{"report_id":"d9ee9e47-31cc-4eb4-825a-f46a2a7dfbf3","version":6,"status":"done","tags":[],"date":"2025-09-28T12:43:57Z","url":{"schema":"https","addr":"allocation-meteora.app/","fqdn":"allocation-meteora.app","domain":"allocation-meteora.app","tld":"app"},"ip":{"addr":"172.67.141.205","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"allocation-meteora.app/","fqdn":"allocation-meteora.app","domain":"allocation-meteora.app","tld":"app"},"title":"$MET Airdrop | Meteora"},"submit":{"url":{"schema":"https","addr":"allocation-meteora.app/","fqdn":"allocation-meteora.app","domain":"allocation-meteora.app","tld":"app"},"ip":{"addr":"172.67.141.205","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-02T12:43:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"allocation-meteora.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"asp90ksyuqlqsuilshzxoqwopg1ksayw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"asp90ksyuqlqsuilshzxoqwopg1ksayw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"corsproxy.io","ip":{"addr":"104.26.7.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-01-30","domain_rank":175528,"first_seen":"2016-05-19T01:27:08Z","last_seen":"2025-09-22T23:25:59.03212Z","alert_count":0,"request_count":2,"received_data":4250,"sent_data":1101,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-09-21T22:11:31.798564Z","alert_count":0,"request_count":1,"received_data":9481,"sent_data":561,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"asp90ksyuqlqsuilshzxoqwopg1ksayw.com","ip":{"addr":"172.67.134.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-25","domain_rank":0,"first_seen":"2025-09-28T09:07:21.542093Z","last_seen":"2025-09-28T09:07:21.542094Z","alert_count":14,"request_count":7,"received_data":346431,"sent_data":5108,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-09-21T22:11:31.014241Z","alert_count":0,"request_count":1,"received_data":73799,"sent_data":545,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.meteora.ag","ip":{"addr":"104.18.41.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-12-07","domain_rank":1298148,"first_seen":"2025-08-16T19:11:42.920239Z","last_seen":"2025-09-12T04:52:13.391245Z","alert_count":0,"request_count":1,"received_data":3551,"sent_data":457,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"allocation-meteora.app","ip":{"addr":"172.67.141.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-09-28T12:43:58.301146Z","last_seen":"2025-09-28T12:43:58.301146Z","alert_count":27,"request_count":27,"received_data":1118443,"sent_data":12759,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"allocation-meteora.app/","fqdn":"allocation-meteora.app","domain":"allocation-meteora.app","tld":"app"},"ip":{"addr":"172.67.141.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"38e3afae2c196377895ac472c991a80c","sha1":"b407af8385e79478575f6bca8446fe74498dddeb","sha256":"5c6b41d2b14257a1e31a8a371daca51b3982a19595711849cfc14c9c11721599","sha512":"113fac127dd2b9008d506466c48fe3b1cbed913d0b28cffaa2acbd9dff70fc0508836304cd22a7b179b69a13337f3a57e8301f40c3d159f9f8319ef18b2dee56","ssdeep":"","tlshash":"0fd0125d7064a96628cf697e5ccf088e7e369812a2080dc999ecd4547fb1e6d42e488c","size":198,"data":"","first_seen":"2025-09-20T14:46:13.54982Z","last_seen":"2026-07-31T06:10:12.404442Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-meteora.app/","fqdn":"allocation-meteora.app","domain":"allocation-meteora.app","tld":"app"},"ip":{"addr":"172.67.141.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"895f526ab37305311d1e998fa4d5a6e8","sha1":"06d0220830c81bf254c70552e908371c6dc1f18f","sha256":"90916b8b1fb2fbbd765a22eba866c30d8829f59aa2d7ee86869abd20207b2117","sha512":"6b087d2e2025f4d11073254448b124af8839ce24ff37eb45bf2fd1a2b66bee8fd4fdca2b4d23c08786d217dd71dbc660d1054b7876b37752dee3baaefdaeaa4e","ssdeep":"","tlshash":"2871bc3beb00173bdc8fa9fdced5b4c02e62497262496960691ce102a16cd7487bed88","size":3743,"data":"","first_seen":"2025-08-14T22:47:51.287187Z","last_seen":"2026-08-04T03:59:23.642762Z","times_seen":1392,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"asp90ksyuqlqsuilshzxoqwopg1ksayw.com/@v1/cdn/js/react-beautiful-dnd.legacy.cjs.js?t=29317723","fqdn":"asp90ksyuqlqsuilshzxoqwopg1ksayw.com","domain":"asp90ksyuqlqsuilshzxoqwopg1ksayw.com","tld":"com"},"ip":{"addr":"172.67.134.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"976137eeace4acbde2245db9e00039c6","sha1":"ef98bf559dd0507833e84eb5981abae0fedf3ce9","sha256":"ed16cc3cba9ae0625dd5322db16d3796c606401dd40ffefad3bdf70ccb6ab106","sha512":"afb7caa6fe93ad65d033f282a77eb9588507a8dc567921fcbf60b0ef0184c2090e44b5d9c5608474e478e7bbbd95a1c9d1944d28e4bde9f1552828be5a698f3f","ssdeep":"6144:Us6RWbpP47Mhk6p1ZsJzO3fXeIZHnwufOICuL:R68tPseWCvXeIZeIRL","tlshash":"83748c917280617916634f9a41bf094ab238f5207409492cf79cc8d32bb99dad5bff7c","size":340017,"data":"","first_seen":"2025-09-27T18:38:15.252444Z","last_seen":"2025-09-29T22:10:20.160704Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-meteora.app/babylonjs.legacy.umd.js","fqdn":"allocation-meteora.app","domain":"allocation-meteora.app","tld":"app"},"ip":{"addr":"172.67.141.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4476ba08947d3bb0dd1ff338fae161e1","sha1":"ba11b34b116a2d9d9193d9308e789a100f73fc4d","sha256":"fb226007fd4348dcbd63151ffc3d1c44fa4f5e459a05bbfcde80c634ca2b9f3a","sha512":"8977f093bd4c8bc1964726df3b52fcf8c7ed9ea70c8fed3d8e13616b34b56c0c3fb3b42bde2ab3f9fea1e6fb322a0c333cca4f972428fa7b80246848a8394612","ssdeep":"3072:j1Zejs59karIPfU+feEKkbXne0i8D/O2pS26+EjZmXkdUWmyI9gZp:jHei9karIXNfWwi8D/OJ26+yZUWmm","tlshash":"8684928f01ef650ee156441a44636ccca453752e8b956f5bbb4fe15eec2ccf090c2aba","size":377459,"data":"","first_seen":"2025-09-28T12:44:03.786913Z","last_seen":"2026-01-22T05:57:59.447843Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-meteora.app/","fqdn":"allocation-meteora.app","domain":"allocation-meteora.app","tld":"app"},"ip":{"addr":"172.67.141.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"75e6674f55a0bccdd7331e1c2507c3bf","sha1":"d7fa8e137aa79de452b78e1dbc280214700cee4b","sha256":"db8606508e537b7eda077050eed51bf442fa9b24d1769a9072556d5bca337ae2","sha512":"caf540b644a3f8c57bfecd5b54df539813845723c18f102134a8cd9d68465d87671428fa1553e6c1319b0e895227b016e76a39dedfd8152a3835ec1c223d1cfd","ssdeep":"3072:inZ094IKYSu8fiX5jDBiB+rXhY0M2D/o4n0a+OEx7cnkfKWmAI9GRo:iZ04IERkYUM2D/oha+OypKWmN","tlshash":"1284a35e01ef650ae25a541a44736cc89853792e87952f5bbf0fe11eec7ccf090c29ba","size":371112,"data":"","first_seen":"2025-09-28T12:44:03.798926Z","last_seen":"2026-01-22T05:57:59.461668Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"allocation-meteora.app/logo.svg","fqdn":"allocation-meteora.app","domain":"allocation-meteora.app","tld":"app"},"ip":{"addr":"172.67.141.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://allocation-meteora.app/","date":"2025-09-28T12:43:36.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-meteora.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 22:57:53 GMT","end":"Fri, 26 Dec 2025 23:46:35 GMT"},"fingerprint":{"sha1":"43:D4:83:ED:89:19:90:AC:1E:70:8D:BD:12:58:81:3A:47:C7:52:A9","sha256":"FC:97:C1:19:E0:2D:20:A9:3E:8F:C9:01:4F:0B:33:39:C6:AF:FD:77:EA:E6:71:35:74:69:BB:08:C4:FE:F3:8A"}}},"request":{"raw":"GET /logo.svg HTTP/1.1\r\nHost: allocation-meteora.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-meteora.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 28 Sep 2025 12:43:36 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 27 Sep 2025 23:51:27 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b7uJtNtCydxzGThbzJk9V%2FJsxSQcAs0V4fjstlnGpt0MHEeVv4eTTa%2FQOO0uLsYgp1p7%2Fyz7zlJ%2FeOvT9cPtkJ8coc8igGrL2TXvxQ%2B09mJBsgGC\"}]}\r\netag: W/\"873-63fd114a2be77\"\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 986353cf3cdeb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2163,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a58ab35a86db43390f96d67088c2a0fd","sha1":"9c26f4642130afa6d93fad34183da17f40e2c0e4","sha256":"92b6fdc8226caf5e6c3d176a3ca5dec136db05c4484035159e49fc20f6b88d27","sha512":"06bf3f6ef0819b7d6fa840a89369cdf0fda03f030446da0aac9f5f8af1303a792305b10a7a58f69822d6c59e7f477064fb005eff2093ce949203e79adaaf8198","ssdeep":"","tlshash":"894151e887d47694f509abf08826a015f71b24fabe56d754a0e9efd9ae21189480dc80","first_seen":"2025-08-14T02:29:46.244889Z","last_seen":"2026-06-02T08:20:56.503291Z","times_seen":113,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"allocation-meteora.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-meteora.app/medium.svg","fqdn":"allocation-meteora.app","domain":"allocation-meteora.app","tld":"app"},"ip":{"addr":"172.67.141.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://allocation-meteora.app/","date":"2025-09-28T12:43:36.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-meteora.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 22:57:53 GMT","end":"Fri, 26 Dec 2025 23:46:35 GMT"},"fingerprint":{"sha1":"43:D4:83:ED:89:19:90:AC:1E:70:8D:BD:12:58:81:3A:47:C7:52:A9","sha256":"FC:97:C1:19:E0:2D:20:A9:3E:8F:C9:01:4F:0B:33:39:C6:AF:FD:77:EA:E6:71:35:74:69:BB:08:C4:FE:F3:8A"}}},"request":{"raw":"GET /medium.svg HTTP/1.1\r\nHost: allocation-meteora.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-meteora.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 28 Sep 2025 12:43:36 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 27 Sep 2025 23:51:27 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FT%2F21UNHb89Q0DqkJ5Su%2BhXC5Szs4MXBhsO9DIbQdHi%2B0hLgLP1UYgo6oVGEcrw79o7WryNvBaV2D5%2BUmeOfBtS520h9FXZfza43znMs3g5KMO4V\"}]}\r\netag: W/\"412-63fd114a2c25f\"\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 986353cf3ce0b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1042,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f934151cabd0ed22e3f71f1e9a75f473","sha1":"a34d96081efc391b6747ef7b6f421192afc201dc","sha256":"64d1482a7f954be58d4e6062df6ff58be4ae0f08dcc47450c3a11848e20eef54","sha512":"8d50d303ce47513ad3b3a6e0462243e19d2cbccd748b167185518d07dda67004dbbbbbd7dbf3392db0bd63be894e20edbe91944d73af873e5dbc4ff7d0cf1f25","ssdeep":"","tlshash":"c211e2e6725840d4389fe714cf09707935eb70d24c52b1780589be08e8bafafada4d40","first_seen":"2025-08-14T02:29:46.261081Z","last_seen":"2026-06-21T01:29:08.195458Z","times_seen":86,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"allocation-meteora.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-meteora.app/jupiter-logo.svg","fqdn":"allocation-meteora.app","domain":"allocation-meteora.app","tld":"app"},"ip":{"addr":"172.67.141.