GMT"},"fingerprint":{"sha1":"EA:3A:CC:F0:58:31:D8:82:DD:90:88:D9:E2:47:C9:DE:99:A8:7D:70","sha256":"4B:39:97:86:5F:AC:80:42:4E:F8:21:24:18:C5:D9:10:D4:35:57:60:C8:6A:A9:21:C7:42:7D:41:22:F3:20:B0"}}},"request":{"raw":"GET /latest/dex/tokens/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump HTTP/1.1\r\nHost: api.dexscreener.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xn--pmp-hoa.fun/\r\nOrigin: https://xn--pmp-hoa.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 16:00:47 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncf-ray: 9cddc7c79f7ec272-OSL\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\netag: W/\"9f2-GbrEtU9aWFSU0e9C51vVfMof49I\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: EXPIRED\r\nexpires: Sat, 14 Feb 2026 16:01:17 GMT\r\ncache-control: public, max-age=30\r\nset-cookie: __cf_bm=hxulz.eIXE_iPJPq1yF9hTfXZ69I14wwFh0gsPVS1Ok-1771084847-1.0.1.1-pFT3LjDLKXQrR9JjMhzvCZQ5SRP3TUHyp9_CypA2a44mLxnDL56PGn9REKZOltnEG8ZWooZZBOICaUw7rNMksb1NCC5JBM3wN9J0agvkgrIZMq8UX0cj24wEmWfs6mhx; path=/; expires=Sat, 14-Feb-26 16:30:47 GMT; domain=.dexscreener.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2546,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"85c25c233ec5437dfc12632863dffbac","sha1":"19bac4b54f5a585494d1ef42e75bd57cca1fe3d2","sha256":"5472651cf0de0d55516125287aa68468a756f1c25420c753c30321c3a22b4256","sha512":"8d4ffbc8a7b1d4ef46f2b900c03ebdf030533da345dcbdbf1665870239c4a81b5a21c4c70ec12a1c0b7673adbb38d0c352cca747404229f07095f61bd23da07c","ssdeep":"","tlshash":"cb5172b343e9b87be3042ab36897346c51d272428fa8545fc5849c4e02e8f8fa01ba5c","first_seen":"2026-02-14T16:01:15.310498Z","last_seen":"2026-02-14T16:01:15.310498Z","times_seen":1,"resource_available":false,"data":null}},"time_used":393,"timings":{"blocked":61,"dns":35,"connect":3,"send":0,"wait":270,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--pmp-hoa.fun/stream-video.mp4","fqdn":"xn--pmp-hoa.fun","domain":"xn--pmp-hoa.fun","tld":"fun"},"ip":{"addr":"172.67.203.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump","date":"2026-02-14T16:00:49.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--pmp-hoa.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 22:44:17 GMT","end":"Wed, 29 Apr 2026 22:44:16 GMT"},"fingerprint":{"sha1":"D0:D2:23:B1:4E:39:E7:0C:FC:41:89:5D:32:82:B6:E5:F8:2B:B0:53","sha256":"FA:17:99:23:C7:FB:42:05:6B:FA:79:E4:52:C4:C3:30:2E:51:EF:BC:96:7C:1D:9A:2A:3D:19:0A:FC:45:EE:0A"}}},"request":{"raw":"GET /stream-video.mp4 HTTP/1.1\r\nHost: xn--pmp-hoa.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump\r\nRange: bytes=786432-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 5414216\r\ncf-cache-status: REVALIDATED\r\ncontent-type: video/mp4\r\ncontent-range: bytes 786432-6200647/6200648\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"528c066aacc92d492da57d08639b8bd3\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mj%2FT7BDju53wSXgveczHcDoJVE9Mwc6N1F3BAxu8FU5JFYsI2Bpbncj7id2W6bMYrtgLWBM6R9cBJy72CkE%2FqQ0itWhXMrHJFkQl8OoMtA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 16:00:49 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cddc7d37c7e958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98304,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"6ed10a947ee96f1977840ef908e8c107","sha1":"974bdc912bf1cf4de6a93a05c7b0003167ca6a0b","sha256":"8566e9adb4b95373a10e7ef922142568527064007d44daa3881ce68a2650586c","sha512":"26589ea42419703308dc0658b5696fd67d7bd4ccda09f24bb7aa8de02d5ade0694f2a282cb20cabfa8fa9c2b12ee28dfc65139f17d6ca20e9a5ccd218e976816","ssdeep":"1536:DYsU+wA8I2V4aZZI6dlbK8VK7yogUwGb+6DcS+uSZtVrczBAJ7hm0bMs4BQn1gOI:DYslh2VEec8VNdZuJJ+uSZXYz2JF/462","tlshash":"14a3126213bd74bdd6b6e477add5b301ad2c4acc9c0072be8b6e7964fb5e1420d1e0a0","first_seen":"2026-02-14T16:01:15.311384Z","last_seen":"2026-02-14T16:01:15.311384Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"xn--pmp-hoa.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aahdjjsivunugynqjvyfbhqnjekniyfboma.com/jmpd/","fqdn":"aahdjjsivunugynqjvyfbhqnjekniyfboma.com","domain":"aahdjjsivunugynqjvyfbhqnjekniyfboma.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump","date":"2026-02-14T16:00:49.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aahdjjsivunugynqjvyfbhqnjekniyfboma.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 17:03:37 GMT","end":"Mon, 11 May 2026 17:03:36 GMT"},"fingerprint":{"sha1":"4A:7A:83:C8:26:B2:B9:06:B7:24:AB:14:37:B2:2C:6B:0F:E3:7C:EC","sha256":"B7:32:66:E7:A2:80:E6:D4:88:A2:F4:68:C3:42:D5:84:DC:C9:B9:19:DE:8F:88:17:F4:19:2E:C1:E2:F0:81:63"}}},"request":{"raw":"POST /jmpd/ HTTP/1.1\r\nHost: aahdjjsivunugynqjvyfbhqnjekniyfboma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xn--pmp-hoa.fun/\r\ncontent-type: application/json\r\nContent-Length: 2289\r\nOrigin: https://xn--pmp-hoa.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2289,"data":"{\"route\":\"8XUwkBv9vhPYfVpD1fxb7EC65sUXJdqr\",\"payload\":\"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\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 16:00:50 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4623838\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://xn--pmp-hoa.fun\r\ncache-control: no-cache\r\ncontent-encoding: br\r\netag: W/\"db-wnWGbxKJ2JWPUBoEKkEkoEcIQKg\"\r\nx-ratelimit-limit: 10000\r\nx-ratelimit-remaining: 9999\r\nx-ratelimit-reset: 1771084909495\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 02/14/2026 16:00:50\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 192f7406f491fd8c3aa58195b533920c\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":219,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1a26271170d55eca13513a439c70f49d","sha1":"c275866f1289d8958f501a042a4124a0470840a8","sha256":"de8430236bf44669682b2a716ba190b24d46a24a325e2462991eecac17457a7c","sha512":"632e32374db34df423834e4b285c8859c1da218794f9d81c2d33b68c0ea389aeeff785f5d306e164539d24a5c208810292556cc622e85238385bd048c6aaf4a7","ssdeep":"","tlshash":"22d023c7f70839e4030bdeb134a3003001552f4fbd8f749c53b23608c3098041b02400","first_seen":"2026-02-14T16:01:15.312396Z","last_seen":"2026-02-14T16:01:15.312396Z","times_seen":1,"resource_available":false,"data":null}},"time_used":618,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":618,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--pmp-hoa.fun/assets/index-BSHRDJSn.js","fqdn":"xn--pmp-hoa.fun","domain":"xn--pmp-hoa.fun","tld":"fun"},"ip":{"addr":"172.67.203.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump","date":"2026-02-14T16:00:45.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--pmp-hoa.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 22:44:17 GMT","end":"Wed, 29 Apr 2026 22:44:16 GMT"},"fingerprint":{"sha1":"D0:D2:23:B1:4E:39:E7:0C:FC:41:89:5D:32:82:B6:E5:F8:2B:B0:53","sha256":"FA:17:99:23:C7:FB:42:05:6B:FA:79:E4:52:C4:C3:30:2E:51:EF:BC:96:7C:1D:9A:2A:3D:19:0A:FC:45:EE:0A"}}},"request":{"raw":"GET /assets/index-BSHRDJSn.js HTTP/1.1\r\nHost: xn--pmp-hoa.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 16:00:45 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eMgR1h%2BH4%2BrTwastIhVqj35U%2FvDcrxcv1k8tSWP%2B4v0PAi2rorErwQ8CDI1jYdVgj0Slu2wMUEIvcwEVWNS25%2Fyr3Q8Kxikg%2F%2FSrVearHg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"a88b1a0ceaf5705b1c7a97005b2a6cc3\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cddc7bb5d68958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":576247,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (40308)","md5":"3715a261ed2c03b940de358d95716e1f","sha1":"53a314e20403bf842c9e2921c6db16fd367fbd1a","sha256":"12257b05add3460483c21452ddad8e62454b621492838fcd8525d68d12ee21c5","sha512":"1e0df95ff77af0d4fc78a016b6205fbdb4d0d699c5c9a338dce7753ff1ae204e61b40cbd834e88df59799008d86ea7ba2dac121ac318820c64c6ce7a47a0efbd","ssdeep":"12288:R8/B5aSL7w3hCa+6vZG/MPbBigB5aXbGbbaX+fomAm3IhPfKHcHOxRHFoI+EoOSR:C/BcSL7wV+6A/MPbZBHbaX+fomAm3Ihj","tlshash":"28c45cd472a5716657a715f0003f200bf27cbc29684c8864f668ecfa3ab8549657ffb8","first_seen":"2026-02-04T18:55:33.900025Z","last_seen":"2026-02-18T23:20:24.959151Z","times_seen":3,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"xn--pmp-hoa.