{"report_id":"d9787fc3-f041-46f6-a4e0-5d3f8c30543f","version":6,"status":"done","tags":[],"date":"2026-01-24T13:53:44Z","url":{"schema":"https","addr":"meteora.cam","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"172.67.204.172","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"meteora.cam/","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"title":"Staking | Meteora","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"meteora.cam","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"172.67.204.172","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-28T13:53:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-01-18T22:25:16.015191Z","alert_count":0,"request_count":2,"received_data":221239,"sent_data":1012,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2025-10-12","domain_rank":0,"first_seen":"2025-10-22T11:51:07.746032Z","last_seen":"2026-01-19T17:11:33.285215Z","alert_count":3,"request_count":3,"received_data":659272,"sent_data":1586,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"meteora.cam","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-11","domain_rank":0,"first_seen":"2026-01-24T13:38:49.393497Z","last_seen":"2026-01-24T13:38:49.393497Z","alert_count":570,"request_count":190,"received_data":2115333,"sent_data":82552,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"corsproxy.io","ip":{"addr":"104.26.6.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-01-30","domain_rank":175528,"first_seen":"2016-05-19T01:27:08Z","last_seen":"2026-01-18T22:04:39.131713Z","alert_count":0,"request_count":2,"received_data":3138,"sent_data":1057,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"meteora.cam/main.php?type=js","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"803c770958568df36604349f4c138e38","sha1":"b137a18a4c325cae854154e10574a0b2dad10559","sha256":"f29d175a5a550f27b665d83030569da410f979dad1d6fd81c817fa4bee4e232a","sha512":"7a9d30d42e421cd5f760237aa4209328b252949fe8a73ad436507a40eecb4ca265d7b8efd900c28298d6f7c7206c5c23d29f9509531c3c452db0a39b1c6cf6d6","ssdeep":"192:SPuyS6EvZNlFielilPwQ70GrlM3ovyE0ZEzW1tOhandDJnmn98ApTqt7gTSoYpKp:VIUfl3BQLlZaE0ZEykmiSpXVptg","tlshash":"1922719cb4b6217086f362baa7dba715373520077084c9483fadc1c41fc1aa166a7be9","size":10323,"data":"","first_seen":"2025-11-11T22:26:53.093024Z","last_seen":"2026-03-09T06:13:13.044075Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/bootstrap.cjs.js","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"947a180c90613d69e1663e36c36eff8a","sha1":"ef67bacbfbae45c4228e325afcc2a800f6b194ea","sha256":"35119574a85c5934aa8bbe4ee21f5ccd6cb7b4e4a2c0d946d95a794b72e71e34","sha512":"55e6f7509ae58e12e50c6fb3aac787d02433c58ec5979fff3862971c873ebbf98b9c1d1eef3b6dd1b6c1843dce439da621ad434ad6da5705ac312d5115482d95","ssdeep":"12288:09V7L3jkeFjpFjFFjWK+D+J4D7ruFodsWIZWxZlkYCbY:0LjkeFjpFjFFjR+D+J4D7ruFodsWIZWf","tlshash":"74943f9a93fe216283f1e25d576213bfd952c411974b0d89ac3c9ed2b089d0a80ffb57","size":440121,"data":"","first_seen":"2026-01-04T14:44:54.844298Z","last_seen":"2026-01-24T13:53:48.59348Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f88474cdd2952018f88a62b5b24c1008","sha1":"5ffcf7a1a11cd2a690306c38caf8e630e32e8042","sha256":"7a0c70444957071ea8f0810d81f0d3486ebe0e4dd191825acb0d5aa2804b4263","sha512":"8fd636fc4a88a42277506f23be127b69ce52323e86279cb58e303b3c4ab255c8ffa8ae192861259c391290e68454079dc8548a2aaf67f8623053364733d220ac","ssdeep":"12288:C5h1j31jv1jOm+D+J497ruFodsWIZWrZlkYV:C5h1j31jv1jl+D+J497ruFodsWIZWrZp","tlshash":"50942e5a93fe212183f1e61e576213bbd952c421d74b0d99bc3c9ed2b089d0a80ffa57","size":433304,"data":"","first_seen":"2026-01-04T14:44:54.934855Z","last_seen":"2026-01-24T13:53:48.604871Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com/@v1/cdn/js/angular.dev.cjs.js?t=29487713\u0026u=H6XxRmCN5ebadwtXGDY5MjU2NDRlMjhjZmYzYzM0MDI3ZGU0M5zdDNOFFOcovKe2xQ","fqdn":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","domain":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","size":656642,"data":"","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-06-07T04:15:26.458958Z","times_seen":2555,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"meteora.cam/files/troll.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/troll.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1792\r\nserver: cloudflare\r\nlast-modified: Wed, 17 Sep 2025 09:08:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68ca7a8a-700\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IGqY4E070iugpmmojBvuZjEiIy7%2FLBhIqc0iWUxrAsnG4SRzcifJy%2BfbXjgvFLiAmIpJfRgC0%2FqJqCwDYG%2Ffvgye59nudW5OZQ%3D%3D\"}]}\r\ncf-ray: 9c300442693956b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1792,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"528183630197f8e82650294afed69ef2","sha1":"a7abafcd8d1da40d5f7a2a343fe137157d6fa324","sha256":"8d449425955cbd61d9cd040b45ec07808e9ca4b60a4502c89baca4836a1de543","sha512":"7515606f9b0d0b290ede4ebad082474b9189ea5080cc9c2caad2d562da4d17571c98f1eba86e7cde87476593dfcc8d54631fd1bfc8575bf6e7fbb506f295d75d","ssdeep":"","tlshash":"4231095309080689e139917ce8312b0c5822cccdf15367b9e321ba80de2b6cafb2c948","first_seen":"2025-10-31T04:50:36.983039Z","last_seen":"2026-04-14T13:45:23.058101Z","times_seen":80,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/zerebro.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/zerebro.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2270\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 05:15:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68cb957d-8de\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KlqoEPvbQ%2Bo2O%2FgzgzYjGI7oP11z789i3DrsuCF9qnboj%2F9na2oRBgpxzkBST6PO%2BPUEsFuVCBkQHbGquAs%2FlOFw8f4ATadfKA%3D%3D\"}]}\r\ncf-ray: 9c30044309ee56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2270,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x87, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"561b885c5306e7fe32d073cf86952277","sha1":"24fb87e4e5b82e845ac0cb4f43fad09683e1c742","sha256":"9fda3d3d879bb63173e5b8bfd5c8ca9f29d8d108fdfe9185b0897b41854052f9","sha512":"fbb06d0e5b99de0ad7c45d19e0309afe900887aa68f1c684ebb2b9007533c9b37ad674fd0eb1305c95b473586226c6ba4cc61504ce0841015ff4508ec8dbb87b","ssdeep":"","tlshash":"474129cc54b623e348a0294040ce7bf3a4dd8024f7a300a52bde23fec3b4409780b9aa","first_seen":"2025-10-31T04:50:36.812343Z","last_seen":"2026-04-14T13:45:23.05913Z","times_seen":80,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/gork.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/gork.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1430\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 04:43:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0d3fd-596\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sF5TMBuhI1amyrywfSHannJb3uEAJcuiaIHylkOlPP2FCgx1VZPbwV%2Fp2YI06AFL4bUJG8F887dC422aot9jfE2Yl5aEgGoliA%3D%3D\"}]}\r\ncf-ray: 9c300443dacf56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1430,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2c76d5bd59cd926524ee5dc3f9a9ac24","sha1":"7c7ae35e266621cfe3f22513647f46f6936e00dd","sha256":"8cef1bf3625b09ff3ec7e45e21e88665424ca5be31f73913185eddffddae6b3f","sha512":"05fbfb16eaa61f2db730211d045605316638656162b0f3bf34125fba791d6606b292549966397760281fe0b5e1cdbe41c2b96351d3d5421676ec6f6f03503bde","ssdeep":"","tlshash":"5621986287897758e545677060c04f54d7a57f398beaa73f4540485a1f240818c1467a","first_seen":"2025-10-31T04:50:37.001313Z","last_seen":"2026-04-14T13:45:23.013837Z","times_seen":80,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/audio.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/audio.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1100\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 04:43:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0d3fa-44c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GBtYZA%2Frd0298Ru8bB3I47NlQ%2B9Vmg2jC%2FSvwUTn9V3FL0enDiZf%2Fs9C6k%2BPgqf71Stmi3EwhSKbiL%2Bss%2Fxnha4BjWfv%2B0vmYw%3D%3D\"}]}\r\ncf-ray: 9c3004441b2056b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1100,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1c6e9ec5c19856d46ef6ae6eb44f9e07","sha1":"26757d9943247efa3d2c28ed4ff8cd39b26385b8","sha256":"c65af8cab2005808822aba9cbdc20912ec9c4d84e5778c8be11227789507fb6a","sha512":"8285a54f40e24c0228f64e7b2af653b07c7f7cdede6f9fe5866270659a895060baf9b5902a7d90bf2a446fb709b48bc0c0d2e16550d33f59ecee7e2835429e0a","ssdeep":"","tlshash":"7f1196f0e28936b06d15561d405462aa0360716698e2e33a5b40453b8ddc0a0f59b9ea","first_seen":"2025-10-31T04:50:36.946467Z","last_seen":"2026-04-14T13:45:23.152687Z","times_seen":80,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/soon.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/soon.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1260\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 04:43:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0d3f6-4ec\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9S3q0tm%2BBcrmmkt5UiHsr5HfLwMRdZq1fKQLKCxR22%2FLNCYP3JwYKws5AT%2FzwUR652f6H79fQQ9MUnFBnVIPMhwXBe0Jist1Mw%3D%3D\"}]}\r\ncf-ray: 9c3004441b2256b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1260,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"88006edfe59ddc9697a4fb7882b2b547","sha1":"ac1fc49a0c1752bcd8dbaace476cb0d5c8e06a0f","sha256":"71d6c69accb539de223e3bbab09401de33194ee4284b65481940dbee23988d74","sha512":"44b5acc78e79e501e17c698c8116b29d1033a9536fe893711cdda7c55c5edbd90652c6c96edd01490dffd10288ebb8f1af913138c05f511fbbc8cfab0e1a9cc0","ssdeep":"","tlshash":"5121b7809e7f7b67e8b39566b18aad1091a6113db64f6250c8f0b87d12b9c11830c19c","first_seen":"2025-10-31T04:50:36.830931Z","last_seen":"2026-04-14T13:45:23.12006Z","times_seen":80,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/san.png","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:23.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/san.png HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 01 Dec 2025 05:23:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"692d2643-5d1\"\r\nexpires: Mon, 23 Feb 2026 13:38:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 896\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P8udItSQB4GcXnssM%2BUxJ92xstLK2GRj2wmSgF71QfR5auvdPCJGf%2B7qSou8ksjtKKj1cc5b3KaEVjVQ8BBN8HAfPQyJylBwCA%3D%3D\"}]}\r\ncf-ray: 9c300444cc0f56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1489,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 78x100, components 3","md5":"ee087a6165361c81b5fea558c5d7448b","sha1":"5119dfc27d25ac56a2ded4feb644b34f9fe62bcd","sha256":"7bd7eec8bff1d4835084ff53a6ef1b83525ce74cbea28ac87979e2d6ec8f735e","sha512":"c4e5ad4dabc266c6ff54f9885b994914162220e25b04039d61a107b2bb7bd557a81754658f461bbaf29a1f700334513bfd0982c511df7d078e189a4f4235869a","ssdeep":"","tlshash":"d931c9fb4a765203ec2a20b616cf85303254e614d3cc4395d426d3564a167da0d01fd8","first_seen":"2025-12-07T05:18:33.865434Z","last_seen":"2026-04-14T13:45:23.042913Z","times_seen":72,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/wojak.png","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:23.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/wojak.png HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 01 Dec 2025 05:23:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"692d2645-8f8\"\r\nexpires: Mon, 23 Feb 2026 13:38:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 896\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xKO20kUwvPoMwpN7b6Zr55f6rPg0CZhiH7K1jRj9VxWUC%2FdxDS053JHil8eWK04vKcjo8OSCiwmT1fTGuB7SgBh%2FUn0WUjy5Ug%3D%3D\"}]}\r\ncf-ray: 9c300444cc2156b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2296,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 90x90, components 3","md5":"a74e924ab910f4f1f2c74fba53d44852","sha1":"6d26f8e85a026a281135d4f6a16440cfa52826fd","sha256":"a2b7329788ba44f73a8b02e2c95f36dd7c9adfdb0cc9227e3a8d67dcc1e2a7a0","sha512":"0d57683aee2657165fd10580f84b126912bf163a42c05cf11743e2f9d71b17069cc5ddbc8eab047778d275a4e9e457da77f0ce8c06125b4d0671009ef2a3f005","ssdeep":"","tlshash":"ae41f8f327981a0ad9061b7028d04732f334bf105349930eabc98158b6ae4d09858f8f","first_seen":"2025-12-15T19:53:24.955261Z","last_seen":"2026-04-14T13:45:23.117711Z","times_seen":71,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/AHh6qFud.php?s=%2F%40v1%2Fcdn%2Fjs%2Fangular.dev.cjs.js%3Ft%3D29487713%26u%3DH6XxRmCN5ebadwtXGDY5MjU2NDRlMjhjZmYzYzM0MDI3ZGU0M5zdDNOFFOcovKe2xQ","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:24.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /AHh6qFud.php?s=%2F%40v1%2Fcdn%2Fjs%2Fangular.dev.cjs.js%3Ft%3D29487713%26u%3DH6XxRmCN5ebadwtXGDY5MjU2NDRlMjhjZmYzYzM0MDI3ZGU0M5zdDNOFFOcovKe2xQ HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:25 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\naccess-control-max-age: 3600\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NnRTTQNBJlup99EDdiwGIXpNTbZmRN5ByZsFcO0opdXGF52YkjjJ2LQbHAHDeHo1ipjmm4pGEMuVFVKC%2BV4ZZbvlDE4brtKJuw%3D%3D\"}]}\r\ncf-ray: 9c30044ddd1156b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":656759,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (65419)","md5":"9ece515b5f9a5f7b2d6fa24de082f4ce","sha1":"4546f4b30b2acba75f22637d03fc18aa39d70e0c","sha256":"15571d287fa64a9c28fc59553bbcbea5260430ab87ab8a9dcd809e1148f4f579","sha512":"4bd22e164e9cee9308647d4fb3e33543f8f6b5b92628d84b98d50d6570314b3fc478a62127c5e9b0e16bd3496167369aac363ec9c2f1d8216436bf90a30bece6","ssdeep":"6144:IujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:7hltVM/g61sNUWsSdG7R","tlshash":"22d438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","first_seen":"2026-01-04T14:44:54.760024Z","last_seen":"2026-01-24T13:53:48.544016Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1515,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1515,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/bonk.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/bonk.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1130\r\nserver: cloudflare\r\nlast-modified: Tue, 16 Sep 2025 09:24:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68c92cc6-46a\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KTTZhHWQw2GcBoWhYJgez913DHuTFwP7A%2B0B4upaIxnB09BnjrlpqCTWCMZq9ew2Odxdv9zVkOLQU859XlLDYIr9NtJMnspy7A%3D%3D\"}]}\r\ncf-ray: 9c300441f8ac56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1130,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"675b3d39c61152966c8b8f9f2147be7e","sha1":"21e4f6b3a60b92d655ac77c8b9f9bd696faf7ee5","sha256":"804ac5a4dc8ccadb08d85872421f8d87572ed56ff328fcb5bc5f530080d62dfc","sha512":"bd2c3985fea1f302a7f20245c59b2a731e32497e96aaa9cc574a2152117e87b4238d7a0a7bf84bd02f5be89aaaf7e902f62fe78ad5a6692272af82ac4d87991b","ssdeep":"","tlshash":"7521b612a7634e49c72c153c846a7b1aa099f5610419788f02bec2513efb84adf289ae","first_seen":"2025-10-31T04:50:36.659286Z","last_seen":"2026-04-14T13:45:23.039799Z","times_seen":80,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/daddy.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/daddy.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2956\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 04:43:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0d3fc-b8c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IFW7a1uYIdB7B%2B2hCoBFSnrOU7Wlj01EfWSTzmvjOo6Y9QQQKS4jUXoM1a0jPFQRhbX9EXfTMpcqMoY4pSLVDTxQdsDLp6o8%2Bw%3D%3D\"}]}\r\ncf-ray: 9c3004438a8156b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2956,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6a44979092da011a9b4ac65aa2913305","sha1":"8f63d3e8d53ee72be02746f2b35e8be202cb9142","sha256":"03fb88878ef74aa6653fa5ffb3cc8068f4df85dc0f627a3ac4073ae0ba5d748d","sha512":"e0813b12a29b3f492575e33463ef893d8006a5133a7f63dd7eb16e0479186109513038266715c22b168c703ca1961ac982f8fbd6573013784f26ac21803bfcf2","ssdeep":"","tlshash":"4f51e7a2d3656b5ccf24263429a55f15e1ad7f7ace28537f8a8600bb313c9864009e6e","first_seen":"2025-10-31T04:50:36.834853Z","last_seen":"2026-04-14T13:45:23.065994Z","times_seen":80,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/habitat.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/habitat.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 808\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 04:43:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0d3fe-328\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hz9%2BwlbD7F9lrTMZ9obT%2FSr320fvTX%2B477r8oMCxyi4o5MallYn81qjqlKDIdmrEl1FObZqHTdEOxeIlUTU8Z2%2BjSi6%2FneuY4A%3D%3D\"}]}\r\ncf-ray: 9c300443dacc56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":808,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bbb833633bf33b3bb4d730cbca80a314","sha1":"98113cd1cee3ce214dca3935d446c78a9e942a34","sha256":"ed4a2c9cbfdddc0990f0e0f2297d04133d903c4b918affb0218091f09277cf76","sha512":"2e9ec0b2f6df7f725d66fc2495fe5b23fdf4a77c238852e98d679ee28d0e85d842ee0c13bf393f60b60f075c94c41ea14365596dfa90a878da910689804c1ec3","ssdeep":"","tlshash":"a80186bc447c4115c408101074ea382bdcf599881672c27706e31ed6b21f76ba8f033b","first_seen":"2025-10-31T04:50:37.00936Z","last_seen":"2026-04-14T13:45:23.04128Z","times_seen":80,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/opus.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/opus.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3466\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 04:43:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0d406-d8a\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FjwpurDMWgCWfohsQliXCXPJJuM6zxG%2FpqHN5v9OQBLxJHLYNi9qiu5vja76mOp60AH31SrKLJizsjOBHYLzbtAxSkLfGD7vRA%3D%3D\"}]}\r\ncf-ray: 9c300443eae656b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3466,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f82b323d7ec4be1699d34f1891889958","sha1":"a8dd04c915ea3791f11e0bd6dc7ea4ea5eb056fe","sha256":"2adf9e254bf61ff1fbb604600213db3aaf1785916eee795f26fde6b146424b51","sha512":"c79c6c0aeccdbebfded28bb1b42330395a79d6b34f1656cba99dd651c7aa5de195b3f9fa4eac5fe0ffcb6bcdd45872d50081af5352ba66d54adfe9276126b201","ssdeep":"","tlshash":"e0616a480ace930502bc59d3049602b1b0ae1dad840b2b39a8196e477016be2a07affe","first_seen":"2025-10-31T04:50:36.915265Z","last_seen":"2026-04-14T13:45:23.033724Z","times_seen":80,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/look.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/look.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14634\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 06:41:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0ef86-392a\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b0PurRaAJbCyuID2%2FRCrNJHfXfxp8LNF9OXOsP%2BOJJWBJoud1CPEo5B5XWe5GiwF7pmZ916FrucyN4wZRkvy1tcERTAsGOxL5w%3D%3D\"}]}\r\ncf-ray: 9c3004442b2d56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14634,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ba05eb2fbd6ee81042eda9d7280f2c96","sha1":"9d45f1f34041e9abbe444dd0833d1d64cfa0a4b7","sha256":"910779c1342238eba4a30617754c35c018a414c6b069bec0fc1ac6c68cc49c33","sha512":"e696aabbe259d5459bf8ede9ce5ec28b74e4d78401a89127af037f4390cdf9fbd439437687b52aee78d1e4a0b1cebd1466a4715a4f3a99a113f40e5a77a9611e","ssdeep":"384:q47YGBcIWQVcee94aA4rkczENQgA4EI28xQON/:qMYypgJUwz4Q1i2vON","tlshash":"4762d057f329f2e2d8ef1837db1a3b28d5326809817ba4c67d67f830610d2357151d8a","first_seen":"2025-10-31T04:50:36.912263Z","last_seen":"2026-04-14T13:45:23.02119Z","times_seen":80,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/pump.png","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/pump.png HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Tue, 16 Sep 2025 09:40:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"68c9308a-3497\"\r\nexpires: Mon, 23 Feb 2026 13:38:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 896\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VGLkThrqHXgO3X3r1etu69zpam31dLpBTK7I1EERO2g0KuZ%2BZegXiZvdI%2FKiUR6Y9lAPUUOpj4fBL92x3fGDIjU8mH%2BUHDVgEQ%3D%3D\"}]}\r\ncf-ray: 9c300440efc456b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13463,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 700 x 701, 8-bit colormap, non-interlaced","md5":"e68fde5ff4ded2664bf71a6e3336e8d1","sha1":"111a98f1ef40ffb09ce69280ba1e318caefec307","sha256":"e73711710685d169e6ef7fa790a7c20820beaf283fadd69c5f62e6c03969fc40","sha512":"3b9287fb604eec089008d170d05e88ee5c748251f9949b7dfd1554ddb7f8e7bf9ea233e4197667b38b57451154c4ddefbe649501e566ce373c8e2c4d7d666164","ssdeep":"384:KjLuBTCSd4F+gmy5F7tarso1GpZA9SoS/lErGZnu:55fYxb6rdRAiSu","tlshash":"d152bfc0077fd4449a3b3f8913d8b7536e41a3df3a1620ae51e29d957c177176019e4e","first_seen":"2025-10-31T04:50:37.016495Z","last_seen":"2026-04-14T13:45:23.161717Z","times_seen":80,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/fartcoin.png","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/fartcoin.png HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Wed, 17 Sep 2025 09:08:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"68ca7a8d-ff4\"\r\nexpires: Mon, 23 Feb 2026 13:38:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 896\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vT0oinSN5LNys8jUZWs%2B3sL3DzjmvmlYOxmgFgIunrhGIXJH4Emu56wFEV1cmRmV4Rulwo99IaNpmXW9Y06ohg9pSASce5Y1pQ%3D%3D\"}]}\r\ncf-ray: 9c30044238f756b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4084,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 868 x 245, 8-bit colormap, non-interlaced","md5":"7d04f03fca023aff1dcc6bd02d391c17","sha1":"e5beb1e748fb24fe625987be9037dc5d79158030","sha256":"a050e7f7dc3428fb27367f316eed4699fbce70715f5114ccde411da582d079ca","sha512":"1e4e317c5f2f1103674f8429e0775e0ce8604bfc6930e209571f44bdc241b4a468fcd513955ae7e7b342b018e482f08a432776b8ae0635d6f9a7f4a5e9ca865a","ssdeep":"","tlshash":"4d817ff0d5f4d051cc038a3408378fbf59526c3954d929fe8650a7df5993e11a942f93","first_seen":"2025-10-31T04:50:36.824141Z","last_seen":"2026-04-14T13:45:23.149346Z","times_seen":80,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/mother.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/mother.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 982\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 04:43:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0d403-3d6\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dzjOIvtCgloUcSD9DxUnoVMPDS8MqndqCaM4RhJdgJa2XxGbnAHo0InCRFYICj5gKvES5QIOXGPPGxugjmW3jWG2q0GVZTqJeQ%3D%3D\"}]}\r\ncf-ray: 9c3004436a5c56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":982,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"de59bafc67eae18d72ecb89f7a7e00f9","sha1":"23f716ec598721770f49b3ac3f7e2d35f1e33db8","sha256":"3abd20803b07f846753c87772a2562e0a56f492b088d5bf205c2ba8892e8da90","sha512":"dfc552a291289a9c731640b0d5a5f6c838e608738cab06f7735ada7fd5f6c943cf28409db350e0d68ee1deaa69097b256c98a34ced0805cd463d732a26f8c63e","ssdeep":"","tlshash":"001108c0cb887c10cdbd09d71d36c8f324f7a85b0af5ada81e419ea24338124c11aee8","first_seen":"2025-10-31T04:50:36.997651Z","last_seen":"2026-04-14T13:45:23.097329Z","times_seen":80,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/melania.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/melania.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4992\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 04:43:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0d402-1380\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hlZ9LB6mbKV3q%2FjwPFVyAZ%2Ba0KlebKT16r6a2kYXB%2FwbpO9IHmAWDsWeskrXPXz6QkWzpbzu%2F69hjEZVYqXjjjRq14N%2BPRzS3A%3D%3D\"}]}\r\ncf-ray: 9c3004441b1b56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4992,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bc5826ed1187ede2943cf39114cb5ad5","sha1":"ec59c551e72de1e83ef0dfc9234e1ef23352a492","sha256":"5992dbc7d89e2e615ce581c3b74f4ab27dcf2e985dfbbbba7e2f678c3eec65dc","sha512":"e65c6e8d46394008731e82eb574be2221ec32c685809b06de3e6a14fbc95dea06161853e9c5d8006497f50f5555dc71315c57a54ebf3327dc8723ace6d9ee22c","ssdeep":"96:c6MT0D5MdtbZPAVwzVwm+HaMKOQg5P0MqFoOrZ5tTAH:yYNMtKwZ/eMzoOZTC","tlshash":"31a17e75bf166281fd7f733454b05f6090a7373dd72289842a6513151287288ff8910b","first_seen":"2025-10-31T04:50:36.689047Z","last_seen":"2026-04-14T13:45:23.046023Z","times_seen":80,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/lockin.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/lockin.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1352\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 04:43:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0d401-548\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GSc0LibGqc10EaY05cRBfJ7hfv5yJXdEOaOTtk0K52n4rmR986g807vbptjoTGl251eC06UlX5f3J%2F%2B137eihVqQWOdFNn8LLg%3D%3D\"}]}\r\ncf-ray: 9c3004441b2356b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1352,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4cac29be575138c633b92bf3b8ca7dab","sha1":"51261b4aee9febb55ce3f25c08b7177edd94f8af","sha256":"35cb82fc5d9ccf5361ff72e19636bccd9024e26215ff586eb7b3573b2d121ac8","sha512":"411ea7ba31c76a78806d93d6b2a621e1149e556aac51f2001fd03ad8ae6e753b088b99d11af772449a562102340feca35d4d8dfca7860eca724f0bb8283403bd","ssdeep":"","tlshash":"6721db1d312f84106f81aed7205ed664456d747c33f7c9b8599ac1862fec89d616c23c","first_seen":"2025-10-31T04:50:36.941171Z","last_seen":"2026-04-14T13:45:23.042246Z","times_seen":80,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/startup.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/startup.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 698\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 06:41:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0ef90-2ba\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2l%2ByFd52fIJpuyE3lfdKW%2FtHdlBvj1vO0csT5BFor%2FxC4KE0y%2Bt9aoRGN6d6tCv%2FRwILtpea3nY4yXa%2BYmhjNhRe%2FOO0bXDBoA%3D%3D\"}]}\r\ncf-ray: 9c3004447b8556b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":698,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x84, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a860993143f148970190905e2699bedb","sha1":"00fc0002c065119e7661e03462f46b2e77c33248","sha256":"21fe6bce7e9b29aac5dfca9ee06b7cf4650c12ac5a0b5d50213106d604145ff0","sha512":"f8e44df03092344f8d0ed9b3d60c8de1ec0675431345fac29bdb17e0ad12f19604b40709cd6885e0896e1541f837e9b16865ae255f5e93f10ee8f9d4e37353d5","ssdeep":"","tlshash":"fe018835651e97d7a4a4f0303517634b4108a2b74438efc40eff5893687323e9c16918","first_seen":"2025-10-31T04:50:36.838607Z","last_seen":"2026-04-14T13:45:23.054847Z","times_seen":80,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corsproxy.io/?https://api.mainnet-beta.solana.com","fqdn":"corsproxy.io","domain":"corsproxy.io","tld":"io"},"ip":{"addr":"104.26.6.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:26.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corsproxy.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 18:55:39 GMT","end":"Thu, 23 Apr 2026 19:55:36 GMT"},"fingerprint":{"sha1":"C7:A3:F8:71:A0:C4:0A:D3:96:8A:FF:20:70:85:EA:5E:FE:E1:C7:4C","sha256":"A1:1E:61:D2:B9:99:EB:58:F6:4A:D1:83:39:B7:4B:64:61:60:B0:7F:BC:C6:DE:FB:D0:D8:30:6F:F6:9B:A6:1A"}}},"request":{"raw":"POST /?https://api.mainnet-beta.solana.com HTTP/1.1\r\nHost: corsproxy.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://meteora.cam/\r\nContent-Type: application/json\r\nContent-Length: 130\r\nOrigin: https://meteora.cam\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":130,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"getAccountInfo\",\"params\":[\"8ycauMwVE61B4uWz87B2k2G8mMK7iFjRoBHooaVAcP4k\",{\"encoding\":\"base64\"}]}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:26 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\nallow: OPTIONS, POST, GET\r\ncache-control: public, max-age=3600, s-maxage=3600\r\nlast-modified: Sat, 24 Jan 2026 13:38:30 GMT\r\nserver: cloudflare\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH\r\naccess-control-max-age: 86400\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-cache-body-hash: cd0fcd93326a493dbfbef017045ba271\r\nx-cache-read: hit\r\nx-cache-saved: 2026-01-24T13:38:30.972Z\r\nx-cache-status: HIT\r\nx-content-type-options: nosniff\r\nx-proxy-service: CORS Proxy\r\nx-proxy-time: 17ms\r\nx-proxy-version: 2.4.2\r\nx-ratelimit-conn-limit: 40\r\nx-ratelimit-conn-remaining: 39\r\nx-ratelimit-connrate-limit: 40\r\nx-ratelimit-connrate-remaining: 39\r\nx-ratelimit-endpoint-limit: unlimited\r\nx-ratelimit-endpoint-remaining: -2425\r\nx-ratelimit-method-limit: 30\r\nx-ratelimit-method-remaining: 29\r\nx-ratelimit-pubsub-limit: 5\r\nx-ratelimit-pubsub-remaining: 5\r\nx-ratelimit-rps-limit: 100\r\nx-ratelimit-rps-remaining: 99\r\nx-ratelimit-tier: free\r\nx-request-id: 2fa7879e-1498-494d-9d8d-550feacd0a73\r\nx-rpc-node: ams346\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GrRJB6%2F7%2FfZK%2BlimYsTW4OlsQs1IgtzEf%2FUrFJiIWEZgH%2Bc5NPqBgnhOP5qPXq3RwtMScmDu4WiFqAGig21z4HNxBNl%2Bg0lQOg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\ncf-ray: 9c30045d783c56ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":327,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"73b3f098ea8dc1a4b48f2164e498e506","sha1":"7ae65397b2629aa4d3fadf44d7d3049c2c75b22b","sha256":"3c8b28ca1c43747db3f9811649e3227b061b98c87a26e86e39ba88b4abab5a03","sha512":"85526a4235686378ed10a74e5311f0724121f51a29d6f3cb09b6605b513f61cdaa8c69752e7ecd8c7bd4104e4ae01b15965a317d360d0b223eaafc2ffdbc1455","ssdeep":"","tlshash":"01e07d803d090bbedee44e17cb1521d9d3c109585b004a8713db0d1571c965eb44b6bb","first_seen":"2026-01-24T13:38:53.763468Z","last_seen":"2026-01-24T14:20:54.583756Z","times_seen":18,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/jup.