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-meteora.app/","date":"2025-09-28T12:43:36.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-meteora.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 22:57:53 GMT","end":"Fri, 26 Dec 2025 23:46:35 GMT"},"fingerprint":{"sha1":"43:D4:83:ED:89:19:90:AC:1E:70:8D:BD:12:58:81:3A:47:C7:52:A9","sha256":"FC:97:C1:19:E0:2D:20:A9:3E:8F:C9:01:4F:0B:33:39:C6:AF:FD:77:EA:E6:71:35:74:69:BB:08:C4:FE:F3:8A"}}},"request":{"raw":"GET /jupiter-logo.svg HTTP/1.1\r\nHost: allocation-meteora.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-meteora.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 28 Sep 2025 12:43:36 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 27 Sep 2025 23:51:27 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bBNidypyNhL%2B9mIZNZtyPOQszxjVIy%2FEzqrt5DW%2FXtzsapBkYKgm6IP4AB%2FDhWq6zcA7jMv6ZGwQ2grtU9srn7OV9OriCxf8UcS5hE2nO7huoeYu\"}]}\r\netag: W/\"12c2-63fd114a2b6a7\"\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 986353d1ccfdb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4802,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"72b2e09f0bb4f23383276ce80b466a04","sha1":"6d334aefc635799f5d3e77a6c735ed116baf1ae1","sha256":"47d6380bdba0b4c804db86835441444d17e47da90c9ce3fa1b079ea9007f47fd","sha512":"c1585c8997cc8fa6deba6ff11ab8ad6ebde74c82c5edc0e2ad5161af270992fd3b0ed6af1a574141674dc077793349e359b658d14abaca675931cbd110cf6943","ssdeep":"48:BQvRL6u6TGOXLvCoLT1DVE8iWMqnNcLEcVDJGPjnlL//gyHbeVWL7HOzDY3lmS44:4I95+S7EqWVDJGPLZgeyUZcS4HJKvYdK","tlshash":"0aa15536a3eed82be1e9e394d695642412af60b3a940c165c5acbf7f54121cddc0f9c1","first_seen":"2025-09-11T16:48:45.586321Z","last_seen":"2026-08-02T03:31:36.860234Z","times_seen":105,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"allocation-meteora.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corsproxy.io/?https://api.mainnet-beta.solana.com","fqdn":"corsproxy.io","domain":"corsproxy.io","tld":"io"},"ip":{"addr":"104.26.7.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://allocation-meteora.app/","date":"2025-09-28T12:43:36.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corsproxy.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Sep 2025 23:42:06 GMT","end":"Thu, 25 Dec 2025 00:42:04 GMT"},"fingerprint":{"sha1":"0C:CD:24:B7:B0:CE:FE:13:D4:74:92:88:E5:8A:19:06:1B:6E:63:58","sha256":"0A:01:7A:C2:3C:74:E6:03:26:29:BB:69:4E:28:E2:F1:01:93:57:7A:C8:02:E9:3E:47:23:C2:D6:66:65:DA:08"}}},"request":{"raw":"POST /?https://api.mainnet-beta.solana.com HTTP/1.1\r\nHost: corsproxy.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://allocation-meteora.app/\r\nContent-Type: application/json\r\nContent-Length: 130\r\nOrigin: https://allocation-meteora.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 12:43:37 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\ncf-ray: 986353d36ed1b512-OSL\r\ncf-cache-status: DYNAMIC\r\nallow: OPTIONS, POST, GET\r\ncache-control: no-store, no-cache, must-revalidate, private, max-age=0, s-maxage=0, proxy-revalidate, no-transform\r\ncontent-encoding: gzip\r\nexpires: 0\r\nvary: *, Accept-Encoding\r\npragma: no-cache\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH\r\naccess-control-max-age: 86400\r\nsurrogate-control: no-store\r\nx-cache-buster: 1759063417049_6k67qyw\r\nx-cache-status: DYNAMIC\r\nx-client-country: NO\r\nx-client-ip: 81.95.81.194\r\nx-original-url: https://api.mainnet-beta.solana.com/\r\nx-proxy-contact: support@corsproxy.io\r\nx-proxy-mode: cloudflare-snippets\r\nx-proxy-region: unknown\r\nx-proxy-response: true\r\nx-proxy-service: CORS Proxy\r\nx-proxy-time: 173ms\r\nx-proxy-version: 2.1.1\r\nx-proxy-website: https://corsproxy.io\r\nx-ratelimit-conn-limit: 40\r\nx-ratelimit-conn-remaining: 39\r\nx-ratelimit-connrate-limit: 40\r\nx-ratelimit-connrate-remaining: 39\r\nx-ratelimit-endpoint-limit: unlimited\r\nx-ratelimit-endpoint-remaining: -1658\r\nx-ratelimit-limit: 1000\r\nx-ratelimit-method-limit: 30\r\nx-ratelimit-method-remaining: 29\r\nx-ratelimit-pubsub-limit: 5\r\nx-ratelimit-pubsub-remaining: 5\r\nx-ratelimit-remaining: 999\r\nx-ratelimit-reset: 2025-09-28T13:43:37.049Z\r\nx-ratelimit-rps-limit: 100\r\nx-ratelimit-rps-remaining: 99\r\nx-ratelimit-tier: free\r\nx-report-abuse: abuse@corsproxy.io\r\nx-request-id: 40aa5c08-3aa2-442b-990a-ec2968a9f5d5\r\nx-rpc-node: fra130\r\nx-timestamp: 1759063417049\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=pID6AGDKwd%2FiIJhrZhj1fWNGY4zD%2F%2FNskbPt3I9DokmZN2HLY8s7NCanPGd0HPhXyKD8Z%2FevgnJOizy%2BKDF6Ehh58oi4pT3TtXjaZMxJqqBKiO7TKNF%2FvqxEmGFhOw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=6803\u0026min_rtt=527\u0026rtt_var=7482\u0026sent=8\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=4295\u0026recv_bytes=1579\u0026delivery_rate=2850393\u0026cwnd=255\u0026unsent_bytes=0\u0026cid=504b799c07ab3c74\u0026ts=232\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":318,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"66a2a3f73ab1ac46c8b63f98017a5dac","sha1":"3f5f15691a3fb276ae7e2bdd48208245e51f3e71","sha256":"169007b3a127cf76c43b059e6eb83015f30e56628b4323bf89639f12bb0dc61c","sha512":"58a076dc52bfd45dd575a61e06c39ea64d7ee0c5bf8d2851b9fd1e1f282503d508e7bbf96952002fdad6ade9407dce2c57f477c1dd911276758133b96323bc57","ssdeep":"","tlshash":"a8e07d407e090bbd51a1ce178216529baa81356d43008a4f1be80a5031d59dd944b9b7","first_seen":"2025-09-28T12:44:03.711849Z","last_seen":"2025-09-28T12:44:03.711849Z","times_seen":1,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://allocation-meteora.app/","date":"2025-09-28T12:43:37.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:49 GMT","end":"Mon, 01 Dec 2025 08:36:48 GMT"},"fingerprint":{"sha1":"9E:38:51:02:B6:22:9C:08:6B:24:B8:A0:EB:DB:60:D9:27:B2:68:90","sha256":"67:AF:7E:56:AB:8D:96:FB:D0:75:CA:28:6D:16:B6:67:FD:7F:58:6F:CC:AA:78:B5:01:13:76:2C:AB:BE:80:4E"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-meteora.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 28 Sep 2025 12:43:37 GMT\r\ndate: Sun, 28 Sep 2025 12:43:37 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8795,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"51955a067b2f96efe49c2412a4c8c713","sha1":"44103446803299fdae2aa9fdf4c21af4e90fe450","sha256":"2598c04bc6015e0fdad9381928b8238d997efd88a0e450042a60e9d59435f915","sha512":"ca70f49f25ca02d0491518a04e3fdd3c9cb9d35a573ecae94d1bf8fe184ee1ceb53b623b4ba9bf2faf7ee4e321d30fb57954326ac064cdd7605b031355ef680b","ssdeep":"192:vywfydyGy63gy/yFVyR73xpmj3U8fHiyYwyNFyuy3uySRk73vO6u8:vtfcHjg8ciIShwCFnbL8B","tlshash":"2002ff91056be504ea431cc627cf7e369e8e62667081d1797ffe2cd9aceac22132475c","first_seen":"2025-09-11T02:59:26.857486Z","last_seen":"2026-08-05T11:31:45.124637Z","times_seen":916,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":94,"dns":0,"connect":16,"send":0,"wait":34,"receive":0,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-meteora.app/af4f3ea577e7e139.css","fqdn":"allocation-meteora.app","domain":"allocation-meteora.app","tld":"app"},"ip":{"addr":"172.67.141.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://allocation-meteora.app/","date":"2025-09-28T12:43:36.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-meteora.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 22:57:53 GMT","end":"Fri, 26 Dec 2025 23:46:35 GMT"},"fingerprint":{"sha1":"43:D4:83:ED:89:19:90:AC:1E:70:8D:BD:12:58:81:3A:47:C7:52:A9","sha256":"FC:97:C1:19:E0:2D:20:A9:3E:8F:C9:01:4F:0B:33:39:C6:AF:FD:77:EA:E6:71:35:74:69:BB:08:C4:FE:F3:8A"}}},"request":{"raw":"GET /af4f3ea577e7e139.css HTTP/1.1\r\nHost: allocation-meteora.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-meteora.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 28 Sep 2025 12:43:36 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 27 Sep 2025 23:51:27 GMT\r\netag: \"2d3ca-63fd114a24177-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 32203\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NfHIhkBCx%2BEKEIzdATgi8XztXucMZGGjq9NOabbYEyLSJ2AQD%2FoEhEi4NY%2FDvfo1Vvq4nRLmBGfUbYDZBCKDE5QKzv2FsFov10a%2BzoiehcfBXAvv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 986353cf3cd8b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":185290,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (35104)","md5":"1a0f820886f85d548013bab97038e560","sha1":"9769910bd4a2aab4cb2add587b3f334ff29a6d37","sha256":"cdd9781e9e49f7b9fbbc69608828a28b287e0e7d0757aed67b7f67f5af2d0eec","sha512":"e8bd39c8268fc56ec0e1958500bbaaeaaa4c4eaf68da43cf03fac5ba0f0883c0e8fc279c6c017c4e3098db1c3ed471e6fa40aee6ddee63ff29301eed26c34212","ssdeep":"3072:VS5JpJwtwBamMx5npJwGwuZ1Z5Lhy5HBeJvKRROQE0Gg9Pvc4+j6oOrMIGk0/Abu:YJpJUnpJzwC1Z5Lhy5HBeJvKRROQE0GF","tlshash":"1704a51da702103f7c3b40f2d1a8ed9ea21fa1c8df366ae6f95236118791be70d67254","first_seen":"2025-09-28T12:44:03.717366Z","last_seen":"2026-01-22T05:57:59.457463Z","times_seen":7,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":120,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"allocation-meteora.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-meteora.app/twitter.svg","fqdn":"allocation-meteora.app","domain":"allocation-meteora.app","tld":"app"},"ip":{"addr":"172.67.141.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://allocation-meteora.app/","date":"2025-09-28T12:43:36.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-meteora.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 22:57:53 GMT","end":"Fri, 26 Dec 2025 23:46:35 GMT"},"fingerprint":{"sha1":"43:D4:83:ED:89:19:90:AC:1E:70:8D:BD:12:58:81:3A:47:C7:52:A9","sha256":"FC:97:C1:19:E0:2D:20:A9:3E:8F:C9:01:4F:0B:33:39:C6:AF:FD:77:EA:E6:71:35:74:69:BB:08:C4:FE:F3:8A"}}},"request":{"raw":"GET /twitter.svg HTTP/1.1\r\nHost: allocation-meteora.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-meteora.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 28 Sep 2025 12:43:36 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 27 Sep 2025 23:51:27 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tr7sBcTHN5UVkIN74xAI8Zbezd7VpqzT8fwBsvtIZ8DY8ar3SK5f9ZWah0lj6JTbjtXxSY5rruHP%2FCaoFWlnHNIFCa5XkiXn4%2BFUraclSaG9qzVe\"}]}\r\netag: W/\"458-63fd114a2ddb7\"\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 986353cf3cdfb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1112,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b1e4ed0f6b54bc8d9ecf3df1194bbac8","sha1":"d9d6d85d596425d1f4af8127bd78a3c3c773ed72","sha256":"b340aea91b0fb871debe9bc223181d68b89f73f812826cbda5d61ebc4dc3c3e3","sha512":"25d9be8852d4aedae96fb9377c5a32d1059db887942112075f44059958d9da52351ec5c73a4d31d63d94a85fa5ce1675807c2913bc2695987327317b11592209","ssdeep":"","tlshash":"922163ef67dc42d0e243dbf4ef363831212f1cf16e9202550a58dc08f19949d5c09c48","first_seen":"2025-08-14T02:29:46.224645Z","last_seen":"2026-06-21T01:29:08.196566Z","times_seen":72,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"allocation-meteora.