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--pmp-hoa.fun/test2.png","fqdn":"xn--pmp-hoa.fun","domain":"xn--pmp-hoa.fun","tld":"fun"},"ip":{"addr":"172.67.203.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump","date":"2026-02-14T16:00:45.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--pmp-hoa.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 22:44:17 GMT","end":"Wed, 29 Apr 2026 22:44:16 GMT"},"fingerprint":{"sha1":"D0:D2:23:B1:4E:39:E7:0C:FC:41:89:5D:32:82:B6:E5:F8:2B:B0:53","sha256":"FA:17:99:23:C7:FB:42:05:6B:FA:79:E4:52:C4:C3:30:2E:51:EF:BC:96:7C:1D:9A:2A:3D:19:0A:FC:45:EE:0A"}}},"request":{"raw":"GET /test2.png HTTP/1.1\r\nHost: xn--pmp-hoa.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 651521\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"0f507bfc1afca90eb3a87e378b2234c3\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q0RiHsmndT88tMLLNUjb4g2OVhCJMJgD0k%2BAQSCMOZAOD%2FJ7f%2BKT0AvI9OdAgY%2F0sZ1rQQj2u2aj7pOqDhYBtGbCqMn6oJU2Gl2Dl%2FM28B%2FVQQ47IxCc0Bf1qg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 16:00:45 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cddc7beee8b958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":651521,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1027 x 572, 8-bit/color RGBA, non-interlaced","md5":"9cf733f2a80fac9d752e0f6e40be8819","sha1":"7ad0a7b261627c3c2ecc7209ca1b6ccfe4ae0d43","sha256":"e1c816d9c2a67309dc772be879d9fbc9107e41d8bb41b2b46ffba7a44692f49f","sha512":"c1b9252c88dc0bd7ed63e9c327e13b3ff32f9b97b74a7e8549950959036912db62421ec28a33be82ace892433f02091bdd49ed1aacc37fa2835b70d500f71ba4","ssdeep":"12288:Y5Iv+n2QKVzNl8neG9vtEyNWu1RYSMuJSYqq6D/Wu/z4d+dq2Wcv:Y50+n2QKVn8jdHYtqCWu9q2h","tlshash":"e7d4235e2fb5d80d8b7db803b1b8d4987af3395dd29b3e349a4b39908dc1d2d02561e8","first_seen":"2026-02-04T18:55:33.893495Z","last_seen":"2026-03-25T15:47:11.884342Z","times_seen":20,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":163,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"xn--pmp-hoa.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"solana.publicnode.com/","fqdn":"solana.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump","date":"2026-02-14T16:00:46.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:40:15 GMT","end":"Mon, 11 May 2026 21:40:09 GMT"},"fingerprint":{"sha1":"02:33:4E:80:56:8A:88:B0:A0:32:C7:FD:BB:EA:AD:56:66:32:7F:9E","sha256":"25:6C:D0:C9:8E:E0:89:64:BF:49:7D:80:0C:31:46:0A:5B:1D:05:0B:79:60:DB:A7:27:2E:C9:40:85:64:DA:1E"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: solana.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://xn--pmp-hoa.fun/\r\nOrigin: https://xn--pmp-hoa.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 14 Feb 2026 16:00:46 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 172800\r\nallow: OPTIONS, POST\r\nserver: cloudflare\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\nx-envoy-upstream-service-time: 0\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9cddc7c30b95a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T12:34:25.437902Z","times_seen":16239334,"resource_available":true,"data":null}},"time_used":268,"timings":{"blocked":70,"dns":22,"connect":11,"send":0,"wait":127,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tokens.jup.ag/token/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump","fqdn":"tokens.jup.ag","domain":"jup.ag","tld":"ag"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump","date":"2026-02-14T16:00:47.179Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /token/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump HTTP/1.1\r\nHost: tokens.jup.ag\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xn--pmp-hoa.fun/\r\nOrigin: https://xn--pmp-hoa.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T12:34:25.437902Z","times_seen":16239334,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--pmp-hoa.fun/stream-video.mp4","fqdn":"xn--pmp-hoa.fun","domain":"xn--pmp-hoa.fun","tld":"fun"},"ip":{"addr":"172.67.203.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump","date":"2026-02-14T16:00:49.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--pmp-hoa.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 22:44:17 GMT","end":"Wed, 29 Apr 2026 22:44:16 GMT"},"fingerprint":{"sha1":"D0:D2:23:B1:4E:39:E7:0C:FC:41:89:5D:32:82:B6:E5:F8:2B:B0:53","sha256":"FA:17:99:23:C7:FB:42:05:6B:FA:79:E4:52:C4:C3:30:2E:51:EF:BC:96:7C:1D:9A:2A:3D:19:0A:FC:45:EE:0A"}}},"request":{"raw":"GET /stream-video.mp4 HTTP/1.1\r\nHost: xn--pmp-hoa.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump\r\nRange: bytes=6160384-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 40264\r\ncf-cache-status: REVALIDATED\r\ncontent-type: video/mp4\r\ncontent-range: bytes 6160384-6200647/6200648\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"528c066aacc92d492da57d08639b8bd3\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mj%2FT7BDju53wSXgveczHcDoJVE9Mwc6N1F3BAxu8FU5JFYsI2Bpbncj7id2W6bMYrtgLWBM6R9cBJy72CkE%2FqQ0itWhXMrHJFkQl8OoMtA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 16:00:49 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cddc7d32c6c958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40264,"size_decoded":0,"mime_type":"video/mp4","magic":"OpenPGP Public Key","md5":"e49250f84a243f9c6b59b6f20a7b187d","sha1":"cf2193b266dccda592c6b48ad73c5dde9cbf7833","sha256":"ebe0a1c75bdf85b17921466de07f83964c7e0c5d4b93396a39d0806bbd6d3792","sha512":"053bbed89ec10f1deece1ca52187152b71a72271a214cc807722d5cc46a4ff4da3b9d3362be07444898fddccc9a7ff7ad6cdfb56c3dfea8e0504aacef85b384c","ssdeep":"768:h/F/fR2n1s9N3fxjverqP9a3hMUrrQsaClLqpKsx7:PI1C5orz3htqkOpKsx7","tlshash":"0c03d48233722487df90673da1e7c3663238c978538b5a8f5b52772ebce67c866042c5","first_seen":"2026-02-04T18:55:33.902554Z","last_seen":"2026-03-07T01:49:00.358453Z","times_seen":16,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"xn--pmp-hoa.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/solana-labs/token-list/main/assets/mainnet/So11111111111111111111111111111111111111112/logo.png","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.110.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump","date":"2026-02-14T16:00:46.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91","sha256":"7D:11:22:EA:96:98:52:34:1E:8D:D9:2B:CC:0C:7E:CC:00:96:30:D1:4D:A7:34:D7:CA:42:D5:B5:4A:2B:20:97"}}},"request":{"raw":"GET /solana-labs/token-list/main/assets/mainnet/So11111111111111111111111111111111111111112/logo.png HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xn--pmp-hoa.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/png\r\netag: W/\"95ec9d631aa49a3c30e0442c30108df0b4dde3e52ed9eda1e475ecd7b0228e6c\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 330C:3C98D:7471B3:83AAB2:6972CFB6\r\naccept-ranges: bytes\r\ndate: Sat, 14 Feb 2026 16:00:46 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410034-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1771084846.138420,VS0,VE1\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: a38a86cc6618be5646a261ad70322407a98cb27c\r\nexpires: Sat, 14 Feb 2026 16:05:46 GMT\r\nsource-age: 171\r\ncontent-length: 32126\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32126,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"0336be6feeb4e1d02cc0efca4dc35514","sha1":"2aa6de95ab67da70eaeba513053992c83cfe767c","sha256":"943c48e760ec717f55363835067d501ff4bd6825a29732a18955e141ba536602","sha512":"b3e1d8faa48cc19bb6a8f008a7254e6d988101585595a34848c4592c2126eb45b6ab1892c320af92c89a35e3e16a1b1e910cba7e7fb8c41d37ca436d24084556","ssdeep":"768:WlIJYLr4t4Ecde1XDx+6ofPEkLPF3PGqqy6fpXwj:WlIJYO4E9F+6xkL93+qQ2","tlshash":"65e2ae2ec86ed8646316caa07bfd0fd70c09d2385424b3e62414fdd646a5cd0b9b5efa","first_seen":"2023-11-14T06:42:50Z","last_seen":"2026-06-08T13:17:29.597371Z","times_seen":695,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":85,"dns":1,"connect":13,"send":0,"wait":53,"receive":2,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rpc.ankr.com/solana","fqdn":"rpc.ankr.com","domain":"ankr.com","tld":"com"},"ip":{"addr":"208.65.177.248","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump","date":"2026-02-14T16:00:46.