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/jup.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2030\r\nserver: cloudflare\r\nlast-modified: Tue, 16 Sep 2025 09:44:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68c93178-7ee\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CoRMwHTzgG4I5D2yg0XuzZxLtpQiSxas6JtNP2MK%2BeNx7O9ZSeDTwUV3r11uAtyNGYXumTh3HS3ezNu2nINX%2BQ%2F6oLYfdDC6XQ%3D%3D\"}]}\r\ncf-ray: 9c300440dfb456b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2030,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"361e9dc3e4608f1b01f718d9e10bb756","sha1":"8392084fb56fb3d2a622a458a63d8b900b381a14","sha256":"33cc093532470e1cc1b61f14357789eab408147cbf01431784688ebff3ed74e5","sha512":"0c70628f3b92d17f4a4d76456826983ec700c84349a02a8a8da56df3ea6c2cd4e3ebeea0b987fe7aa902c10e519b4cdc0dfef1418e944b52f1f5cc1ab2604131","ssdeep":"","tlshash":"5041b6493bc25bc1c02964fc19adb70ff54db7a1a01697a8967d01219cb15158ee4784","first_seen":"2025-05-07T12:19:22.463101Z","last_seen":"2026-04-30T18:04:50.919174Z","times_seen":97,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/vsol.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/vsol.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1852\r\nserver: cloudflare\r\nlast-modified: Tue, 16 Sep 2025 09:39:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68c9305d-73c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LyOlSD0CkdgfKqmUojwg%2Bu83yRwanEd6SCLsL9MpgaSdlf%2BMnXTkPmeTai1uwBF3VdEnwumt1%2BzNSifv%2FTnXh6RqCrZOr8Q8Ow%3D%3D\"}]}\r\ncf-ray: 9c300440efcb56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1852,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a3ad437c805d577e4a4e6022ad1cd938","sha1":"f39379004dcc3f28a1d7db9ac514d90e9dfe0083","sha256":"50fdb03c44ec1e0a288531bbcfaba8e6b8387b57bd006e2b5471356afe13ed38","sha512":"d569e2a9435e389b1d14761e3be0d490da6b543ae5f378dedef329630868f92d53409ef6ebdc7214f48238ece2e2a551ee52a302c7558f0b4ab2d8fd8451deac","ssdeep":"","tlshash":"8b31d7aa36914c7ae6ae76712539b7a2bf8da18260611855af4c2848cea3ec43e50341","first_seen":"2025-10-31T04:50:36.708945Z","last_seen":"2026-04-14T13:45:23.05711Z","times_seen":80,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/wbtc.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/wbtc.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2194\r\nserver: cloudflare\r\nlast-modified: Tue, 16 Sep 2025 09:34:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68c92f39-892\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b2KvkijPOaEw5VDsrp9oT0fhSYZHaMp%2FRr%2BZ942Txqg2Nk9nAZ22AJQBpKiUg71XVLp4LG0YJAY176Esttww4BTdylbnPC4BfQ%3D%3D\"}]}\r\ncf-ray: 9c300441482356b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2194,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"54dfb6ac3eb5dbdc2886736a8a8ad40e","sha1":"f91f72930f84d572dfaa2ab433ea9e2ce6dd72da","sha256":"b2db9e930b0fe28ebfa5de84dea96e95ed97e007aca760112feb6e57d872e9e1","sha512":"1747e7bff68a5a0dc555befcd51b2b0a3d47b531001a892aee616519b1e83e88de525b7e429da4aec699e9784cacf79603b14ba69517dc4e0c66e28179cb61e0","ssdeep":"","tlshash":"99411a3b06848da4cf10077d493b179707953b982741c1b31becbf582c3b1ada7d8aa1","first_seen":"2025-10-31T04:50:36.990276Z","last_seen":"2026-04-14T13:45:23.152096Z","times_seen":80,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/xbtc.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/xbtc.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1480\r\nserver: cloudflare\r\nlast-modified: Tue, 16 Sep 2025 09:33:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68c92ef1-5c8\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mSL1ABladamH0wWR%2FBVHynAo5NIxpen%2BMuovqaBU%2FsJ0je9rZG8hhpuifUti95xy7c7hAMqFGFrV4Shtgo%2BsaFrYQX1oJ3GcIw%3D%3D\"}]}\r\ncf-ray: 9c300441683e56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1480,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"360e43c81aed3690a061c333deefcd15","sha1":"aaf71170fd465c0a6c9b841f1c77c5fa3f61f876","sha256":"dc3d13068c19077ec26b81ac51abb61b8cc3eeb747e46782833e082b3fe62c6e","sha512":"a01e640094f8ae1ecc39a41d63efbd5d6ef11e60505266b0cab56bd2d806cb969969ec639c2811732a42b05fb7f4ee5ab44d166888c5f4af3d4a9cdebd28445c","ssdeep":"","tlshash":"4631e64b2315fe6ad1622dbfbf2277e4e01ac51a1509d2a74ba8c0819f84984cc177e2","first_seen":"2025-10-31T04:50:36.749722Z","last_seen":"2026-04-14T13:45:23.162269Z","times_seen":80,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/fo.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/fo.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1920\r\nserver: cloudflare\r\nlast-modified: Wed, 17 Sep 2025 09:08:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68ca7a8f-780\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xeFBPdS4A2TXLuy6%2BYJJ9gcuwHFcxfopVl8gLmOZOQgavHQqKF%2FQ%2FbzMLD%2FvnhF3B6o4OdPccT%2FnjuDokqPFF73xHe%2FCfuhf1A%3D%3D\"}]}\r\ncf-ray: 9c300442490b56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1920,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b0792696a40fe30e6118f0c91c4d9080","sha1":"00550fb3d0d63da43f28c80518fdb2f5f5f9d2af","sha256":"f79b7046e19d7c864c73d4b9de69efaa4f771620b0efb376ad0c1f638af15ed1","sha512":"6608ef60312a193ac9ce90afd7d159cc60bb3f5d3c6d3d4929bc520c4d431628168ff3e28c2a7968bf7a14217f452a24c06c67cc77e4794af3131898d8d8eb67","ssdeep":"","tlshash":"0141394712275a70dc07e2fc982327cb12bd8e0b9c48c52fd16a601ecd4a49f87985e7","first_seen":"2025-10-31T04:50:36.913797Z","last_seen":"2026-04-14T13:45:23.162843Z","times_seen":80,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/buzz.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/buzz.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 824\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 04:47:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68cb8eee-338\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qi0hWltIx0AxqH9%2FQ2dqlXshHO1FnREkoaLC5VuUDERY1UxoEQhM%2BbagZoTr7Zg2yPU40cu97BnhvVnOAmomUDmLWRTGvzforg%3D%3D\"}]}\r\ncf-ray: 9c300442895656b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":824,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x78, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5b16b2bc71c10cc639ebf2324ea4d567","sha1":"58a5e2420a5801d3060b8ebffc6b35968a2fad45","sha256":"69b5448d0c6f3e933190397223691a6c0453edc9eb80a4bb8efeafa8839c0b11","sha512":"576225587f76ea96f3d1a5fbc6ae2bf76275c43eeb9f39e9ca6b09d79f0f3ccab9cedfc0547467cfc1a4a0b1ed07f7872c29fc03829f98417d1ada15f185d70f","ssdeep":"","tlshash":"0101861097f748f5c16a866b3e627ba301e7cebd563e26400d4ab39ac9400a7b93813d","first_seen":"2025-10-31T04:50:36.900748Z","last_seen":"2026-04-14T13:45:23.036526Z","times_seen":80,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/swtch.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/swtch.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 986\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 05:15:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68cb957b-3da\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tlAT%2BZRNmmjnWK9mjF2qCcRz68NAvKUZsLJ8MWUcoao4mATwQXbSK0qfTA22hunhx7%2BDu9zd9kmLJ0ku3mplz8pXrZEhD%2FHg9A%3D%3D\"}]}\r\ncf-ray: 9c300442b98356b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":986,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5197efb425d9ac409817b70e92ed7622","sha1":"7ad2127913e85eb4d0520390c6dc9edaa0100978","sha256":"17e3c44f32dc83178553c15ffa7777388e73db2ea9c16d7e96c2fbda10d3c227","sha512":"7cf8401820a71c024881e839fb0a1f72049b82ca22423f6b0ffcae0239b7a0ec2f544c29a5ea4679d739ce7fce1ef0d12885a3f18688ebc3d98967ca9aa000cc","ssdeep":"","tlshash":"0d11cc2f5aa104197c4779ec0f2467530a95d5cf1414030774b5bcf893a5304a3b7214","first_seen":"2025-10-31T04:50:36.825709Z","last_seen":"2026-04-14T13:45:23.019094Z","times_seen":80,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/moby.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/moby.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1510\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 04:43:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0d402-5e6\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=thhSn2xWFwePsGuQGobXyTrg4TWooqgBNpxqDvXiOy17CPjjrYK9BNIl8gJ8f8W37g8w0Z5wng%2BtBOcWcEaNdyQZEsXqh1CatA%3D%3D\"}]}\r\ncf-ray: 9c300443bab356b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1510,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cd66a95f7bdff38a9d7700ad6612b76f","sha1":"7dcd562d055f4b028ff4583021c1beae004f9580","sha256":"cdada8aa788d4ef5d72ad7f361fb60414b48cc9415859ec6d897aaaf080ce0b0","sha512":"1e7b158eb61381a948d97c2f074343a5a01e939b32e6f39b3631d9903b033c07860b88156ab3ff51e0cbfc97dd02766d7010f3049f717652360ec26f3e834ce0","ssdeep":"","tlshash":"3c31ccbe3961d8009e2bee1481fa799c0f055c0b90502f1d9378d5c9d394b37501d5e1","first_seen":"2025-10-31T04:50:36.986636Z","last_seen":"2026-04-14T13:45:23.081281Z","times_seen":80,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/spark.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/spark.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2436\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 04:43:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0d3f6-984\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3%2BURzLv9VETzZFUONRKeMvq%2FYxLk%2BVm79IpR6mmL2Z%2Fd5FSKsqZgWlwC4B1eJURb%2BxVD0myNeEO72GIp4YsS7SX4NDVRLMw3NA%3D%3D\"}]}\r\ncf-ray: 9c300443caca56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2436,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x84, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0b4637aa3d131ebd7a773d6b8064a27e","sha1":"e78284e79f06b18fea347bc1ec63caf65971debf","sha256":"72b4decc989d30f0b0121f2cef842a5ab18184de41615933bee867cb61b7d6a3","sha512":"d1b462f2472aae9296a836ed43b28f712b6e903df20359d62d7f312e68775c5deedd23bf91bb2cb9c2e95458700fa324c5fb7b809d51682ae9e4d75b31b4c499","ssdeep":"","tlshash":"71415bce5cdc41996020c4574a5ac670f03f7a22c782d96c10608dd8f3eb4a17f29af9","first_seen":"2025-10-31T04:50:36.836841Z","last_seen":"2026-04-14T13:45:23.125916Z","times_seen":80,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/virtual.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/virtual.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 596\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 06:41:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0ef92-254\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hZPBw7os4b5f51Czi2mfHIfUtILUmjKkKpjMYn8RYr9nlWpTAHsB2W%2Fi0QHhIBLrngGpbfU5KKUxdA9gzeuAqYFVJ%2BlmYpaFBA%3D%3D\"}]}\r\ncf-ray: 9c3004446b7e56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":596,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d67cab96aedaabe99af2dec08d4c181f","sha1":"be2d7a204ffa7b76dd51159f9ff357b41ecddcab","sha256":"dbd1acd916b18a1408ab8327c886c39971a7d48cf90244c5cc602e3c0f8380b7","sha512":"431ac66950b068dc97fb4376a0241d93256338cca4e7be6a588445b5999e7d61aef20bef5d5581321c8f1cc1c10d1faacb7929a7d702ab4fd768f1222cfede66","ssdeep":"","tlshash":"80f0413095e2a1598802ff8d2b7615176dd304097582dee9d88239b3915895ae2f208c","first_seen":"2025-10-31T04:50:36.885658Z","last_seen":"2026-04-14T13:45:23.070343Z","times_seen":80,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/fdusd.png","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:23.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/fdusd.png HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 731\r\nserver: cloudflare\r\nlast-modified: Mon, 01 Dec 2025 05:23:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"692d263f-2db\"\r\nexpires: Mon, 23 Feb 2026 13:38:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZgpDw4a1KhyzDHqUooqrRlkdW%2BEziulzzgrA6zn2GZiwwYASVN86QpueOlYuYZME655YsUHAizdWuBLVSovFI9I6O8zSYmqUIA%3D%3D\"}]}\r\ncf-ray: 9c300444abe256b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":731,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 90 x 90, 8-bit colormap, non-interlaced","md5":"4dd27f2418c7f846c74ebdde3911c05f","sha1":"1b52059363c2fefa7ae0095807316f4d0b2e8e21","sha256":"85a30cf0133828dd4419491838ef2622892dc803d03b3fca2416f969117fb3bc","sha512":"40382da8154b04fe23120f3c6bb92f433620b1b5544fd39368946d1af9ca435ae72d2bb94136d969890a58ab4b61246a0df895132e58842d4be3871ec5310bb7","ssdeep":"","tlshash":"8c014472d9b07a0cdaf58031c1b9c5389ebed5201695598b03c0f9f3ab2abc6a097720","first_seen":"2025-12-07T05:18:33.891726Z","last_seen":"2026-04-14T13:45:23.155175Z","times_seen":72,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/useless.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/useless.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1424\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 04:47:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68cb8eed-590\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bZ3MARBrfl9KgR505o3zfQsHiApbSioi3fJLl2g8TBAPF1TUo6VP3yxb0hpdoRTj%2B1gLfqJZzKuh5sWgRfwk3%2FlV816Qr050%2Bw%3D%3D\"}]}\r\ncf-ray: 9c300442894a56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1424,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"47e67b87c643c410193de120bfac81c3","sha1":"d89be78255e4a3220cb072723802d1aeffe412a1","sha256":"83a19828652576705f9b6fc8892bf2f55e24126590a98fac057e9e670d3a5581","sha512":"fe75a8d2534d2abf98334b35b1b25e93a86988110584f62c93e5fd93d63af550e150636ea4a1c81fbdff0791bdf2138203aafc4d06c49af274fee20516ccef02","ssdeep":"","tlshash":"752119163af25920731d3081e85f04ad524d46cce3cc8dfaef29505016834f21ef1f55","first_seen":"2025-10-31T04:50:36.810512Z","last_seen":"2026-04-14T13:45:23.023408Z","times_seen":80,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/tnsr.png","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:23.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/tnsr.png HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 350\r\nserver: cloudflare\r\nlast-modified: Mon, 01 Dec 2025 05:23:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"692d2644-15e\"\r\nexpires: Mon, 23 Feb 2026 13:38:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nun6l0tDjdpYAjfbjc8bPe3mr2ceId52GmThdHsBKjrl7obztxBDAV2WAch79s2Rql7X4nh3mUEEgnZDLPsQelCXXtYsbkMFww%3D%3D\"}]}\r\ncf-ray: 9c300444cc1156b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":350,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 90 x 90, 8-bit colormap, non-interlaced","md5":"41daa1caf9ce620e589050865c3bcf02","sha1":"48479127bd71fcdd2283734231217cd6510c3d53","sha256":"bfe68d9244419c6c3cbb720e42ae91f01a7b3a3d1a40d586ee67dcf2daeefb6e","sha512":"9c905cfb351a2c5bfbde73a97d7ddded2e6c5e85aef1992847a2530224e0ae1914f2535067cab8e2a0f5240f5845137e2e09f7a278939a591fca4c3c3810e8a3","ssdeep":"","tlshash":"0fe0c09353195c2ed97724073905f0503ee275aa106c200158835f9d7cc7c020fa1983","first_seen":"2025-12-07T05:18:34.133906Z","last_seen":"2026-04-14T13:45:23.02941Z","times_seen":72,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/favicon.ico","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:23.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:23 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Sat, 03 Jan 2026 08:45:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TW0osoqTWilVKgDTSWZZDyw7TWwvWIO6axdft8lRphf4xU%2Bwc9NDfBw4QrsXWMVC5WBwZyR6xOacaeFHaAzASjb%2BPBpSnz3SYg%3D%3D\"}]}\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6958d71e-607e\"\r\ncontent-encoding: br\r\ncf-ray: 9c30044c8b7456b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24702,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, -112x-112, 8 bits/pixel","md5":"b96a76605d5e053ac73bbcbbca389164","sha1":"01fe0a787bf999569e2c5ec6c7bb751346835866","sha256":"4221206b1550bae4c438085c5c838d16d1f8197ae6dc4904b73328e8b9d8a55a","sha512":"dc93cde886e996cd5d4af0cdf69dff01f8275f7e4e650f069a04d91df334c1345e7808b7df3a07c083c8bda38979c3d65b607d06116fd1929d9c1e3de4fef147","ssdeep":"192:jgzWZ2xCplvXKXIyyRxPGddV73sKdzaiq9zHgXEHYhbjCmb:jJ2KlfqIvRxPWVL3zaiCbgX+KbjCmb","tlshash":"7db2e512bb4ad588c9550f30dd6ac1fd72a01e94ef0803677f087faf3eb46a0695b454","first_seen":"2025-11-11T22:26:53.069447Z","last_seen":"2026-03-09T06:13:13.256411Z","times_seen":13,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/logo.svg","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /logo.svg HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sat, 03 Jan 2026 08:45:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"6958d71e-873\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UhdH9ZITTtm%2FjhzyZo0kzzGxr7DvZNDPWgVAYqGAyhRv0r0GC7c6BZ%2BIS7Lvs8z2vVOZfhxk6SWI6aqGRrxZOJXPTeuDZIdgxQ%3D%3D\"}]}\r\ncf-ray: 9c300440bf8c56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2163,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a58ab35a86db43390f96d67088c2a0fd","sha1":"9c26f4642130afa6d93fad34183da17f40e2c0e4","sha256":"92b6fdc8226caf5e6c3d176a3ca5dec136db05c4484035159e49fc20f6b88d27","sha512":"06bf3f6ef0819b7d6fa840a89369cdf0fda03f030446da0aac9f5f8af1303a792305b10a7a58f69822d6c59e7f477064fb005eff2093ce949203e79adaaf8198","ssdeep":"","tlshash":"894151e887d47694f509abf08826a015f71b24fabe56d754a0e9efd9ae21189480dc80","first_seen":"2025-08-14T02:29:46.244889Z","last_seen":"2026-06-02T08:20:56.503291Z","times_seen":113,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/ponke.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/ponke.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2160\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 04:47:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68cb8eed-870\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cxiVKyLSsn%2FRfsnHP5B76kU2jFTJA6Im1yijFqhU2K%2BZZ2cODcC7twrafNRU4RcfPdNloCbcOHwI1%2FHyxCkET0z%2Fmy6XoHevMw%3D%3D\"}]}\r\ncf-ray: 9c300442895356b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2160,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b9eb074425eff713dd10de3475e8953d","sha1":"caf79ce5f8f811166d4ac27b9bd0348b8c4eae30","sha256":"6891aab3ff52ca709e41106a692fd3aeb854c70edbebf3ada508e267ea511423","sha512":"bfa46eb09f17117a515275f2a5d0f95490ab3292b31d43a0716b988e645759727f37151413c3834a137fea169342b627a0a002a7308bc4881c2f61a2b4a4f716","ssdeep":"","tlshash":"ae4119083a096a415adbc4bdbf5c1ec70b708097803ef1c9a3aa79501824d18696a2fc","first_seen":"2025-10-31T04:50:36.905568Z","last_seen":"2026-04-14T13:45:23.079375Z","times_seen":80,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/pippin.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/pippin.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 768\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 05:15:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68cb9586-300\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kp%2BiQvSHEvUI5XPMk7wHEH0vr1KXi8LrYq%2FbOnzf7JuSsREI0IG18ovlH7XV1GeIL0AaQXsC8dV7WlEi6sypg5E2jh1EyUZ8DQ%3D%3D\"}]}\r\ncf-ray: 9c300442d9af56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":768,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"70b64d38d410f2018c03665656dae530","sha1":"dafef40d1f5eb288d93d89cb45bdf9fe6cb00f66","sha256":"e6bccafdb5c6789f3c86c9e676712ec6047504dba4e31c83ca83a7319bddbde5","sha512":"e9e84637c6333feed6424ccaea7aa615546276d96f415bd7af230c5215976bd17b2273a580d7d3f7b08a6f64ca1259686ce4d4d8f1d1c9df4db03d6f7759336b","ssdeep":"","tlshash":"fb01ba7394c8d1e46c01f5b0d097030c0c4b016c055150177ed934ceb38fa3c712456f","first_seen":"2025-10-31T04:50:36.977248Z","last_seen":"2026-04-14T13:45:23.075108Z","times_seen":80,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/gme.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/gme.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 778\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 05:15:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68cb9580-30a\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fy58KK2OlrGnJiBtombDfZuNzCg1ilaMRcNckX1OM7lrbm3C3f0kxJQUGZNOkHQ2z3rbe9vvu%2F9xC%2BhOyLXwxMfiB2N1dfBzlA%3D%3D\"}]}\r\ncf-ray: 9c30044319f656b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":778,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x69, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3efa1b9edfb525879f6501008d17a520","sha1":"0adc708aa7e52d6173dfd67c4aaa442a126257b4","sha256":"4a55611f26e8ac4d912f4461adda73ff4d4d4ba15897af28e9ace19ea24804a5","sha512":"2996173ee5aa9071da737e049161596e38e0004df2d34105c35cb8331cf1120dc5ccd6878918be62d170f9c66f6d5c4160ae281290b98a670d0011e0fc53f89e","ssdeep":"","tlshash":"c60175e16e76b44ef241fc709d0e3b326eeb404eebe29115d7266d8bd8ba1413690845","first_seen":"2025-10-31T04:50:36.7752Z","last_seen":"2026-04-14T13:45:23.164387Z","times_seen":80,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/hnt.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/hnt.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2406\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 04:43:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0d3fe-966\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ziPHNZ0P3egszq0zzJqc%2FSTkBxF0Uv03Y32aXQosUkUU5bTNBL0sEeZp8m4RQDlnqJq0b1CwMIkDTtR1E2grEodg1UG3TLPK%2BQ%3D%3D\"}]}\r\ncf-ray: 9c3004440b1056b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2406,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bec99f9b7ca50eb2f86eac372bf70c84","sha1":"cf949397fc1bfa5738afc9f10987c675acc7267d","sha256":"78689338b5b79482a3d98a589893f30b2a8cb1907731a90c2dd3d92be40e5108","sha512":"436088e7b406314b4058724e94e74fe7e2e77f4e0fd74b31ae564d7a412d9e7cbe6719c75cfe2558f3acc53defd7f8c313bbce2f4ed6c787a58362feb378327c","ssdeep":"","tlshash":"eb413b7f09f138b4e8d17eac8ba2b6038637a4142c660071d18a59236016a3daa37f89","first_seen":"2025-10-31T04:50:36.935949Z","last_seen":"2026-04-14T13:45:23.126458Z","times_seen":80,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/aixbt.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/aixbt.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2648\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 04:43:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0d3f9-a58\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uEWDoBY7efd8%2FMLVxPjFAD39ur9xKMf5pF4cuO3ERE3turHZd0%2ByoU7YI5zGAocKE8SliNT77G0kH6a63lDenWeaB%2BMh55A4LA%3D%3D\"}]}\r\ncf-ray: 9c3004441b1c56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2648,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ba80d8499e7a1839b58a51f036349658","sha1":"037cca9a4e95739b0af0a9f54315a13788e345d6","sha256":"60ebfca1c62cf79b9e64c8fc0bb76750567d3672773e229e8d469a41db2ffc67","sha512":"98ea48fcc95f3222db5f26bfb996d3f3c8ea1d0fa11bb5b024852cca705aa43437435f7c55e6d2c28b32476b95f8cb2bab5c18e97881f1c89ff7da5c935920d1","ssdeep":"","tlshash":"9b513c6b091649fd4e32fce77b9cc7002642156f6444ee46701bb4e1842a86979774d4","first_seen":"2025-10-31T04:50:36.703863Z","last_seen":"2026-04-14T13:45:23.02064Z","times_seen":80,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/a47.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/a47.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2080\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 06:41:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0ef94-820\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7RzCkS7IFyBccRfOz4CQH%2FW4Efh1sCqEXHlXkOt84jZVAHgZNVfQrlmOnH4duzFDoSydweSThMruaFpphHMdTcLaBozgi4gdoQ%3D%3D\"}]}\r\ncf-ray: 9c3004442b3656b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2080,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c9a72195f9cff2c36e987354b3905674","sha1":"d2d6f450f6be9fde08e431ef1c22ea04a0fb48b3","sha256":"9e60979b600aea90cbd7585d792d61a2b8279da7af416ac9718b116d78e24340","sha512":"008c46170f1151087148fb3741b0d7d4c6f533ec737765e61288f2538d138c0f6e30e7899bc20038c80e85f7b0ec6dcbc41c1b61284542d99049613a9341ed1f","ssdeep":"","tlshash":"944118f264620e881c4cd73c3d4e2b7718a87a02d9ce579fbe8bd5cd58d45d2d1861a4","first_seen":"2025-10-31T04:50:36.794397Z","last_seen":"2026-04-14T13:45:23.098009Z","times_seen":80,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/memeless.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:23.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/memeless.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1446\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 06:41:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0ef87-5a6\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ezHuqGTOhmtPDllt2UufdfCCHJx9c6z7PZUadgriIPqIe2LQLMA9ckYR0RtWbFO5LSerSEImlsxqAqonKcoh0unsUpAefaRgDg%3D%3D\"}]}\r\ncf-ray: 9c3004447b8856b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1446,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cfd01eddbb15e359e03ad53666d92837","sha1":"0eb26e3dac7f952feaa7a43651314b5f4f2097c3","sha256":"66d7f10adff11ad2f1908d0fde2e24f7d4c1b7e69972c032f25cd27c16f588f6","sha512":"3a78b39c7778fd3a843e9ced6ef672068a5095117e4be121006ebf7609d996755f47c0e3edca5b2ab86f768888277948946af507d5eb6868b05e1e1087afb040","ssdeep":"","tlshash":"223119130f920821f8da7b7e28d4c0556a1348e6a8b0c3bf831592e0081dcb680b0388","first_seen":"2025-10-31T04:50:36.756083Z","last_seen":"2026-04-14T13:45:23.131715Z","times_seen":80,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/aura.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/aura.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1066\r\nserver: cloudflare\r\nlast-modified: Wed, 17 Sep 2025 09:08:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68ca7a8c-42a\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d%2Bw%2FbjDvGcRPe6CykZeZijUzZG5KzO8UYxs38PvPC9vtTQPHEHBfLtyuYMFqwG5SzmORlVZKVTsyjrljeHZy1NWgyQ%2BQNL366g%3D%3D\"}]}\r\ncf-ray: 9c300442693856b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1066,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f0e5fde1bb4f55984486ae24c234e604","sha1":"89f3a40e5aecb9ab384527f8a197bbc4fd3a05be","sha256":"313edb581e7fa3934d193a580b33095bece1e8c6cab9a62f880a0523e29360ce","sha512":"d3c069481c3e17f6acb882ef857a27474e116d2d7b4cbb14373818b1b5b602b43c69f84ae159da62cd3b7c983340d9dff385dff8cce492c0bfc54a19c3c836a5","ssdeep":"","tlshash":"6711a8d2d670c8d5e42279345d77a72b6939108ac166dc979105c0134dc7c05ffbccb8","first_seen":"2025-10-31T04:50:36.758072Z","last_seen":"2026-04-14T13:45:23.057597Z","times_seen":80,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/griffain.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/griffain.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 422\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 04:47:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68cb8ef0-1a6\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uVZ38sflpkIJEAu43xL6Ow1Mw6aJHu1V%2FJ0vflyfCPAPCzzcvd%2FzxqPthvw%2FFzd%2B8nL%2FbDK96n0kfYBX5wMvWCR8LHvOuwcrlA%3D%3D\"}]}\r\ncf-ray: 9c300442995956b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":422,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"29145c705a6fc62bc642f42311aee369","sha1":"5d541626f54b8ccb493c23341637f486b6bd462d","sha256":"c06582e29bd4e36422b53e335b968e12c62740081d02430fc073cdb6d44ae5b0","sha512":"c8fbab0fd8462ed697e9de317bdaf7a39368dce3d59ab0cd5b7bae2e98abf090be5d137b4d25dd47390c50a503cceaceb772cc429429b2621b12e2402fb8d6ae","ssdeep":"","tlshash":"33e02343410053a1468667b5033c33ce03c16d03d883d359d97623990c895097982c72","first_seen":"2025-10-31T04:50:36.974284Z","last_seen":"2026-04-14T13:45:23.163914Z","times_seen":80,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/luce.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:23.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/luce.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2218\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 06:41:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0ef87-8aa\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l0xcIS0I5MhlDXeEf3xzsfVI18qEmc5mqdyZayV04DZimDhT5JiB55GdP%2FkF%2BdoGD8Ij2291qzKgBisk2wkJdFO4J4C5VxiW2g%3D%3D\"}]}\r\ncf-ray: 9c3004449bb456b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2218,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4af966e5a0f96195d0afbf43e0199958","sha1":"68ab84e208214ea2d300519d9b6e373754b0fc16","sha256":"2457fad71ccffbf744ae2d86b1fbbfbe9c05a037328cd29e539816c6f110ddf5","sha512":"0ecb8f5f586c56dadf97d4e693269799494dfba66ba17178263d63bbdff77e6e8c44cee0c45114c5f24cd34697f4f58690bdb111ac140f6b592ff1543c4baf3c","ssdeep":"","tlshash":"eb41f821737abad2c29571fd146d3f80b7882f734bc92257525950360f9d8a55c3b49c","first_seen":"2025-10-31T04:50:36.670957Z","last_seen":"2026-04-14T13:45:23.107005Z","times_seen":80,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/huma.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:23.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/huma.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 812\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 06:41:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0ef81-32c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ain1h%2FvvmAy%2FDkDjsARHh%2BZBZxk%2FTkNIFe1rvgonZ8HGU4fz%2F4nlyq7hh3OckrK1XHnarOjHEyWI5a0rU3kyv1gLijGvR7rweQ%3D%3D\"}]}\r\ncf-ray: 9c3004449bbd56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":812,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b109450e98b04cc4db6515753bf93131","sha1":"43c372177e5c2da411f110d6858a2fbecef01651","sha256":"dd4526aaf9964f4d31ab2c261590bfdc7d204f191c31db088e0cd36acb46967f","sha512":"b7514fec7558d4da9e93d11e32c519b63ffdffe9b5ddf5484c5e01c0e19c6bf343f7274bab94cd37a6639f1752c19e978bb760174993f6c26a9783f6db1cb694","ssdeep":"","tlshash":"5b018a701f35b06ac4ff5a5af582ec64075f341d4eb1a44423c15f4a45061d4d7b674c","first_seen":"2025-10-31T04:50:36.818989Z","last_seen":"2026-04-14T13:45:23.027194Z","times_seen":80,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/main.php?type=css","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:23.