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-meteora.app/index_1.html","fqdn":"allocation-meteora.app","domain":"allocation-meteora.app","tld":"app"},"ip":{"addr":"172.67.141.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://allocation-meteora.app/","date":"2025-09-28T12:43:36.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-meteora.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 22:57:53 GMT","end":"Fri, 26 Dec 2025 23:46:35 GMT"},"fingerprint":{"sha1":"43:D4:83:ED:89:19:90:AC:1E:70:8D:BD:12:58:81:3A:47:C7:52:A9","sha256":"FC:97:C1:19:E0:2D:20:A9:3E:8F:C9:01:4F:0B:33:39:C6:AF:FD:77:EA:E6:71:35:74:69:BB:08:C4:FE:F3:8A"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: allocation-meteora.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-meteora.app/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 28 Sep 2025 12:43:36 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 27 Sep 2025 23:51:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1AH32eCSZyHAgJyOFwszpgtXX0HqFDhsNZ6RENWC%2F97gopOdxSStyE0qG8r5Kx5FuJeaSnJ1y7tFlOwC35PI1g80Mui0p8mRZSOvxvkcKO%2B9x3yM\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-type: text/html\r\ncf-ray: 986353d1bcfcb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":201,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"c5dc2380da45d9c95b86be85f0b04db7","sha1":"11f0d6e02babc0116bb0f1719cb49a7c5e829064","sha256":"e5cae903e2c1ac27d3807eb4f07a842dd5fb312b6df992d97443d4f55818873f","sha512":"863fed6cea93dbbca74f4ab8b1a7d825524abca0b93ecba67cc72c0b0fa2fe5df93ea82ca214133cfe626d26343d0a79c2d400bcf38245b601a096a55804e56f","ssdeep":"","tlshash":"54d022a38a04184a3a5287c68b47f5cc8002cf2c984c5c58b859b1d0e8b42a1a51328a","first_seen":"2025-09-28T12:44:03.722834Z","last_seen":"2026-04-17T05:33:51.37991Z","times_seen":13,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"allocation-meteora.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-meteora.app/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"allocation-meteora.app","domain":"allocation-meteora.app","tld":"app"},"ip":{"addr":"172.67.141.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://allocation-meteora.app/","date":"2025-09-28T12:43:36.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-meteora.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 22:57:53 GMT","end":"Fri, 26 Dec 2025 23:46:35 GMT"},"fingerprint":{"sha1":"43:D4:83:ED:89:19:90:AC:1E:70:8D:BD:12:58:81:3A:47:C7:52:A9","sha256":"FC:97:C1:19:E0:2D:20:A9:3E:8F:C9:01:4F:0B:33:39:C6:AF:FD:77:EA:E6:71:35:74:69:BB:08:C4:FE:F3:8A"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: allocation-meteora.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-meteora.app/css2-2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 28 Sep 2025 12:43:36 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 27 Sep 2025 23:51:27 GMT\r\netag: \"bc80-63fd114a2f527\"\r\naccept-ranges: bytes\r\ncontent-length: 48256\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VomBocAoENPtjNVlo0vTYvrC2x8UqN1DR7yxUoxI2iUrNV6Nd1rzVzF%2FMKZfAGLSqtCbfRCQLFv0iIgNrFwMcu7ZPD97%2FqamlTsqLy8Tatnbx8mu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: font/woff2\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 986353d1dd03b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48256,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-08-06T07:51:21.050105Z","times_seen":25825,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":121,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"allocation-meteora.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-meteora.app/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"allocation-meteora.app","domain":"allocation-meteora.app","tld":"app"},"ip":{"addr":"172.67.141.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://allocation-meteora.app/","date":"2025-09-28T12:43:36.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-meteora.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 22:57:53 GMT","end":"Fri, 26 Dec 2025 23:46:35 GMT"},"fingerprint":{"sha1":"43:D4:83:ED:89:19:90:AC:1E:70:8D:BD:12:58:81:3A:47:C7:52:A9","sha256":"FC:97:C1:19:E0:2D:20:A9:3E:8F:C9:01:4F:0B:33:39:C6:AF:FD:77:EA:E6:71:35:74:69:BB:08:C4:FE:F3:8A"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: allocation-meteora.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-meteora.app/css2-2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 28 Sep 2025 12:43:36 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 27 Sep 2025 23:51:27 GMT\r\netag: \"bc80-63fd114a2f527\"\r\naccept-ranges: bytes\r\ncontent-length: 48256\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=14bgpNQe39%2BIWvov4OH9dVSIMhsqL0fGWS%2Bwr%2BE24P2olh5bsNTNLTKrMU6VSCTcjcOXF8FG4qiyXCSprJPqDYPMOGY4wcQh219RC0kZohXrmcE4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: font/woff2\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 986353d1dd05b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48256,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-08-06T07:51:21.050105Z","times_seen":25825,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":118,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"allocation-meteora.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-meteora.app/icon-wallet.svg","fqdn":"allocation-meteora.app","domain":"allocation-meteora.app","tld":"app"},"ip":{"addr":"172.67.141.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://allocation-meteora.app/","date":"2025-09-28T12:43:36.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-meteora.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 22:57:53 GMT","end":"Fri, 26 Dec 2025 23:46:35 GMT"},"fingerprint":{"sha1":"43:D4:83:ED:89:19:90:AC:1E:70:8D:BD:12:58:81:3A:47:C7:52:A9","sha256":"FC:97:C1:19:E0:2D:20:A9:3E:8F:C9:01:4F:0B:33:39:C6:AF:FD:77:EA:E6:71:35:74:69:BB:08:C4:FE:F3:8A"}}},"request":{"raw":"GET /icon-wallet.svg HTTP/1.1\r\nHost: allocation-meteora.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-meteora.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 28 Sep 2025 12:43:36 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 27 Sep 2025 23:51:27 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vQoKuVTaPWYX1kuH2RDlsGrNZ%2BoILaUp5pHxlxy4SGcaf3L15Eip1GpGo%2BFEDF9G3V8r6FbPPHHMkYeKNC3M4gKgduXJUa6Jxn8qwlLudOLqVEkU\"}]}\r\netag: W/\"412-63fd114a29767\"\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 986353d1fd0bb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1042,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a31887f2d99ec7279f10bb755668bd58","sha1":"afd601a088fcf7bf0769e4fb09f08ca31d39dcbe","sha256":"1d1143437d936945584554f21a645dfda0f9c8f73f1169894477bec8c3370db6","sha512":"e94b40e7597704c31c05e21ae8d3b7ebad153aa225b5acb97ce24c1df883a0b1658a8e8da160dc5f76d3a7bc538628978cee028ba0696678c9cfaff2aff9c8a8","ssdeep":"","tlshash":"9d117bbb72fa0aa1d72cc35352c1723f655f1be45b45c8d480aa8dc4f8e865c8d29c96","first_seen":"2025-08-01T13:08:56.843139Z","last_seen":"2026-06-21T01:29:08.201499Z","times_seen":57,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"allocation-meteora.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"asp90ksyuqlqsuilshzxoqwopg1ksayw.com/@v1/services/connector?referrer=allocation-meteora.app","fqdn":"asp90ksyuqlqsuilshzxoqwopg1ksayw.com","domain":"asp90ksyuqlqsuilshzxoqwopg1ksayw.com","tld":"com"},"ip":{"addr":"172.67.134.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://allocation-meteora.app/","date":"2025-09-28T12:43:38.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"asp90ksyuqlqsuilshzxoqwopg1ksayw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Sep 2025 14:56:00 GMT","end":"Wed, 24 Dec 2025 15:51:13 GMT"},"fingerprint":{"sha1":"E4:30:27:2E:1E:2D:BD:51:78:FC:D0:9C:88:0C:64:7F:62:80:D3:EC","sha256":"09:C6:57:79:77:CB:77:8C:ED:52:12:16:47:2F:42:DA:58:9D:6D:F9:1B:68:9D:FF:1C:46:7A:40:B8:3E:39:84"}}},"request":{"raw":"GET /@v1/services/connector?referrer=allocation-meteora.app HTTP/1.1\r\nHost: asp90ksyuqlqsuilshzxoqwopg1ksayw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjdXN0b21lcklkIjoiRDVUUjZPR29wMiIsImdyb3VwX2lkIjo5MjgsImlhdCI6MTc1ODkzOTEyN30.VMaOfNIZVN4uqpJ_sQc1EISuNGdGcXG-Ja3Nn1FQkZg\r\nX-Direction-Safe: 1759063417616\r\nX-Scale-Referrer: allocation-meteora.app\r\nX-Auth-Key: S3aTRIHAa47IaVsyB4%2BSmJPAn78wLhzJMFDIzTWp7AI%3D\r\nOrigin: https://allocation-meteora.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-meteora.app/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 12:43:39 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AbXVXq3lZH57o8bjonEqNWbpslW0W7lmFRVHpOsOXQslAK7X8PWMub7yj1bUxOMFK%2Bn%2FjIXoC0VzyjC0lEYnbxhkLA%2FintnbxGXRYzLjUOGye1dIpxvhUfcZXFFCCAh0brI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, Accept-Encoding\r\netag: W/\"18b-1bxtDKga+ozUZUFHZya/mV49+ek\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-expose-headers: *\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 986353dd9d13b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":395,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"37f3434dd63f94085cff5c86377ad8eb","sha1":"d5bc6d0ca81afa8cd46541476726bf995e3df9e9","sha256":"75a3370da5c52f12b90c8d298635d8ab07eb193ca85df33fd14139aaa6007528","sha512":"1a9867be559ba097cc362925640ea5785e4ea6408afecd8b531a6d60ede368e002324142179f3e69f8fe91de8b40a0cc4f26dfd5e61771ee99c09765048cf372","ssdeep":"","tlshash":"43e0abb7d2a59ca94c072286686835be16e61a87b551a5c218c96c80c5308188e10810","first_seen":"2025-09-28T12:44:03.730702Z","last_seen":"2025-09-28T12:44:03.730702Z","times_seen":1,"resource_available":false,"data":null}},"time_used":701,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":701,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"asp90ksyuqlqsuilshzxoqwopg1ksayw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"asp90ksyuqlqsuilshzxoqwopg1ksayw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"asp90ksyuqlqsuilshzxoqwopg1ksayw.com/@v1/log/join","fqdn":"asp90ksyuqlqsuilshzxoqwopg1ksayw.com","domain":"asp90ksyuqlqsuilshzxoqwopg1ksayw.com","tld":"com"},"ip":{"addr":"172.67.134.