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shark.multi-rpc.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 12:29:39 GMT","end":"Wed, 22 Apr 2026 12:29:38 GMT"},"fingerprint":{"sha1":"B6:90:50:A4:28:8A:65:0B:25:C6:B8:68:BA:34:E4:DC:BC:F8:D0:45","sha256":"EE:53:09:A0:AE:9A:74:42:F4:10:ED:1A:2F:DC:47:1F:A5:F8:5B:DD:97:72:63:8E:C8:44:98:38:79:DF:68:19"}}},"request":{"raw":"OPTIONS /solana HTTP/1.1\r\nHost: rpc.ankr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,solana-client\r\nReferer: https://xn--pmp-hoa.fun/\r\nOrigin: https://xn--pmp-hoa.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 14 Feb 2026 16:00:46 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,solana-client,client-sdk-version,client-sdk-type,client-target-api-version,x-ton-client-version,x-client-name,x-client-version\r\naccess-control-max-age: 1728000\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T12:34:25.437902Z","times_seen":16239334,"resource_available":true,"data":null}},"time_used":1717,"timings":{"blocked":843,"dns":94,"connect":53,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"solana.publicnode.com/","fqdn":"solana.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump","date":"2026-02-14T16:00:46.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:40:15 GMT","end":"Mon, 11 May 2026 21:40:09 GMT"},"fingerprint":{"sha1":"02:33:4E:80:56:8A:88:B0:A0:32:C7:FD:BB:EA:AD:56:66:32:7F:9E","sha256":"25:6C:D0:C9:8E:E0:89:64:BF:49:7D:80:0C:31:46:0A:5B:1D:05:0B:79:60:DB:A7:27:2E:C9:40:85:64:DA:1E"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: solana.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xn--pmp-hoa.fun/\r\nContent-Type: application/json\r\nContent-Length: 130\r\nOrigin: https://xn--pmp-hoa.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":130,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"getAccountInfo\",\"params\":[\"JAycg128bMNhqMFkViArALKfKx7NcutGbSyxNt9cZAdR\",{\"encoding\":\"base64\"}]}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 16:00:46 GMT\r\ncontent-type: application/json\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\nx-envoy-upstream-service-time: 3\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9cddc7c3de63a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":314,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b5f2f0ab8db9fd00508e6d9484084b03","sha1":"0ef34546a774e188f9a7338167c3e57db872fb0d","sha256":"4df3ba4d50c1d2e7b29886db7824c0f8cf1ae94da78519fdbd47ca1b018ae46b","sha512":"0c3298a182307e0ef48b30a1bc8c1599cbb9a88609ca941a7e9d6a6c60e834e6ad29533c53e5052c35e7b8c0b9eb7d520f49ef57fadccdd12f96c4a32846bb10","ssdeep":"","tlshash":"11e0e7803f0c4af9c5c65e49c55ea15b574727dc45408e5d52d5015436cd8cd713df2f","first_seen":"2026-02-14T16:01:15.316758Z","last_seen":"2026-02-14T16:01:15.316758Z","times_seen":1,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.dicebear.com/9.x/pixel-art/svg?seed=Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump","fqdn":"api.dicebear.com","domain":"dicebear.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump","date":"2026-02-14T16:00:47.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.dicebear.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:03:42 GMT","end":"Thu, 07 May 2026 21:03:41 GMT"},"fingerprint":{"sha1":"5B:B0:0E:F8:31:F0:43:01:B9:C0:98:4E:E6:4C:A5:E9:16:8D:A3:8C","sha256":"7C:DF:80:FF:20:B4:20:77:9E:04:87:40:15:3A:CE:B0:2A:CE:3D:86:86:AB:1C:30:1F:20:E2:C2:0C:84:F9:62"}}},"request":{"raw":"GET /9.x/pixel-art/svg?seed=Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump HTTP/1.1\r\nHost: api.dicebear.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xn--pmp-hoa.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 16:00:47 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 147563\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\nx-robots-tag: noindex\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncdn-proxyver: 1.43\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 02/14/2026 16:00:47\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-disposition: inline; filename=\"avatar.svg\"\r\ncdn-requestid: 42156d72c144346e54c77a9b5064e744\r\ncdn-cache: MISS\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1805,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2cc6a020628faf4a0d307302c8cb1ecd","sha1":"9a944e8441230080d9e82e94628d955181f9f913","sha256":"002902abd495018baf7092756548e6fb88cafb63bc31a5e8ee7e71aad6de38c6","sha512":"51fd9d520a65d06b10287e8ef464887fdefbfa1b7295648fa678f62b3f336cc4077a9c97f97a5c87cc150671d908d1d9bf9871c096073814ec2f2c85b216b454","ssdeep":"","tlshash":"d331e2e531597412560347d2bfecf98f002b71ef99c800d678835953f2aa28f1f51761","first_seen":"2026-02-14T16:01:15.317682Z","last_seen":"2026-02-14T16:01:15.317682Z","times_seen":1,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":70,"dns":63,"connect":2,"send":0,"wait":43,"receive":0,"ssl":4},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--pmp-hoa.fun/config.optimized.js","fqdn":"xn--pmp-hoa.fun","domain":"xn--pmp-hoa.fun","tld":"fun"},"ip":{"addr":"172.67.203.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump","date":"2026-02-14T16:00:45.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--pmp-hoa.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 22:44:17 GMT","end":"Wed, 29 Apr 2026 22:44:16 GMT"},"fingerprint":{"sha1":"D0:D2:23:B1:4E:39:E7:0C:FC:41:89:5D:32:82:B6:E5:F8:2B:B0:53","sha256":"FA:17:99:23:C7:FB:42:05:6B:FA:79:E4:52:C4:C3:30:2E:51:EF:BC:96:7C:1D:9A:2A:3D:19:0A:FC:45:EE:0A"}}},"request":{"raw":"GET /config.optimized.js HTTP/1.1\r\nHost: xn--pmp-hoa.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 16:00:45 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qeGqJfLJ42F5AbmMZ92AoBhTq8BSwp7Wpd6W5Ol5Rheu5CI1dxvU1swgFX1%2BgUi1oZ4uhxJ3%2F7%2FFq8qLjncRAca8DXxfP9PgYvMGRx%2BSnw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"7d9f903a7d223e8c1f0a051eb68790b1\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cddc7bb5d67958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":329753,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65159)","md5":"62a99728b6c1b886692fad7de3e5b0b4","sha1":"f150886a7e9179d4c894bfb5fa886aaa21f322f0","sha256":"051349cc4cff36f33f9ebe15f0b12003955c7f58b1d4667c690eb5c911ecb75f","sha512":"c994f5a1198689c90f258259576f42718c6fd5104000fc6d240437f510044d80b5ad43d9e6ec2637dd3de93064808db96468a35899d863fd9815b982373c6796","ssdeep":"6144:ab7iLYfpUTw0pFix2NGPOmSy1OOmeVvevkOmG9xphL8kP9IP1:E74Y2pFk2NGPOmSy1OOmeVvevkOmG9xW","tlshash":"b86430c72bf9525457d233ebd825b07ab4c464e9cb7d896dfe30b25fb0d8a4668c10a0","first_seen":"2026-02-04T18:55:33.904711Z","last_seen":"2026-02-21T20:57:46.780095Z","times_seen":5,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"xn--pmp-hoa.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corsproxy.io/?https://api.mainnet-beta.solana.com","fqdn":"corsproxy.io","domain":"corsproxy.io","tld":"io"},"ip":{"addr":"104.26.6.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump","date":"2026-02-14T16:00:46.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corsproxy.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 02:28:48 GMT","end":"Tue, 12 May 2026 03:28:35 GMT"},"fingerprint":{"sha1":"A7:54:DA:CD:3D:64:14:CF:AB:9C:8F:76:05:87:8C:D9:BA:8E:A8:77","sha256":"49:A2:90:7E:C4:0A:BE:06:C5:A6:D2:66:65:9E:2A:B3:43:74:E5:2A:3E:BC:56:B2:3B:E6:53:58:AD:8F:BA:08"}}},"request":{"raw":"OPTIONS /?https://api.mainnet-beta.solana.com HTTP/1.1\r\nHost: corsproxy.