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /main.php?type=css HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:23 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WNojiQoJwR0ErbM6ez5vk6R%2FZvcW2b5J7KSViQs5YomVfuyoK%2BTVwKpKeFBGAE8XXURXoG0NNDIMWDftXU7hggHPgkPyRM1iUQ%3D%3D\"}]}\r\ncf-ray: 9c300444ec4056b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21014,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text","md5":"0021917f529d7856acac89ed5f06b9e6","sha1":"69711804796a713931bfea8becc940529d0ced07","sha256":"6104b718fbb632f013d6c1128ca3980703429b77b1b6a1e1ebd3928c9a1ad38f","sha512":"46eb158441dfc7c690c5829d2d702234721a6a53f1761bdbedbccdb0c19e8e3a9fa5ba6ba10e2dbc4f886bf5fdd2f3380a3da94d953ae756cc0072d38778299d","ssdeep":"384:R2WY8YVUwvI+QMxy+xnUIhgfsrFEzuupSLX:R2WY8jwv9I+xUkgfsrFEzugoX","tlshash":"259295da2ba60001352794b477939fab337c8507c10addbc7bf5605c9f893dd91a2789","first_seen":"2025-11-11T22:26:53.037657Z","last_seen":"2026-03-09T06:13:13.24351Z","times_seen":13,"resource_available":false,"data":null}},"time_used":478,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":478,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/SpaceGrotesk[wght].woff2","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:23.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/SpaceGrotesk[wght].woff2 HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/files/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:23 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 49256\r\nserver: cloudflare\r\nlast-modified: Mon, 28 Jul 2025 13:47:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68877f86-c068\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=edIvrWENpgcb7uzZiA1PLJlagNVtz%2F4TL1K%2Blf7OiII6RUcTFSYzTqXolR5jadC0YrUWKxEHNbKiWOdk7zgNfp%2FFHXuOrPPsrg%3D%3D\"}]}\r\ncf-ray: 9c3004482f5656b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49256,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 49256, version 2.0","md5":"0c62a8f36c27538912ccbbd5de747927","sha1":"b4509f04a2bed1ec04e7f9ff4dc33c69e8e263ec","sha256":"8e085aa438094f11487a836652edd5c054fa6a96f63fc7c282105ee3a4b08c07","sha512":"a67cdcfd2c433321dac9322b221ffa7aa0eab3f0258d7975c84e891eddea41fd456ee3c6f7e67762853e023ba0ccd3d0586d5d549a63fc0ae4ac62f7533dc074","ssdeep":"1536:pKXTCNqIqI29JkBq+zhVpQ0n17Bwnfen623:pKXGoaWl8y0nPwnGn623","tlshash":"a123f1ce649a7d788870eaa31dd73f146dfc984389d6e6e1e1c2da8d21c971809e434b","first_seen":"2023-05-23T06:00:59Z","last_seen":"2026-06-06T23:57:00.411415Z","times_seen":521,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.0/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.0/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18859\r\ncf-ray: 9c300440cd1cb4f4-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"656632a7-49ab\"\r\nlast-modified: Tue, 28 Nov 2023 18:34:15 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 225088\r\nexpires: Thu, 14 Jan 2027 13:53:22 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=rwZYTlOcNlUa0DU%2FlvmDKNbbPs2oof8fJCuY3gf6cjkM6AIPKr%2BY2UttS%2F6qqlLY0ZDZTpe9VyLUlJiwLJ%2BZoainBIf00VcjIDLZCt64MesMxSwNG%2BmOXN%2F5AWjkwxSrlzTWsOvM\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102526,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"c43cd173eeeba2f72aa6b431d06b8c07","sha1":"427a692f7f39eabb3d5b8510aee2743025daf813","sha256":"c880eb3d25c765d399840aa204fec22b3230310991089f14781f09a35ed80b8a","sha512":"02f6f6422b83104bc1e1b64961d7edda63635528417ed2dd3c6f0527457b8ab4cb43c528d2a70fc61e0f96aec6e6d1a6d2b53ed523e1568b6d78ba41111c1393","ssdeep":"1536:vwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPG9ZpgmLCq:P709gMGFiyPG9ZimLCq","tlshash":"4fa3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2024-01-04T18:36:36Z","last_seen":"2026-06-07T07:40:24.828271Z","times_seen":11157,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":12,"receive":2,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/arc.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/arc.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 352\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 05:15:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68cb957e-160\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mt9VIqP7qNzmQC6XX1tQ6jyvkV5pkfJpXAuh3KYHlVWj%2FAvYXKuZsEbdeq0a0YAq5HIO1i9XLCpVAgmWQ7y%2BqcFxtf39QmnrIQ%3D%3D\"}]}\r\ncf-ray: 9c30044319fb56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":352,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x89, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"886213ed584f3096f4116db9bd2c253b","sha1":"dae4b536768edd0568ef755a4c2eb33add4bad38","sha256":"cf989a0d0add7fc5f7b4dc42b6031de28d3554e699fd9d8f06123963660d3260","sha512":"c28a5920b940ca4d1a31d4d2b68721fb511a1539424072253f75fc340eaa8745a493a6ce1af1e0c4e270b4d739c2129e5082c6b47ecfd4d89da1ed4a71f77f4d","ssdeep":"","tlshash":"2fe0c0105b9de48cd09bd99d4100912944debc256a22f07ab89cdb8520ba212b660b63","first_seen":"2025-10-31T04:50:36.948185Z","last_seen":"2026-04-14T13:45:23.109569Z","times_seen":80,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/mori.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/mori.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2608\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 05:15:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68cb9583-a30\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L2FMUvuRIxK%2Fu7InyBRK%2B5JSmBcDOV%2B397cjvPCBmlhViQv%2BtLuic0ey%2FVUhHGE8oulRSUS9Di8SSvDBvilCmlm1AmJw5Q1drQ%3D%3D\"}]}\r\ncf-ray: 9c3004432a1056b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2608,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"51cd1d70f32efec530ee7b233e833371","sha1":"6a421761ba953da7bbc40352b27c31d0fae9a487","sha256":"e41337aae65b1335650e93158f632a838ab25b5a47210d1e7cb43ba85a1fc1fa","sha512":"e7205a9608553e6bb43f331ce456e5593fad2a358be04061e8491c1eca77edfdbb315461862ee9fca2d9038a417d67976b0a8700065ae1b9383e30a4bece3548","ssdeep":"","tlshash":"16513cae1e528878d0d44e17c2c066b72881d533e804f9d334e7367b77c4b32a94c70a","first_seen":"2025-10-31T04:50:36.853391Z","last_seen":"2026-04-14T13:45:23.019599Z","times_seen":80,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/pwease.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/pwease.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2354\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 06:41:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0ef8b-932\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LiDblJ4zdCjyana46mmLqucN15xacmNPhMQhEAgViqMBf54G5Q1Nk9Osqz16EpP9FIGC8Zlb62J1gW46VdqNSzu%2FTy6xcspMSA%3D%3D\"}]}\r\ncf-ray: 9c3004441b2b56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2354,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"20492f42b6e0c44ff8fea5a93dcebeaa","sha1":"f17224e2403affa95fc3c14234e5c750b1f5f5c3","sha256":"1ab8c6426f3b80c42191c35f7fb76c97eeb44ba6319ed62fc22cfd44fc71c682","sha512":"ad6a5cb7e7b1281d184f7f220b1ff139e9d0ee9dcaf07c0c35a7bee98f18db6fa0c6134b4ecc2fafea1711dc2bdbd47fe430941602ae13a7d5c65d96ff343b11","ssdeep":"","tlshash":"10411a3e2a658cb76d36439c214f28807f0126d9142774ebf88a2245fe12d093768db7","first_seen":"2025-10-31T04:50:36.896886Z","last_seen":"2026-04-14T13:45:23.076683Z","times_seen":80,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/usdc.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/usdc.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2170\r\nserver: cloudflare\r\nlast-modified: Tue, 16 Sep 2025 09:45:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68c931b5-87a\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ackU%2FBwcn0uYtWwWWj1k5voJk7KFQv0NucxnQGk13ls2oJFGCMV0JzB2IGlefHaIzcnh5HnA9T%2FGlV3qXwm4DQ3bEjA1mKbdbA%3D%3D\"}]}\r\ncf-ray: 9c300440dfa956b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2170,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2b1cc9796258e8b444cddb152d10b742","sha1":"b194e7192c90979e8f27f659b29bc5e488ef04e5","sha256":"4829789fa6bf5a71d6dbf349d1fb1ef8e3f6f69cdd9e50d6e66c0a89756201d1","sha512":"28cae3a8efdd4499eeafab4eccd294ab8fa5f861e3d1a61b7649f07a90e7669e335572110e8a81ab05705d69f08b7b408e541b7db0bcde10475c47b9830042f8","ssdeep":"","tlshash":"f7411a17e95a7e5ae20bd8bcd121f76158517c545b8efe0733f8ca516c814079df00aa","first_seen":"2025-05-07T12:19:22.496814Z","last_seen":"2026-04-30T18:04:50.927931Z","times_seen":96,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/nub.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/nub.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1122\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 05:15:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68cb9584-462\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hRuA2jGcWUyTEQYGm5GYv4Mq%2FIzewlzQf1HLKmdWM%2B0XrK66k5ZPINXRgGLGb2CT%2B9BjlsJvCmmfhtV34u%2BNhMGCM%2BrgTjctgA%3D%3D\"}]}\r\ncf-ray: 9c3004432a1756b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1122,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"48d4b841849caded28441c9d0927d581","sha1":"20c804b45a3b783ac6d90d517d3ff3fcc9510f1f","sha256":"cbd6ee5250caa8b4396786a77a020cf8e9da855ac11165baf341abef248404b7","sha512":"d536dc7044aa6a7d81db6c4daf7f1fa22af76ed262d9cdc2b47bc4451398ef416af5f65b7cd81293733c4bfd04f208b3606c9c71818ce75b0c2dfa47efd0b95c","ssdeep":"","tlshash":"2221f982093356cdbb606a648ce20f49454648fe4dd644d8f643646f17d02e7f30005f","first_seen":"2025-10-31T04:50:37.003074Z","last_seen":"2026-04-14T13:45:23.012831Z","times_seen":80,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/pcule.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/pcule.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1472\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 05:15:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68cb9585-5c0\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HRGclB7%2Fuvo9IwegBYhh%2F36BnKdMdWGeTkAxBgtDkfT%2Bj17SEQ8PE7e1uonWpyYAvOgboCIoWJoNLK%2B3Pe5MeCXx8R1IkXsMRQ%3D%3D\"}]}\r\ncf-ray: 9c3004434a3756b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1472,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x91, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"560dce60af9ae8c07e01d284a86c7b22","sha1":"2a5a876211e55692205a461c5cb1742dd9726c6f","sha256":"211d7c0f1df78daf4139733eca3983efb2386b09f2da12fe763145c3f95434e7","sha512":"cc101f3219a5cbde846dcf1483545c5a50ae6ab9a525d18d295dfe6c0df82d89699c73516f5a36c93facdb74f6125e8865a339af5a8c3e243aa99f141dc3c236","ssdeep":"","tlshash":"d931c9864c5324bdd9957ec885f9f2e4eaa671bec528f684132d61318cfd02193140d5","first_seen":"2025-10-31T04:50:36.701042Z","last_seen":"2026-04-14T13:45:23.040828Z","times_seen":80,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/fartboy.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/fartboy.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2220\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 04:43:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0d3fc-8ac\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WFiBwh6qMntM4OkoNhBstQ48HQsAxen%2F83LPveT4qHqh2sGs8jVUBp09MJ6yCo9OSSdlbwxnSwAPjIHMLx1zNUdOug6LPj2uuQ%3D%3D\"}]}\r\ncf-ray: 9c300443dacb56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2220,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d5faeb0217ae1dcc345f6b0c424e7b45","sha1":"08cf76f9c325db778a8e1381082a19f6b6d07d81","sha256":"1e25bc27c657ff46139836b2f032f368e4c0cf147d2c2600bb44af3fd2535b29","sha512":"9452b2628debac7501528faf5e15387ca23a9e0ef82c11d3dd6cefee82b8bb2040dfa0d24aba58d3c55cee9157aaccf62ffb4da489ef597ae99580d3e52cd75a","ssdeep":"","tlshash":"f8412b2fe850462ae805e5c044d9f41af1db0b0d7ba994a7c38d6f18c06669192644fa","first_seen":"2025-10-31T04:50:36.868688Z","last_seen":"2026-04-14T13:45:23.037499Z","times_seen":80,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/nos.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/nos.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 992\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 04:43:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0d405-3e0\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nVhvU4THwY%2FzzWm6Fcs5fTvWjDz0nOMQV17cxuXite973v2X4dPuIiU%2B7MXChK%2FHN9VHG%2BRcrJFNnJLTnxFLVKxTNfpIYVEW7Q%3D%3D\"}]}\r\ncf-ray: 9c300443dad456b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":992,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"864b2323d8987ab96d61d4166059e55b","sha1":"0f491b8534524aa916953c725d870bdd1952ed95","sha256":"391029cd327a3d9eba39afbe211545b89c32069bc4f74e33631aa1a53d461704","sha512":"77c953a7d0965f1b2e9f9d2cd49419bd564edc7365a7dcd143ded780b9587dd06b0356df586806cee5d4997ce24c935ef95855877eaa17ca1f72ae587419345d","ssdeep":"","tlshash":"e5116549ffb03b1aac1776a864e91dc78c721105065b058e55fb843398b02b8d505b02","first_seen":"2025-10-31T04:50:36.876461Z","last_seen":"2026-04-14T13:45:23.08984Z","times_seen":80,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/mumu.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/mumu.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1464\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 04:43:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0d404-5b8\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NmvSBumgstI%2BdZrkpnP8rby3v%2F8EuLCApNUdkwSFSf2M3ud2InmeMRgnYqtUObIDT9N2kltI6YSjSTy5UshHTJ%2FVT2dwaTuadg%3D%3D\"}]}\r\ncf-ray: 9c300443eae556b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1464,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a65b266d57b497052b76e0e4198c1c5a","sha1":"ab644ff17b3e2637fec74e78ad24c41a59a19508","sha256":"6ccf85b4c76d65e6f7206dbae03abe3ed470c650b90365990c4166118d132ba4","sha512":"fafac2586586f4075fec45040ee1822f1a482c84c9efe76faf580716ab4273fdcf608c6fb370dbcc9614951d76acc49941fc0af576454225e9ff20b5d48c7e11","ssdeep":"","tlshash":"59313b28ef6909e92d3ae915dfedb182e58500481371074c81730efa8105cea62c6f93","first_seen":"2025-10-31T04:50:36.96392Z","last_seen":"2026-04-14T13:45:23.072346Z","times_seen":80,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/dsol.svg","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/dsol.svg HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 16 Sep 2025 09:36:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"68c92f96-1f37\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O%2FUcYakiiFEnwHGqy%2FZgy8tHTEWjfwcrv1WyX%2BVVhwsIOJXZvflgDCKiNCYV2GOon1xPjFtfUUsMXxwvL1qL2fnYdvutyk4e6Q%3D%3D\"}]}\r\ncf-ray: 9c3004410fe556b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7991,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"53b1389218ef221834c9c151014a0843","sha1":"386fcac9a2f6d9e8107c7b7383f5194cadb588aa","sha256":"3f8b6763ca76ca895c81bbf33aea58855e9a3a1e27530351c4ad7b0c2ace5290","sha512":"9bd422474b5f293c5561005ef15f21122301db9d63495c2e7acc59437c01718316fd43385a53b69a4c26f373dceed6a7b6c59db2eb9d335d65fb947bc6102f1a","ssdeep":"192:UWpGFsOZSB69c9WpGFsOZSB69F9WpGFsOZSB69Z9WpGFsOZSB69G9WpGFsOZSB63:0949t9B929Dt","tlshash":"31f1f1f6d28c83e990078778e853d9cd68882c7e9f915d8502c6bfab54b00f14e59df9","first_seen":"2024-05-07T00:26:36Z","last_seen":"2026-04-14T13:45:23.122242Z","times_seen":85,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/gmt.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/gmt.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2348\r\nserver: cloudflare\r\nlast-modified: Tue, 16 Sep 2025 09:29:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68c92e10-92c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ps1V3igdPVw%2Be84xJk7TxAQG79idePi607bzkTkoTJjmxL9EllsTgbdDrpaWfEFiMgANep4GK95XhzdwruHsZne8dOjBqBEcqw%3D%3D\"}]}\r\ncf-ray: 9c300441f8bb56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2348,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f18bbf73d3b9508e435bb984166c9349","sha1":"019a45172c382a677d74d06488e76020e5a1b966","sha256":"28f58cd63ab9353a6a07d31f4e1b7194771e8f29b5cabcf09756deb16acdcddc","sha512":"6feece22442fdb24307713bf3a2fd1c4b664da0be3770daa667ee81d3d443c591c545ae6a96bd0112ba29258a3553e6ccd5a7a3de18a313d12a2ce24ed8fb071","ssdeep":"","tlshash":"fa411d9386f10d75e30535bed15d7f00567399c5c91784a5f8cb852b2c6f8224e9e8ec","first_seen":"2025-10-31T04:50:36.982122Z","last_seen":"2026-04-14T13:45:23.044149Z","times_seen":80,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/goat.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/goat.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1492\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 04:47:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68cb8ef0-5d4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X9ijkAp5iPFQs586D5tR8OE0qAkiFEUmcjuNmtVF8kW8gWwYk83BX0z9T6KB7Mclb17b40VlAGiHXKqPr0%2FcXKNnMbo6AwQOMA%3D%3D\"}]}\r\ncf-ray: 9c300442794756b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1492,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bc8b2af6e2767846e8ce460afa140163","sha1":"9749e1ecc8e3a690f82e9234e4b155d2dada5fba","sha256":"cf1e9c8b224416ca3fcecc49d8b99258e2886ec0fd3c741d854624d7c59a1e9a","sha512":"33edf74311bd16007d03aecf2d7da037fcf7317ff4b5f9b4bd764c1de613cb5a109282c61613675c1408e560f4800a89d28665a198bcb009f9a49ab1705a308c","ssdeep":"","tlshash":"0331a591e39e272dfd002b34b4d48bb0c6fa3e118fd6d366c64405659eac9c0da6c79b","first_seen":"2025-10-31T04:50:36.922382Z","last_seen":"2026-04-14T13:45:23.148232Z","times_seen":80,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/cloud.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:23.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/cloud.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1842\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 06:41:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0ef98-732\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FFI%2F0Sofxa5lkMy77V8rb9wZoQBRg7hjj8XKPtk2qi3gDxp7Luk%2FAIsdE628NTBfXXH%2BQIlbNFiXSpAlmocejjyT9M4eVq%2FQ7Q%3D%3D\"}]}\r\ncf-ray: 9c3004448bb056b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1842,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"774e1c3252064bc07f6a13b3b3058ce9","sha1":"87a70896a048a1d14cdf5dc4fb3238e406a60f8b","sha256":"e9d76639c3bd2994bb2ed09b9657efc00a9ca707f164b8d6a35e36d0b24c3f93","sha512":"77ab50ab797c2ae14d9bd69cdc30a48d87ca08c68119ec347f080b4628ccfcd0ef4c2ef5b07fc72b1dce20261a93e8cb8dda843cf0675723a8fde131ae82e245","ssdeep":"","tlshash":"ae3119be1184ca716cc2b93d7cc54a660b071b057dac890373aa33d49d0b2d4a83df06","first_seen":"2025-10-31T04:50:36.916747Z","last_seen":"2026-04-14T13:45:23.168531Z","times_seen":80,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/tokabu.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/tokabu.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1534\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 04:43:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0d3f7-5fe\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sFDnepprnMyVtn9qlUyDLtno0cf1867QB9I6UOMndoPFsDWX7FCS4vOULekE7NnSlb0133AikSgXu3lx85TuMBuE5bPwe%2FwPTQ%3D%3D\"}]}\r\ncf-ray: 9c300443cac556b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1534,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a676ef899d29975341f3d233a31b43bb","sha1":"d5da742227d24bf786b1c3d591968fb78752003b","sha256":"a1dedf0e7e6994d322734ba4b8e51800464bf1d7515ad4f282c29bae2bf1c572","sha512":"81a3f73d41754431a5d846b1f66e5c9ae710eb2974b9acd2b0510d3e78986c06809f81407885dbd82d9f3e82094a8c93f7e6f383547d82f788a56e041bfca0f3","ssdeep":"","tlshash":"cc31d8a157102759f70fa27898e10f21b7627ca6640616b6a00881660796ad9d87ef4b","first_seen":"2025-10-31T04:50:36.88379Z","last_seen":"2026-04-14T13:45:23.056535Z","times_seen":80,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/$collat.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/$collat.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 700\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 04:43:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0d3f8-2bc\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jN4aIFjktlcq678qV8dJBFH8KJeJ7bopaGz9LAJ68P5yMRB61r8TTmoJo6b1Jr5uId3EFVNFcTH1GAX9BKcJ8hsfMdH5u0Z80g%3D%3D\"}]}\r\ncf-ray: 9c300443cac656b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":700,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1e2d39790592b230fa4cb0ef8db46495","sha1":"461a6e4414b8855b163f3d5907577db2abf2517d","sha256":"4a6158e2fdb26e242c36c26cd7ce8f8601826cb4a65ed2dc0da708a50a335c69","sha512":"5038700a18f94449122e8e50d802aa38af67ce28c4deb0eedf6c6849074e9528fbddae36b157471e874158841d21f12a89bb84272e4e31d1d072ba880ff23f56","ssdeep":"","tlshash":"7e0194230f5ad013498fed8ae490883c00c267546b2db96a05ca56524197cf359a9300","first_seen":"2025-10-31T04:50:36.909922Z","last_seen":"2026-04-14T13:45:23.089336Z","times_seen":80,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/fred.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/fred.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1852\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 06:41:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0ef7f-73c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=61VH4pGo%2B4GWfC5ZlANacUQvWBpZ%2B0ZHTRmDxg1mkQ4bZMM%2F40Ypq%2Bdv4loefSoGGGj5aFM9pvVFMqVSKkW3%2FFnBOaYB1XeWOA%3D%3D\"}]}\r\ncf-ray: 9c3004446b7556b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1852,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f7493da8e714519249d8802cb754c408","sha1":"e96874641df148fc109d22755c37d45440651098","sha256":"515a61d471ac9cc8b15a8e38acfdcf7bb645bf5a02d22627b0c461abf769aaf5","sha512":"4331f6687e836bff6b07021bb1dcdf9ef98192edc6811b8f0b808ca3c30b6ed90233536c9dc663d9d5dce807d0f025dd717b513d16243c9e80e567084f828011","ssdeep":"","tlshash":"723119e128e75605c7e5e27ec98242e2832be00c184e08c5c8e16593ea3d822ed5f9a3","first_seen":"2025-10-31T04:50:36.815774Z","last_seen":"2026-04-14T13:45:23.11273Z","times_seen":80,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/natix.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/natix.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1280\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 06:41:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0ef8a-500\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6%2BNSK4r7P%2F5RDP%2FMmB3uWf7Z9uH072FN%2Bd4gq8O0lOXjkVx4X3FhoPQZ5hSso39xI9NGUASW%2F0BeHHhqiore6kH7GgN8yNIt%2BA%3D%3D\"}]}\r\ncf-ray: 9c3004446b7a56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1280,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"eec9fb39920259f780a7f043b6fbf91b","sha1":"208ad11ca8b9394aad88cbb9c79a34bc5b67e573","sha256":"c024cd77a0ab73d32d876352d5e629fff45ecbaaa9b377772471b91a4eba63c4","sha512":"1cb25472e4ff5e3fdc1cae7d31babb9e197ed99708504c10beb21646697d767ac3a924cdf6ff0abae036710a385152830bdc9e5a3bc5395d36651175eee252f6","ssdeep":"","tlshash":"b821cb4ac21221d7ab6305e423c51505ed1fecca96c1a11704f72664c9a4f2c6d6c2f9","first_seen":"2025-10-31T04:50:36.779868Z","last_seen":"2026-04-14T13:45:23.15049Z","times_seen":80,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/dupe.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:23.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/dupe.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1026\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 06:41:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0ef99-402\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YHen%2Bmpcg7%2BYRnKkkCnD24yQ8RrlQR145icsSYvicubNPMSyw9%2BCag0kZ%2FUz6HAeN9PtKWAY0DdScB8I0IHm1JLQ35y1zp%2BCgg%3D%3D\"}]}\r\ncf-ray: 9c3004447b8b56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1026,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2e8675b6342cf88202289808f47f049c","sha1":"92507587eae7b3a0fffe2103eb9ced3ec96c72c9","sha256":"bf5b8dae96c220f4ae43d068570d4e6997e717221f2d0fd6183cf2170eff0b7c","sha512":"a9738c44622548ec99d63411867428825d86df16988910561a028722a6542ba1a8d928d011718d8a98e2156501f030bec30b0dc8bb9285c76033dd7eb033843a","ssdeep":"","tlshash":"9d11b51797065ce0d4d6e8f1ce6f6860941a68768843d89a068992c15f7560d80f4d07","first_seen":"2025-10-31T04:50:36.994427Z","last_seen":"2026-04-14T13:45:23.084735Z","times_seen":80,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/mew.png","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/mew.png HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 03:50:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"68cb818e-eef\"\r\nexpires: Mon, 23 Feb 2026 13:38:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 896\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8pEIc5wPR9gW91%2FFmLYcn7KOSrhhmbzVmHZfx01X0nZiqUS8WDwebVexjk532PM1baCPcgdIAy%2B0OHBWcrTfufvWtRWYuj5YOA%3D%3D\"}]}\r\ncf-ray: 9c30044238f256b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3823,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 90 x 90, 8-bit colormap, non-interlaced","md5":"c68928f589405abc4ecd6bc53c28958d","sha1":"d99491e86f5e76c981dc5383698cb5f3f63029cf","sha256":"3093e3a988753fae305e52cb8208bcefc2908143c58e7088faf6f382ac0594e3","sha512":"bb6833f6c0566a5196a38146417e08791f50a66311ad673ba3bfa8e878680fdc9d87958e7ddd0d1a4dccd06be53d7bb591a15b5718ef1885ec85422d13aae1a2","ssdeep":"","tlshash":"4e717e3245d9c0b4f59608ff385a127ded0c9f601602908b15dd7d9f7db619a84d225c","first_seen":"2025-10-31T04:50:36.696443Z","last_seen":"2026-04-14T13:45:23.118912Z","times_seen":80,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/nobody.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/nobody.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 932\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 04:52:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68cb8ff0-3a4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A506tgTmdjY8kLgmSrseOUpWm8kfRsMDdrTxffM3%2B%2Bm3rD89Yu%2BE60GGVNuExSPr9Hje9j4Kx1Sxhn6rL1TqknKskxefgqQ2YA%3D%3D\"}]}\r\ncf-ray: 9c300442996156b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":932,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"50cf234ca25e823f1c35bd8259c9829b","sha1":"31ba9af4ec48a240720cdd3264d647ab2bf9deec","sha256":"0113257d43eb4964175378289a0bf014658fb1fba853ffea076ccbc1d261329c","sha512":"0cf4b1d1d2c00ed944c21c9353779ca3dc9f636cf1ffe9c931616fa6695aaebef5abfe1cb3a74eda062db05f0e3fdcd0c9fc353952a7a3599d36d4dc0f711325","ssdeep":"","tlshash":"de11fbc69a4f504ced535f187d09cff4240f19749ed24534c60ddd054a3a753442fd64","first_seen":"2025-10-31T04:50:36.725158Z","last_seen":"2026-04-14T13:45:23.12379Z","times_seen":80,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/snai.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/snai.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 574\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 04:43:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0d3f5-23e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B3uFq5uQLKdX6yujwOd5122aheBbLmSD%2FzRw38lKV56%2BC%2FixJXy%2F%2F3GZN7DpKQt8Ok00jZ4fpP%2F3JK3wpSri8bGlImExOKbv1w%3D%3D\"}]}\r\ncf-ray: 9c3004438a8356b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":574,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e06b796b91efe1b0c8c7a6bc9b98d17a","sha1":"e64a69c8d79dc8dc2a48b4d820727bb62e803402","sha256":"9cdec18ac22f628cf1bf0a56a9594b93ee7f110c2fd58dd81ba44a824c86678c","sha512":"96002bcc32561b722fb4c892e2243298f9bc9318d5649403601ccd556b4f9dcde95114909d37b51d986b0dc7d918797bbebe85bc1bb059deca6dbe4158c9a4df","ssdeep":"","tlshash":"aef0415188fcd885da204e313159409ee46b2408ab88d16c181628844dff3537b60222","first_seen":"2025-10-31T04:50:36.753929Z","last_seen":"2026-04-14T13:45:23.125369Z","times_seen":80,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/wen.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:23.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/wen.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1356\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 06:41:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0ef92-54c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FPPxiEIFDjuYfT%2B3K6UXlgVAF7aQC5nC7hcNjp%2Bjrj%2F5cs%2BNMiMZcM8sz7MOlzVSkbBomHzWeruV7fyh3lmsj5s3VGiBNtczPg%3D%3D\"}]}\r\ncf-ray: 9c3004448ba556b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1356,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7f1b454f2d8c91c82cf692160812b188","sha1":"db16bde22afa68cfff3e3622412cc60b1817183a","sha256":"7233054b48727bb5921efa53c57dc3b69a235cd47f60d6407cde50c8370bb610","sha512":"d0b7b1161c606ad07e006308680f83a981e31188e71319425ee76cf16f3c2da00dee4a30dab6a6ec4fe9d768417cbde051d67f088b11711c2df76cf64a2ff86b","ssdeep":"","tlshash":"b221d80d45b430ecb80270f5c0f4201997e38856aa0a456b1e373c99ac24b19269fde9","first_seen":"2025-10-31T04:50:36.924161Z","last_seen":"2026-04-14T13:45:23.132645Z","times_seen":80,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/purpe.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:23.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/purpe.