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://allocation-meteora.app/","date":"2025-09-28T12:43:37.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"asp90ksyuqlqsuilshzxoqwopg1ksayw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Sep 2025 14:56:00 GMT","end":"Wed, 24 Dec 2025 15:51:13 GMT"},"fingerprint":{"sha1":"E4:30:27:2E:1E:2D:BD:51:78:FC:D0:9C:88:0C:64:7F:62:80:D3:EC","sha256":"09:C6:57:79:77:CB:77:8C:ED:52:12:16:47:2F:42:DA:58:9D:6D:F9:1B:68:9D:FF:1C:46:7A:40:B8:3E:39:84"}}},"request":{"raw":"OPTIONS /@v1/log/join HTTP/1.1\r\nHost: asp90ksyuqlqsuilshzxoqwopg1ksayw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,x-device,x-scale-referrer\r\nReferer: https://allocation-meteora.app/\r\nOrigin: https://allocation-meteora.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 12:43:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q9uVO2Cp5xNfAgRfhD%2FE7YQ6dyoQC7Fxh%2FZMfnua1TwlxVTl6c%2Bes6p9ToBIM1WT9PXQdk7aEAI2scjmD%2BAnsb%2B%2BJCNTT2f3hbwQo7lKjpnhOVFly1iPyJzN3f54%2BWIEy7E%3D\"}]}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-expose-headers: *\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 986353d75ca9b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T08:01:09.34408Z","times_seen":17739288,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"asp90ksyuqlqsuilshzxoqwopg1ksayw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"asp90ksyuqlqsuilshzxoqwopg1ksayw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"asp90ksyuqlqsuilshzxoqwopg1ksayw.com/@v1/services/temp-link/create?referrer=allocation-meteora.app","fqdn":"asp90ksyuqlqsuilshzxoqwopg1ksayw.com","domain":"asp90ksyuqlqsuilshzxoqwopg1ksayw.com","tld":"com"},"ip":{"addr":"172.67.134.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://allocation-meteora.app/","date":"2025-09-28T12:43:37.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"asp90ksyuqlqsuilshzxoqwopg1ksayw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Sep 2025 14:56:00 GMT","end":"Wed, 24 Dec 2025 15:51:13 GMT"},"fingerprint":{"sha1":"E4:30:27:2E:1E:2D:BD:51:78:FC:D0:9C:88:0C:64:7F:62:80:D3:EC","sha256":"09:C6:57:79:77:CB:77:8C:ED:52:12:16:47:2F:42:DA:58:9D:6D:F9:1B:68:9D:FF:1C:46:7A:40:B8:3E:39:84"}}},"request":{"raw":"OPTIONS /@v1/services/temp-link/create?referrer=allocation-meteora.app HTTP/1.1\r\nHost: asp90ksyuqlqsuilshzxoqwopg1ksayw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,x-auth-key,x-auth-key-v2,x-direction-safe,x-scale-referrer\r\nReferer: https://allocation-meteora.app/\r\nOrigin: https://allocation-meteora.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 12:43:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vWq87khdXOi%2BHvcEOFX%2FUi%2Bb%2F8xJ7B6YJhEvCLS5kY%2BGb0YRtnqfe1kIxiUY2cL50k30p2G15lasOCkecyTSv5fL7eDaH2HT4DkdzfWSDRTN5SW0kbyvDg%2BeTlLNUcwsPA8%3D\"}]}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-expose-headers: *\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 986353d81cc4b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T08:01:09.34408Z","times_seen":17739288,"resource_available":true,"data":null}},"time_used":316,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"asp90ksyuqlqsuilshzxoqwopg1ksayw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"asp90ksyuqlqsuilshzxoqwopg1ksayw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"asp90ksyuqlqsuilshzxoqwopg1ksayw.com/@v1/services/temp-link/create?referrer=allocation-meteora.app","fqdn":"asp90ksyuqlqsuilshzxoqwopg1ksayw.com","domain":"asp90ksyuqlqsuilshzxoqwopg1ksayw.com","tld":"com"},"ip":{"addr":"172.67.134.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://allocation-meteora.app/","date":"2025-09-28T12:43:37.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"asp90ksyuqlqsuilshzxoqwopg1ksayw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Sep 2025 14:56:00 GMT","end":"Wed, 24 Dec 2025 15:51:13 GMT"},"fingerprint":{"sha1":"E4:30:27:2E:1E:2D:BD:51:78:FC:D0:9C:88:0C:64:7F:62:80:D3:EC","sha256":"09:C6:57:79:77:CB:77:8C:ED:52:12:16:47:2F:42:DA:58:9D:6D:F9:1B:68:9D:FF:1C:46:7A:40:B8:3E:39:84"}}},"request":{"raw":"POST /@v1/services/temp-link/create?referrer=allocation-meteora.app HTTP/1.1\r\nHost: asp90ksyuqlqsuilshzxoqwopg1ksayw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nAuthorization: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjdXN0b21lcklkIjoiRDVUUjZPR29wMiIsImdyb3VwX2lkIjo5MjgsImlhdCI6MTc1ODkzOTEyN30.VMaOfNIZVN4uqpJ_sQc1EISuNGdGcXG-Ja3Nn1FQkZg\r\nX-Direction-Safe: 1759063417608\r\nX-Scale-Referrer: allocation-meteora.app\r\nX-Auth-Key: %2Bjn5d5w1oxxiE4iuGiw6ffZ6y4LkCA%2FXXbnrg6%2BrvQE%3D\r\nX-Auth-Key-V2: NyhrBrqaysdIFs0Wguffm13RsZ9tk1MAHRZF56CGe28%3D\r\nContent-Length: 1720\r\nOrigin: https://allocation-meteora.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-meteora.app/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 12:43:38 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ER6DcXUVihU6uj70ERNtSaFbNpIDEvrTqZS3C5j24uknpMZl8fxSUJCrx9U737Fqk2doVAfWeYYXOBFGfpfzDMYVp9YREgdDcdput%2BNKYocYF8P9klm6ljIK5oowTGM%2FLRY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, Accept-Encoding\r\netag: W/\"250-XR0RaHjO58tbyVG92k7HtL70n8E\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-expose-headers: *\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 986353da0cecb4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":592,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b0e846ad236e4ea785792805cb6e8c76","sha1":"5d1d116878cee7cb5bc951bdda4ec7b4bef49fc1","sha256":"da47d94a690cde7e51c466d5b7e829ca777efcd806e988b32787af91696148e1","sha512":"750ae8d72778f5be6c997e6424842a7d397e72e578e9f3480a4ba53345637f13c367df418ba1164955f6b4acd0a9966839f2ad3341312739e16674877c242c5b","ssdeep":"","tlshash":"03f041e62f80c700873a11af0440b71d42ae104ae0cf0010277d442d63c38e319a2ad4","first_seen":"2025-09-28T12:44:03.750805Z","last_seen":"2025-09-28T12:44:03.750805Z","times_seen":1,"resource_available":false,"data":null}},"time_used":932,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":932,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"asp90ksyuqlqsuilshzxoqwopg1ksayw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"asp90ksyuqlqsuilshzxoqwopg1ksayw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-meteora.app/9b8f7102243213f9.css","fqdn":"allocation-meteora.app","domain":"allocation-meteora.app","tld":"app"},"ip":{"addr":"172.67.141.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://allocation-meteora.app/","date":"2025-09-28T12:43:36.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-meteora.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 22:57:53 GMT","end":"Fri, 26 Dec 2025 23:46:35 GMT"},"fingerprint":{"sha1":"43:D4:83:ED:89:19:90:AC:1E:70:8D:BD:12:58:81:3A:47:C7:52:A9","sha256":"FC:97:C1:19:E0:2D:20:A9:3E:8F:C9:01:4F:0B:33:39:C6:AF:FD:77:EA:E6:71:35:74:69:BB:08:C4:FE:F3:8A"}}},"request":{"raw":"GET /9b8f7102243213f9.css HTTP/1.1\r\nHost: allocation-meteora.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-meteora.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 28 Sep 2025 12:43:36 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 27 Sep 2025 23:51:27 GMT\r\netag: \"4258-63fd114a22237-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 3661\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Oqtjmy6BQVxQ1kq%2F2dyMxoC%2BBZp4m3vgWOkb9%2FlmuWQYuHdktwDvLxV0JnE2TCBcMp4OYrujS%2BSeR61LhalNuEy3WzFjNvNsMghXNX7MRR7JgBA9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 986353cf3cdab4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16984,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16984), with no line terminators","md5":"cf7ece5ba87dbcc708b2e1717bee2e4e","sha1":"07d4c500f7d553621e83a3a55ebef0e2cb448700","sha256":"e1b385e0d5faf03086928e1d9945bb518d467da68c3eba4499ab70d08be303f1","sha512":"1272ff7129c1664e2ca2dce7666ab3ac44e617aea859f96904788f279b10356749ccceb32f77b5e6c34a2abd7041d270f43b70988353eb8ed13631bf9325b4fe","ssdeep":"192:/6QwgjUl7JXYa7JXYM9j7hDtzH3UZUcqdgQgsop/38ebejxHD+KJyRV7Osfr3aqd:CQwz5ntNmKkcobRrX","tlshash":"1872dc9fde101d642c3e8bb6cda66d8c5204e9c1fa27aee7b3d3900235c736095ab547","first_seen":"2025-08-01T13:08:56.825493Z","last_seen":"2026-06-02T08:20:56.535388Z","times_seen":43,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"allocation-meteora.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-meteora.app/image-1.png","fqdn":"allocation-meteora.app","domain":"allocation-meteora.app","tld":"app"},"ip":{"addr":"172.67.141.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-meteora.app/","date":"2025-09-28T12:43:36.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-meteora.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 22:57:53 GMT","end":"Fri, 26 Dec 2025 23:46:35 GMT"},"fingerprint":{"sha1":"43:D4:83:ED:89:19:90:AC:1E:70:8D:BD:12:58:81:3A:47:C7:52:A9","sha256":"FC:97:C1:19:E0:2D:20:A9:3E:8F:C9:01:4F:0B:33:39:C6:AF:FD:77:EA:E6:71:35:74:69:BB:08:C4:FE:F3:8A"}}},"request":{"raw":"GET /image-1.png HTTP/1.1\r\nHost: allocation-meteora.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-meteora.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 28 Sep 2025 12:43:36 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 27 Sep 2025 23:51:27 GMT\r\netag: \"6be-63fd114a29f37\"\r\naccept-ranges: bytes\r\ncontent-length: 1726\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9IBC5nxcjYk99Wk7yrpKMUyia2AAp7rssKgnIyapGy75uo4mGE%2BR%2BKJiTjgqiuEDvESGM9gNHenRwj4uejTD2K1rAQ5rhe5gix%2FTMFvoeUYlRZqp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncf-ray: 986353d1ccffb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1726,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"214354625374a3cc6b937cb0fddf60c7","sha1":"258b2e9f810fc51739b2b6330772c161cbbd9054","sha256":"ff07c213aba51748b097a47636ea7054998e59e73d843087f18c2080a3d639a6","sha512":"289c550aaa727e7d767a341b4c5ff2a73bf93ed8b8636dca8a5f9dc8fbaea203b5713d2a3ac5cf45efbe0ba99a427785ebd9ba935abcf52f7bb6247ba2a8ce05","ssdeep":"","tlshash":"ea31e68b4a6b53bb9163725690f7364a05aa1efc0a06c004757035c8c9bfeab2221db5","first_seen":"2025-04-22T03:28:37.741964Z","last_seen":"2026-07-06T23:36:27.267123Z","times_seen":146,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"allocation-meteora.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-meteora.app/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"allocation-meteora.app","domain":"allocation-meteora.app","tld":"app"},"ip":{"addr":"172.67.141.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://allocation-meteora.app/","date":"2025-09-28T12:43:36.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-meteora.