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://xn--pmp-hoa.fun/\r\nOrigin: https://xn--pmp-hoa.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sat, 14 Feb 2026 16:00:46 GMT\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j2U2Eew5Wwkvkb684yCEpdy2B0i6loTLiYOBH%2BDiH4e2%2BcjwgguzUY%2F7L%2FaZVGOHGlO4iRqy4%2BI34IOYN5ep02S4qGj0YjrAJla6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cddc7c24c57bc80-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T12:34:25.437902Z","times_seen":16239334,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":58,"dns":20,"connect":8,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--pmp-hoa.fun/pump.png","fqdn":"xn--pmp-hoa.fun","domain":"xn--pmp-hoa.fun","tld":"fun"},"ip":{"addr":"172.67.203.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump","date":"2026-02-14T16:00:45.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--pmp-hoa.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 22:44:17 GMT","end":"Wed, 29 Apr 2026 22:44:16 GMT"},"fingerprint":{"sha1":"D0:D2:23:B1:4E:39:E7:0C:FC:41:89:5D:32:82:B6:E5:F8:2B:B0:53","sha256":"FA:17:99:23:C7:FB:42:05:6B:FA:79:E4:52:C4:C3:30:2E:51:EF:BC:96:7C:1D:9A:2A:3D:19:0A:FC:45:EE:0A"}}},"request":{"raw":"GET /pump.png HTTP/1.1\r\nHost: xn--pmp-hoa.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 34528\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"5c1f8c200a27aa77bf9d897e36175ccb\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o6MRZMDhJeL0TxX%2FwVhdHvXl6eAlxHTwd5MFUQlU6Q11Bg6U6ulEF6jmJyPZ0U97Cgu3L4JS120t3QiGIHu6kZMzWeYqxi5G5hyFNyg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 16:00:45 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cddc7bece85958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34528,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 279 x 224, 8-bit/color RGBA, non-interlaced","md5":"9b86e948902cd59b1d7939679aef063f","sha1":"ae92e13dfbd9f970834222366b085d9ff0e2f370","sha256":"b7b44ca054c4d04171cddee9b9298807b137d5e50865c22194a965dfc59a5d3a","sha512":"c59789b9eeca0be001caa160d6f21351d0a2c6c566f381b1363fd2ebbeabe61fd1e5533c496ffa29a6a995a5eab40b51f7d809f024daeeeb392fdbab9faf4700","ssdeep":"768:vzYlGEgbY6HjWErvGK8t3SAZSjiPnUxy42ZemMsG38d3RgzEn:veSYiCErvGZdzZhtDg1sMI3eQn","tlshash":"44f2e1fbce13c6a5e5ab71add88dd4a2ca4c50d213ded85b4d0494b74c0bec0969cba1","first_seen":"2026-02-04T18:55:33.891763Z","last_seen":"2026-06-04T13:30:34.543318Z","times_seen":191,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"xn--pmp-hoa.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--pmp-hoa.fun/test1.png","fqdn":"xn--pmp-hoa.fun","domain":"xn--pmp-hoa.fun","tld":"fun"},"ip":{"addr":"172.67.203.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump","date":"2026-02-14T16:00:45.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--pmp-hoa.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 22:44:17 GMT","end":"Wed, 29 Apr 2026 22:44:16 GMT"},"fingerprint":{"sha1":"D0:D2:23:B1:4E:39:E7:0C:FC:41:89:5D:32:82:B6:E5:F8:2B:B0:53","sha256":"FA:17:99:23:C7:FB:42:05:6B:FA:79:E4:52:C4:C3:30:2E:51:EF:BC:96:7C:1D:9A:2A:3D:19:0A:FC:45:EE:0A"}}},"request":{"raw":"GET /test1.png HTTP/1.1\r\nHost: xn--pmp-hoa.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 916416\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"d0621a1b48871a5d9e5d8bde544e2558\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q%2BjJtbv6xbMS1s2qtTtaJ7I89rO3cuBLfYWqoPqipOFoUQ3FaSzqpjNlcA%2B6OJHE2QkrhmA3CrEJiFwrALjc%2FTeqDyhIO16cGLfUYzl9LxlIZQA1%2BrGUgXJ%2FfA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 16:00:45 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cddc7beee8c958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":916416,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1023 x 571, 8-bit/color RGBA, non-interlaced","md5":"e4bc86ffb38ee2c9b170f23aa817e4ad","sha1":"943a39130f3338330c2db62c75b8b102bbe3fc3a","sha256":"c2bfc771c2a0e79bc2b95b5b5cdb5716a47eb3ed0ddcc2892a5779d89e73a0fa","sha512":"ae07e5a951dfd680f0c77c547647d85b843aeb1b2ad1fc15d9a858b41209188e18187e3db73cffc2539ddce1657dd7d3326c6d8ef0e0f3c983186a57738fbe1d","ssdeep":"24576:lVCUFLvAgJxWLVsky2SMfu7F30rwflMVYmMo+AR:lVNNJCsh2Z27F3CwfuVtMFk","tlshash":"c615330f4ce21351891cb2565f6393e4138b30a7afcb0d272b21f5672b4aa6a743dd5e","first_seen":"2026-02-04T18:55:33.906474Z","last_seen":"2026-03-25T15:47:11.880348Z","times_seen":20,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":245,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"xn--pmp-hoa.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--pmp-hoa.fun/secureproxy?e=ping_proxy","fqdn":"xn--pmp-hoa.fun","domain":"xn--pmp-hoa.fun","tld":"fun"},"ip":{"addr":"172.67.203.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump","date":"2026-02-14T16:00:45.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--pmp-hoa.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 22:44:17 GMT","end":"Wed, 29 Apr 2026 22:44:16 GMT"},"fingerprint":{"sha1":"D0:D2:23:B1:4E:39:E7:0C:FC:41:89:5D:32:82:B6:E5:F8:2B:B0:53","sha256":"FA:17:99:23:C7:FB:42:05:6B:FA:79:E4:52:C4:C3:30:2E:51:EF:BC:96:7C:1D:9A:2A:3D:19:0A:FC:45:EE:0A"}}},"request":{"raw":"GET /secureproxy?e=ping_proxy HTTP/1.1\r\nHost: xn--pmp-hoa.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sat, 14 Feb 2026 16:00:45 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nvary: accept-encoding\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fLKSk0kumnyFbJzKMENurTUo0fgcJABwFqZmCmWUUG7duD5LL%2BcEsQyRWswvZLQ9xSMQhC%2BQ4LOViknIM8ljPHm3FhvBZcjaTywGr1AcGA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncf-ray: 9cddc7bd5dfd958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":501,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"793d67a834b34c90b79e98c44f63eb9b","sha1":"f6fa6ba3d37c2c4f533a928e914be066f2cfaec0","sha256":"e653f073b2460e961540a298e4f3f65b57f4898bbf278fead408a8b2b2f90636","sha512":"7ca1010cecb61a217fab39fd7eafa423c8331f3ab73ce2f93a97ada7a70db2085779b67582111018c29f633abc63b09bebec8dcb31b6998bbd2c19fdf7a134a6","ssdeep":"","tlshash":"53f0594298e0ce2952200a645ec1f50c6a42e7478345ad0872aba0b95f84b818ecf978","first_seen":"2026-02-04T18:55:33.89667Z","last_seen":"2026-02-18T23:20:24.951122Z","times_seen":3,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":174,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"xn--pmp-hoa.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pump.mypinata.cloud/ipfs/QmRZbrQigspuPubSmaMaxpqw6THPvJXb93wz4jAKWEo4Ub?img-width=16\u0026img-dpr=2\u0026img-onerror=redirect","fqdn":"pump.mypinata.cloud","domain":"mypinata.cloud","tld":"cloud"},"ip":{"addr":"172.64.155.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump","date":"2026-02-14T16:00:45.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mypinata.cloud","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 05:38:05 GMT","end":"Fri, 15 May 2026 06:37:52 GMT"},"fingerprint":{"sha1":"D2:35:98:BF:DF:5B:B1:66:8E:FC:16:C9:88:3B:26:0D:D7:75:5A:47","sha256":"A2:B2:2B:C9:40:F4:E6:95:D4:07:8A:4A:30:C8:18:22:C7:AB:DB:FC:9C:99:9B:84:B0:EE:E5:68:A5:19:F6:5A"}}},"request":{"raw":"GET /ipfs/QmRZbrQigspuPubSmaMaxpqw6THPvJXb93wz4jAKWEo4Ub?img-width=16\u0026img-dpr=2\u0026img-onerror=redirect HTTP/1.1\r\nHost: pump.mypinata.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xn--pmp-hoa.