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2674\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 06:41:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0ef8b-a72\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5KFgIhebI7ONDPtfRxG%2FzxdB7wldt%2FdSlyYR9cPJ%2FiYyuJde4rUpA2Wj43FCeCPm4qqWFhUyHZqNTYxr%2BynzJZYI9H8cNCvw4A%3D%3D\"}]}\r\ncf-ray: 9c3004448bb356b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2674,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e9fe753e81e4fa8eee49869225c24bc4","sha1":"ea25ec8be3d1a0d0eb7d99bac3e3844f635f30c0","sha256":"92d1cc719cc5813c722fc2878d10029cb7481f9abe20f9245f11b8d1d14aa517","sha512":"709d08020e20d9a7467cfbae80f9e3ae18cd574db1e099f2b0fe0b01b27d7a539a26a2d7268b5e7ce9d94f93fc01f1273ff7f2d6b92e126d1ce765898e5b32a7","ssdeep":"","tlshash":"9f512c5927754bcae2e1333d65819f01fb4bfe3ae0c83f9d84042c776648580772e292","first_seen":"2025-10-31T04:50:36.840474Z","last_seen":"2026-04-14T13:45:23.034303Z","times_seen":80,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/trump.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/trump.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1466\r\nserver: cloudflare\r\nlast-modified: Tue, 16 Sep 2025 09:41:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68c930be-5ba\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dlMklZgB%2BgNt6ZpbTldphFXYBGohnReGgz57Dh9WytdRK2aVheLrapAb66xNdL%2F0TLBAoNfNgBE1%2B5izC3CbieoVyGeNdM%2B9aw%3D%3D\"}]}\r\ncf-ray: 9c300440efbf56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1466,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5b7b68c9acdc17a186862f56a620be7a","sha1":"57961a3844c4515be40b722cb3ec5810c40c9114","sha256":"edcdb92acc20730cff950c0e6dd19126243cb26ec8d7661630e67f1488c84fec","sha512":"9281323ce0bce6546a0842f4b7134cbef2744fed833333bb581694ac7eb0a9e0ee714e29c0f6ef3359ec866ea58a81109f5ff1a57c036e2f15f778e4656e9566","ssdeep":"","tlshash":"2a31b97dba818609e06445bcbf3723557495e0c5408891ab241e0f18bc9f88c5d958e0","first_seen":"2025-05-07T12:19:22.490812Z","last_seen":"2026-04-30T18:04:50.930627Z","times_seen":93,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/eth.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/eth.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1460\r\nserver: cloudflare\r\nlast-modified: Tue, 16 Sep 2025 09:35:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68c92f54-5b4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m0XnyDwXAx1mP3UrUNYYtgRRfCXUaqwkBrKJBBGY6aUgcKRRoMKJGX8i1P%2BzyMrLeLkJzLRzB3l84gugFIRq9CZ%2FjpEvvonq%2FQ%3D%3D\"}]}\r\ncf-ray: 9c300441280a56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1460,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7c33fb710fe13a417b44e4474ffe4167","sha1":"6a96bdee97e8bb16fb42d90782cd396033f48d5d","sha256":"12b13327e0850eae05d107d014f7950ac6f228019cf2873b5f384abcef40e244","sha512":"3243a8948c9768af94c8d85dc7de2d7485fab469adbeac13779bb2d92e0f0b34a758f5f0cc4d9a7d7a0a08f52ba6c4d35f65e40393fb5034658b6e69c157c542","ssdeep":"","tlshash":"d031e6139e971ec4ca8625fca9a3b3468421784642b948b94a4c4b666e87c356ed39cc","first_seen":"2025-10-31T04:50:36.880197Z","last_seen":"2026-04-14T13:45:23.014857Z","times_seen":80,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/slerf.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/slerf.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13766\r\nserver: cloudflare\r\nlast-modified: Wed, 17 Sep 2025 09:08:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68ca7a89-35c6\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1JFQBfDV0lfLhGtbVycmZhDUvqGi88lUvy7QAVOHPZ7s2NPfnB00PW7shETxrxlTmzmUimXq0JQ%2BrdBn9x%2BHrWRFT9Ukad0Kow%3D%3D\"}]}\r\ncf-ray: 9c30044228ea56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13766,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b17efc7faafe7ce6ab289c344cb5a7d6","sha1":"6f30ebb535f02d9875d83f0738fc6e608daf43ee","sha256":"93518f3827ee1246006ea0d2e53258fcdf404bcf877251171dda6a34e8667079","sha512":"7cf9f8006a7dbd13d2ca4fa8642b0ca12150ea80d285a2d81c70685affcef42fe6e6c4a25fa1c9ca418361a878358ea4ec570e663f92827b791313601bf5e122","ssdeep":"384:fjeRUjDcDJykI9J+yPz3HKBPa0KUxfVFI41o:wscDgkIuyPDoCWfVFa","tlshash":"e552c085a2b5ca65e80082ffd0565cafe6232087e73937cb839f87af7510fc2e644155","first_seen":"2025-10-31T04:50:36.991077Z","last_seen":"2026-04-14T13:45:23.025085Z","times_seen":80,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/tdccp.png","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/tdccp.png HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Wed, 17 Sep 2025 09:08:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"68ca7a89-b8c\"\r\nexpires: Mon, 23 Feb 2026 13:38:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 896\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9zHTPrUBjMdmMMxXm90Q5voxTCIh7fv8r1%2FVBYUNeoLUUMVL6CIZHHFDjEp6PqbyTSV2pRqiyxkO3nF8uuAEpCYpTvcVXvXyTw%3D%3D\"}]}\r\ncf-ray: 9c300442591d56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2956,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"917b7e8b3651441710e8e7a841e57019","sha1":"bc232b09cc496ec5fd10b9d957c4bdf7334fc0b5","sha256":"82fa67f32191e0a48f3d4037f73146c8563bb7bb5ead8e88865a3ba937827893","sha512":"075dff3021dfc2bb9429faae2a40a86c40d41d4d61c26662a3db495897c346aee95a437622b7854b324ba21abdf316161d1b20ae9e7c41b41b1bd0d2f0227f28","ssdeep":"","tlshash":"21515a6902a30e2caba327f21dbeac4079a07048df27c2685723097b25b46c3a218810","first_seen":"2025-10-31T04:50:36.871786Z","last_seen":"2026-04-14T13:45:23.052503Z","times_seen":80,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/kori.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/kori.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2006\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 04:43:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0d3ff-7d6\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=13b0FygZ9oxErzOkLYgR2ddac3Ly9wTjf5csQ6fZWRs2ua%2BA1x3SCSaSyWN8U4yi2s6Gpeoah8kBXuat400AUoi66mDNrTNPUA%3D%3D\"}]}\r\ncf-ray: 9c3004436a6656b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2006,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8a3c366d36806dae646b72414832b6d5","sha1":"5e9d97533f99ccf7fe374c850831422c992d5ca0","sha256":"60ceb93a5f385fb5f6dedd334eb4ef9d5d2b3d564c3793545bc106fb19dccc5e","sha512":"55fe3e8f3e4fab0fd29ccfbced10f95455ddb8691c4fa0a5fce31e81b359cc99b08c6ed4fe5fdc6067a10e1e4d12f284525662db79b93f7ea2b615db0345e52c","ssdeep":"","tlshash":"e5412c1ce2e8c2a987573c4ed1640632752beadfac34eb6b0895cf325cc0f461a01d55","first_seen":"2025-10-31T04:50:37.003894Z","last_seen":"2026-04-14T13:45:23.06503Z","times_seen":80,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/valor.png","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:23.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/valor.png HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 01 Dec 2025 05:23:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"692d2644-a33\"\r\nexpires: Mon, 23 Feb 2026 13:38:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 896\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hcJdHhuNpGKjASNUK2%2B73WDclcowuQBuQbCm7BCpoIb7uNrvGwS57SD631wF2DmuMKPk1b24zSXRjxsvQBQphKLn8kH7Ar1nWQ%3D%3D\"}]}\r\ncf-ray: 9c300444cc0c56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2611,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 90x90, components 3","md5":"45489a98c1bac4c45028346d626ac0ae","sha1":"e27cad3223052bbe3f77df78cb35f8695e9f6c98","sha256":"4750ac5dbd97f77f3067d455e1330461ef7c9ec0bf5324cef27d9fd232e233b3","sha512":"a460a3d0c208506215e0d0b73027c53e2e670ab52aac2e1023819e59880bfa8bd5fb2a68c546d23aa260029b45fe1c5902e7a32cf09ff3f9e424d9fbde32f706","ssdeep":"","tlshash":"dd5129d787472483f99b38768331e27b25875c6081e21ac563085c47da2e0f56e02258","first_seen":"2025-12-07T05:18:34.054679Z","last_seen":"2026-04-14T13:45:23.085296Z","times_seen":72,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/main.php?type=js","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:23.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /main.php?type=js HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:23 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eUdBrRhmZHTIf0%2BPDnHZDE4LsEjAhbJepNiV5WFXhLJ0xEVXhhb5v23MR1ji7xtCv3L2kFbewPNFCcSG5sDk4KWM%2BzrQrbZjTg%3D%3D\"}]}\r\ncf-ray: 9c300444ec4356b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10323,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"803c770958568df36604349f4c138e38","sha1":"b137a18a4c325cae854154e10574a0b2dad10559","sha256":"f29d175a5a550f27b665d83030569da410f979dad1d6fd81c817fa4bee4e232a","sha512":"7a9d30d42e421cd5f760237aa4209328b252949fe8a73ad436507a40eecb4ca265d7b8efd900c28298d6f7c7206c5c23d29f9509531c3c452db0a39b1c6cf6d6","ssdeep":"192:SPuyS6EvZNlFielilPwQ70GrlM3ovyE0ZEzW1tOhandDJnmn98ApTqt7gTSoYpKp:VIUfl3BQLlZaE0ZEykmiSpXVptg","tlshash":"1922719cb4b6217086f362baa7dba715373520077084c9483fadc1c41fc1aa166a7be9","first_seen":"2025-11-11T22:26:53.093024Z","last_seen":"2026-03-09T06:13:13.044075Z","times_seen":13,"resource_available":true,"data":null}},"time_used":473,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":473,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/dbr.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/dbr.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3698\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 04:27:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68cb8a19-e72\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kTBd3dV%2B9MhX8x2yC4Eb1KmoAFWmnjuVVgE7LawIZqKiN7a3sWTpUFs2VIZeXpecyJFHMtOm%2BKOTXliAkNk%2FZCg8xorp4M%2FruQ%3D%3D\"}]}\r\ncf-ray: 9c300442794456b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3698,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"01c743a994d0b584ee5b74aeb99bbd65","sha1":"990095ec62e88ec4faa16d4a6119b4cbce91071f","sha256":"48e56bf6ff547f6c356f2d96533015710b91f47e7c54805151f78750be8687e7","sha512":"604d29c40132af217385a70b64a739897efdfde12d0a9bea03cbca8457f2969b9de81b4fcf2c62f62a71db4e94985fe9a902d0cc8e2e358bbfe85f854d96f288","ssdeep":"","tlshash":"9d715e5ac7f10c115c1c931713fe2f169096e865749e2f9dc2d3a7d52eeb9e65002512","first_seen":"2025-10-31T04:50:36.773613Z","last_seen":"2026-04-14T13:45:23.103861Z","times_seen":80,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/jellyjelly.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/jellyjelly.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4678\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 04:47:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68cb8eec-1246\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vTuw7TgxO5mZwyTTzM0BjOJcSvVDKQf1YcWuAyYcFo%2FFvUZGJeUoFxtP4J7S7TptxtG%2FgkIj9sz78MvBzWoDJ81XheSafW2dbg%3D%3D\"}]}\r\ncf-ray: 9c300442894c56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4678,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x209, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"69b7d09cb0b95b83fe294fbb9cf6cef8","sha1":"fb704e8ae24fdd2de9cc59be56a92cc54dd5baf8","sha256":"f15ffa38698db4a33fd7d40c27f799a01288529e4f2aa9db1adb1120bc3e6f61","sha512":"c8ec01dfb8d3e16ec5a61849255c33e0301006706825b9114faf2695a489304d1fa5bbb72de8ccc31a9826ad2f7e3e2eaa08a045b30debd740115d3496bc3746","ssdeep":"96:GfxtGpLGJ8tWGWjYDukWPsWBs/ajNfIj1vy6vDFUPi7VQkDz1I:G5t0iJCK9R5fIBvRbFUqxzDz1I","tlshash":"cfa18e192263026ff13f9636d2dd678e8b06ee458034f20d98b1b36b55168761682bcf","first_seen":"2025-10-31T04:50:36.664449Z","last_seen":"2026-04-14T13:45:23.134105Z","times_seen":80,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/pythia.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/pythia.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 982\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 05:15:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68cb9587-3d6\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rfO4LW4vzs8diCspr42WJukb0j3Z3AKqclBIrdF%2FI1af%2B1oJ%2F9E8QJMNcFpWq3puUeXq2CjTStbmeAa%2Bf9tU6XClcilxIhIPcg%3D%3D\"}]}\r\ncf-ray: 9c300442c99a56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":982,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d9b22244032e62070307c6e6a9babe29","sha1":"a1426181b6d9c374a675a4e13d1bede255fec9cf","sha256":"2ce1185fd5a956399ba52422ac237c7102a1b19811d02aef074db14fe1d94df1","sha512":"1784d5bed2e8815adbb673b709ca5ecf6be35fc2209a449d4498027b250108c91f9f1b650b1c20ca2d566371fe852279fcd7d957d1d360a66d8591ddb5ec3951","ssdeep":"","tlshash":"0611cc664a2b28b5f1466a0df13d6d078c21856cc6fc1de46819bbf30cf0224f1b863d","first_seen":"2025-10-31T04:50:36.827315Z","last_seen":"2026-04-14T13:45:23.108958Z","times_seen":80,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/jailstool.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/jailstool.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1370\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 06:41:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0ef85-55a\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UuAXrq5I6wcQFXcT1d9pvR0IN4DLEH0mS6skMowBY5p1cSCVRf8Gclun5GE9SuVk130LCdmh8OiwmCVJpnvS4h3IhOzTip9EPw%3D%3D\"}]}\r\ncf-ray: 9c3004445b5f56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1370,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x80, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0e49c7fdccc3530ff2ed90ec47e80ca1","sha1":"9fc7a011fd034fe324039ec4792303468547be2f","sha256":"496cd7599cf28ebbf6a4ff93967359eba413f1d4e46b577bec2e1599a0131005","sha512":"251412502da9e44e13dc7dfaec5872eddad462af78929780f7ec45a68cd7f3f517ac97b27804df660f18802deceb77d515b90f732a5abf7f4b39f713401fd3b5","ssdeep":"","tlshash":"fe21084bca0d023680e6ed167d3c2c0f7aa9c0c5a4d555cea0b1813e54023a37b9588c","first_seen":"2025-10-31T04:50:36.987418Z","last_seen":"2026-04-14T13:45:23.099315Z","times_seen":80,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/blosk.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:23.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/blosk.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1454\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 06:41:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0ef95-5ae\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N1jrf8Fepfgeqqv%2Fa6VW2GZNSwHH2t8j057Gv8GQE%2FJA45hG20duqH2ehad7Qj7ilUSfeGHBAQm2IxLcoQoirdST4Z12B2n03A%3D%3D\"}]}\r\ncf-ray: 9c3004449bba56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1454,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5d4125730404d6097c42e4f484ba9d31","sha1":"5047b74d0b625aa881255d4d6eee173c72ba0cb8","sha256":"b14c0738d43ba27e366ddae43ecb506fd3ec5f38ece97035a77e258d617efe57","sha512":"e8665e6878d72cdeea70ed9bf162074dc11f65e61e7f217bdb559a024edd06731165580edc9a9a901653c134bdaccbca47e95ef73b10c10fab7e09166d528fea","ssdeep":"","tlshash":"db31a8b24788635ded5867b451d04b80eafa3e6b66dba3a6c5400247e5a5080980d58e","first_seen":"2025-10-31T04:50:36.786203Z","last_seen":"2026-04-14T13:45:23.018009Z","times_seen":80,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/secureproxy?e=ping_proxy","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:23.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /secureproxy?e=ping_proxy HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://meteora.cam/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sat, 24 Jan 2026 13:53:23 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LTpUf9JWyTX4bdG6xsyU2xu8tOXMwQIAS5cAAiZecqDZaKAv%2Fl30K5Rm%2FWJPNreuhzDU%2Bm1q9G3Fdol1X0vdci6yyy8glA6zlQ%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c30044a894d56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-06-07T08:18:02.147442Z","times_seen":523690,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/style.css","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/style.css HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 07:17:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"68cbb1f4-4fc0\"\r\nexpires: Sun, 25 Jan 2026 01:38:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 896\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y3XhQI0oKDuaPZKtdioCly0VN03CJqAI4WGQMrQqsE%2BFerGDROXvqJkCxwtDO5t%2FRubDOU%2BYQxzrAycGA6ZmSOhMI%2B3zAPdbaQ%3D%3D\"}]}\r\ncf-ray: 9c300440af7956b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20416,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with LF, NEL line terminators","md5":"061b8ed78ea831ddfb09bb877f286401","sha1":"715f088f9f7c7ac2e602f023ebe0aa043ca52a29","sha256":"c7732647e5c841ccd93ff3a2f153f76a006e813e2e4c1023cd7f50a6960644c3","sha512":"d67b4168438db187ffc55d86cd20097c0eb7e41493bf3e86c839c1ea03c8950c0f2d15717e87a48b45755890642bf2cf0e578236d3f486f7d9bd6c981bb79ed9","ssdeep":"384:GnWY8YVUwII+QMxy+xnzvgfsrFXzujza8OZ:GnWY8jwI9I+xbgfsrFXzujza/","tlshash":"949295d62ba60200765795b47b939bab337c8507c10eddbc7bf5609c9f842ed91a2388","first_seen":"2026-01-04T14:44:54.718487Z","last_seen":"2026-03-09T06:13:13.100588Z","times_seen":10,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/pyusd.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/pyusd.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2026\r\nserver: cloudflare\r\nlast-modified: Fri, 12 Dec 2025 09:18:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"693bdde7-7ea\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qM5Why6RLU3lgJa6McIU50bpQdnPDw17z32FOdFuP83AJ9dDuCtR4UlIKg30psptCN6Y%2Bx0SRBT5JlIJ%2FMJgBZ%2BsetJIjLofZQ%3D%3D\"}]}\r\ncf-ray: 9c300440cfa156b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2026,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6895c5a1cdf6c79625d9899169eed0b3","sha1":"de0669d5e770f95f49faeda3e3fa0bb1f911c833","sha256":"696cff2679b7b82a5d8e7b2b08720fd66411c2a8bd08767021388f5ac1cc3db7","sha512":"8a1ebee225fbdfccb1d12254c8707779332e7b5b5422924e814bed1a091b0f9d551e896942da6c23dbae4d9e4172ff2a10f5ac54169c49f730059a2a80c7bce2","ssdeep":"","tlshash":"2941e81e1b55d78bc993147ce1609b3c90fc88702986516fd31869b0dd8b5e58936dc0","first_seen":"2025-11-11T22:26:53.070177Z","last_seen":"2026-03-09T06:13:13.069094Z","times_seen":37,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/jto.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/jto.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1698\r\nserver: cloudflare\r\nlast-modified: Tue, 16 Sep 2025 09:24:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68c92cc6-6a2\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8OGByv3%2B87UTymCG5JR%2F%2F3xbhykRByE4Z%2FUUBZgLPvdZJL%2FPSzI4ft1J9zPhL1AqoGALXijhzcUKe1j9uSmCFomMfLNw%2BCo%2FNQ%3D%3D\"}]}\r\ncf-ray: 9c30044218d256b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1698,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1a5096a9ea764b61bc67a458ba2c8077","sha1":"d042dbd8d9829cb313c9e8bdbd95a356409d8dde","sha256":"09c8631e454b7fb7f335d1ecde16200923f2aac2d93b8030baab5620a80bfb4b","sha512":"d99a55b171be1b6a8b7c826a61a6d5cb7e8ee690b5d470e20ee743af155c773a5b9a3adad20edbd1b12174f8998d3c8424a3166afaf54d42e0e998b5075c7433","ssdeep":"","tlshash":"4c31183680a38d27c738ed3c3c4b6b124032680ca1047f6b1a419e9c0e81c2fae5ceda","first_seen":"2025-10-31T04:50:36.799812Z","last_seen":"2026-04-14T13:45:23.138088Z","times_seen":80,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/ava.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/ava.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2650\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 05:15:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68cb957f-a5a\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kAPHogeeD7%2BtJx9ovXJ%2BfQMJ6ZB4Qw8gBObuD2zurDwDBUG8IyZR98yEz4OUkAPq%2BoLAY%2BHZY3s09KBViO%2BPN4PCO4pJlHzJgw%3D%3D\"}]}\r\ncf-ray: 9c3004432a0956b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2650,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x82, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c6eeb0e7247c9ed1df734ae909dd50e5","sha1":"87e951900ba24531b5b929ae992b257a93234380","sha256":"cdfb2ffdb5a7bd9a452021a295f620bd7f2240a64c6b7387e16a8ca87cbc60eb","sha512":"47e614b639e8da59e6d0943184da7769c5117c311c3cfe6c434aa7f2015143e9bc98ad9eb7ec4736bddc52805593c2605977dec49c63c439bdacd01a2d6dd017","ssdeep":"","tlshash":"dd510c7515baa121d7b80f0c12b0d760e6bd4e9d7a850e47856f85d13a32c2be53b60e","first_seen":"2025-10-31T04:50:36.908682Z","last_seen":"2026-04-14T13:45:23.080474Z","times_seen":80,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/pnut.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/pnut.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24996\r\nserver: cloudflare\r\nlast-modified: Wed, 17 Sep 2025 09:08:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68ca7a91-61a4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uZfErDoX2hQdg3uoP9RncbonGCyZBgeoFO2KItt4Xutrg9fBDP3RSS24LaExMmTmF6QwDlhEAiUa53NsjnefznoeAYfxl1ik1Q%3D%3D\"}]}\r\ncf-ray: 9c300442491856b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24996,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bc4e3cac0d72c46167a5ff5133e525dc","sha1":"92bec756365b4bd3abe6d428c6c65a82a35d4037","sha256":"66f38f1406524d1b639fb0327b3e23c9555c4fb5d4e51cbcf9fea227f0ee9a0a","sha512":"21accb0255a3b2555245b4b938f4c63c76b4bc1d3dd02fd63f81ff7d8e1a10681f9248b984e6674fc308522e1510c08d80ccc12e9c39cea72e6ca47ac5a5be8c","ssdeep":"384:qurOJ2Z0gt910E6la5r+zK4MltB5STNklDnF2J51bG74IUpl23t:qurOJ/aOOYK4MlteT6DnYJzbG7hVt","tlshash":"cbb2e12ba43adcd5cc16fcf53fc010ba469e67f1621acc9645aaadd7931721387c508e","first_seen":"2025-10-31T04:50:37.006547Z","last_seen":"2026-04-14T13:45:23.04026Z","times_seen":80,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/sigma.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/sigma.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1966\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 04:43:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0d3f4-7ae\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K6foJ%2B%2BuIpP%2F%2B5cOmOld3f31VAyrD0rdRsLyCUCiZv1Gw1bve32K47z7g7hfSVOq8xVkXLle42CVDCmxIyHASdAlaAr3OgqDSQ%3D%3D\"}]}\r\ncf-ray: 9c300443dad556b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1966,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"054a24ab785f14202d4ff1243e487604","sha1":"9188037de4daf78a32a247f9768a5d40adfd7474","sha256":"d799a93de585b73a936e5770560f699ad6e69ccb6872e21b74e1164dc3b3b1b7","sha512":"3ba2e28f56a1f2e5e492d12a5302ff076f4c54ba34b08c841949b3bf8ce2a82db08e512bf52bd164cc75165b57c1a6b7cd7275507431f6848c43e1fa15fbd3f1","ssdeep":"","tlshash":"e54108227d92e8c58dbb7f530789ab3b935440c380379ee11d8f2025d6100e8ab34a96","first_seen":"2025-10-31T04:50:36.962584Z","last_seen":"2026-04-14T13:45:23.026161Z","times_seen":80,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/chillhouse.png","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:23.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/chillhouse.png HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 01 Dec 2025 05:23:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"692d263d-584\"\r\nexpires: Mon, 23 Feb 2026 13:38:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 896\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZRh8tRF8TyWDSiM1L89mPPpp1VvcxDI8WRtN2liQPozNK%2FMxu8wN9OupCmGiLlZl8ApqTTtiAZxz3z1BxjL7sulJS2l0f72x1g%3D%3D\"}]}\r\ncf-ray: 9c300444bbfe56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1412,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 85x100, components 3","md5":"aa690a3d193cf61f98fa8b77c96f2a41","sha1":"3bbca9a768738972540d387610f5316db8bb377a","sha256":"f3716bd48ea2b5fad654d7aa8727c4a228426bfb86b12ca7a8c08ecdabcfa802","sha512":"de853edc84dcd16ca5d91584cf99be10db269ac855c92545f52eb509c61c4c19f2e4813a7c200c381a89618f70304e03824507cdc071382be982a0b42efdf6fb","ssdeep":"","tlshash":"892186ea435898f6e8390a7f4d86c4a00c0baa12c8a8139e15469db5f8659c27c51f6d","first_seen":"2025-12-07T05:18:34.167529Z","last_seen":"2026-04-14T13:45:23.133157Z","times_seen":72,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/hehe.png","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:23.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/hehe.png HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 01 Dec 2025 05:23:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"692d2640-6ca\"\r\nexpires: Mon, 23 Feb 2026 13:38:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 896\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NbBYKHtKX0K4p4W7RXvC1JQdtbnfmoIMeA461A2agSDOpVKuPsKk8FImhZKXmSjhmpu4Jo%2BpqAJVjqI4Z0UmMeUspnNvfvV4aQ%3D%3D\"}]}\r\ncf-ray: 9c300444cc1a56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1738,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 90x90, components 3","md5":"82b8d514d6ab6c35d7bf468f4da5b6a0","sha1":"8225fe612ce47554af8a45c2690c60dc1aab979b","sha256":"f1ae8a4214e3d2b37fc125488050b0cdda1dc74f447da0bb213f12a5c05e1af4","sha512":"1e56a0fe8db6d65de91b3c47bc462c645ce48bcb43faef3d21e49acd1ce4d92c889c420ddd13172d20515af6d6e1582ca55f9023ea38ca968a7e5213437cce4e","ssdeep":"","tlshash":"7231d8ab97335017fa2665f34480de28626fd6c29248438ad1665b2474f8bd70c55ae8","first_seen":"2025-12-15T19:53:25.147832Z","last_seen":"2026-04-14T13:45:23.146659Z","times_seen":71,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/gp.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/gp.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 758\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 05:15:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68cb9581-2f6\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1RdKEpd07B6Ru6Lp0gXOHtaVorNVJ8lkVy1X3RnB0w75Z2EsxedDDVGHQouyRiddUQkR6drsRsQSUDL0%2Bhmho5iUvD8npWTgIA%3D%3D\"}]}\r\ncf-ray: 9c3004434a3456b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":758,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"15bcf7ed1df1314b691a6d69e2b7583a","sha1":"bf0d18cefb973265c65a08418f84fa9c1b3b1edb","sha256":"9a2400bfe0a2d9cfb7a89b0c1bc70f7f31746747b4ace23889bb189c7bb6f750","sha512":"0fafd93d43926396fdd02e74b39b71442047fc27bce09f448551c708788f181555dba99198a59d327a21e64865f4a74ded23b8398f1182970c8602da54fe16f3","ssdeep":"","tlshash":"e0017590c120f780575d4b0b94dea13a60324182807050b23f648a8ae00d4e94944b8e","first_seen":"2025-10-31T04:50:36.992848Z","last_seen":"2026-04-14T13:45:23.050169Z","times_seen":80,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/portals.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/portals.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2274\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 05:15:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68cb9586-8e2\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sVMVT6%2F0XcYPONgqvuR59W%2BvEPqufpFxq8lIq8fFxNUJbo4CuOvCqeK8Nof71eVQkUSkKYjAnMY0yIqy36oscXWRAVsESlXVIQ%3D%3D\"}]}\r\ncf-ray: 9c3004434a3a56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2274,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"65a0bcb7ae89dc51724d6ec79941f70b","sha1":"968beafd546d05faa063a9c3a360d818e9a8e97f","sha256":"86337e6a682e4650d92f66d688e2635237bc185632e2ecc5499d9e60348804ed","sha512":"d3417daee8aefda0464a2ed747b898502d3890f2bc6a67ed3da552ab9008da1d7baab57b6ad2e7078a88a793aede30f25a059ee3a0b70e5cc82b30b9898eb967","ssdeep":"","tlshash":"1e412b1858d2efe8f56c3d606f22f42041470c2eeb678e538d5359863ece4513f146da","first_seen":"2025-10-31T04:50:36.762555Z","last_seen":"2026-04-14T13:45:23.075614Z","times_seen":80,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/verse.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/verse.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1036\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 05:15:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68cb957c-40c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kefs29qwnEWqqI8mIzYBMXx4Nunw3iTYN95inz6xgiE91dG3BQysm1r0XTS3X3mATPXocfESNY1C%2BLGJOHmBmntU7NtlDFGvGg%3D%3D\"}]}\r\ncf-ray: 9c3004435a3f56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1036,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x87, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b6b751ee59e040efa6437cba3d655229","sha1":"b42fdc0b1de465d88d270aad472082bbb4f2aa74","sha256":"d583c540e6a901b07dec948da9b7d81180ef5af63578bd9ee16cafe647b867d5","sha512":"7dbf58df10042829fba53f0429028cf6eff550a440f99816323953d61a8ed6ef25a1e6c0876c812fe3a6b4cb0625174988f09c5ccd0ce09402011463c8a6713f","ssdeep":"","tlshash":"2011d8035bb7f67700002ce966b895749b9584e0060264770abe4d15d94b71f0af7a7c","first_seen":"2025-10-31T04:50:36.984841Z","last_seen":"2026-04-14T13:45:23.115099Z","times_seen":80,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/gdtc.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/gdtc.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3068\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 04:43:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0d3fd-bfc\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mfs5Q7lQ5ifH4TOUY8K3Z%2Bp1e8IRfNi%2FSwpcLWCxd0CdekxlAZfRxHWX0MDKzPBB81ZawXRmzal1%2F%2B3EWUxnlAbJmQ2NYDt5uQ%3D%3D\"}]}\r\ncf-ray: 9c3004439a9756b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3068,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"cce70f15961932f4631c2063dd669064","sha1":"ba58a2e0aafd539be4fe0269c07557ca3f7af656","sha256":"0fb624367d915cba3fb5107a1c897af7a79cd6f9471ffd0c17ab0c35e4f353dd","sha512":"490647a4fd7325b18d4591e037aa7820aa427b2ee1292bd9b2e4e16f5578a0f2dc9b845d19a744650a95920bcaa612f541bb7b3864013ed15a0866ac6ca12677","ssdeep":"","tlshash":"0e515de9db3f55da856f31a4ebf14d2750901880d3834aefacd78c49200eb193a519aa","first_seen":"2025-10-31T04:50:36.741534Z","last_seen":"2026-04-14T13:45:23.053616Z","times_seen":80,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/project89.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/project89.