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 22:57:53 GMT","end":"Fri, 26 Dec 2025 23:46:35 GMT"},"fingerprint":{"sha1":"43:D4:83:ED:89:19:90:AC:1E:70:8D:BD:12:58:81:3A:47:C7:52:A9","sha256":"FC:97:C1:19:E0:2D:20:A9:3E:8F:C9:01:4F:0B:33:39:C6:AF:FD:77:EA:E6:71:35:74:69:BB:08:C4:FE:F3:8A"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: allocation-meteora.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-meteora.app/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 28 Sep 2025 12:43:36 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 27 Sep 2025 23:51:27 GMT\r\netag: \"bc80-63fd114a2f527\"\r\naccept-ranges: bytes\r\ncontent-length: 48256\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V1Y7fYSAS8ik%2FW1ZmpPoGyE0acVHdGNyvDeW5MGV5b%2BknUVBEyhKlTpiQ5eNwC7cfkR3ff7dtugrDNo7bEIwJTUhK4z4tHPThhYFesRDC29K%2BjoY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: font/woff2\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 986353d1dd06b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48256,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-08-06T07:51:21.050105Z","times_seen":25825,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":118,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"allocation-meteora.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"asp90ksyuqlqsuilshzxoqwopg1ksayw.com/@v1/log/join","fqdn":"asp90ksyuqlqsuilshzxoqwopg1ksayw.com","domain":"asp90ksyuqlqsuilshzxoqwopg1ksayw.com","tld":"com"},"ip":{"addr":"172.67.134.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://allocation-meteora.app/","date":"2025-09-28T12:43:37.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"asp90ksyuqlqsuilshzxoqwopg1ksayw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Sep 2025 14:56:00 GMT","end":"Wed, 24 Dec 2025 15:51:13 GMT"},"fingerprint":{"sha1":"E4:30:27:2E:1E:2D:BD:51:78:FC:D0:9C:88:0C:64:7F:62:80:D3:EC","sha256":"09:C6:57:79:77:CB:77:8C:ED:52:12:16:47:2F:42:DA:58:9D:6D:F9:1B:68:9D:FF:1C:46:7A:40:B8:3E:39:84"}}},"request":{"raw":"POST /@v1/log/join HTTP/1.1\r\nHost: asp90ksyuqlqsuilshzxoqwopg1ksayw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nx-scale-referrer: allocation-meteora.app\r\nauthorization: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjdXN0b21lcklkIjoiRDVUUjZPR29wMiIsImdyb3VwX2lkIjo5MjgsImlhdCI6MTc1ODkzOTEyN30.VMaOfNIZVN4uqpJ_sQc1EISuNGdGcXG-Ja3Nn1FQkZg\r\nx-device: 0:Windows:Firefox\r\nContent-Length: 2\r\nOrigin: https://allocation-meteora.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-meteora.app/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 12:43:38 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VoBGdijjAkPB%2Bq9tqvs94BG8DCHVJJcTIDrcqEEGJcVNVTXR%2FROT%2FYGQ%2FZpQW%2BI0gD%2BZ%2BCeq5pav%2FpQwy9sJaZT5eGfD2ZYCuV%2BBHgWwSVtzCIdDcm37ZjngrnFQ77kf3yU%3D\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-expose-headers: *\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 986353d83cc8b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T08:01:09.34408Z","times_seen":17739288,"resource_available":true,"data":null}},"time_used":577,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":577,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"asp90ksyuqlqsuilshzxoqwopg1ksayw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"asp90ksyuqlqsuilshzxoqwopg1ksayw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-meteora.app/css2.css","fqdn":"allocation-meteora.app","domain":"allocation-meteora.app","tld":"app"},"ip":{"addr":"172.67.141.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://allocation-meteora.app/","date":"2025-09-28T12:43:36.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-meteora.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 22:57:53 GMT","end":"Fri, 26 Dec 2025 23:46:35 GMT"},"fingerprint":{"sha1":"43:D4:83:ED:89:19:90:AC:1E:70:8D:BD:12:58:81:3A:47:C7:52:A9","sha256":"FC:97:C1:19:E0:2D:20:A9:3E:8F:C9:01:4F:0B:33:39:C6:AF:FD:77:EA:E6:71:35:74:69:BB:08:C4:FE:F3:8A"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: allocation-meteora.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-meteora.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 28 Sep 2025 12:43:36 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 27 Sep 2025 23:51:27 GMT\r\netag: \"51de-63fd114a26887-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 976\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fnIplvfYHKfAUtEv8au9IOrQvqBnXEmWceKoJEAbxAbHVM9QeKYOhhRq0uQdpwlyK%2FyEjFEEuiWqCM8tc6zONyx5ZRbFewgC%2FjQMilt5LNqBPpF%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 986353cf3cd7b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20958,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"b8a46a3cbd7190ad9adb6506b6a31670","sha1":"cef77610606dd35b0e2c12b6bb3aceb5fc7ce669","sha256":"5873d81ed9ad9aaa170ae1e3f4695dde77cf5229debdbd42a7e4e0e5d4c0e3f9","sha512":"6b0d7d0d33fbaba269eee9680cb85a4c5515c1015f86a9d1d072f96989c53ca502f34ed7e65f305d5f5c5cd503d7ac32d3676c2fc2399ccaa5b179c904def3ff","ssdeep":"192:WpTmpHpwpm3tpxpJYpaTnQJm3GyJRJTA3am3lhJiUTNe7m34MJD7TOdUm3/TJ8ez:W9mla2tHEWpHGx/P0NNPqxDX4V","tlshash":"5e929a91042b5100e7971cd627cf3f366edc2144a049dabc2ffd189aaceadba13a574d","first_seen":"2025-08-01T13:08:56.818082Z","last_seen":"2026-07-12T20:27:13.919418Z","times_seen":12,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"allocation-meteora.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-meteora.app/d5fceb6532643d0d84ffe09c40c481ecdf59e15a.gif","fqdn":"allocation-meteora.app","domain":"allocation-meteora.app","tld":"app"},"ip":{"addr":"172.67.141.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-meteora.app/","date":"2025-09-28T12:43:36.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-meteora.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 22:57:53 GMT","end":"Fri, 26 Dec 2025 23:46:35 GMT"},"fingerprint":{"sha1":"43:D4:83:ED:89:19:90:AC:1E:70:8D:BD:12:58:81:3A:47:C7:52:A9","sha256":"FC:97:C1:19:E0:2D:20:A9:3E:8F:C9:01:4F:0B:33:39:C6:AF:FD:77:EA:E6:71:35:74:69:BB:08:C4:FE:F3:8A"}}},"request":{"raw":"GET /d5fceb6532643d0d84ffe09c40c481ecdf59e15a.gif HTTP/1.1\r\nHost: allocation-meteora.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-meteora.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 28 Sep 2025 12:43:36 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 27 Sep 2025 23:51:27 GMT\r\netag: \"2a-63fd114a27c0f\"\r\naccept-ranges: bytes\r\ncontent-length: 42\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8qC%2FjONre0epdRXIHEdh6WFGFzKONnYf2DO36WXN7mV4FOsn0wgKIflqvE3MAGfatqHDUIBniscKeZ7F5DfxDLbKZe9mmZAsvJXoPm1Y7RjN2KWR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/gif\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncf-ray: 986353cf3cddb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-08-06T08:00:45.004615Z","times_seen":1022000,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"allocation-meteora.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-meteora.app/header-v2.svg","fqdn":"allocation-meteora.app","domain":"allocation-meteora.app","tld":"app"},"ip":{"addr":"172.67.141.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-meteora.app/","date":"2025-09-28T12:43:36.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-meteora.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 22:57:53 GMT","end":"Fri, 26 Dec 2025 23:46:35 GMT"},"fingerprint":{"sha1":"43:D4:83:ED:89:19:90:AC:1E:70:8D:BD:12:58:81:3A:47:C7:52:A9","sha256":"FC:97:C1:19:E0:2D:20:A9:3E:8F:C9:01:4F:0B:33:39:C6:AF:FD:77:EA:E6:71:35:74:69:BB:08:C4:FE:F3:8A"}}},"request":{"raw":"GET /header-v2.svg HTTP/1.1\r\nHost: allocation-meteora.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-meteora.app/af4f3ea577e7e139.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 28 Sep 2025 12:43:36 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 27 Sep 2025 23:51:27 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uANQj910ORxVvKiJLOmOJmr2cpEhCMWBLCSdvLsBx0W4gno0PXpqs2PuclXNB20%2B2%2BzCAMYzqZFE1W%2BXbl0o3Wa0SEzAE0ZaQ1mza4Uh%2FKpEs9Hh\"}]}\r\netag: W/\"be4-63fd114a28baf\"\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 986353d1dd00b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3044,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f79ed29549efe0562226b2d2ed1ee0ee","sha1":"9ca20dbef3aac7d0416e3a0e3e0a88f6d64e15f2","sha256":"315108f873fa13f96cf374ecb471029e0070c61e2a8045230722b26c99bcffe6","sha512":"b97958e0a8f3efe1c126be005b81bc05012cffbf1333e90ea02373ca4b16ab73160d2a97e5a9595e674970c9a068395cceaacee3a962c14c3a9562da6c54e595","ssdeep":"","tlshash":"ff5124f8b2b8a80497844329ffd594f141a3e0c6c2490368e15e7b35511ead1ed7e3ed","first_seen":"2025-08-23T15:43:39.418092Z","last_seen":"2026-04-17T05:33:51.394211Z","times_seen":64,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"allocation-meteora.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-meteora.app/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"allocation-meteora.app","domain":"allocation-meteora.app","tld":"app"},"ip":{"addr":"172.67.141.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://allocation-meteora.app/","date":"2025-09-28T12:43:36.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-meteora.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 22:57:53 GMT","end":"Fri, 26 Dec 2025 23:46:35 GMT"},"fingerprint":{"sha1":"43:D4:83:ED:89:19:90:AC:1E:70:8D:BD:12:58:81:3A:47:C7:52:A9","sha256":"FC:97:C1:19:E0:2D:20:A9:3E:8F:C9:01:4F:0B:33:39:C6:AF:FD:77:EA:E6:71:35:74:69:BB:08:C4:FE:F3:8A"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: allocation-meteora.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-meteora.app/css2-2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 28 Sep 2025 12:43:36 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 27 Sep 2025 23:51:27 GMT\r\netag: \"bc80-63fd114a2f527\"\r\naccept-ranges: bytes\r\ncontent-length: 48256\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cP8vbz0s7ib4t6XC%2BchrhRX5gIi86LjK6BzPwjrQNcO8mskUepL9D67xY2wiQ8nCBrGLwDjLnuqg9atabOLlT5kfwGnIZytiKJHlmhIuelyMSqg9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: font/woff2\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 986353d1dd04b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48256,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-08-06T07:51:21.050105Z","times_seen":25825,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"allocation-meteora.