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 16:00:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 782\r\nserver: cloudflare\r\ncf-ray: 9cddc7bf1dbea41f-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 44192\r\ncache-control: public, max-age=29030400\r\netag: \"cf0tfVnO_O5gQb-t46gX1cF-yXRfv-XQMWRfE6nHVADQ:QmRZbrQigspuPubSmaMaxpqw6THPvJXb93wz4jAKWEo4Ub\"\r\nvary: Accept, Accept-Encoding\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: *\r\naccess-control-expose-headers: x-payment-response, payment-response, payment-required\r\ncf-placement: remote-FRA\r\ncf-resized: internal=ok/h q=0 n=66+3 c=1+1 v=2026.1.6 l=782 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nimage-resize: true\r\npriority: u=4;i=?0,cf-chb=(173;u=4;i=?0)\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":782,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3","md5":"1b9f9573d985e7ed25659474cc48c745","sha1":"11cf8769d83c92f150624b0be29b79c4bb47fe68","sha256":"ff74f636a5fbdd0d597a8b891bd7c74eee63207601343a961671a8348cf978b0","sha512":"193533a43a894924ad3f6932a82da58df4f6bb6c8c82474e90ea7a0493def33984461b30234207bcc53ea2d9e37afa3cd511344bf393e2e0f2eb2f5e1e18c915","ssdeep":"","tlshash":"3501251a6e27d7daed4c507245203bc9334ba5f6cddb9a160584e85dc6a7105db1030d","first_seen":"2026-02-04T18:55:33.908284Z","last_seen":"2026-06-01T09:54:50.088983Z","times_seen":59,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":31,"dns":19,"connect":1,"send":0,"wait":262,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--pmp-hoa.fun/secureproxy?c=%2F%40v1%2Fcdn%2Fjs%2Fpopper.lite.esm.js%3Ft%3D29518080%26u%3D2jr9M5CpbRoJ0qsrGDY5MmYxYWJiOTZhZjZlNjg1ODNjNjJlZKm3basrWpuBwsEB5g","fqdn":"xn--pmp-hoa.fun","domain":"xn--pmp-hoa.fun","tld":"fun"},"ip":{"addr":"172.67.203.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump","date":"2026-02-14T16:00:46.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--pmp-hoa.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 22:44:17 GMT","end":"Wed, 29 Apr 2026 22:44:16 GMT"},"fingerprint":{"sha1":"D0:D2:23:B1:4E:39:E7:0C:FC:41:89:5D:32:82:B6:E5:F8:2B:B0:53","sha256":"FA:17:99:23:C7:FB:42:05:6B:FA:79:E4:52:C4:C3:30:2E:51:EF:BC:96:7C:1D:9A:2A:3D:19:0A:FC:45:EE:0A"}}},"request":{"raw":"GET /secureproxy?c=%2F%40v1%2Fcdn%2Fjs%2Fpopper.lite.esm.js%3Ft%3D29518080%26u%3D2jr9M5CpbRoJ0qsrGDY5MmYxYWJiOTZhZjZlNjg1ODNjNjJlZKm3basrWpuBwsEB5g HTTP/1.1\r\nHost: xn--pmp-hoa.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sat, 14 Feb 2026 16:00:46 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nvary: accept-encoding\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4xVcjA4MU6QxtTEJgu3XhgLVmYpy%2Fe8yaOuF3a%2Fjo3GaNsltK%2FYWyT5%2BCpzmcxg0ZDdgmYbgU0g1zkncKDI4esQ4s8HEJY4CfhOlUTsYnQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncf-ray: 9cddc7c16ef9958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T12:34:25.437902Z","times_seen":16239334,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"xn--pmp-hoa.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.mainnet-beta.solana.com/","fqdn":"api.mainnet-beta.solana.com","domain":"solana.com","tld":"com"},"ip":{"addr":"74.63.225.119","port":443,"asn":46475,"as":"LIMESTONENETWORKS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump","date":"2026-02-14T16:00:46.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.mainnet-beta.solana.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Sun, 03 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8C:CA:FE:A1:F1:37:3D:25:78:BF:D9:21:DA:EF:D4:D6:52:77:1B:3B","sha256":"69:1D:62:E1:58:08:53:C0:0F:74:F6:53:2F:AD:EA:36:E5:45:22:78:C9:C8:3D:61:0A:A5:15:90:17:52:93:B7"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: api.mainnet-beta.solana.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,solana-client\r\nReferer: https://xn--pmp-hoa.fun/\r\nOrigin: https://xn--pmp-hoa.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 2\r\ncontent-type: application/json\r\naccess-control-allow-origin: https://xn--pmp-hoa.fun\r\naccess-control-allow-methods: OPTIONS, POST, GET\r\naccess-control-allow-headers: authorization, content-type,solana-client\r\naccess-control-max-age: 86400\r\nallow: OPTIONS, POST, GET\r\naccept: application/json\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-06-08T12:34:22.780122Z","times_seen":705128,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":89,"dns":24,"connect":17,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--pmp-hoa.fun/stream-video.mp4","fqdn":"xn--pmp-hoa.fun","domain":"xn--pmp-hoa.fun","tld":"fun"},"ip":{"addr":"172.67.203.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump","date":"2026-02-14T16:00:49.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--pmp-hoa.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 22:44:17 GMT","end":"Wed, 29 Apr 2026 22:44:16 GMT"},"fingerprint":{"sha1":"D0:D2:23:B1:4E:39:E7:0C:FC:41:89:5D:32:82:B6:E5:F8:2B:B0:53","sha256":"FA:17:99:23:C7:FB:42:05:6B:FA:79:E4:52:C4:C3:30:2E:51:EF:BC:96:7C:1D:9A:2A:3D:19:0A:FC:45:EE:0A"}}},"request":{"raw":"GET /stream-video.mp4 HTTP/1.1\r\nHost: xn--pmp-hoa.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 6200648\r\ncf-cache-status: REVALIDATED\r\ncontent-type: video/mp4\r\ncontent-range: bytes 0-6200647/6200648\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"528c066aacc92d492da57d08639b8bd3\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mj%2FT7BDju53wSXgveczHcDoJVE9Mwc6N1F3BAxu8FU5JFYsI2Bpbncj7id2W6bMYrtgLWBM6R9cBJy72CkE%2FqQ0itWhXMrHJFkQl8OoMtA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 16:00:49 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cddc7d24c2b958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1409024,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"7ef84ee243336254367307edf1fc226a","sha1":"5ad987a9bb48891be691aa183d82bd82521b8315","sha256":"ea5bc77261b60bbcc3fcb7f2834ed13d4e09626f014e35130520e53cb4bb3d94","sha512":"47689ccc9a8398ba4ad234b7ff92ff201cf5d2dcbf6815aeacf3c3b45dd7cea441eb02b87accbd514a0c227745740788d603057daf345850f375f50a617fae1d","ssdeep":"24576:PYEQStoHCGbT71hFv43hZWdRlH/BKskUtS5:QEwHCGbvbFvSZWd/HssXS5","tlshash":"ea253325e760e820e065b5f8ab5fec017fe893485ec416658d1ebdfe4b0bf029432a75","first_seen":"2026-02-14T16:01:15.325286Z","last_seen":"2026-02-28T22:41:59.899296Z","times_seen":5,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"xn--pmp-hoa.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--pmp-hoa.fun/pump1.svg","fqdn":"xn--pmp-hoa.fun","domain":"xn--pmp-hoa.fun","tld":"fun"},"ip":{"addr":"172.67.203.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump","date":"2026-02-14T16:00:45.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--pmp-hoa.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 22:44:17 GMT","end":"Wed, 29 Apr 2026 22:44:16 GMT"},"fingerprint":{"sha1":"D0:D2:23:B1:4E:39:E7:0C:FC:41:89:5D:32:82:B6:E5:F8:2B:B0:53","sha256":"FA:17:99:23:C7:FB:42:05:6B:FA:79:E4:52:C4:C3:30:2E:51:EF:BC:96:7C:1D:9A:2A:3D:19:0A:FC:45:EE:0A"}}},"request":{"raw":"GET /pump1.svg HTTP/1.1\r\nHost: xn--pmp-hoa.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 16:00:45 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BkwC6qFpKlUJrU49TqvsiDkEMGd7Rag6AUok83ccKKkPtdUL6bspYTRFF%2Fsem%2BbKdxGgNQzKdB5NH02yQFFd9YcICBXJgDt52OcfGDNoxw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"58b379e4f28ef00b1192784fdf7a10a8\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cddc7be8e4e958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2653,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7ac045d44726d3ecd7d70cc10fd98c72","sha1":"d3e2dbb1530f6a00a41c9467e977fb61048ed08d","sha256":"2c72b8e06bbd7be8823c2cce4bbe652ba7a36e35074b8a1b27fd668304816379","sha512":"488d3da62f6ba30a36f8bb106262c3342583a719402680e34ce6d99ba26db1aea5d14496d7427aa39544527a3d5f63a0030d6e32d48e4366e07aacd5db5d12a8","ssdeep":"","tlshash":"395171ff7b5448e5de86c2f8eb2a2adb782a24d97120464193d42f29780176c4d8ac93","first_seen":"2025-11-15T00:25:53.758655Z","last_seen":"2026-06-04T13:30:34.616376Z","times_seen":356,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"xn--pmp-hoa.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--pmp-hoa.fun/test3.png","fqdn":"xn--pmp-hoa.fun","domain":"xn--pmp-hoa.fun","tld":"fun"},"ip":{"addr":"172.67.203.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump","date":"2026-02-14T16:00:45.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--pmp-hoa.