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1794\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 04:43:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0d406-702\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j9MtnrBa5l4dW0eQ%2BtmUjNvzz6qsgFqsUYu4PBpkpqoOCNj8FXTkV8Wk1jfmVQ1h%2Byye3PLSIwokm%2FE5mEp6GSMcxllaGQutIQ%3D%3D\"}]}\r\ncf-ray: 9c300443aaa556b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1794,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x105, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0522b818215f9329b63eaaec396ce7e5","sha1":"f2d1318ae265e565d55d3f0db7a7ac8ca1aceebc","sha256":"9175dee348b01eee13378546e44a3864ea340160854ad13da7f9d6852bc122cb","sha512":"23cfe428ba44b9ec148af3e61c8d221e3986dcb152b92d299dd5683029f131c211f14d6194990717510218902269dc6bb81874d477fd45a5353548ba7888d0df","ssdeep":"","tlshash":"69310969f00b5f2fc8609695ae0f4017487d022a3b14d3cfe31e54c9ba285a4e21b78c","first_seen":"2025-10-31T04:50:36.9996Z","last_seen":"2026-04-14T13:45:23.054263Z","times_seen":80,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/mlg.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:23.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/mlg.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1412\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 06:41:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0ef88-584\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QCsbIhyr1W1QbtOFGrM9W%2FUs3uKOhZhAJ5LPBf1Hvanzq6lmXmOSPEqb9mPIL89YGaypTJIbiMwZ7iZaPefzTiran0cPpIkDOw%3D%3D\"}]}\r\ncf-ray: 9c3004449bbf56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1412,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2d0197017c923224b450d723188e130a","sha1":"71977059b7a8bd03d4e814605811a7d5040c617b","sha256":"fd24783d813b0bcc8758dc95d3721bed91dd1414dd4feedd17e9e4e5932bd808","sha512":"be2cb492f1e15d85f8d7019309fc699c40b1ca660a7acdccde43c336d0fa2a53b6258ec676bb806220b5564389baf2898ceed56bd9cd582f6c7af7cb60a4b46f","ssdeep":"","tlshash":"7221e9e6c726b8e014d0dc5a6f5cf91d33e75bca6241e2141b4f95b778daa805524241","first_seen":"2025-10-31T04:50:36.842417Z","last_seen":"2026-04-14T13:45:23.154104Z","times_seen":80,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/hege.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:23.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/hege.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2058\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 06:41:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0ef80-80a\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UBmn9hZSB0%2FAMsBJvENLz8pXBLti3J0z57fgqYiQ4OGn%2BWWpJs83nqdN56QDTTKoV5qzl0leXyh7X80RW3lzXJTuGfhQqpovbg%3D%3D\"}]}\r\ncf-ray: 9c3004449bcb56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2058,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b6612a0411ee3a0bb1bfbe8c638a7c23","sha1":"3ab5ba2f1f83c248af5e9f39974c2846da19f1c0","sha256":"eee308e98e8bee77677c4f662491b4f297731c51d9cb523a56d12ec0d52602ae","sha512":"717e1c55d6349dd00dc4fce9b23741bcd63ce3cb7136cbb1bb0628e1f68a699bdbaed3760ee06e3e2276ffee78d2d2a3a6e49849d38ea48a4b42e8b4300dd849","ssdeep":"","tlshash":"4e41f93767103490eb1ca1f995ef77e2a615be06839cda01778ded4e99828c082336f5","first_seen":"2025-10-31T04:50:36.681123Z","last_seen":"2026-04-14T13:45:23.1366Z","times_seen":80,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/brainlet.png","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:23.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/brainlet.png HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 01 Dec 2025 05:23:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"692d263c-759\"\r\nexpires: Mon, 23 Feb 2026 13:38:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 896\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bs1mZKy9NcopIYWE%2FUAF6SgzZsXSFBvhTttJ5%2BahCgYgxG%2F9X%2F7ejRpQaT5p13XvMyHLohfVPk%2B9m7Br4ZvMY3ycmVVWrHaQJw%3D%3D\"}]}\r\ncf-ray: 9c300444cc2056b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1881,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 84x100, components 3","md5":"e2325c89ff22da30cc18991715efb193","sha1":"a941db046a5d599e67d5ae4b9eb151aefd85a09b","sha256":"5740fc24d8980511efa886abd4e62b672d401a60267628ea41beddc7f07454fb","sha512":"db1b35ecccbc3266b15a957c2e9b161b708537f63f65b0dfdfd231d194327a5ea50118284bd2688c6c50002444db12d2f122c83e76745a8b6d5d8707072f62e3","ssdeep":"","tlshash":"334119e7f2724783c91704370dddc5308713ac2ac94e13d89a52e32eb66e2a4ee20ac0","first_seen":"2025-12-15T19:53:24.996648Z","last_seen":"2026-04-14T13:45:23.07351Z","times_seen":71,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/sol.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/sol.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 620\r\nserver: cloudflare\r\nlast-modified: Tue, 16 Sep 2025 09:42:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68c93113-26c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ubPwDMYBhwUsVowP0hDO1uppbCFivZzevu7TLGl8Vev%2B7byA8QKYKjYEr0qfxpLKtmPJamJHSL%2FcqqWnLK0%2BQNWclW6OeM8MBw%3D%3D\"}]}\r\ncf-ray: 9c300440dfa656b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":620,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e8547fa5ccc4675b4f3208fd43d51590","sha1":"ba297bf4e08ffc4c3994a29c1c0a4ed4751402fa","sha256":"797bbd8533cf1c0ae74b78afa4b44f23dae4596b47f4d784ecfaa319c68f2d8b","sha512":"3fbf3bbd6331e3b00efeca1c492c5212d9960dcb8390edc7b425d0ab9563d38f285974aaa47cdf69b3a67ee4ae383c2b5b32aba873ce9c930dfc110e47585f17","ssdeep":"","tlshash":"95f0e12a5b714927d429e53c0abb1396101cd8b6d03852ab52228e565f8be11dff58c0","first_seen":"2025-05-07T12:19:22.461777Z","last_seen":"2026-04-14T13:45:23.096755Z","times_seen":82,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/render.png","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/render.png HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Tue, 16 Sep 2025 09:28:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"68c92dbd-d80\"\r\nexpires: Mon, 23 Feb 2026 13:38:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 896\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d58if6Xn4bM5ku5t8WtSYXejZ5ogv8ZZU7LYV63S056nrwbo9CvNtsOR727RbkS2XUZNsUcsAHoSP7BFJr0RBReOm1fsDpO0cg%3D%3D\"}]}\r\ncf-ray: 9c30044228e256b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3456,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"01d36203a8eeaf7cfb91c33b4e9538a6","sha1":"fd6cf04600cbf2cd9948aaf6b5cf94891e321c2c","sha256":"00849d5c83021c8dafb484cd0d7f4c52af6efab16323f77ae2428f7b665ed7ea","sha512":"c20a7ffd7320facdac9587a134f28ffd9e8ecfb93c9ea7a32139c08bce203481848ca293b8cb5bbb72415d9022578f58096fed82dd6cde8d1162618f127713e3","ssdeep":"","tlshash":"52616dfbb84ec424afa0e27f7c20a59ad8782e761905b7d594317942484b2464b4a7c3","first_seen":"2025-10-31T04:50:36.684578Z","last_seen":"2026-04-14T13:45:23.024526Z","times_seen":80,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/yzy.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/yzy.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 596\r\nserver: cloudflare\r\nlast-modified: Wed, 17 Sep 2025 09:08:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68ca7a8b-254\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6KsIf6D87p2ERbE%2FjIVUTjHRJeFyjlPaHyH1CrKMPD9RaylgMzgZxUgUPIjew7k%2F7iUOUH9jzV2mkUI%2BzdY1gspLH2tpYWeJ4A%3D%3D\"}]}\r\ncf-ray: 9c30044238f956b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":596,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"134a1f24a0c3a369108ecaf5b5087ebc","sha1":"d6f06f42f1f69fa737f2da25c51ab15bf5fb041c","sha256":"4f260305478c7738f539072a3e1f9cff6fa16c6b62e87f33c0ccf70c5225960e","sha512":"a0ccf3eb8d7c4a4b830191945e80a7a1e4fdac6cedb698a971e25e153e412f67e196015a7dc78b3da2a88f6ef7495deb60d04fd4fee8824df655dfc522493d58","ssdeep":"","tlshash":"8ef0200bae237e51c02a703c48e2671ac048d085822aa5f333088915de27907e9f89c6","first_seen":"2025-10-31T04:50:36.687063Z","last_seen":"2026-04-14T13:45:23.044888Z","times_seen":80,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/chillguy.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/chillguy.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 928\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 05:15:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68cb9580-3a0\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lj54tWlZH83Ho3wEUa1xc5YKeRQIY3hyJqPKfzsV1r8uoaRwQUmX4KJ0xHzcmMuJzPKwQhZQZn6b00J3MHERCUifCRE2ySbnCQ%3D%3D\"}]}\r\ncf-ray: 9c300442996356b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":928,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x99, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c1c65f1d46ec29a88119791ad4fae14f","sha1":"5deb47be2e0d890c5243336cdda2bdcab4121e55","sha256":"2ba51302119a769f6022765727576f772cfe052b7b851697306c17768c8c8728","sha512":"1f9f225bd91f35e3a1c2d4f6960510495584d623df399205e8dd43bd9640445fc77b14cbf5a48027beba772df14de5210e0234fc6cbbf70bc4b8ae32c4418987","ssdeep":"","tlshash":"7411f77ec2460ad0cd5ced401df84e261c904e0bc2222f216cdae0d93c5605b228fc08","first_seen":"2025-10-31T04:50:36.851565Z","last_seen":"2026-04-14T13:45:23.149856Z","times_seen":80,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/bert.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/bert.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2418\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 05:15:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68cb957f-972\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TKcWdxun6h%2BuekoiZLAMydyX5Pl9d8ceI6cGfFcKj4Th6ab0VtYZBAX77hCHHjNZ5M22xH1UXMS72pY5WiDnKjtD%2BbncDbaybQ%3D%3D\"}]}\r\ncf-ray: 9c300442a97456b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2418,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"42f6ce659c048e7b028534ec168df007","sha1":"f2ccf55ee4405b0a54bf9f8f5679280516094d13","sha256":"128c4af9cca2a4de4937baae39768b1b24b2e1f76a984f717084c71059b2ec3c","sha512":"2b2174ab0c6c3d952255f475a7963a7e3e1ce735005af46c89ec08d847a4a764fe219bed76b2dfd020ab9750fe894cf93d9bb363bc22729bc96ed010011e82e4","ssdeep":"","tlshash":"f9412d69f3884318d90416b540773bc6f7e4bf9d9735ae14834743a107289c9f1e85bd","first_seen":"2025-10-31T04:50:37.011879Z","last_seen":"2026-04-14T13:45:23.015819Z","times_seen":80,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/slim.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/slim.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2064\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 04:43:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0d3f5-810\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3d2h4TPD6UBUOGS0yKlD2hFPCn69Ew3zKJL6P0a%2FKisI3DpGMywqwFY0AbV43zAF1cYgZJdISNnJZC485Bi%2BJ9W4tXjdj1UhnA%3D%3D\"}]}\r\ncf-ray: 9c3004436a6256b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2064,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a29018d05b5cee800553ed788ea334fe","sha1":"fba8ed888939e7fa59f4da4592905ad897799c1b","sha256":"6d40dd40644687f109cc8cf548b75b538e2a8b5a4a3c5c4319bfe37467410301","sha512":"8556f7f70a7d0ae7c2a859026a7d3a65c56ea874ba7476676cc646d46aa74b6a5e5468eb03bb928102fa1ff45d47e44bf0bbff06faa45ebdf091647e9d44ac04","ssdeep":"","tlshash":"71411ac6a898cc2ae9a0fc7480f139f1009f7054fd619e31484f29966c6eed0a5a9871","first_seen":"2025-10-31T04:50:36.751966Z","last_seen":"2026-04-14T13:45:23.069164Z","times_seen":80,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/retire.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/retire.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1480\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 04:43:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0d407-5c8\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y11qk7WKOoo0yepeXtDzApYzu2tl67Iz5prxled%2ByaR2aJoIv8ULey9mY76sp4Y27bL5HwMOVkoC1h01DmrGWqxECINqvharOw%3D%3D\"}]}\r\ncf-ray: 9c300443fb0156b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1480,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x99, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"73f8c3c34e32dc10dee57c68be9c1d6f","sha1":"46a90f175352d9e4b9402d83f20853299a510450","sha256":"518dadc225db4ffeb904226e897aeaca47204b1030cae556623ffb1620c4e9b8","sha512":"50e170ca0b7c9c25e23bb451ed5caa2b3f73f5a4dabf51af9ab932b873ddf8f38f814ee4fc5a83dc7abb87f7d7867bd38962acb83e6ff1fe53f8cf50a46271f2","ssdeep":"","tlshash":"8d31195832473a22c4c82c2e5b6999d2e23322f33231ec6d0425baf46f38911ff0c167","first_seen":"2025-10-31T04:50:36.766664Z","last_seen":"2026-04-14T13:45:23.038111Z","times_seen":80,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/wlfi.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/wlfi.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1390\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 04:43:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0d3f8-56e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o%2FSJqXQlE6HgtkAOKyUHm37zVKPoulGZsh%2FhbSridNV3MIjX0JZdNW51%2BDzYUyiPV%2BwuCvm9aMRKPVASKjOdKtVrJBqUmn9%2BPQ%3D%3D\"}]}\r\ncf-ray: 9c3004440b0a56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1390,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0c599110e07cce7a82b546ee3c40dac1","sha1":"bb2616be2186d422483b94d1d3d61c4250ed2050","sha256":"d61da012182060326ba3ed5c8274e0b0375f271be3e03abdd43c4029a1678bf3","sha512":"9694643d50026d4699f371978e43b74b31fbe4195e1696364a6e1de6e084b992c8fc43cb95dc5320d2bc13fb22a151e660ed8e0cdd4f8a595ee6bb704f840455","ssdeep":"","tlshash":"30210b9d443d8030dc3ac0042c9b01878e57ad23f6657712db773587c30403e5e1242e","first_seen":"2025-10-31T04:50:36.802584Z","last_seen":"2026-04-14T13:45:23.020122Z","times_seen":80,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/io.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/io.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 842\r\nserver: cloudflare\r\nlast-modified: Tue, 16 Sep 2025 09:40:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68c930a9-34a\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HwI6TDG%2F43VD2H2Y46yRIkzjCFFWfyNmCa2Q3ctfbuKRj%2BIqJOuoVjhunIJB6zUjpmVbRfgNJVl0BfPfl0Uq87TfoIVDRczj5g%3D%3D\"}]}\r\ncf-ray: 9c300440efc256b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":842,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"af2a04f8a1bee054d4f8ec70da7375b3","sha1":"d05eb67d52b19618a8933eda4ae39d242ca4ad9c","sha256":"55d7d7a0b33c9b50d00b39b231318e9363b3edd56f5a41214d60e0279a3382fd","sha512":"739344a9083b4815572bf0071f4dc4036d015707a6360be73112eab34e61b8ae37f4e1fa6bbd74e1fba4d13f0ecea3d0f406ebca1d2f5c2b4ceafc2c159a8c75","ssdeep":"","tlshash":"660175114e328bc0dd17b37948fdb7fa60e0c45cf3a0e9734b6699201dc84484ac8faa","first_seen":"2025-10-31T04:50:36.932153Z","last_seen":"2026-04-14T13:45:23.085881Z","times_seen":80,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/w.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/w.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1664\r\nserver: cloudflare\r\nlast-modified: Tue, 16 Sep 2025 09:24:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68c92cc6-680\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D91SI71xUH%2Br%2F8Lqt%2Fuh0WmdaypiWkrF2lmxL3qv6kGQF7LqRRo1K41cD4pCA9c5qv1LV1eauhZt8s9Wk8HmtDvKeoyDyRdEmg%3D%3D\"}]}\r\ncf-ray: 9c30044228e956b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1664,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d880092e094fa134138ef428e3c89f9c","sha1":"a1ce979f319a7228c67f086b2f5032c4809d767b","sha256":"eab40e12a58df1c2654e388f72006257d37247bdf2a7aaf0746c4ebf40f19784","sha512":"388a03f6b21399dc4205a5f9c3ba1f8e3283c486772f209a4a643801073d394416cf625d6bf178b3effbf5d86af0a4eeb49e9169dae5cc5caa763fe9dc13c6af","ssdeep":"","tlshash":"f0310a5aab120285eca2647c46d3abe152412e02921cc6f0d204ab420e17e213c7a387","first_seen":"2025-10-31T04:50:36.695043Z","last_seen":"2026-04-14T13:45:23.011134Z","times_seen":82,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/popcat.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/popcat.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 614\r\nserver: cloudflare\r\nlast-modified: Wed, 17 Sep 2025 09:08:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68ca7a89-266\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nggrpOsN%2FPgHFRoXt8qwa8D7hQv6O83Sqq4ZuHtC8dT9DG6mL7eI3Rt9quoyKsOU06RYD16%2B3nV1uviYc3J0GmsFkDD4dnb7yw%3D%3D\"}]}\r\ncf-ray: 9c300442490656b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":614,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4e45b43e204d98ae45cb279b25e2ffa7","sha1":"0c6fe747c24f72cb8a6617dcbc64dc8a5cd0e501","sha256":"f712a5ed3d701cce3e39e9bc37372b1d54e16c655260cc0ea31b4c3deb052ad3","sha512":"eeb5fd0d9ce3aafccb526bd5aaee044fb6c6600d6b59d791e217fca8ed44a6a17c26abe5d2b1dd55ffdadfd837372e3af4151257d381f4b7621e62ba08b2e38c","ssdeep":"","tlshash":"67f0414287a87a40d47c4276c29227618090f092f495d507a3ff6cf39ce7291b503168","first_seen":"2025-10-31T04:50:37.010117Z","last_seen":"2026-04-14T13:45:23.088734Z","times_seen":80,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/swarms.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/swarms.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1190\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 05:15:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68cb9587-4a6\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P1bURkQ%2F%2B6s7eBa7NQw6XD8hXIvf7fYzFcR8lRkZVi9U450jbOtmSslYQebezmj0z9lJN73Sqj3g31cc3G0KOGHI7I%2FgqOdILg%3D%3D\"}]}\r\ncf-ray: 9c30044309e756b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1190,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"105df6daed68ee3bfb91147de07f0e8c","sha1":"31e078984547c04d8264c6e690d6d74e9980335d","sha256":"a17c21e49218279ff9813e07bac84792a62c797168e5aec4bd2e4f4693b4a019","sha512":"ff9015b98239c142cf4edd60ada8bd284f3a731d49c1ee6067a4617f34ba14b898bbc738fbd5847199f71e7a3646fd56a4fa4d972df7259ea3f4c46fbaca64ea","ssdeep":"","tlshash":"bf21071ae6282653c4fd4c0526eed8cf3535244090109a65f24f5b620659efa8c10a09","first_seen":"2025-10-31T04:50:36.861207Z","last_seen":"2026-04-14T13:45:23.12468Z","times_seen":80,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/retardio.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/retardio.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1058\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 04:43:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0d407-422\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZdRz%2FW8nuAG6PtXmtuySRX4B9WtkIb4gKyyU70ImbGhnS1xVSUwi8bGPnHBCON1lKpfkj%2FQeU7jx3rVNZo15erKO%2Bcaq6PutSA%3D%3D\"}]}\r\ncf-ray: 9c300443cac356b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1058,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c4997b4d706f8983350025f9d6d6d74d","sha1":"535fa23d66880b33d98a01559db7def28cfbaf79","sha256":"0d5d34d44f8a12b42bb486e4ab8170a457ff66ad8cd9cf715f7ca9793ee2fb0c","sha512":"4598b27de3550b30c83e098fe2a2cf8531620b6cc60ff7d1855ceda0bb977640a5e432d2ad89a3d578df4446583f1263a08927cb4031a81685cceda70a141c42","ssdeep":"","tlshash":"d511b565f9005204c59122ca02e443cbe29efab5e20163e79bee4da43655f9b957a0f3","first_seen":"2025-10-31T04:50:36.778413Z","last_seen":"2026-04-14T13:45:23.051215Z","times_seen":80,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/cudis.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/cudis.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1228\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 06:41:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0ef98-4cc\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=26LGuKLD58QeY8B3wVUo%2FSa8Jfy%2BT2TTeUo%2F16CYQCOp4%2FSCT8diOQsa2jBI%2FyOgx5T9SQhlkPTRbqLU2wjlBoGjmKpqY%2F0GoQ%3D%3D\"}]}\r\ncf-ray: 9c3004444b5556b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1228,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cc2c7519f969353a6575c9030c3378c8","sha1":"35c1703a8ddf204feb3ade6dafb025ef17482621","sha256":"b14cb07d6868ee72a36e62edca34df685c61e2d4e1d41778809fd10a273787a5","sha512":"4dec32f1a7c43384e3dcd9152fcafed78aa06f3c6ba1091b1fc0d46469a63b807e703d0d18674be799ae190ca35512c4991c60e9faa4d4f55b1d6c9ada3f3e0d","ssdeep":"","tlshash":"e621b796ea80c0edc552171d56b48e30b60aa4887f1999a971b103f3384783ae8c2294","first_seen":"2025-10-31T04:50:36.944031Z","last_seen":"2026-04-14T13:45:23.117194Z","times_seen":80,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/grass.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:23.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/grass.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1552\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 06:41:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0ef80-610\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bYvo4t8eOzvi3g8Geqka319pXJrsB%2FSdYtMaCMomnDFf4kknmFY%2FXCfmrwtzK4jYZ1RnUKk0WqYAfNp0ZUYuDIl1lCmrp3NKEw%3D%3D\"}]}\r\ncf-ray: 9c3004448ba356b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1552,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cf35534f81d1de514005ffacc46e4f48","sha1":"ce44c88d20a069c766ba6186521c31d6d25b58b6","sha256":"ef5b8f13e21d4448cd995466a8635adfe1715d9e35e8a9469077714ffee77c7d","sha512":"ce04a99e815dcb66474fb70cdfa09b068d4c5841aab9f987bd581f1264842ffc05ada232223ed4627287ca79eea63af509bd49ac3af387dcfa05b387cd16ab5a","ssdeep":"","tlshash":"c131dadc6a23c941d77d653dd5bee3644892b816714354355654d0b0e0a73c38820de5","first_seen":"2025-10-31T04:50:36.784401Z","last_seen":"2026-04-14T13:45:23.077602Z","times_seen":80,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/2z.png","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:23.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/2z.png HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 01 Dec 2025 05:23:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"692d263a-5ca\"\r\nexpires: Mon, 23 Feb 2026 13:38:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 896\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EzvErHkHNwhgH0Cql0VEjdWgGj5A5kl9Mpsfuz5nEm1jwuhcBkPxXZgZsqTG9FPb6T7e1Vcyy4B%2B1LSopztwiGpl2QbrKrDMyw%3D%3D\"}]}\r\ncf-ray: 9c3004449bd056b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1482,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"26612ab4bf155f79bbe938865a455d7a","sha1":"1c2071e54355b2be50a95806632efa36b87c19ed","sha256":"4d9bbf0da36cbe68f66a902a495560f0473018540a61631b84f585f6ad82618a","sha512":"0035f9d08b6d87bf63e729212f802590d74d27098bfaa794ba60d2568475e939c5dbfe8f47b79c0c4bbbf31c1bb92f919ee8ff2faf6703a2fefd60acee430d88","ssdeep":"","tlshash":"7231ebcb1757caf2b31595f5cc7de2e908063d642a767a036a44fd91253b10cc542153","first_seen":"2025-12-07T05:18:33.941797Z","last_seen":"2026-04-14T13:45:23.10042Z","times_seen":72,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/vine.png","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/vine.png HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 946\r\nserver: cloudflare\r\nlast-modified: Wed, 17 Sep 2025 09:08:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68ca7a8a-3b2\"\r\nexpires: Mon, 23 Feb 2026 13:38:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ag3j2LxYrhAKxN9rOXcMSCMnJQ%2FuYcEyQDXMdDbmUmfoCXe9qcrWsnKdOWgno1MRspXW6ZMaT%2FWH0mC9wVRlF86o%2FLlFhcwv%2Fg%3D%3D\"}]}\r\ncf-ray: 9c300442793b56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":946,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"53b3a7a7d29c9ab3866fffa023f23177","sha1":"fbb7803171a6d3a0d4c1f5cd02b79c39d6ceb764","sha256":"2ba50e8139bc64cc8dccf01f27df386f470f8f385576d7671b4b35141311470c","sha512":"ecc492c21cb9b5c8e8207fb252ce447758453802381be3fb0f5beb1eb1ede6d93a07b3ffda797dcc382857d8f1e8ab46492d7c2e1174187a114571a81ad8b55e","ssdeep":"","tlshash":"4b11c8d903585624c879e1e9c15311f08b61ccfa19bb1c3c2ad7b2b13c28c0f629f292","first_seen":"2025-10-31T04:50:36.874463Z","last_seen":"2026-04-14T13:45:23.163437Z","times_seen":80,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/layer.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/layer.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 324\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 05:15:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68cb9582-144\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XR7i1leHjzrxGpH8GteoPbxoKHWySo2MlQ9zxeLeuuuK1SnXoB9HXdjHo%2BzCef3qii9jkfEp6QHB7XO0pFCH9V4rNWomG8Us1g%3D%3D\"}]}\r\ncf-ray: 9c3004433a1b56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":324,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b72f5d6a4916de0b7277319dc6d212ff","sha1":"d2b82b4c30d72459043033734b2b8b127b3e3597","sha256":"ce659f3c36fa349a63e3d449bedf97ad9923e466cbe765a04b138753ceca7248","sha512":"4a5bc7a236af6f251af0fb44d6380a45647863c5947048bae82e9dd0a6fb500fb7bf05adf751702a004e9f3f91ffa020d5ed6591bf268ba335ce6b51314aa742","ssdeep":"","tlshash":"85e02d1e961819c8e1a1c238fc2c23c2acb31610b8888a3f88c92ff28838aa01340c25","first_seen":"2025-10-31T04:50:36.983914Z","last_seen":"2026-04-14T13:45:23.01332Z","times_seen":80,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/me.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/me.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 960\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 05:15:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68cb9583-3c0\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nI1Tnu7YR551vDXknuYe9Pm8HO%2BfcWbzX8AAmIZig585jcxjrLBQhZLNAtEjuHyYjwHZ9QXZX2xWbAHJw6Qx6RDHU%2FkLpPxmlQ%3D%3D\"}]}\r\ncf-ray: 9c3004433a2356b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":960,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0130c3f750a129088a5033fc0f5712fa","sha1":"87e5a1a36df391d9eaf76c188df1cac96f2d2aa6","sha256":"90b50a4cfa3e1aab959f841dd001e9a55caa9db7c2592cb8c73ba5de550c4d55","sha512":"1932496793ac9db6263a7bf17d176eb955857e5d9e63c3725bfbfca5002b0045398a5a6a53d8f4d89c670259b5211c9e12ed1adc3832ad842b21163f906fcc22","ssdeep":"","tlshash":"8911c887d24aa12007727c362c3965ecac38d07c80a864b38254d94a5d620e1b7af0d9","first_seen":"2025-10-31T04:50:36.776833Z","last_seen":"2026-04-14T13:45:23.032784Z","times_seen":80,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/titcoin.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/titcoin.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1244\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 06:41:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0ef91-4dc\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PTpsNvsKXY7H9mNBa%2Bdv%2FdXkeV9YWE7KPyviaogqn49Ox0A9mBmqGTOMUflTbiOyFiqeukB%2FbpBSsow2ltAnPyJ7p0hVxs%2F57Q%3D%3D\"}]}\r\ncf-ray: 9c3004442b3756b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1244,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2d65131ec0d2b3cb9adeee59f8100c6e","sha1":"ce05cf7315622d69a0bfd3a3b8ab1ea9f7170ad1","sha256":"0a15d28e38f82c33090e8290cf9a4e43277986ab438d51a19ca8913a1408c298","sha512":"ff2a5151e231bd4f384ff2f9bfe88caeb9e2549921846622e9451a21776a54f704e6b7694f19ad84dbac75e51549e5f371f614a730548fe75a0352752aeb3add","ssdeep":"","tlshash":"1921b73070ab9cd6faa1e19208b8544bcbbb7ce40603ae6e08fced1405f42082558f93","first_seen":"2025-10-31T04:50:36.804576Z","last_seen":"2026-04-14T13:45:23.077156Z","times_seen":80,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/spx.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/spx.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1914\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 06:41:19 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0ef8f-77a\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g6Nt5mPIC8SaXPrmuokg7i4NvYCzROo7sLavTiXTTWA9YOIn2GLBQsFbHFPyaeXlbLC2bVgvI926MaFU5mpNFY446fT7povKIw%3D%3D\"}]}\r\ncf-ray: 9c3004446b7956b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1914,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2864e037db297bf245236475fa5868a9","sha1":"57ffd3d74cbd2313c04541c5088d976b63c8ee72","sha256":"9addad58453fc3868216b604db7ba4de7a02de6fb5cab3d73a9a56968dc4b448","sha512":"d1f1aff81965e6a6105b90f7a63a0e0905e1f4045235a8c957d6f887e9dcc4119c4d521537e4605636ff09c234c00168910ffee31c5235fe703adf6b0d13fbb3","ssdeep":"","tlshash":"b7411b714f70f385c99c1a2e37a02f1202416dc936145317c1b00572a7a3a88d19bd7c","first_seen":"2025-10-31T04:50:37.004766Z","last_seen":"2026-04-14T13:45:23.167923Z","times_seen":80,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/$beer.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:23.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/$beer.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3728\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 06:41:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0ef93-e90\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S68ZJVkj8p%2Bv0gwbjBOV4eOY%2BOL48ScQE7yWIsVOtsgCf3j5f9lLUfbOcdbqN3XpPpoNfDlofWvv%2B2AztFx0Itp6wSA9eyYcEg%3D%3D\"}]}\r\ncf-ray: 9c3004449bb856b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3728,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"11c8f8146d1bd9ffda9b1bb28eb920d0","sha1":"4a7f9d46444097576330dcbc2d67fde30d89af60","sha256":"ff5c587ef35bc5570aadf0c6d9120d0464a25a269d6b879b2d436464d44f2d20","sha512":"0ee319af73ae6718131927264d3c142736622505a2a5f97a2943ed1ded4ed8b9e1190f0a0f1218cdcb013b9c4ed55d2d35f79d66a206ae220cccec0148f558f7","ssdeep":"","tlshash":"44716b2caf889eb1576faef770bab4d9163344c281452e454db67d022a5fa00e20958d","first_seen":"2025-10-31T04:50:36.918573Z","last_seen":"2026-04-14T13:45:23.017495Z","times_seen":80,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/hustle.png","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:23.