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-meteora.app/config.php?s=%2F%40v1%2Fcdn%2Fjs%2Freact-beautiful-dnd.legacy.cjs.js\u0026t=29317723","fqdn":"allocation-meteora.app","domain":"allocation-meteora.app","tld":"app"},"ip":{"addr":"172.67.141.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://allocation-meteora.app/","date":"2025-09-28T12:43:36.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-meteora.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 22:57:53 GMT","end":"Fri, 26 Dec 2025 23:46:35 GMT"},"fingerprint":{"sha1":"43:D4:83:ED:89:19:90:AC:1E:70:8D:BD:12:58:81:3A:47:C7:52:A9","sha256":"FC:97:C1:19:E0:2D:20:A9:3E:8F:C9:01:4F:0B:33:39:C6:AF:FD:77:EA:E6:71:35:74:69:BB:08:C4:FE:F3:8A"}}},"request":{"raw":"GET /config.php?s=%2F%40v1%2Fcdn%2Fjs%2Freact-beautiful-dnd.legacy.cjs.js\u0026t=29317723 HTTP/1.1\r\nHost: allocation-meteora.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-meteora.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 28 Sep 2025 12:43:36 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 27 Sep 2025 23:51:27 GMT\r\netag: \"3f9d-63fd114a260b7\"\r\naccept-ranges: bytes\r\ncontent-length: 16285\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jiwX8PikbDx533UjWkMqYNDP%2FJWUsPPGe1NqZ%2FRYOYAd0Vet16SPGfPxZ8JhH3lVExu38bdo9kP8JGBoeMmRqqko2kX6LhOtXD7k2vsMqFvbcp2E\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 986353d1fd09b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16285,"size_decoded":0,"mime_type":"text/html","magic":"PHP script, Unicode text, UTF-8 text","md5":"aefadf16c27e2a607170c60bb900e87e","sha1":"2e00989204e870318c8c1f20ffef7875b2cce926","sha256":"5ebf1372cf1725859fe5a539288484f0622ecee62d3b406702050f587ab07e17","sha512":"b390597c41c54fdeff0cd5762d047baf65da16124e92f68467cf445f9a8a0e25a78fa8bea5f60774c0d8df989524fe1c3c35aba245060e29fec9ded7a4560749","ssdeep":"384:Iph9Jm2q9Jm2cLijVGEZp577wVek7W4JR9Jm2b:IpZm2cm2cuFZph7wVekhm2b","tlshash":"0a722850bdf35a806176e0ad6b5fe5086a19600f0629c505bf9c129b2fd093ce3fc6bd","first_seen":"2025-09-26T04:15:24.789597Z","last_seen":"2026-01-30T07:18:06.116094Z","times_seen":65,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"allocation-meteora.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-meteora.app/v2.svg","fqdn":"allocation-meteora.app","domain":"allocation-meteora.app","tld":"app"},"ip":{"addr":"172.67.141.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-meteora.app/","date":"2025-09-28T12:43:37.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-meteora.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 22:57:53 GMT","end":"Fri, 26 Dec 2025 23:46:35 GMT"},"fingerprint":{"sha1":"43:D4:83:ED:89:19:90:AC:1E:70:8D:BD:12:58:81:3A:47:C7:52:A9","sha256":"FC:97:C1:19:E0:2D:20:A9:3E:8F:C9:01:4F:0B:33:39:C6:AF:FD:77:EA:E6:71:35:74:69:BB:08:C4:FE:F3:8A"}}},"request":{"raw":"GET /v2.svg HTTP/1.1\r\nHost: allocation-meteora.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-meteora.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 28 Sep 2025 12:43:37 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 27 Sep 2025 23:51:27 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X4knB2O%2BU0KiaUZruwQQaPcX0Itwags%2FE2O1hwNH8xMgK01CcSYeW0BHYikYtdMqNyTOxh0%2BQBSS%2Bqssgj%2B0ke%2FH89ZOGLkXDDbO988hwjGpMD0z\"}]}\r\netag: W/\"84b-63fd114a31467\"\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 986353d4ad28b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2123,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7c7b8f5633dd1c8644de3794d00e488e","sha1":"15afb8ac9218e3db4588f74fd87c30c50b8a5ee4","sha256":"d5494619e99b6db62ce55a479b94926f5784d30f0d96c361172ee6458b8f3636","sha512":"2e7f7be91190bd75baf4b7bfcf878db7e8fbb15804302426fa83f4a433c06f3c3113516378f97a4b68392402cb360b8545ee623632f76a494af0be331e58ac11","ssdeep":"","tlshash":"ed41a566f3e9f5e4e001e7e9d9618831b13e28f53ea1c7e586e19fa5ca1608c1d48cc0","first_seen":"2025-08-01T13:08:56.845913Z","last_seen":"2026-06-21T01:29:08.183725Z","times_seen":62,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"allocation-meteora.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-meteora.app/","fqdn":"allocation-meteora.app","domain":"allocation-meteora.app","tld":"app"},"ip":{"addr":"172.67.141.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-28T12:43:36.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-meteora.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 22:57:53 GMT","end":"Fri, 26 Dec 2025 23:46:35 GMT"},"fingerprint":{"sha1":"43:D4:83:ED:89:19:90:AC:1E:70:8D:BD:12:58:81:3A:47:C7:52:A9","sha256":"FC:97:C1:19:E0:2D:20:A9:3E:8F:C9:01:4F:0B:33:39:C6:AF:FD:77:EA:E6:71:35:74:69:BB:08:C4:FE:F3:8A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: allocation-meteora.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 12:43:36 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sat, 27 Sep 2025 23:51:27 GMT\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ge0fEhMyyGivg3ivx78yNkvTTRkjiOhBinJwtIbOxekE40TSH%2Byv%2BsQeEP12CU6rIUzmjS6Uu7shL2%2F7OWYVklt%2F4%2FEtRpeGBhzxSBXMG6X6LCHq\"}]}\r\ncontent-encoding: br\r\ncf-ray: 986353ce6fe65685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":158184,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (7276)","md5":"5847b34cd25d422b1294efdebc4a9cd8","sha1":"119c6f4fd2f1ef44c13716ca0022114fec41b1bf","sha256":"fad5ffe8b31abdb5c8c128b19e3c972ea7fad9b3b025f3b42007c63b5caf1870","sha512":"657b29a990f3b3a7db90da79b60fc9cac5c15731c2a25fc2ea59597dbfa1941d73774a3530026c3c8d5968f70886ee0793bc48d87b20a8a34fb6d7348f70de84","ssdeep":"3072:rKxRiKpERSkmj5xUtQSnfoLq5xUtQSoifN:cwKySkO5xUtQSnfoLq5xUtQSoifN","tlshash":"96f3e9046562443bbc1b66f963d9af8e611b7182cf02e7d97afd10418fc6ab749b3318","first_seen":"2025-09-28T12:44:03.768792Z","last_seen":"2026-01-22T05:57:59.43919Z","times_seen":3,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":10,"dns":1,"connect":1,"send":0,"wait":85,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"allocation-meteora.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-meteora.app/discord.svg","fqdn":"allocation-meteora.app","domain":"allocation-meteora.app","tld":"app"},"ip":{"addr":"172.67.141.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://allocation-meteora.app/","date":"2025-09-28T12:43:36.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-meteora.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 22:57:53 GMT","end":"Fri, 26 Dec 2025 23:46:35 GMT"},"fingerprint":{"sha1":"43:D4:83:ED:89:19:90:AC:1E:70:8D:BD:12:58:81:3A:47:C7:52:A9","sha256":"FC:97:C1:19:E0:2D:20:A9:3E:8F:C9:01:4F:0B:33:39:C6:AF:FD:77:EA:E6:71:35:74:69:BB:08:C4:FE:F3:8A"}}},"request":{"raw":"GET /discord.svg HTTP/1.1\r\nHost: allocation-meteora.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-meteora.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 28 Sep 2025 12:43:36 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 27 Sep 2025 23:51:27 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u4uEMMyv6hB1WslIWJHIZVuEYi%2BF0gIuHjIqLZpKBh2%2B4PLrzcdEJpKbGFRIKme5edaRyk5XSulJ66axFgwfJnjNIoNnq9rNxCuqIouGpev9hiQo\"}]}\r\netag: W/\"7d0-63fd114a283df\"\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 986353cf3ce1b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2000,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"59c2dcc1fffc91e51a3508c135c199d1","sha1":"869c48fbf54c5872ce90a95a6c7c6b8eacd4dd54","sha256":"7af2374313042ef4a8dec9c126a26e30b9652760213a0d940d194d3e6ac40fbc","sha512":"c27c6e221855219280cf62afb6b51220b5869bf47bb1c6231ab2167b62231223a8546a3c0d994e2cfed1b6315af05fb4716f2dc08b9ac1a9595093ac13194598","ssdeep":"","tlshash":"a04123f8e6d8a1807005fbe4d93709f5777738f665a7ef688385dd10e10314ea086d41","first_seen":"2025-08-14T02:29:46.324863Z","last_seen":"2026-06-21T01:29:08.197548Z","times_seen":85,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"allocation-meteora.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-meteora.app/point-button-bg.png","fqdn":"allocation-meteora.app","domain":"allocation-meteora.app","tld":"app"},"ip":{"addr":"172.67.141.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-meteora.app/","date":"2025-09-28T12:43:36.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-meteora.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 22:57:53 GMT","end":"Fri, 26 Dec 2025 23:46:35 GMT"},"fingerprint":{"sha1":"43:D4:83:ED:89:19:90:AC:1E:70:8D:BD:12:58:81:3A:47:C7:52:A9","sha256":"FC:97:C1:19:E0:2D:20:A9:3E:8F:C9:01:4F:0B:33:39:C6:AF:FD:77:EA:E6:71:35:74:69:BB:08:C4:FE:F3:8A"}}},"request":{"raw":"GET /point-button-bg.png HTTP/1.1\r\nHost: allocation-meteora.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-meteora.app/af4f3ea577e7e139.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 28 Sep 2025 12:43:36 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 27 Sep 2025 23:51:27 GMT\r\netag: \"fda-63fd114a2c647\"\r\naccept-ranges: bytes\r\ncontent-length: 4058\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ydTHOLwCj62WrVxVrCVFPgOc0cJTmTJbp4hEeN%2Bg452oHzLOuRpaC4uAOZvRXWqu44SL%2BXJZ2VzAkGMenjaF2OIswe9Gm2kmOqhvZcCcKH9K%2BH4J\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncf-ray: 986353d1dd01b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4058,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 234 x 84, 8-bit/color RGBA, non-interlaced","md5":"02cdaaa95e133e17110052d425363baf","sha1":"02a97a10cd32f7be6c863eac6406f844b7d43cbb","sha256":"239364bd3bbb7fca558a4a0935451292e1fb200a1c2b1a9359b13700f279bb9e","sha512":"60942c8940e235ffc7aa4d95372efed7806e5c3ff084d5e80d6013009582f28b314bb2a7f787e80ff0dcff96286e54a36ddf49b422716ff167943b001103b164","ssdeep":"","tlshash":"eb816c4a46f2c79dd014d19f8e6606d4e1d01d1e2f2018db3fad200e9b4669ba822a77","first_seen":"2025-08-01T13:08:56.840131Z","last_seen":"2026-06-21T01:29:08.181328Z","times_seen":45,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"allocation-meteora.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-meteora.app/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"allocation-meteora.app","domain":"allocation-meteora.app","tld":"app"},"ip":{"addr":"172.67.141.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://allocation-meteora.app/","date":"2025-09-28T12:43:36.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-meteora.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 22:57:53 GMT","end":"Fri, 26 Dec 2025 23:46:35 GMT"},"fingerprint":{"sha1":"43:D4:83:ED:89:19:90:AC:1E:70:8D:BD:12:58:81:3A:47:C7:52:A9","sha256":"FC:97:C1:19:E0:2D:20:A9:3E:8F:C9:01:4F:0B:33:39:C6:AF:FD:77:EA:E6:71:35:74:69:BB:08:C4:FE:F3:8A"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: allocation-meteora.