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 22:44:17 GMT","end":"Wed, 29 Apr 2026 22:44:16 GMT"},"fingerprint":{"sha1":"D0:D2:23:B1:4E:39:E7:0C:FC:41:89:5D:32:82:B6:E5:F8:2B:B0:53","sha256":"FA:17:99:23:C7:FB:42:05:6B:FA:79:E4:52:C4:C3:30:2E:51:EF:BC:96:7C:1D:9A:2A:3D:19:0A:FC:45:EE:0A"}}},"request":{"raw":"GET /test3.png HTTP/1.1\r\nHost: xn--pmp-hoa.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 620977\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"6161426e73c133004097461cf94a9464\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QiaOLdVSTdJtxGBC0NkgpEuWjCL9tQPapuM3ZMUroPTt0I66EDAHU%2FVLwZYvTB0Vcz2OEB1TByCdxYZo7GN7jaKick5fzEQPEGVcVi%2Bslg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 16:00:45 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cddc7beee8d958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":620977,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1027 x 577, 8-bit/color RGBA, non-interlaced","md5":"49e6a3da158f3eb4c417d7abbdd854a8","sha1":"c357b9bae8d3b516f62fca295ddcda22b890108f","sha256":"b57cbdca902be7258be64d7e51542b03a5e86ddff85f90762b0dc73179f69501","sha512":"3309e1e397d2c1839c2b9a2fc4dd236043ea609d23ca536e996a1dcc0f511a8a873f628b41be1aae64414e863c90b886d149c3d9ae8af43a43c4f9d5b132a063","ssdeep":"12288:SZ2MqIMeT8ltzD4Ir16L7iu6cuZeHXSvqusiqJdlmc5tbHgxnga3eE/1B:FMBMzDr4oc5CCdJjrbAlga3eEdB","tlshash":"acd4233acbede19a1f728316eb6fa41b0b2b41834fa1f6c59041c0de6e4971f96cc416","first_seen":"2026-02-04T18:55:33.892633Z","last_seen":"2026-03-25T15:47:11.817817Z","times_seen":20,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":202,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"xn--pmp-hoa.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--pmp-hoa.fun/pump1.svg","fqdn":"xn--pmp-hoa.fun","domain":"xn--pmp-hoa.fun","tld":"fun"},"ip":{"addr":"172.67.203.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump","date":"2026-02-14T16:00:46.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--pmp-hoa.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 22:44:17 GMT","end":"Wed, 29 Apr 2026 22:44:16 GMT"},"fingerprint":{"sha1":"D0:D2:23:B1:4E:39:E7:0C:FC:41:89:5D:32:82:B6:E5:F8:2B:B0:53","sha256":"FA:17:99:23:C7:FB:42:05:6B:FA:79:E4:52:C4:C3:30:2E:51:EF:BC:96:7C:1D:9A:2A:3D:19:0A:FC:45:EE:0A"}}},"request":{"raw":"GET /pump1.svg HTTP/1.1\r\nHost: xn--pmp-hoa.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 16:00:46 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BkwC6qFpKlUJrU49TqvsiDkEMGd7Rag6AUok83ccKKkPtdUL6bspYTRFF%2Fsem%2BbKdxGgNQzKdB5NH02yQFFd9YcICBXJgDt52OcfGDNoxw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"58b379e4f28ef00b1192784fdf7a10a8\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cddc7c41f65958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2653,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7ac045d44726d3ecd7d70cc10fd98c72","sha1":"d3e2dbb1530f6a00a41c9467e977fb61048ed08d","sha256":"2c72b8e06bbd7be8823c2cce4bbe652ba7a36e35074b8a1b27fd668304816379","sha512":"488d3da62f6ba30a36f8bb106262c3342583a719402680e34ce6d99ba26db1aea5d14496d7427aa39544527a3d5f63a0030d6e32d48e4366e07aacd5db5d12a8","ssdeep":"","tlshash":"395171ff7b5448e5de86c2f8eb2a2adb782a24d97120464193d42f29780176c4d8ac93","first_seen":"2025-11-15T00:25:53.758655Z","last_seen":"2026-06-04T13:30:34.616376Z","times_seen":356,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"xn--pmp-hoa.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aahdjjsivunugynqjvyfbhqnjekniyfboma.com/@v1/cdn/js/popper.lite.esm.js?t=29518080\u0026u=2jr9M5CpbRoJ0qsrGDY5MmYxYWJiOTZhZjZlNjg1ODNjNjJlZKm3basrWpuBwsEB5g","fqdn":"aahdjjsivunugynqjvyfbhqnjekniyfboma.com","domain":"aahdjjsivunugynqjvyfbhqnjekniyfboma.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump","date":"2026-02-14T16:00:46.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aahdjjsivunugynqjvyfbhqnjekniyfboma.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 17:03:37 GMT","end":"Mon, 11 May 2026 17:03:36 GMT"},"fingerprint":{"sha1":"4A:7A:83:C8:26:B2:B9:06:B7:24:AB:14:37:B2:2C:6B:0F:E3:7C:EC","sha256":"B7:32:66:E7:A2:80:E6:D4:88:A2:F4:68:C3:42:D5:84:DC:C9:B9:19:DE:8F:88:17:F4:19:2E:C1:E2:F0:81:63"}}},"request":{"raw":"GET /@v1/cdn/js/popper.lite.esm.js?t=29518080\u0026u=2jr9M5CpbRoJ0qsrGDY5MmYxYWJiOTZhZjZlNjg1ODNjNjJlZKm3basrWpuBwsEB5g HTTP/1.1\r\nHost: aahdjjsivunugynqjvyfbhqnjekniyfboma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xn--pmp-hoa.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 16:00:49 GMT\r\ncontent-type: text/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4623838\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-allow-credentials: true\r\ncache-control: no-store, must-revalidate, no-cache\r\ncontent-encoding: br\r\netag: W/\"a0502-14+i6Bt7XM8ofHk8WpmFyqoPYWI\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=popper.lite.esm.js\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 02/14/2026 16:00:48\r\ncdn-edgestorageid: 830\r\ncdn-requestid: d4e76ef2388407148d8989fbbf3bb29d\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":656642,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-06-07T04:15:26.458958Z","times_seen":2555,"resource_available":true,"data":null}},"time_used":2275,"timings":{"blocked":58,"dns":46,"connect":1,"send":0,"wait":2159,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dexscreener.com/cms/images/VDZ1a4zw34W4WBSF?width=800\u0026height=800\u0026quality=90","fqdn":"cdn.dexscreener.com","domain":"dexscreener.com","tld":"com"},"ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump","date":"2026-02-14T16:00:47.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexscreener.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:42:49 GMT","end":"Sun, 26 Apr 2026 03:42:47 GMT"},"fingerprint":{"sha1":"EA:3A:CC:F0:58:31:D8:82:DD:90:88:D9:E2:47:C9:DE:99:A8:7D:70","sha256":"4B:39:97:86:5F:AC:80:42:4E:F8:21:24:18:C5:D9:10:D4:35:57:60:C8:6A:A9:21:C7:42:7D:41:22:F3:20:B0"}}},"request":{"raw":"GET /cms/images/VDZ1a4zw34W4WBSF?width=800\u0026height=800\u0026quality=90 HTTP/1.1\r\nHost: cdn.dexscreener.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xn--pmp-hoa.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 16:00:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19308\r\nserver: cloudflare\r\ncf-ray: 9cddc7c9b9812efa-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000\r\netag: \"cfsm0BqfAwFMIjovZ84eeDOxJTep8_PYOkQEM-3KU8DQ:56476ee10850ca75a785a3a146bde76e\"\r\nlast-modified: Thu, 12 Feb 2026 20:03:03 GMT\r\nvary: Accept, Accept-Encoding\r\ncf-bgj: imgq:91,h2pri\r\ncf-resized: internal=ok/h q=0 n=11+24 c=1+22 v=2026.2.7 l=19308 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=_vOvc1qi4kqFuUYiPjTJdorepX.avfPFUyybb68kcX8-1771084847-1.0.1.1-uX_GsDaBvPKa5m7lVSoEy5a6tJV6_rDNr1FnUo44w_wQN0drtoAdxbTEjvkriV323n96MZWSz66oNyzgiH4LBJqbuMogMvfygIm.P4WCWP5KkV6I.JIy9k5RL1Z01fJP; path=/; expires=Sat, 14-Feb-26 16:30:47 GMT; domain=.dexscreener.com; HttpOnly; Secure; SameSite=None\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":19308,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 500x500, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"00740198b273c66741621d5fd1c85359","sha1":"8b889a9f2dad56d0894a93663c3d5e71865b3eb8","sha256":"d6aa48b31b5ce1618509c3e764310f25010367038bb8c4c17f998c4885da8214","sha512":"6bce213cf44c0416f710db63478f2154529738be563c6794a5ac6f9487b9797e0c04c48f0dbbed5356ad891e8682d05ea695c6f3576c96432c1b01b810e46088","ssdeep":"384:BRYqSf1cOK1QPSaSRjXEGOVg/K0GTw8fcNY52uc5vBYBUSirR6A:H3yUzLOVyHNs2fbNSiz","tlshash":"e982d1cd409b5a9aa89584a752f333d468f1076130946cac7d18cfce0ebf2a07d2da3d","first_seen":"2026-02-14T16:01:15.328582Z","last_seen":"2026-02-14T16:01:15.328582Z","times_seen":1,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":90,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump","fqdn":"xn--pmp-hoa.fun","domain":"xn--pmp-hoa.fun","tld":"fun"},"ip":{"addr":"172.67.203.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T16:00:44.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--pmp-hoa.