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/hustle.png HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 01 Dec 2025 05:23:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"692d2641-67c\"\r\nexpires: Mon, 23 Feb 2026 13:38:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 896\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=liYYL%2BzAnJfd9f6GtXxGqrd4VM797W6Tgi1sTpC9g4Qr%2BIu1BG7wT53kehedl8unnrrD0Va0kaC7T5AHSWLhzuM%2B8irw0vPkJw%3D%3D\"}]}\r\ncf-ray: 9c300444cc1956b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1660,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 90x90, components 3","md5":"bef6a462c34189c595eb1f5aeacd82eb","sha1":"2256e59fd787587d78319d03a4d8d898c87e9c9c","sha256":"ee77a41f88664d99441c9e58cd34e2e90433827b3c0007d1490c96c52b966ff5","sha512":"226e15470d4ce6b9536e387f43e5ad569a5fec8d7a05103adf0bfc79843e63a1d0f81aa4292915293c6b99cda76b9637b2bdf56f10e8606621b99a0e65680b9f","ssdeep":"","tlshash":"9a31ea6347385703f6952533accee9b802d7c5029d3c41eab38a7505f4e64c16c62a88","first_seen":"2025-12-15T19:53:25.005906Z","last_seen":"2026-04-14T13:45:23.047436Z","times_seen":71,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.0/webfonts/fa-brands-400.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:23.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.0/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://meteora.cam\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:23 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 116672\r\ncf-ray: 9c3004489f3356be-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"656632a7-1c7c0\"\r\nlast-modified: Tue, 28 Nov 2023 18:34:15 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 231624\r\nexpires: Thu, 14 Jan 2027 13:53:23 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2Biy0wGL4ZpRBPQwL4bNVgtsG61GxSSR6U683W3MjfcJOjYR%2B4e89AYDf%2B39oWNUMgE3U%2Fbk2IL15Lh39qu3mP%2BbSayXo88F6WOMbkj5RqbBhs8%2FD6U2bL80CWI21PLWALYFiw%2FGk\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":116672,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 116672, version 773.256","md5":"0474ccd4d3ec29857f1e7f8b9c56df8b","sha1":"3e8f0f46b2949dcc309f65fff1372b9a05e8f480","sha256":"b66b3da5ff7b2db79b6cb5a22c3e762e2bf16958a11987e69eeb1980bbbcdfb0","sha512":"2ab61a54ee830519d0aacba1e12f1ad920aedddea8e682cebe51bec78ecd7bbc403343f8e00b45afe804a954a52eb5dcc70983bb01239c36422f8e6f18e0bb5e","ssdeep":"3072:y+cQdfEX4HdgCsxZhk8minCk+uU254aiRt3kLVzLm/j+G01Z:KQdfjIiib+uUe1EK66G4","tlshash":"0fb313cfd4276bdf0a65cf3fc2034e4f3b586c1254b9bcc540b3617826a6862274aa5c","first_seen":"2024-01-04T18:36:36Z","last_seen":"2026-06-07T06:47:32.780154Z","times_seen":3328,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":5,"connect":0,"send":0,"wait":14,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/pengu.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/pengu.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1048\r\nserver: cloudflare\r\nlast-modified: Tue, 16 Sep 2025 09:30:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68c92e52-418\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=byydgu7zXMn2If4MER0hh1i1Cz1PekEmPPLr4b3VvaWFQdgVsUWWTuf0opBIyw%2BwOTMmRrSUcxlJK1n7FKv%2FbhJZp%2FPbl4kf7Q%3D%3D\"}]}\r\ncf-ray: 9c300441e8a256b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1048,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5c6f83d56b13f7f4e5e9bed0c16b0e25","sha1":"9a94c349c07aa3e04efd50a158a263b72fcd8f3d","sha256":"77ba39ca007217e322188122e3d935f47f7ffd29ee638ef27c298705755da9fd","sha512":"e234911ceec4870a510f8a810893593a021e222691bf04dc5b1751057d7138e5dcd91e63622227dfa75f30dda654a3177c44e07d108c7daeff522ea927112977","ssdeep":"","tlshash":"c311c42aa9300607e40e967cc03db7804344b15830aa628e520fcd368dca344aef6a98","first_seen":"2025-05-16T13:51:15.637676Z","last_seen":"2026-04-14T13:45:23.071309Z","times_seen":83,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/pyth.svg","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/pyth.svg HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 16 Sep 2025 09:27:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"68c92d6b-4cf\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B42jaBx%2FzVCxl4iVRcP1jfXkpcR2GTtB4MFVf%2BvNYrWProWP3v2aqnsO9JQOIY84nIC4U6ohxop13SuIrL5DvcXsuIvhglxMXQ%3D%3D\"}]}\r\ncf-ray: 9c30044208c556b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1231,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"86ab8498d12ae85a981c736f4c1ad7d5","sha1":"ac8b4a5ba8c357cb0e039ade01a9bb5edd15d2d1","sha256":"f3c88fd9f75cc92e361dba733d133ef55072a63d70d3bbcb37ed7b8242cdba64","sha512":"7e5519d9d8197b21a46dc62a5e0bb85ab1f3861fd3d69cb53f06762164fd4555930cc0813d08d46659cade0ef25cd7dc08a91114fa3859d75c8a219bf42366cd","ssdeep":"","tlshash":"152132e83358054a41d9c3e35b20929c1b7774d7e80d0a9dd3241f298ce6caf9e96682","first_seen":"2024-08-20T11:34:03.163097Z","last_seen":"2026-04-14T13:45:23.078654Z","times_seen":83,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/kmno.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/kmno.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 774\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 05:15:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68cb9582-306\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AVkhv%2BoP2dnNZB0I8vgfsJz%2BBF4LcCse5T9wuVewilPSM%2FQLIvpu0IQkkJm9VhZx74lTVg9K9tRD%2ByHLCo69p0YJEGWV6iFHJQ%3D%3D\"}]}\r\ncf-ray: 9c300442a97b56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":774,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8d087375b58ed9f89c5fe8645b9e243d","sha1":"d40352c1a7a1a82e2d5154a74576cc8082a86ff1","sha256":"2e5af2b1a8a1be971f6c5b2d6f9862692c6872fde421138b2370bbb2b9373bad","sha512":"ea2f32726997061c2b57a105784319e4554115cbd19eb89b30e72ebffad0103a604dddc94c93c59607caaa135dc976598c36bdf55317f43b3a0adf3f453a341b","ssdeep":"","tlshash":"d801c59803a02ebcd6249262075f3bcb0ab024c384f3dc21d5f68f9603032725d82912","first_seen":"2025-10-31T04:50:36.920895Z","last_seen":"2026-04-14T13:45:23.13469Z","times_seen":80,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/codec.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/codec.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 606\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 04:43:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0d3fb-25e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rz8vwbh7USArvvUjOEfA5z5vVL5T5WanWHTvyaj2b1huehcsvur95Z5JjMHkKLhEbaIgeu3aXWja5DfXYIIpw3zkzvzUa24lww%3D%3D\"}]}\r\ncf-ray: 9c300443dad056b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":606,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d127a3c3f1c94baaacc57f64415c9279","sha1":"d32ee4af752288057471b109c1f033d7f5217739","sha256":"e80c0d028505e82c468bc75da08e0f455749740ef4e4b5ff9f45c365810cec40","sha512":"fa41af926c68e43f6d9127cfd90300a348a727d52318df9ec8aed43222feec741ff585320de1a08f8988f3af9567f736138895e458953db7f477461767d4846e","ssdeep":"","tlshash":"9bf0b715dbf2fdf5c18cb93d10c9780c30d4400c112e3de2e55b8044f31184d5480ae0","first_seen":"2025-10-31T04:50:36.949045Z","last_seen":"2026-04-14T13:45:23.043532Z","times_seen":80,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/hosico.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/hosico.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2346\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 04:43:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0d3ff-92a\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d10aEOSu1hH4kOGLG%2FzNZguyJK%2F6%2BMKIvswO3JqRlK%2FHKwKVZdAnAjOTkDcG9vJ101JvOUvZE9aNDS83QNUCV9G3FaMVE8p5DQ%3D%3D\"}]}\r\ncf-ray: 9c300443dadf56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2346,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x113, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c89e4f57ab2972ff29ca095e74b8cd82","sha1":"67c6486255c96504799239449ae06605011273b8","sha256":"249a8c90aee15935542288ceff2c9fb17950604dc9ca88acda944838c1810a18","sha512":"0bd08b41e9cba5493452103cf10d49a13eb1505b8c44f7eb2ac5f216ae0dbb21b070d619852ac68f87777dac05ba40b87ab247bef31f6bb203f24e9b5d56bb1f","ssdeep":"","tlshash":"ae414bc14b92fd616b96f2365f073e4caa8130e2c8557a7b82fa1015f7453ad1be2e0d","first_seen":"2025-10-31T04:50:36.66801Z","last_seen":"2026-04-14T13:45:23.014345Z","times_seen":80,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/nvdax.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/nvdax.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1186\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 04:43:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0d405-4a2\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bT7J%2BpNc8pl6QjOQijQDB38B2wiGhIa7eElQFl7nvghSAeuYP9AlIxo2t010jXLzgLHpm0AzPR3eRjWkDfs%2FhjrqcrFAazw4FA%3D%3D\"}]}\r\ncf-ray: 9c3004440b0e56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1186,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9b36650699815d6a5e70fe1fd70473cf","sha1":"7c98038510ce51c367c40be86518b97c053d36b1","sha256":"6ff027fec2b5a0f01c63d9defcd00c21702eb091f13e371b9635b283f9c01234","sha512":"6b5a17bbcafe3ae8ce6ec0b23ed41617b92f2a8b4072c34bfa8cdd0c62f019d30d2599a1acb5c4c66be4b996c91789a2a5509aaf17372883d7f4607681cdc6aa","ssdeep":"","tlshash":"5521c637119c487c07484e42f9994b7d12567439db7afb3786c6ff251cb8488971b292","first_seen":"2025-10-31T04:50:36.768654Z","last_seen":"2026-04-14T13:45:23.016377Z","times_seen":80,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/mirai.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:23.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/mirai.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 738\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 06:41:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0ef88-2e2\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SE3j48AsN0CvVKI%2Bic1IrgUE%2F%2FM8Ew7DxRkQ%2B42Z8IiSS1hCaimjHAUi0CPe0YZje66E5uqXolrFtWzlOz%2Be1JFqpl4aRXAoKA%3D%3D\"}]}\r\ncf-ray: 9c3004449bc156b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":738,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2820876af1e6e646f6730e4a5fee192e","sha1":"202dc91599a9d7204cb6bba34f2712b0fa2f2fd3","sha256":"a9ee50484732061b37a05ce619e7c119090c665614fab1567b3e2ab59176f438","sha512":"f246e44b632aa8f474643dd11581e588256fce2a14b33f9c4f9bb2a7dac47bc615ff2647cdc2282ac480a1f70325e3b66b667237b5a770573b301afc02a8be35","ssdeep":"","tlshash":"60016018a4a31f3fbc4178b7a23d9de19596c3b4c220ad09bc03532563688232b83e0b","first_seen":"2025-10-31T04:50:36.844332Z","last_seen":"2026-04-14T13:45:23.151009Z","times_seen":80,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/zera.png","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:23.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/zera.png HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 816\r\nserver: cloudflare\r\nlast-modified: Mon, 01 Dec 2025 05:23:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"692d2645-330\"\r\nexpires: Mon, 23 Feb 2026 13:38:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wM3ilcvVvQKtvTX%2Be7qym7doJ5jyxJxxTXAzwvzl7VlCubGfH8m7nroDlR0l0RrQYFZQE3Q%2FIpKgQsbZEWBsxMgcGvxrQtL7NQ%3D%3D\"}]}\r\ncf-ray: 9c300444cc0756b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":816,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 90 x 90, 8-bit colormap, non-interlaced","md5":"24967dafb8f4c81ed6af2f31abb43167","sha1":"253ae0783cdac31820d429661493cc4b002b9166","sha256":"dd13de447f206e54403e29c07265e1f138ec8fff4b2f17bbe59a4659ea15860d","sha512":"f8d23fbb5405ee3f220bd1c2d41d6c963bff893eb7371ec818582c03217b478493fcddcff3f5e598d3d8dee78a180f916b248b605d4892562826c4fb5f37e5eb","ssdeep":"","tlshash":"990186761388bb9f8552645218a5b4b0f93e4c0160301542eefa2abf39e710d8136560","first_seen":"2025-12-07T05:18:33.96531Z","last_seen":"2026-04-14T13:45:23.03488Z","times_seen":72,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/$wif.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/$wif.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 876\r\nserver: cloudflare\r\nlast-modified: Tue, 16 Sep 2025 09:24:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68c92ccb-36c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L6B9ktbA%2FN%2Bx2PNL12fxC%2FFObnVUHqaElaoTyrOguF5FmUhhyXXNZb5CGVX0YLrDi5KaL9%2FL1tTxv3rpO7Oc6H9bkADiH%2BPbqg%3D%3D\"}]}\r\ncf-ray: 9c300441e8aa56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":876,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1c86230f0512d3e53b5dbc1245a3ef16","sha1":"e4e61b26d81fd699398bfa0fda436218b75a4dfd","sha256":"f9efe564a567c71623be1aacd5d34bb8d25d4db665be35e2c465d23657c28759","sha512":"f146fb3d92e4bff8a64c53905f05873f880d9bb8e106035f8751e20a23d85153f832d08e5645407dd65f4a11d749cea950c3786d7d9b6e2a1bc9a719c6423d7e","ssdeep":"","tlshash":"771152a33bae4754c0d5a73b205a374148e0f89cbb17cf4b213c2869cda09b16e61144","first_seen":"2025-10-31T04:50:36.947321Z","last_seen":"2026-04-14T13:45:23.141736Z","times_seen":80,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/launchcoin.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/launchcoin.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1202\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 04:43:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0d400-4b2\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tjyCEoHDNaJWEcZOHVKbX1u52W%2FdgpmeqNr8X8r3yUUGfOcN9qpebtfDlCB5CoP%2FmW4KPjbIcgyliKGzDuLjY2BkdMWf0CJb2w%3D%3D\"}]}\r\ncf-ray: 9c3004441b1e56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1202,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a65d93ecc842738146008b3cedf4ebd3","sha1":"6133c853034dfebe83508115511d3ece477fb0ee","sha256":"053f212d0d205eff9c4e5a6843e1d8a0c2e3987347c8bcac7beaf3b7385490b0","sha512":"27fdee98bf13ca1c0d6c3370f3c93b98ed9774893d79099b048b50b5c21062712cef2047aef0628848fa541575a7e11ef9671a54c55a11c063b79b9c05b0e66a","ssdeep":"","tlshash":"20210dc3896910e38cde953c1f503611481f59403dd3a32e4712775c4f0cc10d96d3ea","first_seen":"2025-10-31T04:50:36.865088Z","last_seen":"2026-04-14T13:45:23.041777Z","times_seen":80,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/rizzmas.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/rizzmas.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3542\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 06:41:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0ef8c-dd6\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8O5ePf0kDJflJllF%2Bl0iKuWP1SA7du%2FKYU%2FzmeDlZXI7FD1RHCbLjhF3Xqvf%2BhU7044xvHFriD1CAefnMVaD8v5T1jt3XZmp0Q%3D%3D\"}]}\r\ncf-ray: 9c3004446b6e56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3542,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x100, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e4dcfb1574c971b8e3fa658a636ac0fa","sha1":"d2ed880c9dca730df67e1fe591313b969f25dd6e","sha256":"da51cc2d42b477fbaca7d0a53b49b622b4681bd17e0b873817614eb4542b3a9d","sha512":"80f9f4d9eb2c7fab22e088b1c071b8923e9dcf90814eed690c3d89adbc01ec8026050d9d4e4b34ccf1813eab6b3da81ddc2b6a9d9d71fbd1d1d5805c9c271420","ssdeep":"","tlshash":"77717f13a0b32b4bd4d6401c2cbd67402e7e359258b0ffd4a596faaf0a24f9d4b31549","first_seen":"2025-10-31T04:50:36.945471Z","last_seen":"2026-04-14T13:45:23.128245Z","times_seen":80,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com/jmpd/","fqdn":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","domain":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:27.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 15:05:58 GMT","end":"Wed, 08 Apr 2026 15:05:57 GMT"},"fingerprint":{"sha1":"4D:1D:3C:6D:9E:2D:29:38:F6:A3:C5:A2:A9:6E:00:65:21:FD:F7:14","sha256":"B2:0A:D0:D4:D9:66:A7:A6:38:55:71:26:B9:06:E7:A1:A5:4B:C4:7B:C4:E5:D6:9A:6B:FF:D1:0E:21:E9:BB:C1"}}},"request":{"raw":"OPTIONS /jmpd/ HTTP/1.1\r\nHost: aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://meteora.cam/\r\nOrigin: https://meteora.cam\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 24 Jan 2026 13:53:27 GMT\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\naccess-control-max-age: 86400\r\ncache-control: no-cache\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 01/24/2026 13:53:27\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 8af7e9fdea1d4ea274e956e2c152291d\r\ncdn-status: 204\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T09:09:47.463793Z","times_seen":16208699,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":14,"dns":1,"connect":3,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com/jmpd/","fqdn":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","domain":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:27.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 15:05:58 GMT","end":"Wed, 08 Apr 2026 15:05:57 GMT"},"fingerprint":{"sha1":"4D:1D:3C:6D:9E:2D:29:38:F6:A3:C5:A2:A9:6E:00:65:21:FD:F7:14","sha256":"B2:0A:D0:D4:D9:66:A7:A6:38:55:71:26:B9:06:E7:A1:A5:4B:C4:7B:C4:E5:D6:9A:6B:FF:D1:0E:21:E9:BB:C1"}}},"request":{"raw":"POST /jmpd/ HTTP/1.1\r\nHost: aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://meteora.cam/\r\ncontent-type: application/json\r\nContent-Length: 2190\r\nOrigin: https://meteora.cam\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2190,"data":"{\"route\":\"8XUwkBv9vhPYfVpD1fxb7EC65sUXJdqr\",\"payload\":\"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\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:27 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ncache-control: no-cache\r\ncontent-encoding: br\r\netag: W/\"e1-+hmNodbIslmzX8uwBR4sZbzbB6w\"\r\nx-ratelimit-limit: 10000\r\nx-ratelimit-remaining: 9963\r\nx-ratelimit-reset: 1769262867405\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 01/24/2026 13:53:27\r\ncdn-edgestorageid: 830\r\ncdn-requestid: bc6b6f62281ad4524af3ece3f4aa3c14\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":225,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"946a04a6de56610db7064c8851d64231","sha1":"fa198da1d6c8b259b35fcbb0051e2c65bcdb07ac","sha256":"da31051dfd8226fd3de22c2988c6e1aa5ce58ee8b0e51f9bc96e56c40afa3629","sha512":"7c24fcfb77becf7cd336b77923bf5311a012de87448b1692648f593f33da649a94e8cd7f3d0ae7e48a5d6393417efaff9ba3df0a7ba164cd53d139bdf099be34","ssdeep":"","tlshash":"bad023801698d366cc0e085ef4157ec5bac75c02bc05b1f1caa70636f7d5450247d533","first_seen":"2026-01-24T13:53:47.021114Z","last_seen":"2026-01-24T13:53:47.021114Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/cbbtc.png","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/cbbtc.png HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Tue, 16 Sep 2025 09:34:19 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"68c92f1b-223c\"\r\nexpires: Mon, 23 Feb 2026 13:38:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 896\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VLdlv2DkamnfW9HKll5HWxlytJRCfdLEyKrUda6oR5vC3QR9QszOk%2FwsHKMBkro2o8co1UwMLOg6dawWiU6w2yymuwmHC1yvNA%3D%3D\"}]}\r\ncf-ray: 9c300441582e56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8764,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 640 x 640, 8-bit colormap, non-interlaced","md5":"4b8fcf1d41dc6b9b27578324de15a8bd","sha1":"0716848f6cb16a5dca789d11d25350802741b2ad","sha256":"968d5730a47219a3c17037839e0ddf699f3ffe4feea28a1d15473b22d7afe90c","sha512":"97b1197a445f40838a00d5469a3d29f05fe0f9276bb2eac5a4253b9fae9c158b99e5fde9653c910c2d9684bd3315df68191cddf86f294ae6b4adffc009a811ad","ssdeep":"192:RRODUmTWtgspS7nC9fFqqxlux6PnAlo9Ymgx39GI2ZJQottUXeiUn+:oT4aULluIAm5gaI2Z7bdp+","tlshash":"cc02b0432056ed3442fca44ad80c7ae7015a6eea7994352888065377bb36d8fcacd53a","first_seen":"2025-10-31T04:50:36.655445Z","last_seen":"2026-04-14T13:45:23.015378Z","times_seen":80,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/moodeng.png","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/moodeng.png HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Wed, 17 Sep 2025 09:08:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"68ca7a90-70f\"\r\nexpires: Mon, 23 Feb 2026 13:38:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 896\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cJ%2BkB8RKVFBhrdp%2Fg9JNFXghMtg%2BpwQ1stUqgjgyb2kamzLwfOlhECXVWhUvbrILCs97m9F47VP8NUIK8D4ZsiR8HU3ib4r9mQ%3D%3D\"}]}\r\ncf-ray: 9c300442591c56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1807,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 30 x 30, 8-bit colormap, non-interlaced","md5":"1660266f4355411ea70cd86c699cdee8","sha1":"4e79db7f905891f73d06729ae502f945abf9ba82","sha256":"d4c940270a96d09665fbc3653e8e5542225e0204dcd816b38a3c1eb42e33ad03","sha512":"f2bdea284c579d0ae8eeaad1cc98ab0c6ea3c057474f28f0df982bb63b579201c5390579567b8d6eb6b1ea180384624cbd928adb839b9fe7b6be9c7c2127706c","ssdeep":"","tlshash":"c8312d92f304ebe45f7a4870e210b385f630354ce64ad75c78c1957eac5961910cf7b1","first_seen":"2025-10-31T04:50:36.961031Z","last_seen":"2026-04-14T13:45:23.049438Z","times_seen":80,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/mplx.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/mplx.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1190\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 04:43:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0d403-4a6\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U%2FQqMp6U%2B4GzlFGbMqncwH1dRw88uEGOE%2B5Z1t0IaV8zK6WAWp51BA7D8VuE9fK7LEwv%2FDEZJGIdmkApXEFqvmdU%2BBTA6zG7fw%3D%3D\"}]}\r\ncf-ray: 9c3004441b1556b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1190,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3333e49d07e21f27998b4bd1da31125b","sha1":"74697f0fb65bf60c1d67c02997b5b5cb6003a91d","sha256":"3fdae9383252a4b204a8b7660690dae2684edba576c64ef4367d574e0b92c355","sha512":"57ad71395d9df15081cde6da7ee159f2be021fd2d4eee26bbe7bf2dfc5d24c1829b397f3d526fd66a58495f428df83288418cf2ac0b0083c9f4063c7a0ca6c21","ssdeep":"","tlshash":"0821b71f0869f335fc280416c4c1b5990b97119a54a7835112d1f9bf88cebe0933fd8d","first_seen":"2025-10-31T04:50:36.813944Z","last_seen":"2026-04-14T13:45:23.091106Z","times_seen":80,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/gor.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:23.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/gor.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1278\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 06:41:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0ef7f-4fe\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P4WEP%2BA5BQzXixIWNgjwvL%2FJiV3E7pA7Yp0pdit%2Fyc64cRwzyfNj9aZQnrgbemO3fog5QX6dZU94O2Ym9%2F5Q%2B1J9xRFCOBOEFg%3D%3D\"}]}\r\ncf-ray: 9c3004447b9256b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1278,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 89x67, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"03a9a50b7dde15dd902814c1ce82a0a4","sha1":"b5bd597a7948bcd659852e59420d78d95fa33861","sha256":"e51207b4f48c1ed2df83aa390ac1fb3a45998538badb98b1dd413b40b6f89c28","sha512":"21df4510edf3ff1fd635d2e289e4157831cfc086173dfef0229d3b78f06964192ab441da0339c40480f72be48114c0e2ebe13a12a7fcd325c1dfb6f4fa185e85","ssdeep":"","tlshash":"f721ea180e07931e8b42e7abb90c7b2c50d114e907266d7fc55687187e74ba661f217b","first_seen":"2025-10-31T04:50:36.817446Z","last_seen":"2026-04-14T13:45:23.055487Z","times_seen":80,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/mnde.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:23.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/mnde.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1990\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 06:41:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0ef89-7c6\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NwUgNKJIUPzHZdYMsI7ENnWCEQ78ydpUDB%2FR72RcSqyC9uPugvhkdyDfrXhb2UEnBbOnAMRT5oSIiQ3unCkGdbaLyaAY2JHrkQ%3D%3D\"}]}\r\ncf-ray: 9c3004447b9556b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1990,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f7913fb42d11902f4930eaa7de026dc7","sha1":"d8711710d2f0fdefcf153bba150d4db5f1bbf5f5","sha256":"874bc1811ae613480506c3c7a6bee811bbe0477a54312fe7a131c173ff599477","sha512":"85a49dca22b3b236af107f4fe8212adeac6f77943db89eaf3d1a938137ed8dc5b3ee5695a317770692ac053ff152198fdc9aeaa266a684437c6eff11c0a1b56b","ssdeep":"","tlshash":"e2412c59b17862074d23b1defa9f63e36c2d2ac26b405740d4c17088a8f2d3629459d4","first_seen":"2025-10-31T04:50:37.015501Z","last_seen":"2026-04-14T13:45:23.164991Z","times_seen":80,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/gohome.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:23.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/gohome.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 944\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 06:41:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0ef7f-3b0\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FSu2%2FMq%2F9WTpjRD%2BJRgezZiXbm8zRc3ISOxIHNzuEg56VYV8PsIqxMkzpIl4Pr5j%2B2fLfZL%2BfodyJGeQ7JfVlW7JhzD9JYe3JA%3D%3D\"}]}\r\ncf-ray: 9c3004449bbb56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":944,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x73, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"884c88aa96c856f26b9a9a564040e3d8","sha1":"3cb647235b98095fec96073a6668eca4ff1ae4f2","sha256":"fc82eb1bd48c752bf692264fd1f4039ed1bc1880029872d93abdbcdd3ad9346e","sha512":"25c5b0134293899c8fa633ecc0753533468edf662578b2488a9cd6c7aeac1c5fc18d47f0b1870fda98f3de24be946793ec3f2537e81be120dbc5d65b1b203101","ssdeep":"","tlshash":"f011545e56200a40e5387eda8c6b768816d66174c87e2dcfa1789002acad9faa041c28","first_seen":"2025-10-31T04:50:36.995667Z","last_seen":"2026-04-14T13:45:23.15366Z","times_seen":80,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/67.png","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:23.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/67.png HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 01 Dec 2025 05:23:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"692d263b-656\"\r\nexpires: Mon, 23 Feb 2026 13:38:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 896\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QTzzXSrApcpVK49t3nZwuvMDt2HSU57lLO7OjYMkhk%2FenNS81D9bs%2FmcCmURvz81mZhZxpPR%2BaYezP5YEIU%2FahWfYT%2F4JK0cdQ%3D%3D\"}]}\r\ncf-ray: 9c300444abea56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1622,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 90x51, components 3","md5":"bc0442038c0bf9decda992903fd60b1c","sha1":"189a3657d68eab5927aa9deb906a888a9cee248b","sha256":"d4b6cb7a9ba879c1fc8689bad8b1f602d07ac500758733e514a82395c674f53e","sha512":"6d050271ea878f4303efcd1b7ec89ea376fe3bf747130e08b268368ecffbc6bffa1b76f138355cf90560f5278b65765e1a673c53cf2248c788c51d7b5f3a6293","ssdeep":"","tlshash":"8531e77be93c5c1bed2e05b193d0ec2193a31f54ca88cbebf748ca2e22157d61c00228","first_seen":"2025-12-07T05:18:33.825072Z","last_seen":"2026-04-14T13:45:23.028876Z","times_seen":72,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/clash.png","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:23.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/clash.png HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 01 Dec 2025 05:23:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"692d263e-e7f\"\r\nexpires: Mon, 23 Feb 2026 13:38:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 896\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lq5JzFlWG872VCa83ID6avTgAogz%2F3UIZcE%2BTdBeXrgnG5554PPafOE7KZXi%2FYfHuPz43SE0lP9fbmSce%2BwKQJTP%2FEfrxvjvUg%3D%3D\"}]}\r\ncf-ray: 9c300444cc1e56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3711,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"b1f6162a88aa16e237670d7a5b4dec73","sha1":"dcda935e1a574a4f8dc670b8da4e711b5038ae88","sha256":"6a5bc26aaa462d511fb78445d33114d5430dad5f2f4296c2ca352754bc198165","sha512":"4664891b82b0e140ffaf563f372a0a8f5ea5323581c3f0e26e048a3bc35f8ee194ddafb38a87aaf6f9c1beb867d4ec9bdc8f6b300eb6aba8fc5232776d96a6c6","ssdeep":"","tlshash":"91716c23e10d17a6a75923c2fc1427b11d24d9ab0d772c231be604172159f67a8a4aba","first_seen":"2025-12-15T19:53:25.143046Z","last_seen":"2026-04-14T13:45:23.147293Z","times_seen":71,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/wsol.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/wsol.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 620\r\nserver: cloudflare\r\nlast-modified: Tue, 16 Sep 2025 09:42:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68c93113-26c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GK8Vdq8qXfdl7RUeOb4nahv%2FYkAG4iRauj8Ltp47uNslF9Xz8e6JSEbcQ%2FVkIg3G%2FnjnEI%2FCo7acFq1RVMKYdZUE8qLfhE8JpQ%3D%3D\"}]}\r\ncf-ray: 9c300440efba56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":620,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e8547fa5ccc4675b4f3208fd43d51590","sha1":"ba297bf4e08ffc4c3994a29c1c0a4ed4751402fa","sha256":"797bbd8533cf1c0ae74b78afa4b44f23dae4596b47f4d784ecfaa319c68f2d8b","sha512":"3fbf3bbd6331e3b00efeca1c492c5212d9960dcb8390edc7b425d0ab9563d38f285974aaa47cdf69b3a67ee4ae383c2b5b32aba873ce9c930dfc110e47585f17","ssdeep":"","tlshash":"95f0e12a5b714927d429e53c0abb1396101cd8b6d03852ab52228e565f8be11dff58c0","first_seen":"2025-05-07T12:19:22.461777Z","last_seen":"2026-04-14T13:45:23.096755Z","times_seen":82,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/ban.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/ban.