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-meteora.app/css2-2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 28 Sep 2025 12:43:36 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 27 Sep 2025 23:51:27 GMT\r\netag: \"bc80-63fd114a2f527\"\r\naccept-ranges: bytes\r\ncontent-length: 48256\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oxvo4fG%2BSgzO5PMGm4O%2BdCL1ctXkhfVoTjjXrmycVkvBTAg1wcAOedL1CXdc3i1cVXFr6Gztl4krJOgN%2F6ENT1tFdnrg2ZzEU31cCO37dcMw84tT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: font/woff2\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncf-ray: 986353d1dd02b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48256,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-08-06T07:51:21.050105Z","times_seen":25825,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":120,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"allocation-meteora.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"asp90ksyuqlqsuilshzxoqwopg1ksayw.com/@v1/services/connector?referrer=allocation-meteora.app","fqdn":"asp90ksyuqlqsuilshzxoqwopg1ksayw.com","domain":"asp90ksyuqlqsuilshzxoqwopg1ksayw.com","tld":"com"},"ip":{"addr":"172.67.134.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://allocation-meteora.app/","date":"2025-09-28T12:43:37.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"asp90ksyuqlqsuilshzxoqwopg1ksayw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Sep 2025 14:56:00 GMT","end":"Wed, 24 Dec 2025 15:51:13 GMT"},"fingerprint":{"sha1":"E4:30:27:2E:1E:2D:BD:51:78:FC:D0:9C:88:0C:64:7F:62:80:D3:EC","sha256":"09:C6:57:79:77:CB:77:8C:ED:52:12:16:47:2F:42:DA:58:9D:6D:F9:1B:68:9D:FF:1C:46:7A:40:B8:3E:39:84"}}},"request":{"raw":"OPTIONS /@v1/services/connector?referrer=allocation-meteora.app HTTP/1.1\r\nHost: asp90ksyuqlqsuilshzxoqwopg1ksayw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,x-auth-key,x-direction-safe,x-scale-referrer\r\nReferer: https://allocation-meteora.app/\r\nOrigin: https://allocation-meteora.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Sun, 28 Sep 2025 12:43:38 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y%2BAXn82zFCTv80aUzgXoLPqKgoGATWZhLfk6DFFQnCWv7%2Ffd6F7g%2FrRrq8btbsBYo7Kaz5iEIw%2FyKiM9vT8k1XKi4haLIrs5wk866fTTQZF6qrdqKmxqkFCLRuc5cl6Xu70%3D\"}]}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-expose-headers: *\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 986353d82cc6b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T08:01:09.34408Z","times_seen":17739288,"resource_available":true,"data":null}},"time_used":870,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":870,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"asp90ksyuqlqsuilshzxoqwopg1ksayw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"asp90ksyuqlqsuilshzxoqwopg1ksayw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://allocation-meteora.app/","date":"2025-09-28T12:43:37.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://allocation-meteora.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 24 Sep 2025 17:34:04 GMT\r\nexpires: Thu, 24 Sep 2026 17:34:04 GMT\r\ncache-control: public, max-age=31536000\r\nage: 328173\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72964,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72964, version 1.0","md5":"91247c94dcda6ff52b445d71d6bbfb81","sha1":"ad2f62363ed047b430b91f32afa31df51fcd7c5e","sha256":"6a3c3e024b31eeacbf1f19c3c7be78612d91c623186f64035a50038241dad4f9","sha512":"a12dcac84e9f9ae02df3aabe29d76994281cd1005edca471194605cfcd6a0456eec872fd28c63c72ae124804d0b47d8377048caae49c40b0a18b5d6be4d6213f","ssdeep":"768:zbw+rLBkMxbCkupj4Y69/Yr71+j9pWiKahMM6+AWEqXB0oGuNGku+QCcIKE205C7:zbw+iwuS/iZWeaO1zP1/9Esvf8fXnm1","tlshash":"8f6302244e3c50c2a54d33aa286940f6f6e79c75b2b79ba4a69c589cd410f329cdfdc4","first_seen":"2025-05-29T18:51:13.223047Z","last_seen":"2026-08-06T05:19:07.693753Z","times_seen":31447,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":75,"dns":0,"connect":15,"send":0,"wait":15,"receive":25,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-meteora.app/css2-1.css","fqdn":"allocation-meteora.app","domain":"allocation-meteora.app","tld":"app"},"ip":{"addr":"172.67.141.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://allocation-meteora.app/","date":"2025-09-28T12:43:36.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-meteora.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 22:57:53 GMT","end":"Fri, 26 Dec 2025 23:46:35 GMT"},"fingerprint":{"sha1":"43:D4:83:ED:89:19:90:AC:1E:70:8D:BD:12:58:81:3A:47:C7:52:A9","sha256":"FC:97:C1:19:E0:2D:20:A9:3E:8F:C9:01:4F:0B:33:39:C6:AF:FD:77:EA:E6:71:35:74:69:BB:08:C4:FE:F3:8A"}}},"request":{"raw":"GET /css2-1.css HTTP/1.1\r\nHost: allocation-meteora.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-meteora.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 28 Sep 2025 12:43:36 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 27 Sep 2025 23:51:27 GMT\r\netag: \"523-63fd114a27057-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 442\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6hpQE%2FlEV8g9eNCmmS%2F7frNRC%2FDmkmls6JJVJd03vdwdwMN17DA0sT9S1NilxKWqgeetymZtkdLJUpM4T16%2Bdt2m%2FrNDWz2v%2FMGNGugSd8uZN6qA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 986353cf3cd9b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1315,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"14f53385628667fd467c7b31f460faf8","sha1":"c4a130e5574ec8a8bba5884356c30bd050d4c116","sha256":"1fc8a5221ad28a35352112f5229777545c8a5db8d475106a6b7b742531fff350","sha512":"60177a09b925b86c2eb57f904ff28e77974e6b5ea1dfb1021ab5950d54b2e1ab2bec59be32bfeaf4e3f6438376ad29797c2cd0e585888cb675dd438bf1cb9018","ssdeep":"","tlshash":"20217950046ba500e7871cd673cf3f32999db2906049c9386ffd1458edaac6a23b6b4d","first_seen":"2025-08-01T13:08:56.813921Z","last_seen":"2026-06-02T08:20:56.50845Z","times_seen":17,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"allocation-meteora.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-meteora.app/image.png","fqdn":"allocation-meteora.app","domain":"allocation-meteora.app","tld":"app"},"ip":{"addr":"172.67.141.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-meteora.app/","date":"2025-09-28T12:43:36.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-meteora.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 22:57:53 GMT","end":"Fri, 26 Dec 2025 23:46:35 GMT"},"fingerprint":{"sha1":"43:D4:83:ED:89:19:90:AC:1E:70:8D:BD:12:58:81:3A:47:C7:52:A9","sha256":"FC:97:C1:19:E0:2D:20:A9:3E:8F:C9:01:4F:0B:33:39:C6:AF:FD:77:EA:E6:71:35:74:69:BB:08:C4:FE:F3:8A"}}},"request":{"raw":"GET /image.png HTTP/1.1\r\nHost: allocation-meteora.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-meteora.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 28 Sep 2025 12:43:36 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 27 Sep 2025 23:51:27 GMT\r\netag: \"c53-63fd114a29b4f\"\r\naccept-ranges: bytes\r\ncontent-length: 3155\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n%2FQFgzPnV%2BImmNCtf8j3ii7dDrICB3eZ%2FI665wM2%2BbYN%2Fj47xo0dqFWIT2rtnZX0WdmSNfvV4Om%2Bvw2NjPIvQ32jrQwHV9GmBZ%2FCizr7rEw5iyyE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncf-ray: 986353d1ccfeb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3155,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"9426e063d0dca1b3edaa6aa3ed9204fd","sha1":"9eb24365d59c1b52d18427fdc311f9a70f228306","sha256":"f5d0f1d76618678f0b04aac918d152f02ba1e9808859a3fc1a51670c46ed5b28","sha512":"386db41fdaff83c230eb0344da8f8d6c4749df4bd4cb37eb4585f7e7418d29e2ad913114e6d5d621b16c598041ce01a7b30616461871e51455745bc39b807604","ssdeep":"","tlshash":"d1514ccb615be8fa08099116c9cd5eb1b02f2eacdd36741215ef640426f7bb17544f1c","first_seen":"2024-11-13T14:49:45.234166Z","last_seen":"2026-07-06T23:36:27.273614Z","times_seen":145,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"allocation-meteora.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-meteora.app/points-sparkle-1.gif","fqdn":"allocation-meteora.app","domain":"allocation-meteora.app","tld":"app"},"ip":{"addr":"172.67.141.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://allocation-meteora.app/","date":"2025-09-28T12:43:36.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-meteora.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 22:57:53 GMT","end":"Fri, 26 Dec 2025 23:46:35 GMT"},"fingerprint":{"sha1":"43:D4:83:ED:89:19:90:AC:1E:70:8D:BD:12:58:81:3A:47:C7:52:A9","sha256":"FC:97:C1:19:E0:2D:20:A9:3E:8F:C9:01:4F:0B:33:39:C6:AF:FD:77:EA:E6:71:35:74:69:BB:08:C4:FE:F3:8A"}}},"request":{"raw":"GET /points-sparkle-1.gif HTTP/1.1\r\nHost: allocation-meteora.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-meteora.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 28 Sep 2025 12:43:36 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 27 Sep 2025 23:51:27 GMT\r\netag: \"ba9f-63fd114a2d5e7\"\r\naccept-ranges: bytes\r\ncontent-length: 47775\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vyx%2F4%2BM1ln5YrfhrSgDP31rffgHQMeF90V3IeOZrTRinfojCq2o00mtHWQWiFIa5nPJpCLvR%2BpQWxe7p1ZaqW2YzdL7mAK5nd9XC%2B2zpe9vKz8RW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/gif\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncf-ray: 986353d1fd0ab4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47775,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 100 x 100","md5":"636e8107e3918227d308fcaf552ba5bc","sha1":"047f607983f46166553d96a2d776cecac6a18819","sha256":"2c7567db8587b921cb5beb5850cb853da74e3d2cdc733adf293ee88c5c6451b8","sha512":"475a6f339acf3ce7ebe75fd551d9ed543249401f4f742bb18d83fd4b85d1cc7ebcd7f127a287451769d397bd2726c8d46efbe38180684f780d5533b23370067d","ssdeep":"768:YRx6fQNAJQfClPv/l5qO/UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUjB8453n:Yf/NAJQfOX/TrBz","tlshash":"7023394d476a08bfe5acb574a46a904d60f1d05378906881f1ccb6faff4810f66ed6e3","first_seen":"2025-08-01T13:08:56.831291Z","last_seen":"2026-06-21T01:29:08.200635Z","times_seen":86,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":185,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"allocation-meteora.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"corsproxy.io/?https://api.mainnet-beta.solana.com","fqdn":"corsproxy.io","domain":"corsproxy.io","tld":"io"},"ip":{"addr":"104.26.7.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://allocation-meteora.app/","date":"2025-09-28T12:43:36.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corsproxy.