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 22:44:17 GMT","end":"Wed, 29 Apr 2026 22:44:16 GMT"},"fingerprint":{"sha1":"D0:D2:23:B1:4E:39:E7:0C:FC:41:89:5D:32:82:B6:E5:F8:2B:B0:53","sha256":"FA:17:99:23:C7:FB:42:05:6B:FA:79:E4:52:C4:C3:30:2E:51:EF:BC:96:7C:1D:9A:2A:3D:19:0A:FC:45:EE:0A"}}},"request":{"raw":"GET /live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump HTTP/1.1\r\nHost: xn--pmp-hoa.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 16:00:45 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s8t7TpRpv28Adw%2FKm1SU%2BbrT7EJhEH9OHKXfpDPhhxjKfie9Yt2BbtkVGPvF%2Bawhb%2F%2FvJIVjYEA%2Fvn%2BlOxil7i%2BNoM5oapuCmB4KiCrg9ljgoSqVXo6pnZ0ixQ%3D%3D\"}]}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9cddc7b95f329cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":501,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"793d67a834b34c90b79e98c44f63eb9b","sha1":"f6fa6ba3d37c2c4f533a928e914be066f2cfaec0","sha256":"e653f073b2460e961540a298e4f3f65b57f4898bbf278fead408a8b2b2f90636","sha512":"7ca1010cecb61a217fab39fd7eafa423c8331f3ab73ce2f93a97ada7a70db2085779b67582111018c29f633abc63b09bebec8dcb31b6998bbd2c19fdf7a134a6","ssdeep":"","tlshash":"53f0594298e0ce2952200a645ec1f50c6a42e7478345ad0872aba0b95f84b818ecf978","first_seen":"2026-02-04T18:55:33.89667Z","last_seen":"2026-02-18T23:20:24.951122Z","times_seen":3,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":87,"dns":57,"connect":8,"send":0,"wait":157,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"xn--pmp-hoa.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get.geojs.io/v1/ip/country.json","fqdn":"get.geojs.io","domain":"geojs.io","tld":"io"},"ip":{"addr":"104.26.1.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump","date":"2026-02-14T16:00:46.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geojs.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 07:02:11 GMT","end":"Fri, 20 Mar 2026 08:01:51 GMT"},"fingerprint":{"sha1":"F4:8D:8C:72:A7:FB:69:EE:A0:1B:5C:4A:E2:9A:C8:CA:AB:CF:FC:89","sha256":"73:1F:89:F1:C4:D1:9A:B2:77:40:EB:E3:55:1F:ED:42:62:C3:86:7B:7E:EE:E3:F3:5E:A1:27:A8:7F:80:24:72"}}},"request":{"raw":"GET /v1/ip/country.json HTTP/1.1\r\nHost: get.geojs.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xn--pmp-hoa.fun/\r\nOrigin: https://xn--pmp-hoa.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 16:00:46 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncache-control: max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-request-id: d23098a082f722bacce895d6d3174067-ASH\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ngeojs-backend: ash-01\r\nlast-modified: Sat, 14 Feb 2026 16:00:46 GMT\r\ncf-cache-status: MISS\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uaOfYFWeYYEXoAIksBQAdNLYbmOHTpT%2BKTKQClDQ8eGuTcU1%2FDZIe1IrRqpVL3u7Y2QaIV1COCjWYRSZDB44uWUBxJ3x9RHu%2FA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cddc7c0ad395210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":71,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"54400c77b72b40a2e948ef52d4abb096","sha1":"2d4b2d15425f9aa29ecdb2c336390cf078928511","sha256":"be4ef38271c428e15a35e8582e5c7bd3df677b5478f84c323bf42a74a15336bd","sha512":"b499b922309a28a1c41d1b06b3b034eeebccb40c5f40054617adce3098b672fdbc76c59402d65677b635326a4a710da754d03cb79c0e25831fce08bcf6c2e05e","ssdeep":"","tlshash":"4da022ae20820b2ccc20c2eca00b338223c2c202c33f2803c0c03f08c3003ec2000220","first_seen":"2023-08-05T23:07:18Z","last_seen":"2026-06-06T18:12:42.644428Z","times_seen":972,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":143,"dns":21,"connect":8,"send":0,"wait":128,"receive":0,"ssl":116},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--pmp-hoa.fun/test.png","fqdn":"xn--pmp-hoa.fun","domain":"xn--pmp-hoa.fun","tld":"fun"},"ip":{"addr":"172.67.203.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump","date":"2026-02-14T16:00:45.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--pmp-hoa.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 22:44:17 GMT","end":"Wed, 29 Apr 2026 22:44:16 GMT"},"fingerprint":{"sha1":"D0:D2:23:B1:4E:39:E7:0C:FC:41:89:5D:32:82:B6:E5:F8:2B:B0:53","sha256":"FA:17:99:23:C7:FB:42:05:6B:FA:79:E4:52:C4:C3:30:2E:51:EF:BC:96:7C:1D:9A:2A:3D:19:0A:FC:45:EE:0A"}}},"request":{"raw":"GET /test.png HTTP/1.1\r\nHost: xn--pmp-hoa.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 878534\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"f93e1b941570e5dd734ee48a4ee79ef5\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LfLqKC7aVQMCkeNWvmiKSkK1oqYoE05EQTY7JdBSgprKldqc59DWjDXbRPvziaI2hhvYwcN35zxNp2oRHkIGIUrsWCJk4Isbd2HSE9aVxQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 16:00:45 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cddc7bede86958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":878534,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1031 x 574, 8-bit/color RGBA, non-interlaced","md5":"1abb20d81778cc0c22904b3f702b95fd","sha1":"441c7055dad4ac70014d89ef5dd813cbc594e671","sha256":"1f6949e621d38c29c5957ed824c2006794a3d98efeaad4650215e3372e204319","sha512":"11a5f242f0dfb2a03c010ade182947690f1a2924fee070483d42fe89209fd6d88002782fab6d5cd8517e3634ef13ba323160ef36a57429cd8aaea4e489df37d1","ssdeep":"24576:I14ifnIac+I9wuSU/Rif0NHIrBNEAsv9SEWfNpN:2c0KS0NHIrBL69SEWfNn","tlshash":"e9152396a329e452a5101324f13394bf2b9b2a6f9f4f3d6367435192e102b4c9eff079","first_seen":"2026-02-04T18:55:33.903814Z","last_seen":"2026-03-25T15:47:11.860458Z","times_seen":20,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":206,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"xn--pmp-hoa.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rpc.ankr.com/solana","fqdn":"rpc.ankr.com","domain":"ankr.com","tld":"com"},"ip":{"addr":"208.65.177.248","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump","date":"2026-02-14T16:00:46.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shark.multi-rpc.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 12:29:39 GMT","end":"Wed, 22 Apr 2026 12:29:38 GMT"},"fingerprint":{"sha1":"B6:90:50:A4:28:8A:65:0B:25:C6:B8:68:BA:34:E4:DC:BC:F8:D0:45","sha256":"EE:53:09:A0:AE:9A:74:42:F4:10:ED:1A:2F:DC:47:1F:A5:F8:5B:DD:97:72:63:8E:C8:44:98:38:79:DF:68:19"}}},"request":{"raw":"POST /solana HTTP/1.1\r\nHost: rpc.ankr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xn--pmp-hoa.fun/\r\nContent-Type: application/json\r\nsolana-client: js/1.0.0-maintenance\r\nContent-Length: 192\r\nOrigin: https://xn--pmp-hoa.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":192,"data":"{\"method\":\"getAccountInfo\",\"jsonrpc\":\"2.0\",\"params\":[\"3Ub1LANeM4JZT7nwWjXWp9v2gzcJM56ggbjkn6ec96uF\",{\"encoding\":\"base64\",\"commitment\":\"confirmed\"}],\"id\":\"da85acd2-01c4-4c69-9b5e-5bdf90dbf909\"}"}},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sat, 14 Feb 2026 16:00:46 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 103\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nx-shark-trace-id: 64328aa8b39c989d38c2647ff3bb50e6\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,solana-client,client-sdk-version,client-sdk-type,client-target-api-version,x-ton-client-version,x-client-name,x-client-version\r\naccess-control-max-age: 1728000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":103,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4a5939599541f6fc457eacdbfc956d68","sha1":"ba224312f8b19bc07a0b10a3aba88f83f0de2458","sha256":"23dbe12a569c545229f312fca5070ffb6eb271f70e93cd38392197456e777b76","sha512":"6209160a8afe32acfe6a91ddf64c6bd02de2eb3770e44a8d71cfc22b4ac33984dd5114b220cd9a3a2a277abdb84c4d829370061e0d2bdd9a9a436ef8f299c729","ssdeep":"","tlshash":"d6b0129a8340040a076f8a0f2c380314458d148985316f709d28d36d031b607c8d2c04","first_seen":"2025-05-24T02:46:32.002709Z","last_seen":"2026-05-30T07:50:47.216366Z","times_seen":29,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aahdjjsivunugynqjvyfbhqnjekniyfboma.com/jmpd/","fqdn":"aahdjjsivunugynqjvyfbhqnjekniyfboma.com","domain":"aahdjjsivunugynqjvyfbhqnjekniyfboma.