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 484\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 04:47:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68cb8eee-1e4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L%2FlvI2hR1%2BulT5iMxhY1hvHSYDgBkj3VP%2FNVra%2FCjiacvACUWYdsppbsawl3YBHLctjl%2FFV%2FnWs2mwL7WJ5s%2F3CnNclS7cAlbA%3D%3D\"}]}\r\ncf-ray: 9c300442895856b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":484,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x73, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9ad6dda76073006314ff8ee25256fe03","sha1":"2b9f7eefbe105fe890913bbbfa9fade4fedaba3a","sha256":"1b776c681901a2e2d18c8d79c0705701d489ff04ab6312c653a1b49ac95e728f","sha512":"cf283c98e0a3a5736556db72b1d891bd131a70a57b4c5bf4933d8e0bd672b231aadce44a3691bf6d7d321096378d2cd8b57bace37ba77f1b7ec2785012f0d385","ssdeep":"","tlshash":"c8f054ea922003c6254f65737560132431e5247ca367be3ae3470c144c20bb787df129","first_seen":"2025-10-31T04:50:36.882114Z","last_seen":"2026-04-14T13:45:23.119458Z","times_seen":80,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/act.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/act.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2978\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 04:52:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68cb8ff0-ba2\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jA6Bpv3xXPEoXGBMTHLjCbJV2gAnVRDNpETFpR5NGigcHvTwbfzG8c7yDT%2BhzGUWNhMU7Q5ltWxIjfzfa7AEYU8BDlhnRuCfxA%3D%3D\"}]}\r\ncf-ray: 9c300442995e56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2978,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"28025c2684c78fed7b66dacec56af92c","sha1":"732764993d5f1065ffcf84eb9ed2de6b3a5d27dd","sha256":"792eb6c379596f985e0c89562a0d9de77a2f5836fc6b803a52c9313e32ff7b07","sha512":"273330199b8909b9804411538a71fc9d582d87f383782c8eecae74533bc21649eaf553e4fe2f496636a2a866bad3e00edc103d0ea8ba80698ab021348cdc6881","ssdeep":"","tlshash":"f6510b45978a47c1d9840cbca4940fd8ebaaff368bdb837845b04532b5e90c38458aa7","first_seen":"2025-10-31T04:50:36.97586Z","last_seen":"2026-04-14T13:45:23.071886Z","times_seen":80,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/spyx.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/spyx.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 592\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 04:43:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0d3f7-250\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D03blbfTIW%2BxF30jzpUZW8pip%2Bfa3Ne%2B%2BxhnMC9ockL66%2FQ4w6KqO3lxeQZh6WHCa8Xh9S%2BBLhGv61mzLfihUWQ47DNsqL529g%3D%3D\"}]}\r\ncf-ray: 9c3004437a6a56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":592,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"33776e6d825a0d18160bc2b00761ecda","sha1":"b2bb857683b1a4271359681d303de64b2c62450d","sha256":"67d266c1cddd93ab9dd9f2aa8fed857a4fba1b3cbc2ae18229186e619f0ff279","sha512":"a753a51c529462fe3bb1f6015930dff3069c09d973a83b33ac3d6ddded938424094fc015e381a917015cd0647ceabc6583e2da68332afeb0a1baa3ef0f1f721a","ssdeep":"","tlshash":"33f047e4a3ead475d6134d90d37db591064661459812c34cc4f7a5484ef382ccc8388e","first_seen":"2025-10-31T04:50:36.855096Z","last_seen":"2026-04-14T13:45:23.069732Z","times_seen":80,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/inf.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:23.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/inf.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1452\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 06:41:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0ef83-5ac\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RgenKx%2BvFLNq84A75mpMBER7zomxtiCA8kMjzKsQkrbn9qeH94IJZQaKTIE%2FbcOJv9hlbeRfJZ82VF4CydLrtSoQba5flFGETw%3D%3D\"}]}\r\ncf-ray: 9c3004447b9456b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1452,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"af41f54c78107245839582192d605eff","sha1":"9c582629ae17ff97055687cbf04800c46b580817","sha256":"156c2a35fb76cdc56f6914119b4cb48855b94e8edbd93aab51e2bba98530e675","sha512":"69570102e2540b82d088e8506ba33f6c3e5b0c5125a3ba1cd2a914dd775af3cc780da61f2b590e9880a42a837b4827933c458f21dc3031697708e3df5968f513","ssdeep":"","tlshash":"6631e9102d75bf82e025770b35bc30489b1f29f5c69ccb2090a2e725196411a8e37eba","first_seen":"2025-10-31T04:50:36.856777Z","last_seen":"2026-04-14T13:45:23.135924Z","times_seen":80,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/gun.png","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:23.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/gun.png HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 01 Dec 2025 05:23:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"692d2640-599\"\r\nexpires: Mon, 23 Feb 2026 13:38:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 896\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PRH4XXX%2BfLJ%2FAHdIKXv5kWlX0YQU%2BGdXCFNUOTLjEyGOyfQirRCpYt4Dfc%2BTV6VRg227X0pLAo%2Fw01WMFzqOs1TM%2FHYjyiSE%2FQ%3D%3D\"}]}\r\ncf-ray: 9c300444cc1656b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1433,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 90 x 90, 8-bit colormap, non-interlaced","md5":"81aa3aa51f52e6cee21535a8242d51d2","sha1":"4ee8b44f0dd346ddfd664ca780635e4ec2293bbe","sha256":"50e68afaa5caf85910a8d411ddc001d252c175f25497fe5718115701a34d89ee","sha512":"5ee6c0276e41542e4c396327a7901620839d54a1c7aa7f3cf09ef9b16b40e11c98585d5bda069829c01ce29cee820ee6d7ea56fd7d8d0a97ea62886a06062453","ssdeep":"","tlshash":"aa2108c038227e36c6612475da01ad2db9163a263027d2412ebf85227c8dbb796b61f0","first_seen":"2025-12-15T19:53:25.21971Z","last_seen":"2026-04-14T13:45:23.046621Z","times_seen":71,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/bootstrap.cjs.js","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:23.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /bootstrap.cjs.js HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 03 Jan 2026 08:44:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"6958d6e2-6b739\"\r\nexpires: Sun, 25 Jan 2026 01:38:26 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 896\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BH64Y499BwM%2FzyaLLN%2F7Fj9UGEuqEZAO8BhZXX3zguz93JDaW9eQvQog7djhyLrl3y2MXDS8ZthuKVGaqp1sVIRaE8WtVAeKVA%3D%3D\"}]}\r\ncf-ray: 9c300444ec3956b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":440121,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65159)","md5":"947a180c90613d69e1663e36c36eff8a","sha1":"ef67bacbfbae45c4228e325afcc2a800f6b194ea","sha256":"35119574a85c5934aa8bbe4ee21f5ccd6cb7b4e4a2c0d946d95a794b72e71e34","sha512":"55e6f7509ae58e12e50c6fb3aac787d02433c58ec5979fff3862971c873ebbf98b9c1d1eef3b6dd1b6c1843dce439da621ad434ad6da5705ac312d5115482d95","ssdeep":"12288:09V7L3jkeFjpFjFFjWK+D+J4D7ruFodsWIZWxZlkYCbY:0LjkeFjpFjFFjR+D+J4D7ruFodsWIZWf","tlshash":"74943f9a93fe216283f1e25d576213bfd952c411974b0d89ac3c9ed2b089d0a80ffb57","first_seen":"2026-01-04T14:44:54.844298Z","last_seen":"2026-01-24T13:53:48.59348Z","times_seen":5,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corsproxy.io/?https://api.mainnet-beta.solana.com","fqdn":"corsproxy.io","domain":"corsproxy.io","tld":"io"},"ip":{"addr":"104.26.6.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:26.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corsproxy.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 18:55:39 GMT","end":"Thu, 23 Apr 2026 19:55:36 GMT"},"fingerprint":{"sha1":"C7:A3:F8:71:A0:C4:0A:D3:96:8A:FF:20:70:85:EA:5E:FE:E1:C7:4C","sha256":"A1:1E:61:D2:B9:99:EB:58:F6:4A:D1:83:39:B7:4B:64:61:60:B0:7F:BC:C6:DE:FB:D0:D8:30:6F:F6:9B:A6:1A"}}},"request":{"raw":"OPTIONS /?https://api.mainnet-beta.solana.com HTTP/1.1\r\nHost: corsproxy.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://meteora.cam/\r\nOrigin: https://meteora.cam\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 24 Jan 2026 13:53:26 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH\r\naccess-control-max-age: 86400\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=imdAsmsWuR0gLbk5ISYK3B7IYwm86BX5Ugb%2F3HNsTF7hK%2FMCNvXln9UzhnfGPAJ%2FumUcXXr7eNNZp5GwDaOc2QX3Z0hNvsn8wA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 9c30045d581b56ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T09:09:47.463793Z","times_seen":16208699,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":22,"dns":1,"connect":1,"send":0,"wait":11,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/gear.png","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/gear.png HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Wed, 06 Aug 2025 13:59:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"68935fae-4697\"\r\nexpires: Mon, 23 Feb 2026 13:38:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 896\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yJsWsouBsmTTMQmwGJNzLhs00MqjfO5M1dKkLmi9jdtGBgvQWbYqWA3vl0SJTGzQ9EeSyxpIsaki7amd2MXi%2FAI%2F7OhS%2BjhB2A%3D%3D\"}]}\r\ncf-ray: 9c300440cf9a56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18071,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"f9cea30d1b25657c2bd229c771ecb32c","sha1":"f0e6746ad83a0c2ff4e49ca97dd909349d840475","sha256":"6a214077be6204ab5810a7b9982fc21ba7f6e3ef204dd006cd5a3be6ca597554","sha512":"78a559836815b1ced3d56a76cc79220376f1bde4fea7b4f07c921464d0a749fc3336645de35a95c5962c4f37f255c8c2501e06e76bf871d4d671b19f8e07be5a","ssdeep":"384:qhQR8rD5LBuQQyii+Xu1zvGsswHJSllAGUqsuyN9AihyPU:mQR8rD5LBuQQCv7AHUbu+jyPU","tlshash":"ac82d1e022cc08d2ffb74b6196091af08262cf8f459a9b39cd54107757adf7521bab49","first_seen":"2025-10-31T04:50:36.96906Z","last_seen":"2026-04-14T13:45:23.118364Z","times_seen":80,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/pain.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/pain.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2206\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 05:15:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68cb9585-89e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O%2BYpQUJNfGVGUrDOFT6%2BS0uLDO5F3y5lvjmREeyd580MDN3k71PO67KJmrsENcMmPU11MJGcm09tSAiK3iGuRzp%2Fh2%2BMUzWrng%3D%3D\"}]}\r\ncf-ray: 9c30044309f156b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2206,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7979c67362a2918d99ffa17518249545","sha1":"14d79496477c099bd3dfbfe3addfd6337966807a","sha256":"6989a3f292d792d419c7a9f47a64206653a9492a272e7dd92b1d0cac4751e9e5","sha512":"d50e9cee92df8d3ffa667e89aab92f246c95dd1115039f2b00b7342b3e3a34e3a123b2d4f348d39ae5da5a3e6e26039a3abc7ce80e083aa499d0e939b0864f12","ssdeep":"","tlshash":"bc413a068386ed228d52cd40f1f636c7ac2498a81ee454ff9ef650fd68e4d452d1dee0","first_seen":"2025-10-31T04:50:36.675999Z","last_seen":"2026-04-14T13:45:23.052973Z","times_seen":80,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/billy.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/billy.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1342\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 04:43:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0d3fb-53e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qPfjAaXna%2B5t2yTJ9dPbVpebZ8uv%2Blmm7iN37521OJrkU0e5TEEvyOAFX3I3QC5aTrHv%2FkkWkgSpmBM2Hm7QxlBRwV25fT1ixA%3D%3D\"}]}\r\ncf-ray: 9c300443dad956b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1342,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x74, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5bf1a0e57ed95d4599e3566f6aaeda84","sha1":"6ecf63dffd7fc57197b6dd5d6d821e8ecfd388c2","sha256":"f649e00d08dfcd4be682405bd0ddb28b822d75351aac3d66c3d4ad62f48e56a7","sha512":"1f9cd40c71724928128c9269e3f3823c6bf9fc26e74420867ed18004e9ce7169c938db24fa37d116fb8a30ac620f1f481451352c37c37c5c2a946204bbf886f9","ssdeep":"","tlshash":"31212bc3e91d873fc76e9ced00e43471a5d246e892a8435848ed8ec8631c0a6e1a1bc7","first_seen":"2025-10-31T04:50:36.808579Z","last_seen":"2026-04-14T13:45:23.076139Z","times_seen":80,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/kind.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:23.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/kind.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1048\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 06:41:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0ef85-418\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NAxjKQKWQyGR21yoUEtx1V%2BeZBggGFK0CbFzu4TrnuUzQ4tyrBhHF%2F%2Frj2aFFWMX0qhURHQxtUNkVzTf23fIzOY%2B7oBTg6p0xQ%3D%3D\"}]}\r\ncf-ray: 9c3004447b8e56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1048,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d3b422300ae6d5c395051273c2f225be","sha1":"c4056948810ef58ec772b00f1d7a5f298edd756c","sha256":"0feb0e5732642b9b0a4652b6dc3974e284afb2a4484aaffa53610b57078d79ba","sha512":"f0098444383fffa5fbb8164ec524c67ace9fec9e98f16084782058ffb4624d12f1fe4af6f2208cb746fe22dd292e26d4fe2be8ba61a0d2b3c59f03d2e52722e9","ssdeep":"","tlshash":"0611d8fb55da3f5f2b036708cc68185609ea1270a00416754f2e5cd94d7fceba7101d7","first_seen":"2025-10-31T04:50:36.781629Z","last_seen":"2026-04-14T13:45:23.153183Z","times_seen":80,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/scf.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:23.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/scf.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2096\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 06:41:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0ef8d-830\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iA1UX0Fx5rrGmvSHy%2FuKMNcmGzWsQTCCk8o0%2F0ZiGmDhcB7JVD5gOyz03dX51yKsTwF3Db1cf%2BcfbW4XixdPslM1UfUWZe44Gw%3D%3D\"}]}\r\ncf-ray: 9c3004449bc256b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2096,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dc2046c8bfde5310994ff08fcbe1b52a","sha1":"5f84bf495f18edaa4bfb197a7db56d0491c9d2c4","sha256":"50c366dfe8152bf6dc497233e3dd85505805fb74a8dc966f137ba19d167dee45","sha512":"93a0be5c1bf4a8dd29900cd6d82c421df45c4c8fcf987613b02bfd32c7deaff255dbc35b341722fc0e0e495f766d28db146a72b5c9b78f42617e0e8e3a17354a","ssdeep":"","tlshash":"c241181a3876d4925cae7431d6e3382ca3c8ed9ad4f6e7a236b010e4029e14a70b6169","first_seen":"2025-10-31T04:50:36.907252Z","last_seen":"2026-04-14T13:45:23.018513Z","times_seen":80,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/giga.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/giga.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 718\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 04:47:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68cb8eef-2ce\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CSPrqv77%2BSlM3fJt8GubohWUPeHpJdFHmxEvtM%2F5GDJW5hbkuVe60arH0p8yqQoQbYV%2BEt%2B5xm4KzYfZ168A5D%2FjN18CH2J2tg%3D%3D\"}]}\r\ncf-ray: 9c300442895556b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":718,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x91, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a2815d0bc203f23458b39054b6d80b13","sha1":"fb25e27dea490102d3ce8e5984ca7565a1ed8f3b","sha256":"69fed72f9cce7d8ad1128f893b5e06859812725e75ac0a7c983ece5dbe723f3d","sha512":"1f72a764acfe765cd699e5b74ba9cb24f91e30c68915573a560f899533b044fd5ed5c30f39b5d0d02090b55f9fa30154009332d5973a29c1bb11ab5240e0c1cd","ssdeep":"","tlshash":"300165a763935444ed3ff8781bbb0a292c02651f50aa0e55d48029005a627a1ae0961d","first_seen":"2025-10-31T04:50:36.991991Z","last_seen":"2026-04-14T13:45:23.037007Z","times_seen":80,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/bnsol.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/bnsol.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2224\r\nserver: cloudflare\r\nlast-modified: Tue, 16 Sep 2025 09:42:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68c930f8-8b0\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=foguOnI6dk6aIV8OsDPeLGSqg%2B9DKm2G2xhWFkejq6dZS%2FbIy9%2BPlfFFsxOJSUVyPHkikj2gERp5N5fZw3Zzq4yoj6%2BXf52oTw%3D%3D\"}]}\r\ncf-ray: 9c300440efbd56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2224,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"da523586082cf5a54dc8766a27ba2da8","sha1":"067c52de65e979ac7867cdd27f4fd79d20cce718","sha256":"67e917c2ca6a19c67db370823f20d4b7af0b44a793b1676f4456146b561ed268","sha512":"a35c62812432e7037681a1df490e88d1ae52fcc7ab9d3d0a701048724f95154163860c5b69876119732c641bbddba8bd4c4ceaa1cb39a9dbcda228f6a085218e","ssdeep":"","tlshash":"01415c5e0a73be18db6bf13c5eb69369815150860c8888b7f344dc8a1eb3cc05f799b0","first_seen":"2025-10-21T09:10:44.635424Z","last_seen":"2026-04-14T13:45:23.121526Z","times_seen":84,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/$michi.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/$michi.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 930\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 05:15:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68cb957d-3a2\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2wquRAFKAO0HiaM%2BUFAFN4Tk5D8Dexy4gO84wnuGLg%2FrrO8lReuW8I6ExF2HxyITW7p0AvWnwLaL4Semxysb4fGVMmH2AGCmdg%3D%3D\"}]}\r\ncf-ray: 9c300442996556b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":930,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"276be821e3c9d3e547b2c7f44eb22d78","sha1":"568e97675c67225c31163d73f8281c39adaff44e","sha256":"999788f2ed8ef804fec140075f6a4c055f4a8cc69ee8baf1c4c19da2e30a20a5","sha512":"b823fb541afa2fc2421b28cf67fba8082333feef0c34bb7f18500c5dd10c9782a854d0d0b8e45849508c7a5eeb34dfa519aab60fdf2020ae463bd38a5cc3026e","ssdeep":"","tlshash":"d011f753f5e314919ca4cc2728987fc671baee9082def1220597ac520bbd63c3291377","first_seen":"2025-10-31T04:50:37.007462Z","last_seen":"2026-04-14T13:45:23.028334Z","times_seen":80,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/ufd.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/ufd.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1508\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 05:15:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68cb957c-5e4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rma4dbPA8wW%2B0FBhhhYzZYPHBPOzGGt1tmZyL62s4L4Nhc5MZNi2Ye84s%2BKZ6ff%2BBe5axN%2F0Wj8X073EN9FwCMHQqUNCOpLpEw%3D%3D\"}]}\r\ncf-ray: 9c300442d9b556b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1508,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"42ccaa0797229532db809fc0e93da9d8","sha1":"bb60ee0d97e72951915f41be44e3fe40e7793951","sha256":"d7565a86ee13408d6e7a31c2be07c167f8180e3607da28871ea2fe939dc7ea74","sha512":"02cc9fdbd362e0bc70cce6c1dcfa812a8cacf46d08aa2e6ebf6852f882fc761fc948205f74721e14be400a02103b0780bd64c0cee9b5e70f2122f5e0ac8c39d7","ssdeep":"","tlshash":"fc319535b30623d8da022fbe31c91bdea6783c7a7248573b8f0052235b101e5945c69b","first_seen":"2025-10-31T04:50:36.76016Z","last_seen":"2026-04-14T13:45:23.079905Z","times_seen":80,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/mini.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/mini.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1018\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 05:15:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68cb9583-3fa\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vdf6LTLrIZGLY3Ev1lQZBddryrRO%2BfG%2FSU6U16GcErOHA%2FED7BKW8VEUhtG6FMyQTAWV1oaYesmN6uef14BqWuxcCmyxXTp%2FAA%3D%3D\"}]}\r\ncf-ray: 9c3004436a4e56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1018,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5423895b8927440bb98872be54916caf","sha1":"f7a1d56bf3c66154a0136dde107fc1f1c4be1f99","sha256":"92864148d1d74ad7a0fa81387c8060d7551a7c6265f12d29209cb3e826818b5c","sha512":"19b68594fa6871e8c0770daef62eb64f4d9474167c47ad38c37dabf46cc38603d696112b83bcc511f4545cc397301056cc0c8e43666a243e7120c3b569ef2a66","ssdeep":"","tlshash":"5d11d81c23a62ffcec542880aa9840c18f9181b5bf788f1571a265ea4c61aa4e10204f","first_seen":"2025-10-31T04:50:36.788218Z","last_seen":"2026-04-14T13:45:23.050713Z","times_seen":80,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/light.png","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/light.png HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 04:43:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"68d0d401-19a2\"\r\nexpires: Mon, 23 Feb 2026 13:38:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 896\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hhYImVW4Pdr0c6Qtthvu57PUuDU1oUX9HRjTNmBmuENxR2vmDnAkF7DsOEGTf%2BJ7NphFo%2Bj6CiCm8BoLGNd9pBxUozmCLr4FFw%3D%3D\"}]}\r\ncf-ray: 9c3004436a5f56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6562,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"b38cf5a87864a49c942e15e59727a509","sha1":"9fdb7e32806dfd7d86a18d56ecc72acae24f822d","sha256":"02a5e4a08fba32575dc694abc0fdc48f8ddc6899084fe013aa79e5b898e0fcb3","sha512":"3a7e0416585cb1116b3cab0692e8cd3efb3d5cf2bbf1ebaf7f3c70e9f82d1f8da8b2f7442eff8a3f10a3a9606e2c06743783308f728c4dce120100ffaa117bf0","ssdeep":"192:Gz+vlUUurBR4waBp0ufxBPH/UeNvtm4VNDUIp5dBzdj:GaKLBR7gfnH/U0UKAIpHBt","tlshash":"d2d1af33975341fe8d8b36906a04c239fc3d9013a5adac5e3f7609e679e3ec54554381","first_seen":"2025-10-31T04:50:36.998499Z","last_seen":"2026-04-14T13:45:23.135206Z","times_seen":80,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/au79.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/au79.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2978\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 04:43:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0d3fa-ba2\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZRaF1RyA%2FrA%2BGHmaLg1AfeEd0TbT54VtkWMHrCKZChJcQ4%2BOpbfSTha9AwcAm3tCYGeAqRrMFIz%2Bx7DIxVNwoFLb594dM9tX%2BA%3D%3D\"}]}\r\ncf-ray: 9c3004438a8456b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2978,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"783dd165d3727ae0de97c5a41df25bdd","sha1":"cf669f30e80cb98f8e5da8e1d977f8de295be80f","sha256":"69ee60996d1358a9858ff58bd0f2b61c7a17639e3f30b85bec1b50f528da072e","sha512":"4e8dbeebf628208ae569e76613e22a9804efb222be68472366276893b4fcb961211965bd7c27b4122ae745356ef9941f5f2364fb778df3d36bef1102e52918a7","ssdeep":"","tlshash":"4e516c88b69ed8bcd1f970371001f044d217a00826ebc09daf806261a7bf1ac6a4fa73","first_seen":"2025-10-31T04:50:36.764621Z","last_seen":"2026-04-14T13:45:23.111269Z","times_seen":80,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/$myro.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/$myro.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2146\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 04:43:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0d3f9-862\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N36V%2BSDpJcDn0O0tCd%2FFxQh4%2F8FfrB2cxQutWWpzbB5Vq3iKZ7PO4FA8vgapfT2BZBY3dz%2F50Zq%2FwlZamSlLP%2F9m45KZiiQmDw%3D%3D\"}]}\r\ncf-ray: 9c3004439a8f56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2146,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8d5bba06a8d84af302a89362f8ac16b0","sha1":"60db160c9d042b6031cd1dff50a90091b6ea0920","sha256":"f59b4b5613ee80d204239dac6c509a2e6f16e7e16329b8dd53bc85c4867a4f9a","sha512":"fee530f5d0e983dba1e2a33835d9b00e491c1d7f36592a2c274a87a2e9bb24e5c1c322b72ab9b699ee86e64a51cb9ddf71a36ee955cece19c5b02ffff64b64ca","ssdeep":"","tlshash":"b9415cb3c847cc33dca8b603ba3c51f8b4d020ed42ad0a197d967b55913d9a0fe49a02","first_seen":"2025-10-31T04:50:36.863105Z","last_seen":"2026-04-14T13:45:23.025599Z","times_seen":80,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-24T13:53:21.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:21 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OGGsPkLbyaBVNeNvnRYPJOFAcDFbeT2Owl%2BTmZEXT1%2BZDUbA9Qz3cs%2Baq2mTpTEmFzPx2gZUHc4jjwNLKTk%2Bl52kpNmDpbZu4A%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c30043b2ab256b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":289120,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1089)","md5":"6b48e4caebe1104e455970fdf25d6b5c","sha1":"106d64d61e9b304d8255bbaf06387fd802a2007d","sha256":"238e7124439722d31cea134f639210af94e2daa3308f77b897b1346b6c3adf8e","sha512":"df4053a1797b97abef6a5ff60f265b8801bf2a2990c39cd724e3fe7888e334d482ed77605cb5dc9aaf78a3afcb9062db6f4963c0bb2fa79d822f6680b6da46a8","ssdeep":"1536:Jjm/D+26AmuPvtt/+k59mSbof8yx4WsJDaf8D9ih0JE05bKDwmSGwtOE5m4nBk4N:UQdOnV","tlshash":"65545ab4a0f6197ba19795d078758b2f3ad1fa0bd91b125132ad8fe40fc7c86ec23146","first_seen":"2026-01-04T14:44:54.907325Z","last_seen":"2026-01-24T13:53:48.520011Z","times_seen":5,"resource_available":false,"data":null}},"time_used":820,"timings":{"blocked":71,"dns":52,"connect":1,"send":0,"wait":669,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/usd1.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/usd1.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1830\r\nserver: cloudflare\r\nlast-modified: Tue, 16 Sep 2025 09:32:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68c92e92-726\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kd%2Fx%2FcxBMUKF6ZUx8YSeZmx98EGJnyr8UmRWDsxUPB18jDBX7in12BcQ9vPXK58MtJ6fWJkKfNZiQNPBYq0%2F8ZmXzEjpGp6NlQ%3D%3D\"}]}\r\ncf-ray: 9c300441885456b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1830,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5e808a8d721bddc770a526443b6982ab","sha1":"cd67633ffd7ca5b54f98d6c46df309a9b9f88e8d","sha256":"474b49b4bd9842dfe27698818f432da925ea02ff8010cd3ebffc2150d6a8af55","sha512":"0f5b7119bd2fd47df9972abdf07d48c24b4e66c77aaec359f882bba0803dd53d699c537d33bbe2f19c8a5113b178010fde1f4ea6a745c8a563517c8bac7b783e","ssdeep":"","tlshash":"ed310bda63150246c866747cc6e5e36553f2d50110e1f897cd25895d8cc6462cf1ce5f","first_seen":"2025-10-31T04:50:36.878179Z","last_seen":"2026-04-14T13:45:23.023964Z","times_seen":80,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/alch.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/alch.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 838\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 04:27:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68cb8a18-346\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9MvV4HZslbVdmeUQKpxP9O1nn55zsZSqcbD09VeIUBKCUrHIkxtRbDEAjVckcmsqwNxGG7ZZ%2FtzQe25eDjuie9DBhMnQqunlGA%3D%3D\"}]}\r\ncf-ray: 9c300442794056b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":838,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ecf1b9e78a867d44444f7419ff65618b","sha1":"f72b1b6953bef113500e2dbf86a18e79238bae81","sha256":"30923734d3d2a619539df306fb2e21125acbaf0d31909b626955d6b512f6c245","sha512":"d3ccd6fce9436364ef1b752ff95cfcf8d7eb6d41aca59adf58e70bfde5c5ec48ef63ea1c02e72639f008900b1b8296b09ee5167d2de9f4a9bcb8910a46141fbf","ssdeep":"","tlshash":"9f01d61d21dccb9a39492e241f9f178884a8ce843080d11309229a02b8d29eba242539","first_seen":"2025-10-31T04:50:37.002166Z","last_seen":"2026-04-14T13:45:23.058658Z","times_seen":80,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/ai16z.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/ai16z.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2396\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 05:15:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68cb957e-95c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tO4BRFvtyog3jdTZe0RB33Iq7tnwIVNW5xFhy42JF9oEi6MkOW%2BV85hSLNoinNDWpnxZWlnT0nt6x2IxyAYZnXsw44UomudPTw%3D%3D\"}]}\r\ncf-ray: 9c3004435a4756b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2396,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ba6a2c8d83d13e733b5b1968ffeceae5","sha1":"74ebe1e0b2f8cd9dc241ed3129008069de52ee84","sha256":"1d9d4b4e419b3859a8cefcca7555b59ad358aa60054ec1ec2f8cbbbef276fdda","sha512":"cd5403ac7fe718697c443edc9df4392e0f8115ca788edc81a37cdfd7fea95aefc87f665ecc25037ddd34c1bbaf2af5943736aa28594f8e89ae9cfdeaff0fee91","ssdeep":"","tlshash":"e3416f435015397128c0f7d0b74d06ce434d27adbf85c1b0b62c12cfe849524cd3a90e","first_seen":"2025-10-31T04:50:36.985768Z","last_seen":"2026-04-14T13:45:23.116469Z","times_seen":80,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/house.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/house.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1996\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 05:15:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68cb9581-7cc\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GFGPFeghMDeov5A2HXkZ1mogbZ8NHaGtR6UOZLeoGCCYlWhEPO%2BmclQJd6%2BjoieEMUFat5cqk17os4bzx1s0EvPjWNY%2BIpR11A%3D%3D\"}]}\r\ncf-ray: 9c3004436a5956b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1996,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"857cec553edecf654ddd1932436aee46","sha1":"70bd19cbda90e98cdd980d64789f73cc7b06478f","sha256":"dc8b0b2a4a27b795fcf24e5aa02909c525a1221b7994e982577de7bf632e6921","sha512":"6fa4fc44580a9a1256f7c0974a231bb66123046798049ea08b9c933ca7f2c6ebbe85704048dedc78c03a151fe7239670cc407b6c277ada0d26f9a97f8a0a141f","ssdeep":"","tlshash":"1241d8066ab67f7a682d613494446a71942b809c80ecf869b81ed8fbcb6945ca278842","first_seen":"2025-10-31T04:50:37.008363Z","last_seen":"2026-04-14T13:45:23.143384Z","times_seen":80,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/neet.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/neet.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1696\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 04:43:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0d404-6a0\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=44A3xzafhJtcRXpCPSU9K%2BZ3uEcMUIpBATW5bSjj6g5SYk0Ze624Eo3FWnyTHmm0nJeVZIyScugxXGjfKR%2F%2BR15LTdMvNTk0xg%3D%3D\"}]}\r\ncf-ray: 9c300443aaa256b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1696,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"992c2e2c21353423ab236dfecb0ebfb5","sha1":"e444c8e23ef1e90d3c1c12af997cdb19c9e3217e","sha256":"05edce81251cf0c2642a9e1a33748fa83536d53ffa20db7924a1db62f4614d31","sha512":"668a7e8a04ff29bb833550614e47f59e09e6667ed80a800148e017bc632cf49dafbeedc122cbfefc5151ef49d10633e8d6dc9663416a3856099df7cacadf0892","ssdeep":"","tlshash":"a531fa009754b47dca2f1bb500a9d865195c92d1d6dcd5ef117f707d88b430dfa51a04","first_seen":"2025-10-31T04:50:37.013633Z","last_seen":"2026-04-14T13:45:23.066472Z","times_seen":80,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/rfc.