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Sep 2025 23:42:06 GMT","end":"Thu, 25 Dec 2025 00:42:04 GMT"},"fingerprint":{"sha1":"0C:CD:24:B7:B0:CE:FE:13:D4:74:92:88:E5:8A:19:06:1B:6E:63:58","sha256":"0A:01:7A:C2:3C:74:E6:03:26:29:BB:69:4E:28:E2:F1:01:93:57:7A:C8:02:E9:3E:47:23:C2:D6:66:65:DA:08"}}},"request":{"raw":"OPTIONS /?https://api.mainnet-beta.solana.com HTTP/1.1\r\nHost: corsproxy.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://allocation-meteora.app/\r\nOrigin: https://allocation-meteora.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 28 Sep 2025 12:43:36 GMT\r\ncf-ray: 986353d33eb5b512-OSL\r\ncache-control: no-store, no-cache, must-revalidate, private, max-age=0, s-maxage=0, proxy-revalidate, no-transform\r\nexpires: 0\r\nvary: *, Accept-Encoding\r\npragma: no-cache\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH\r\naccess-control-max-age: 86400\r\nsurrogate-control: no-store\r\nx-cache-buster: 1759063416858_cvm26k9\r\nx-request-id: 4b10c98b-722c-44df-beca-3f8ea618ff0d\r\nx-timestamp: 1759063416858\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=X5RkNmiza14vgnAfd27taAzS6WgO4eeJFdXC9i7BFmV5T59bdELCBpYjEk3CNS510QFBQWLYKH32sF2%2FJcrgUnwQvJ4UbFjfRf4JcnTBI6Xy79xd3jK%2B4HtHrz97HA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=4017\u0026min_rtt=527\u0026rtt_var=2548\u0026sent=6\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3258\u0026recv_bytes=1307\u0026delivery_rate=2850393\u0026cwnd=253\u0026unsent_bytes=0\u0026cid=504b799c07ab3c74\u0026ts=36\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T08:01:09.34408Z","times_seen":17739288,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":20,"dns":4,"connect":3,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"allocation-meteora.app/css2-2.css","fqdn":"allocation-meteora.app","domain":"allocation-meteora.app","tld":"app"},"ip":{"addr":"172.67.141.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://allocation-meteora.app/","date":"2025-09-28T12:43:36.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-meteora.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 22:57:53 GMT","end":"Fri, 26 Dec 2025 23:46:35 GMT"},"fingerprint":{"sha1":"43:D4:83:ED:89:19:90:AC:1E:70:8D:BD:12:58:81:3A:47:C7:52:A9","sha256":"FC:97:C1:19:E0:2D:20:A9:3E:8F:C9:01:4F:0B:33:39:C6:AF:FD:77:EA:E6:71:35:74:69:BB:08:C4:FE:F3:8A"}}},"request":{"raw":"GET /css2-2.css HTTP/1.1\r\nHost: allocation-meteora.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-meteora.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 28 Sep 2025 12:43:36 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 27 Sep 2025 23:51:27 GMT\r\netag: \"22ac-63fd114a27827-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 709\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i51vhtIco3ix2paHh1ZuzfqRSpaJB9R00CjK3G9sx7h%2FYjlq1cA%2F8HWIo9iV0XJZ8BugE9UlzEqd3mUbvIf0Ee2gH8TwNhlwMSahuNtVw%2FI7R9D8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 986353cf3cdbb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8876,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"32d1fd2d07f445f23195a2cd483c0a46","sha1":"c0de21743339926a1ce72a9218fb2adbd6ff8340","sha256":"cc5506f8da260c59c421a591a46298de671810d49540a3759866657c4f23401e","sha512":"b70b499c15b205fde524cae8907ff2d80b2f34e412f6ef3d02972b67abd70137cabda9842417b1662f06f93d32fc1a740f807de1f05ac83f8b6d7e812eeac3e9","ssdeep":"192:9TNe7m34MJD7TOdUm3/TJ8eTrUdm3iWJldTE7em3R1JGk:h/P0NNPq7","tlshash":"f802ab91042b5100e7970cd627cf3f366edc2148a049dabc2ffd188aaceadb953a574d","first_seen":"2024-12-13T17:42:20.393767Z","last_seen":"2026-08-03T21:02:05.622192Z","times_seen":749,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"allocation-meteora.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"allocation-meteora.app/babylonjs.legacy.umd.js","fqdn":"allocation-meteora.app","domain":"allocation-meteora.app","tld":"app"},"ip":{"addr":"172.67.141.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://allocation-meteora.app/","date":"2025-09-28T12:43:36.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"allocation-meteora.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 22:57:53 GMT","end":"Fri, 26 Dec 2025 23:46:35 GMT"},"fingerprint":{"sha1":"43:D4:83:ED:89:19:90:AC:1E:70:8D:BD:12:58:81:3A:47:C7:52:A9","sha256":"FC:97:C1:19:E0:2D:20:A9:3E:8F:C9:01:4F:0B:33:39:C6:AF:FD:77:EA:E6:71:35:74:69:BB:08:C4:FE:F3:8A"}}},"request":{"raw":"GET /babylonjs.legacy.umd.js HTTP/1.1\r\nHost: allocation-meteora.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-meteora.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 28 Sep 2025 12:43:36 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 27 Sep 2025 23:51:27 GMT\r\netag: \"5c273-63fd114a25ccf-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BVQxsro30keU1%2FMpUKJw%2BG%2Be%2FWxAPATAgLWsemCNg44LNhATRSrGBk0Zs8ptWy2gADSsy2P2kg7GF%2FZYgWazBpKp%2F8EssZteVyXDc%2FjRvlFfXB5s\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-ray: 986353cf3cdcb4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":377459,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65286)","md5":"4476ba08947d3bb0dd1ff338fae161e1","sha1":"ba11b34b116a2d9d9193d9308e789a100f73fc4d","sha256":"fb226007fd4348dcbd63151ffc3d1c44fa4f5e459a05bbfcde80c634ca2b9f3a","sha512":"8977f093bd4c8bc1964726df3b52fcf8c7ed9ea70c8fed3d8e13616b34b56c0c3fb3b42bde2ab3f9fea1e6fb322a0c333cca4f972428fa7b80246848a8394612","ssdeep":"3072:j1Zejs59karIPfU+feEKkbXne0i8D/O2pS26+EjZmXkdUWmyI9gZp:jHei9karIXNfWwi8D/OJ26+yZUWmm","tlshash":"8684928f01ef650ee156441a44636ccca453752e8b956f5bbb4fe15eec2ccf090c2aba","first_seen":"2025-09-28T12:44:03.786913Z","last_seen":"2026-01-22T05:57:59.447843Z","times_seen":2,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"allocation-meteora.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.meteora.ag/apple/apple-icon-57x57.png","fqdn":"www.meteora.ag","domain":"meteora.ag","tld":"ag"},"ip":{"addr":"104.18.41.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://allocation-meteora.app/","date":"2025-09-28T12:43:37.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.meteora.ag","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 05:44:14 GMT","end":"Mon, 17 Nov 2025 06:44:13 GMT"},"fingerprint":{"sha1":"A3:BC:69:D8:13:38:CB:52:8D:D4:97:C9:7B:06:4F:C4:DB:A2:92:97","sha256":"54:92:5C:BA:58:4B:B6:9F:37:39:BF:71:50:D5:EA:B3:19:D1:6C:7D:ED:89:B5:20:3F:28:21:11:0D:3A:6B:5E"}}},"request":{"raw":"GET /apple/apple-icon-57x57.png HTTP/1.1\r\nHost: www.meteora.ag\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-meteora.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 12:43:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 2915\r\ncf-ray: 986353d849f735a6-OSL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"apple-icon-57x57.png\"\r\netag: \"7d90dcf9529b3ec8d032432e93e4cd9d\"\r\nlast-modified: Sun, 28 Sep 2025 12:08:31 GMT\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /apple/apple-icon-57x57.png\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::xqbbl-1759063417682-aa11cb9dde92\r\ncf-cache-status: MISS\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2915,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 57 x 57, 8-bit/color RGBA, non-interlaced","md5":"7d90dcf9529b3ec8d032432e93e4cd9d","sha1":"65a891bda24e5daa0671d16d61d43cda7827c929","sha256":"0b4fb0647487995d996fe43484a89cb7cd8c0e1658deae57b1b464eaf56e7ef4","sha512":"4fa68eb9601a12fc6ee318aea9436c44a025558e9690e7ca65b01fe5d64e0c90c71baf38bbb69babb03380871699a6b6912a9c9ff5a79bcaf28270c990671eec","ssdeep":"","tlshash":"23516bef7202a9a3ca6d4479d03550f21f3b93a423a5fd84b68037126f636c33027a2c","first_seen":"2024-08-20T11:34:03.127744Z","last_seen":"2026-06-21T01:29:08.193165Z","times_seen":42,"resource_available":false,"data":null}},"time_used":654,"timings":{"blocked":0,"dns":4,"connect":1,"send":0,"wait":72,"receive":0,"ssl":576},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"asp90ksyuqlqsuilshzxoqwopg1ksayw.com/@v1/cdn/js/react-beautiful-dnd.legacy.cjs.js?t=29317723","fqdn":"asp90ksyuqlqsuilshzxoqwopg1ksayw.com","domain":"asp90ksyuqlqsuilshzxoqwopg1ksayw.com","tld":"com"},"ip":{"addr":"172.67.134.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://allocation-meteora.app/","date":"2025-09-28T12:43:37.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"asp90ksyuqlqsuilshzxoqwopg1ksayw.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Sep 2025 14:56:00 GMT","end":"Wed, 24 Dec 2025 15:51:13 GMT"},"fingerprint":{"sha1":"E4:30:27:2E:1E:2D:BD:51:78:FC:D0:9C:88:0C:64:7F:62:80:D3:EC","sha256":"09:C6:57:79:77:CB:77:8C:ED:52:12:16:47:2F:42:DA:58:9D:6D:F9:1B:68:9D:FF:1C:46:7A:40:B8:3E:39:84"}}},"request":{"raw":"GET /@v1/cdn/js/react-beautiful-dnd.legacy.cjs.js?t=29317723 HTTP/1.1\r\nHost: asp90ksyuqlqsuilshzxoqwopg1ksayw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://allocation-meteora.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 12:43:37 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, Origin, Accept-Encoding\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\ncontent-disposition: attachment; filename=react-beautiful-dnd.legacy.cjs.js\r\netag: W/\"53031-75i/VZ3QUHgz6E61mBq64P7fPOk\"\r\nx-cache-status: MISS\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-expose-headers: *\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m17rqtFM%2BKvz9thKtw7cjHB2ePanRfNNDqlqxNnHlr80lr2Fxwagrr4sieTsS9%2F7%2FHtLIo0uwqo%2BklsuT%2BfanACyU%2FZp0RGm%2Fw%2FGyQNxE5Lrq%2BCkjMMFvyvgwj0%2BYAOGj17FBQ%3D%3D\"}]}\r\ncf-ray: 986353d4eb82b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":340017,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65428)","md5":"976137eeace4acbde2245db9e00039c6","sha1":"ef98bf559dd0507833e84eb5981abae0fedf3ce9","sha256":"ed16cc3cba9ae0625dd5322db16d3796c606401dd40ffefad3bdf70ccb6ab106","sha512":"afb7caa6fe93ad65d033f282a77eb9588507a8dc567921fcbf60b0ef0184c2090e44b5d9c5608474e478e7bbbd95a1c9d1944d28e4bde9f1552828be5a698f3f","ssdeep":"6144:Us6RWbpP47Mhk6p1ZsJzO3fXeIZHnwufOICuL:R68tPseWCvXeIZeIRL","tlshash":"83748c917280617916634f9a41bf094ab238f5207409492cf79cc8d32bb99dad5bff7c","first_seen":"2025-09-27T18:38:15.252444Z","last_seen":"2025-09-29T22:10:20.160704Z","times_seen":26,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":23,"dns":11,"connect":2,"send":0,"wait":218,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"asp90ksyuqlqsuilshzxoqwopg1ksayw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"asp90ksyuqlqsuilshzxoqwopg1ksayw.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}