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump","date":"2026-02-14T16:00:49.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aahdjjsivunugynqjvyfbhqnjekniyfboma.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 17:03:37 GMT","end":"Mon, 11 May 2026 17:03:36 GMT"},"fingerprint":{"sha1":"4A:7A:83:C8:26:B2:B9:06:B7:24:AB:14:37:B2:2C:6B:0F:E3:7C:EC","sha256":"B7:32:66:E7:A2:80:E6:D4:88:A2:F4:68:C3:42:D5:84:DC:C9:B9:19:DE:8F:88:17:F4:19:2E:C1:E2:F0:81:63"}}},"request":{"raw":"OPTIONS /jmpd/ HTTP/1.1\r\nHost: aahdjjsivunugynqjvyfbhqnjekniyfboma.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://xn--pmp-hoa.fun/\r\nOrigin: https://xn--pmp-hoa.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 16:00:49 GMT\r\ncontent-length: 0\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4623838\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS,PATCH\r\naccess-control-allow-origin: https://xn--pmp-hoa.fun\r\ncache-control: no-cache\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 02/14/2026 16:00:49\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 659a7e1482fa68575528b924c4c5858c\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T12:34:25.437902Z","times_seen":16239334,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":15,"dns":1,"connect":1,"send":0,"wait":47,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--pmp-hoa.fun/assets/index-D2M5HfC5.css","fqdn":"xn--pmp-hoa.fun","domain":"xn--pmp-hoa.fun","tld":"fun"},"ip":{"addr":"172.67.203.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump","date":"2026-02-14T16:00:45.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--pmp-hoa.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 29 Jan 2026 22:44:17 GMT","end":"Wed, 29 Apr 2026 22:44:16 GMT"},"fingerprint":{"sha1":"D0:D2:23:B1:4E:39:E7:0C:FC:41:89:5D:32:82:B6:E5:F8:2B:B0:53","sha256":"FA:17:99:23:C7:FB:42:05:6B:FA:79:E4:52:C4:C3:30:2E:51:EF:BC:96:7C:1D:9A:2A:3D:19:0A:FC:45:EE:0A"}}},"request":{"raw":"GET /assets/index-D2M5HfC5.css HTTP/1.1\r\nHost: xn--pmp-hoa.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 16:00:45 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zeemObLhdpr02onDIC1QLjwxmYNH7IJ9evtpgsAgAFpofmo0cCtGdImiSOIHBFZOPElTvB6IY9lJB2NzdvA8SoKDap4TWfh%2Fv8Fa8V9XSw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"e9ff5dabca3b6699b64d6f5e5f8b6e06\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cddc7bb5d69958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34556,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (34555)","md5":"8ed27d6c69c012d2c61d308679c0859d","sha1":"2a1a8895f5fcc5a1709ca59a9599de3e4a2a4560","sha256":"1cffaa9d78e80d355a15bfbebbbf8c049a6799de3f9ccca28db2a73aa691171d","sha512":"67effc1c49ef70713849229fa83028693da1469b5e12288255a4d93b2ce33c83e0526a01f9a7fc4b5aa35acf605445ac94dfb55a47380f591c71493f38754f12","ssdeep":"384:kUWxE3Jhc2gbQTOEmcTgH7kh/y/5r0GbxOQ40qqv:vWxE3Jhc2gbQ3Mr0G1eqv","tlshash":"d7f2622d6a14013f7c6390f5d2d8ba9db21bb0c1df3a9afabd8251115bd23f61ca7604","first_seen":"2026-02-04T18:55:33.90558Z","last_seen":"2026-03-21T23:57:05.469811Z","times_seen":18,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"xn--pmp-hoa.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imagedelivery.net/WL1JOIJiM_NAChp6rtB6Cw/coin-image/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump/128x128?alpha=true","fqdn":"imagedelivery.net","domain":"imagedelivery.net","tld":"net"},"ip":{"addr":"104.18.3.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump","date":"2026-02-14T16:00:45.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagedelivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 02:25:22 GMT","end":"Tue, 12 May 2026 03:25:11 GMT"},"fingerprint":{"sha1":"CE:71:A1:E5:32:15:5F:EF:6C:1D:07:03:46:8A:02:D1:EB:86:9E:DB","sha256":"DE:39:E2:29:46:D4:AC:D0:01:BD:F7:2E:4A:11:68:D2:6B:01:03:3C:F2:7D:2E:4D:22:D7:10:48:DB:FB:AC:CE"}}},"request":{"raw":"GET /WL1JOIJiM_NAChp6rtB6Cw/coin-image/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump/128x128?alpha=true HTTP/1.1\r\nHost: imagedelivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xn--pmp-hoa.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 16:00:45 GMT\r\ncontent-type: image/avif\r\ncontent-length: 2611\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 153544\r\ncache-control: public,max-age=172800,stale-while-revalidate=7200\r\netag: \"cfx8a1qN4-9mGrO4XN4r2jzN0gQLqyszcoZn7faW5HDQ\"\r\nserver: cloudflare\r\nvary: accept\r\ncf-images: internal=ok/- q=0 n=12+29 c=1+27 v=2026.2.7 l=2611 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\ncf-ray: 9cddc7bedcf18be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2611,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"955ea3c9afdbdc59c6cf3cdde4f3a581","sha1":"8d720c84a09bcb008c55211552369be669ab167b","sha256":"e461240875d42ef6e77fb0a2fa4037714e190630b6121e4d0ea4afa894f02d61","sha512":"a634c9a6cc3a54173c4f31c03e43cb43adf72aee5dab6ec81e6761fe8d1f93a9a0a73cb0835d21e7860d217811b199c30d192aff2fdedeee6b506c66c306eef1","ssdeep":"","tlshash":"a7514c327da50f14c2d503b60ef02fb11a01b461a56753fbca857ed4fe1860b4e26c9d","first_seen":"2026-02-14T16:01:15.332716Z","last_seen":"2026-02-14T16:01:15.332716Z","times_seen":1,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":26,"dns":21,"connect":1,"send":0,"wait":18,"receive":4,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.mainnet-beta.solana.com/","fqdn":"api.mainnet-beta.solana.com","domain":"solana.com","tld":"com"},"ip":{"addr":"74.63.225.119","port":443,"asn":46475,"as":"LIMESTONENETWORKS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xn--pmp-hoa.fun/live/Hh3oTaqDCKKfdBgsQEvxp9sUwyNf8x9qmKqEMLBWpump","date":"2026-02-14T16:00:47.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.mainnet-beta.solana.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Mon, 02 Feb 2026 00:00:00 GMT","end":"Sun, 03 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8C:CA:FE:A1:F1:37:3D:25:78:BF:D9:21:DA:EF:D4:D6:52:77:1B:3B","sha256":"69:1D:62:E1:58:08:53:C0:0F:74:F6:53:2F:AD:EA:36:E5:45:22:78:C9:C8:3D:61:0A:A5:15:90:17:52:93:B7"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: api.mainnet-beta.solana.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xn--pmp-hoa.fun/\r\nContent-Type: application/json\r\nsolana-client: js/1.0.0-maintenance\r\nContent-Length: 192\r\nOrigin: https://xn--pmp-hoa.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":192,"data":"{\"method\":\"getAccountInfo\",\"jsonrpc\":\"2.0\",\"params\":[\"3Ub1LANeM4JZT7nwWjXWp9v2gzcJM56ggbjkn6ec96uF\",{\"encoding\":\"base64\",\"commitment\":\"confirmed\"}],\"id\":\"cb4ac086-ac15-49a2-9346-ca0659ae116b\"}"}},"response":{"raw":"HTTP/2 403 Forbidden\r\ncontent-type: application/json\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\ncontent-length: 120\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\nx-rpc-node: ams346\r\nx-ratelimit-tier: \r\nx-ratelimit-method-limit: \r\nx-ratelimit-method-remaining: \r\nx-ratelimit-rps-limit: \r\nx-ratelimit-rps-remaining: \r\nx-ratelimit-endpoint-limit: \r\nx-ratelimit-endpoint-remaining: \r\nx-ratelimit-conn-limit: \r\nx-ratelimit-conn-remaining: \r\nx-ratelimit-connrate-limit: \r\nx-ratelimit-connrate-remaining: \r\nx-ratelimit-pubsub-limit: \r\nx-ratelimit-pubsub-remaining: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":120,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"126d66c637efe23ef57547c6b8047664","sha1":"adef20e207748cbfe3c318202de1f1da685c0b9e","sha256":"ad795d1495707a4a26d7a0f38553fcb564593ba72d59cd58439bfc4640f04f0e","sha512":"3e3c8d5b646cee1e0798647cd0d4cb756aa4e58f11d876422e57f7583bbaf58872268e0b7b406be3797d1869e34699e3d35d068eb1072b31274534d2e94ad96f","ssdeep":"","tlshash":"eeb02b5120c92d2d9357380563191750304023c000081e0b0d080010251590fc180131","first_seen":"2026-02-14T16:01:15.333558Z","last_seen":"2026-02-14T16:01:15.333558Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}