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/rfc.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2924\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 06:41:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0ef8c-b6c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7EtG8hs%2BJ1Oi6XDWAfd5DX5MxGC6rUHPjHbNfhRGBOXtdJX26EsWNLqekhFPMHIjQMwDjNpLDG7On7wekWSAIOase1okdie%2BZA%3D%3D\"}]}\r\ncf-ray: 9c3004443b3e56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2924,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"939cafa9e0b39bc1b0969d27c9d17bc7","sha1":"312209a1a451ec09ab8f7d822db00a88aed71745","sha256":"d84556ce0d006366ac500ccdc57b32832f0ccd8a8d9e273e94147695c3135443","sha512":"503931850fc12da77b378d91d871420a35003b027972c0fa3ae17a8541368ccec2d26df77b3f9779115b8445a27ce5a4d00ee11277dd3234e2f2b58304bddd9e","ssdeep":"","tlshash":"8c515caf5328586fdbd72a186fc8a088010436b5990b9ffd9953ec26e861549285164d","first_seen":"2025-10-31T04:50:37.014578Z","last_seen":"2026-04-14T13:45:23.016916Z","times_seen":80,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/avo.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/avo.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1252\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 06:41:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0ef94-4e4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6FvGKZJIhsLSZwQevB101sIvKzG7WDNA6iV%2FPol16flosCaOwfY0R2CoufrVZu5xVzoWltAyysG2evsHEA48IngK4GPbFhnUag%3D%3D\"}]}\r\ncf-ray: 9c3004444b5356b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1252,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d78936f6327b4a4acdf25d593d591a3d","sha1":"17bf8175d593bbd8591846ee417a375891a29d28","sha256":"49a455a7cf719299498f1ef0106201806b20739992d3adbdfa9e93a76e202690","sha512":"dd259046b119867809e89f2aa46629194a2e4b6e1693d4364bfddc5254a5a6f5ef24e4d79d14b889fd111b7b48c9d211b0045dccd4cea4237bf80185c7aac6f5","ssdeep":"","tlshash":"5f211772c07720d846c452afaeed0ae25c3a4a643fcc804c195908b4a146c7fee8630e","first_seen":"2025-10-31T04:50:36.771814Z","last_seen":"2026-04-14T13:45:23.167096Z","times_seen":80,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/usdt.svg","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/usdt.svg HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 16 Sep 2025 09:45:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"68c9319d-495\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=phMC%2BzQdGSQxz6Z%2BREDKXmt1qYD4lF%2F8GYQQuttc%2BRyxOru%2FL5V0O8cRTDXWauPJZ8VkzyNgTSQN1HlSAmyZq9z7QDSoNcvaVw%3D%3D\"}]}\r\ncf-ray: 9c300440dfb356b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1173,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"335eb4a1649df9ef0779a3cf76667dc1","sha1":"94a48061d57696748777521618457fbb4cc29d1e","sha256":"ebe5e8004bc8a9e681f3208c5f838abd5536ed8e4eae243486a430ba70a90ab1","sha512":"1050f9d49d53f9ede345242eb6e98c2e40bc69d651c8908a217071d43bb4011b6e87f3ac628456ec26e0dde2525f756689e223a15c2ac17ab0c8a6ead3ed58aa","ssdeep":"","tlshash":"c52114cd775c884040c44ffb7f3788c83c36e4c11e464f18c0219f152c999af9d46a9a","first_seen":"2024-08-20T11:34:03.137583Z","last_seen":"2026-06-02T08:20:56.504753Z","times_seen":118,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/jupsol.png","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/jupsol.png HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Tue, 16 Sep 2025 09:44:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"68c93161-3e81\"\r\nexpires: Mon, 23 Feb 2026 13:38:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 896\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GBfr3Gu7nLCDsIg%2BSbFqZKIjEXy96BbdGxeCCT3AW9mQjy5p74R0Nrr7eFiE%2F2xBhjC9RWUyCMUCN6woS2hd8Rayi1u9q6KZRw%3D%3D\"}]}\r\ncf-ray: 9c300440dfb756b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16001,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit colormap, non-interlaced","md5":"fddecb361b3a702ca8d67e5bcf2c131e","sha1":"fffb0129b548b83f4b69c39a706b0da09fbeef5c","sha256":"92469dca2b99aaa5ccfb7935db4e04ca42e2764361c17c15b41e8dd8ae902241","sha512":"3bc5cd172abdc4e2a10ad2caaadd26be333d73be0eb0cc422cdf37b3670bc2983c61396296296059f92904116fcd275e7d95c282b155d24fafbb048b90983ddb","ssdeep":"384:Cvac04X9fxg1AqtR7g+Z307mm5DEb4a3LZwbQ+LLtM+d4a6DgDGL4s:CvX9xXUu5v5DE8a3LZfMLtM884s","tlshash":"b572d08b0bd3f510317d1c2359a7845e4bce3d9ca8272a768607b7caae327ca8653615","first_seen":"2025-10-31T04:50:36.934872Z","last_seen":"2026-04-14T13:45:23.148813Z","times_seen":80,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/orca.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/orca.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2308\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 05:15:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68cb9584-904\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lse0qwSedtQmU%2FsaDXlhZCPu5c4xE7qXGadWElp%2BYakigMaKGYDzbLbAuhuW%2BDNnhX3HdScoYNYsM8xK0K6XDRSgjB2bKWRs6A%3D%3D\"}]}\r\ncf-ray: 9c3004434a2e56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2308,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f144e6a4e44346e636d6f364152cfbec","sha1":"c35fe3c2830c4a455817d784e64b1f39252af3d2","sha256":"697921aec7b9356d920e50d83e85a736867870ffb954a1527b6e11ac9fc317ad","sha512":"5cb9c853ab26e315f2ba3e4b5718d4b4bd3146155442ad48bcb84534b72724a3f8eafa0be5bdb36adf406c5771f15049f0f765b635979af0b7eb73dc04d0df32","ssdeep":"","tlshash":"bf412baa77674b83bd442c3876ed229c274a92ee72cabd50742dc1c44731a958d2a0d9","first_seen":"2025-10-31T04:50:37.012799Z","last_seen":"2026-04-14T13:45:23.127Z","times_seen":80,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/labubu.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/labubu.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2018\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 04:43:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0d400-7e2\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xEhAu7G9nh9kHWBoircJzn0xLITpQObYoe22CAqVkkbnaMzLn54JW2ouJfS%2BD3cDtPSB%2FfxZgBk4g5gPyHaKIkFprWkiNHlnWQ%3D%3D\"}]}\r\ncf-ray: 9c300443cac856b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2018,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x102, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"66b92fe6453089e08c5aa34d124c3a71","sha1":"9b35ca779363181a605cdaea5cfab869b18f9256","sha256":"bff8360d01daa20c09f9b1c98739c124e3807723ff489ec7e802766aa93a2061","sha512":"fe7b3d1c2282bbe7dd0109c4b22daf5b1e5e2f37b6a3ca3b9d698c466aef596ce60e5dd1b0ddd93358a5f8276f4132cb7be5c897e4c3d05b2a1ba0a7e60596ea","ssdeep":"","tlshash":"cd412a11fdcf0d28fd82cb71797a8ee14dc15c937a2086dd0d98904a0a6b8387983b98","first_seen":"2025-10-31T04:50:36.743993Z","last_seen":"2026-04-14T13:45:23.045515Z","times_seen":80,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/uranus.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/uranus.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1230\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 06:41:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0ef91-4ce\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xLSZ4zrb%2FMWXoYjjfx1oko5QmXeoaV4gc%2FUbwxiEzsHhf4B1YaEvWVDP6%2BvppBHY5%2B%2Fi19S2JnhFGVTfPJqXeSVr4l9xn4faDQ%3D%3D\"}]}\r\ncf-ray: 9c3004446b8156b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1230,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"220943d4bb6c760f59773c51328cc22b","sha1":"dfcd410a8c3715a663d74f037b452700170c6794","sha256":"32a0725da1c5d57080eb75bf292347972a3b2e2b877aac05fe4f74e82e8b622e","sha512":"6a1bf9925d1d47d2626b6437a8912e703fa88df14b970e63ba941954bdc3dac2508a6c132098c6321993976fd7ab7bb8a6d66d98ac775fd8f35034256b8d2f39","ssdeep":"","tlshash":"2321b634632c374cd0183378a0713321b7a53f32020a6eaad70166755f1aac8558d046","first_seen":"2025-10-31T04:50:36.690959Z","last_seen":"2026-04-14T13:45:23.06553Z","times_seen":80,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/dood.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:23.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/dood.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2162\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 06:41:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0ef99-872\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XBgbA%2FwYBDra6y55E1VSrgo15fpuWNNBtcjpxW5gtRiMkAcjJ8CSmblsRsBdLHXxOmd%2FDhDr6xbirUPeyam8%2F2Ie8VnKu4F5XA%3D%3D\"}]}\r\ncf-ray: 9c3004448ba656b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2162,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1297fe6884a818c144505682426ea476","sha1":"038f73bb67917d0d4091cb4781fda583553fa2e9","sha256":"c925cc9a1968bddec9180d8d52b3e970190a0e2095f355112bfaaa3a28509af7","sha512":"ff03d0a0c3e3c09820b59242a130d657a85bb84e515d91ba5807d9607488c787d3aa5636ec70d47910374770cf952fc7a9081c8fd276f59b5ff848dad8d5a445","ssdeep":"","tlshash":"c141eba9d89120dccc2eeed67cdca71a49f329e443018f618279560b162a9446d9d794","first_seen":"2025-10-31T04:50:37.000458Z","last_seen":"2026-04-14T13:45:23.026671Z","times_seen":80,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/sns.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:23.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/sns.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1666\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 06:41:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0ef8e-682\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DcxYIjJ%2Fx2CqEWd1tAyDgdyMRR73g34uy6XH2HEF%2FA7IAUwwP7gKrQCWxkgP4zpBo11PNtm5rXEPFrYM4d0%2FfuZFCbxsqHny5w%3D%3D\"}]}\r\ncf-ray: 9c3004449bb656b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1666,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8714974fbe6540ee78b05fac3416059c","sha1":"ea762c4d0cdccaf028248c27bf610d5225b819d2","sha256":"3751cd41448f0ab6622ebb6e58bd0764e66ac38621407723d1a93a0294847ecd","sha512":"4aeed8af555f6053ebbf352821b5988bd2c1f2dfa8d1ec5c17ad3819e0f673cfa13e60798148cd377879a012176d30e5f60bec6baf3e80e9d573a2190a3a54c5","ssdeep":"","tlshash":"7a315cac2c8efc4afafe50c889317d8a16ae4c7d68420133a1877201caacce55d6042a","first_seen":"2025-10-31T04:50:36.747307Z","last_seen":"2026-04-14T13:45:23.099949Z","times_seen":80,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/monerochan.png","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:23.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/monerochan.png HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 01 Dec 2025 05:23:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"692d2643-bad\"\r\nexpires: Mon, 23 Feb 2026 13:38:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 896\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=82XjnMajpm12XYJMr55MM9OYSXShE5c1MACU3AUDSTtb7IwphHGpgpmhTBUsY1A%2FMJP6Klk8wJr6TUP3wK3T7KFNhsxpK1eVEw%3D%3D\"}]}\r\ncf-ray: 9c300444bbf956b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2989,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 90 x 90, 8-bit colormap, non-interlaced","md5":"d7520ef343a05170c6eaf0d5b591220d","sha1":"2ed73f29cbdff6cde754e682096b37695cabcb2e","sha256":"51fe70b7b44ffa9fbc5f4c0e2507f9fbe27ce75a743c94232d3ee78b2b64e033","sha512":"d479564fe3cf0629c99b259c959f6340dc42a90785e02dd195d9185dbfd9b22d2e751b94461eed7421c6dd09045d8ad45b33c92239c984e17af017e99a6444fe","ssdeep":"","tlshash":"e1515ceab0b39d8cc73f1e89b71da6fc4bac59550591881db2404ca834d188edcdde48","first_seen":"2025-12-07T05:18:33.948407Z","last_seen":"2026-04-14T13:45:23.070822Z","times_seen":72,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/fwog.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/fwog.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1926\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 04:27:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68cb8a19-786\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wf%2FeREUROX%2BPVHbwuWekAJCymSSbnsF0drY6ikci5UfPtXFqukO2HlkpOkMUJ0XLhrDj%2BwygBzEUFSr4pfqWGNd79AI%2FKCWQOw%3D%3D\"}]}\r\ncf-ray: 9c300442793d56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1926,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9c3378d746b0b35beac848b6111c7b57","sha1":"acc09866f44dd0f2395ed98fe390d45984579d33","sha256":"d86a6fcf1e14e183291f01c8401cb72e3950e255cf966c2e088ba29ab1f9499c","sha512":"9ff641ecf69141961ec68e72d57a341b276bbfbe474631f4c119ae5a6bc52aa46d7d390a41db37c815fd7f6dbaacbf11b6140b9cb43cc64670eb1ff72f084c5e","ssdeep":"","tlshash":"9741ea9875ef5b8b8753bdd79692d38654a3486b43026622a740f7442206cb0e0ffcb7","first_seen":"2025-10-31T04:50:37.011068Z","last_seen":"2026-04-14T13:45:23.068634Z","times_seen":80,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/tslax.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/tslax.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 960\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2025 05:15:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68cb957c-3c0\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B3N5Kc0IYHfet8EAgVtGS7%2FXMrK7g%2FIsY6WIoB2eZp6h%2F%2FBcFl27Degp7Ytbn5PxK%2B2cIo59XxkcEhxY5Br6eA67Od0TJtgPlQ%3D%3D\"}]}\r\ncf-ray: 9c3004432a1256b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":960,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"641906f846d08492338b70696957ec20","sha1":"9808750aab28e0109f85f1bf9ef101f3417505a1","sha256":"8b94e684af39238b2b1bb291389d20f4ec0a02ec2804451ce90a5d3937d6549c","sha512":"6a5129fdc20662a75f00474d739c9af63c20f008ffb4fdf2df4fdff469be9becfe11dda4fabf0af0a3fa9000d008e8fe727513e53d9bb5587ee5d90b3dc3a680","ssdeep":"","tlshash":"a61188f49e5752f5deb01283d6ccbe41131e855e14e09617f84a04b62f055f099c3689","first_seen":"2025-10-31T04:50:36.829001Z","last_seen":"2026-04-14T13:45:23.110584Z","times_seen":80,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/stonks.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/stonks.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2262\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 06:41:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0ef90-8d6\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M0BD58CU1ofVIN11hYCSZK83xSIkht%2FUAO1QLPhaAk5P13ziCRguQAT9fWsWihXB9j5vxkjDKq0bnCGM9HFlzmlhA7aEMt4JCw%3D%3D\"}]}\r\ncf-ray: 9c3004442b3356b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2262,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f4f2fbe149f6a0fdd55b753b10baa226","sha1":"f048c10a7b98a8e5057453893b9c2a6506211763","sha256":"83c5125a0caaf46766f70834429b45cc727b330dcc102c0422df2581609a44b7","sha512":"148b1427683483a89cd1048ad574dd8be2b68fc387efb92b3fabc95e79c40c04d215080ed4aa11ba17afda38b40f664e69ad53ad7f2f5516552d1f151bb59feb","ssdeep":"","tlshash":"f4414bafe1ac3bcfc6846958fc75f00378315e37424a327981cb4384255b819a918f69","first_seen":"2025-10-31T04:50:36.7923Z","last_seen":"2026-04-14T13:45:23.067068Z","times_seen":80,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/would.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:23.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/would.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3002\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 06:41:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0ef93-bba\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oAmduqZsGbe6olq4wqpbM3Ij7wXlmEDWM%2F%2Bxb%2BEiQA8qG18dW5o6x970GF7HIs%2BuZt4c%2F3gVCAr5mKOCLrh7zWp8YFGx86W67A%3D%3D\"}]}\r\ncf-ray: 9c3004447b9656b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3002,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x90, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ba1a4becf98f579c821fa53538f382ac","sha1":"f64b33755bcc063fceb095ce0f2b63ac4275e172","sha256":"962a6abf3677dc80a5417237318ebcf9efb0275329b826c36a054f791b2b8e65","sha512":"00f2a8e21e69f4166943f8c6a9172f88840462029119307a4644e384694de04ee80c20a5572c38a2ce3e95e165369e813ae0f45a40ab07600305a7c904f98af2","ssdeep":"","tlshash":"2c514d5fdd1555a54f53f871fc86362b8623d350e77ae710948481020c3ed7e8d51327","first_seen":"2025-10-31T04:50:36.692637Z","last_seen":"2026-04-14T13:45:23.144643Z","times_seen":80,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/SpaceGrotesk[wght].woff2","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:23.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /SpaceGrotesk[wght].woff2 HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/main.php?type=css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:23 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 49256\r\nserver: cloudflare\r\nlast-modified: Sat, 03 Jan 2026 08:42:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6958d673-c068\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FM5r2R1jp3SHZZkxtadH5vY2KZMjZzzD9PXW5j%2Fqh45yi0y3SzRgdwLcGrU7XpPg3feXm7Eq38h%2BOUJVYUJVjG3yPBJ61CloTA%3D%3D\"}]}\r\ncf-ray: 9c30044bdaa856b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":49256,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 49256, version 2.0","md5":"0c62a8f36c27538912ccbbd5de747927","sha1":"b4509f04a2bed1ec04e7f9ff4dc33c69e8e263ec","sha256":"8e085aa438094f11487a836652edd5c054fa6a96f63fc7c282105ee3a4b08c07","sha512":"a67cdcfd2c433321dac9322b221ffa7aa0eab3f0258d7975c84e891eddea41fd456ee3c6f7e67762853e023ba0ccd3d0586d5d549a63fc0ae4ac62f7533dc074","ssdeep":"1536:pKXTCNqIqI29JkBq+zhVpQ0n17Bwnfen623:pKXGoaWl8y0nPwnGn623","tlshash":"a123f1ce649a7d788870eaa31dd73f146dfc984389d6e6e1e1c2da8d21c971809e434b","first_seen":"2023-05-23T06:00:59Z","last_seen":"2026-06-06T23:57:00.411415Z","times_seen":521,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com/@v1/cdn/js/angular.dev.cjs.js?t=29487713\u0026u=H6XxRmCN5ebadwtXGDY5MjU2NDRlMjhjZmYzYzM0MDI3ZGU0M5zdDNOFFOcovKe2xQ","fqdn":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","domain":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:26.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 15:05:58 GMT","end":"Wed, 08 Apr 2026 15:05:57 GMT"},"fingerprint":{"sha1":"4D:1D:3C:6D:9E:2D:29:38:F6:A3:C5:A2:A9:6E:00:65:21:FD:F7:14","sha256":"B2:0A:D0:D4:D9:66:A7:A6:38:55:71:26:B9:06:E7:A1:A5:4B:C4:7B:C4:E5:D6:9A:6B:FF:D1:0E:21:E9:BB:C1"}}},"request":{"raw":"GET /@v1/cdn/js/angular.dev.cjs.js?t=29487713\u0026u=H6XxRmCN5ebadwtXGDY5MjU2NDRlMjhjZmYzYzM0MDI3ZGU0M5zdDNOFFOcovKe2xQ HTTP/1.1\r\nHost: aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:26 GMT\r\ncontent-type: text/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\ncache-control: no-store, must-revalidate, no-cache\r\ncontent-encoding: br\r\netag: W/\"a0502-14+i6Bt7XM8ofHk8WpmFyqoPYWI\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=angular.dev.cjs.js\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 01/24/2026 13:53:26\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 7f6b3f017976918b310e06eb546975e9\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":656642,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-06-07T04:15:26.458958Z","times_seen":2555,"resource_available":true,"data":null}},"time_used":304,"timings":{"blocked":44,"dns":34,"connect":1,"send":0,"wait":215,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/bome.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/bome.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1826\r\nserver: cloudflare\r\nlast-modified: Wed, 17 Sep 2025 09:08:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68ca7a8c-722\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M5bpNyAcnZy9LBJY3yHK%2BscRCkkmxDCC6KWoxXxQDGMG44byyoDJVSJsazDfl9A3VCYtGO0%2FA2uKmoUfAEG1x3LNatynysvk%2FA%3D%3D\"}]}\r\ncf-ray: 9c30044238f656b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1826,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2ee67630ca27073e70c283c447eea7b4","sha1":"bd0187a7b56a22b45a27d26c34a81ac78581c2b7","sha256":"2be94ec238847e6b6e13fc98cf9788e9862a94d6d13271732980a8c949ef9a87","sha512":"198fdad94f808243b485acf62ec4c9fee7925a52aa5b5e5d1d34f5032660b601b1c9beac484b46fed77d399f20ab6acf84f0993957f52832ff1e250726447364","ssdeep":"","tlshash":"38310bcd2f269469e31cef38580d1397129623133b588c5bc04b9b368da743bd3ec9a1","first_seen":"2025-10-31T04:50:36.898848Z","last_seen":"2026-04-14T13:45:23.01177Z","times_seen":80,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/cards.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/cards.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1304\r\nserver: cloudflare\r\nlast-modified: Wed, 17 Sep 2025 09:08:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68ca7a8d-518\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tSk7LbhK7gTBHyc7T8dDAg1utnuBauSz8p0xQGIbN0bVY6%2Ba8K2PBdShIa9AqBrrQNylWtLwJNad0ZHlgrUQIs7YtlE5dOphsQ%3D%3D\"}]}\r\ncf-ray: 9c300442490a56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1304,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8330dd5f2b43db360089e59908119673","sha1":"bd28be6d93fa6ce3975e2b64f2ca2bd8af2c152c","sha256":"7565226b687289596b23256419a737621abf325107589b8ec682b2be80853efa","sha512":"a32c4f06f4c7a717bc62b1bf2e2caabc080206d1023f3716274a7fde6cd249f2f32de54c9d2d1371e4406f5fbff5db31d4d645d0b5068854a1523fcb78cc12d3","ssdeep":"","tlshash":"4c21b76f4170c352c04b043ce7a52f5aa613501507a5e29793a93e42cef6e75cf28148","first_seen":"2025-10-31T04:50:36.722449Z","last_seen":"2026-04-14T13:45:23.012289Z","times_seen":80,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/maneki.png","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/maneki.png HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Wed, 17 Sep 2025 09:08:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"68ca7a90-32c3\"\r\nexpires: Mon, 23 Feb 2026 13:38:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 896\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pu59fkR65Ukg%2BPnbnSdI%2BtKsnVn9GQHi2Wf0LJpDhS1GOrNXr5qoz8ZhnJSierGcV7GwqejkN4bamdmCfOyX0xOFEZtOVT0LAw%3D%3D\"}]}\r\ncf-ray: 9c300442491956b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12995,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"0e883ff1b71d928e3debc4d54721ab51","sha1":"1758499fbd7ea5de15b9074480a64942acb25a4d","sha256":"4f35c51b476b921e86cca882b87f8c3f4531e5a01d244bc5dbcf2baf556ce840","sha512":"e2823433a97b6bf0f888b79db2a4618bdea8122438f346a5ae21a4cbdfd15d4ff206988cf2a94304ebf3f526b3a77bcf113336b3e58297c55a22ffefd4d06990","ssdeep":"384:PaZotO6r7EElUv50rUVpxvxDEthVfCxpXBQ8Yz9ZDB:WXSIElq50ixwthVfupuZ1","tlshash":"1e42b0015fbcb518ca9e237669510181c530cf1b96cb8db2bf65b04047f7a8e6debe85","first_seen":"2025-10-31T04:50:36.859028Z","last_seen":"2026-04-14T13:45:23.123051Z","times_seen":80,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/saros.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/saros.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2304\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 04:43:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0d408-900\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hQ0U3YU6JBUrPIrXufaerCW3cW66un793e%2FL0lMfOjZ4%2BTrpMhUelDnPAruRZj0s339oubiKyCYSyiaMW0fSSaa018dJwqfTRQ%3D%3D\"}]}\r\ncf-ray: 9c3004440b0f56b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2304,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cbfff9c0a3b39e7be46ddfdb279dde0a","sha1":"bbf263f9025a3c4a25a993d85df178bc9fc78289","sha256":"cc542a218eeb8883c2a01bdcb663954a80abf34b5b2b5d7d8219ac84fc3003b2","sha512":"4e15274c6d4a1b1715f23d8ec3bb5a3ff464ff1c895c4f85fea5204a8ae0adf273274d143daf7fd95e9174abfc3ff5d8b85aba6abd2f612cd7696f50a63334a6","ssdeep":"","tlshash":"b0412b0e644c37acf0964caddf2e41636efd95b204d8d2a1a48dc8829e894ccd067e7c","first_seen":"2025-10-31T04:50:36.790405Z","last_seen":"2026-04-14T13:45:23.09041Z","times_seen":80,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/sonic.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/sonic.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2114\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 06:41:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0ef8e-842\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oluuxfx8JNZ47yzHpA3CZ8GKaAQzry7azy3%2FQhsBEjBAYK%2BeugPlt2k%2BRJwAB0YjAS1QAvDM0aL3usPBjzHcyLtUZU%2B7wink3A%3D%3D\"}]}\r\ncf-ray: 9c3004443b4356b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2114,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8778db3ea25cec1fdf2f23c11b29fd9a","sha1":"5845698778eea8f3b4acf5d8efba1a2800a20df9","sha256":"53ec66ba5a2ee4af15cacf18e42ca94b81401830084fb4819d4044f146d2e94f","sha512":"0ccd9cd3b79dc7508733cc370b39b35e051a613034ba85b8a99b4cf5c09951f1408a9a68e6009ae3cddbd576f8e6cecea5fc7d46a0c0d7f6bbf5de864f0d7658","ssdeep":"","tlshash":"ae411a06621d39d3866cabad77d48d4988df8988f07ccd6fd08c7e11c0bb2291b0536c","first_seen":"2025-10-31T04:50:36.770332Z","last_seen":"2026-04-14T13:45:23.12772Z","times_seen":80,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/bc.webp","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:22.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/bc.webp HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2028\r\nserver: cloudflare\r\nlast-modified: Mon, 22 Sep 2025 06:41:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68d0ef95-7ec\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GtxJkZIC6WZhLC3AT0sGaxxT14baEc67woAYOIeDsIxw%2FrRo78RlMnnIUoHWreOclA2CvF7q0CaDeMjh2kY6Ii3fQh8t3CS9dw%3D%3D\"}]}\r\ncf-ray: 9c3004443b4856b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2028,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"da9221034a235710639dd4a71a34f6f2","sha1":"2e66eecb5836423f41967133c1c9bbfb5319858a","sha256":"25fe63034eb43a1d3db966986e2b8752adbfa9fca3c3c29369d1e4aa0cc0516c","sha512":"6020fcd1d9bc5303a79385198527feb46b6cfe1513c7c0741887a1e717b342ad07d7ce2cfaf98f88a75ad43c46228b97df340eca47b69f92b201d97517f28299","ssdeep":"","tlshash":"f741f878b239e740c8597e3deda6879c698b40e1bb0a0c661a8c15b0252ef8714a1d88","first_seen":"2025-10-31T04:50:36.942321Z","last_seen":"2026-04-14T13:45:23.07298Z","times_seen":80,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/cat.png","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:23.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/cat.png HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Mon, 01 Dec 2025 05:23:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"692d263c-62f\"\r\nexpires: Mon, 23 Feb 2026 13:38:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 896\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kdtVATklJCikNWYhO6B6pq%2BpkA188k5lZdArHicQgLrPNaEjyknGxt720kplfHEPFV3TYMlKU5x9QPVJYHO2Aj%2BvS2QUwsLkJw%3D%3D\"}]}\r\ncf-ray: 9c300444bbf456b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1583,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 90x90, components 3","md5":"b9b89bcf92538c9f3435be7e9050c3d6","sha1":"781469929f714c755b274a2795fac4a5853f567f","sha256":"121df1b8df15ac5584f9672316fa526bbf19671bf74a13438b8b8fa46535703b","sha512":"4fc060ff412a3529b7a9743380a79c0b7064a9d3818a8e73fe75ce535d1ff43eb1eb417be2efd1024dbb1a5748512040814b05836f409915f8641b3f45e2c395","ssdeep":"","tlshash":"1f3163a337151b02f61606b954d4cfb0e3a6bd32daad9344c7475126e9ac1c09c847cc","first_seen":"2025-12-07T05:18:33.946629Z","last_seen":"2026-04-14T13:45:23.13712Z","times_seen":72,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"meteora.cam/files/io.png","fqdn":"meteora.cam","domain":"meteora.cam","tld":"cam"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meteora.cam/","date":"2026-01-24T13:53:23.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"meteora.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:35:41 GMT","end":"Mon, 09 Mar 2026 12:34:23 GMT"},"fingerprint":{"sha1":"BD:33:58:44:E5:34:D2:73:3C:C6:7A:78:51:A0:21:25:B5:AC:E8:47","sha256":"26:1F:A5:AE:04:44:CF:40:15:8F:22:26:A0:5D:9D:42:4E:6E:70:B3:95:F2:41:E0:78:8A:CA:6A:B6:D0:83:3D"}}},"request":{"raw":"GET /files/io.png HTTP/1.1\r\nHost: meteora.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://meteora.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 737\r\nserver: cloudflare\r\nlast-modified: Mon, 01 Dec 2025 05:23:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"692d2641-2e1\"\r\nexpires: Mon, 23 Feb 2026 13:38:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 896\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n64749UvQVVeSd5XlPDOZKPzAH1y68x7e3R9c6wwpoh2x%2BMwz07KNZ0i7N3vbfMmlvjCzjRFUYWK%2BIDnSOe2t7IPYgd3D3tinw%3D%3D\"}]}\r\ncf-ray: 9c300444cc1756b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":737,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 90 x 90, 8-bit colormap, non-interlaced","md5":"ad5ba629bc0215ae0e7c3619579ff11b","sha1":"75dd539e081d5f7a67d066a1421b2325af9ebf98","sha256":"87364d9f768d44815056212498b70ea771bf72dd504f6e35f1810cbc4c485f54","sha512":"3679a7299e9969e8d01ec11cda3f8ab4d203dc351bcb163257c06373120bcdcb5b58308a2ccfe7b256f2e8339a8eba141ec9cb74d4407981f318867136ece1fc","ssdeep":"","tlshash":"280144b3ce5e6711d8d4cbf0626d6ce5dcb272c1213ab412cba1a231618605887f1707","first_seen":"2025-12-15T19:53:24.970328Z","last_seen":"2026-04-14T13:45:23.169055Z","times_seen":71,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-24","alert":"Phishing Block","trigger":"meteora.cam","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"meteora.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}