{"report_id":"dbf8c6ae-48ff-402b-8992-d5a455849456","version":6,"status":"done","tags":[],"date":"2026-02-14T02:37:37Z","url":{"schema":"https","addr":"fumbl.xyz/","fqdn":"fumbl.xyz","domain":"fumbl.xyz","tld":"xyz"},"ip":{"addr":"104.21.5.134","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"fumbl.xyz/","fqdn":"fumbl.xyz","domain":"fumbl.xyz","tld":"xyz"},"title":"FUMBL — See what you left on the table","dom":{"size":14273,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"05a973be09ad9e08f585e8be3e296836","sha1":"0a1a3041e66bbcc58c68607f07a2ca92a2186cfc","sha256":"414447704698272408a27d6e32ff27ac33e816165fe937dd68dd8500bda1a50d","sha512":"69888d4e3f1324209e65aed7e3f0a1149d69581c55e33d763e069ccbce1690a9ac718b8f3fc73e761609a921e6e8aafd7a9aacdfbc7dcaedc280ecedfb77b1f0","ssdeep":"192:hNtWIUtpxFrstmSujRgXTfuMCufSV1v7TKrOL9rc1T0Mrj55:TEhxFrstmcCufSV1v7T1L9rcB0MrjL","tlshash":"545221a0b1f83773025b91d7b5a3af227cd28147d7592110b6fd99e29fe6c42ce1702a","dom_hash":"domhashe104dd2eab8f53119ce9a548a31f8fb4","first_seen":"2026-02-14T02:37:39.3356Z","last_seen":"2026-02-14T02:37:39.3356Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"fumbl.xyz/","fqdn":"fumbl.xyz","domain":"fumbl.xyz","tld":"xyz"},"ip":{"addr":"104.21.5.134","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T02:37:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fumbl.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fumbl.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-08T22:14:51.234086Z","alert_count":0,"request_count":4,"received_data":119921,"sent_data":2279,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api.coingecko.com","ip":{"addr":"172.66.172.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-03-26","domain_rank":442226,"first_seen":"2018-05-18T12:16:11Z","last_seen":"2026-02-12T21:27:39.542945Z","alert_count":0,"request_count":1,"received_data":1274,"sent_data":471,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-08T22:17:48.645662Z","alert_count":0,"request_count":1,"received_data":19556,"sent_data":527,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fumbl.xyz","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-10","domain_rank":0,"first_seen":"2026-02-13T03:15:29.288127Z","last_seen":"2026-02-13T03:15:29.288127Z","alert_count":46,"request_count":23,"received_data":923619,"sent_data":10069,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"fumbl.xyz/script.js","fqdn":"fumbl.xyz","domain":"fumbl.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d19bd3396660da1f38ed6be0c55cdcb","sha1":"e3e5f5ad17330468706e8d65fef29b575c81e8c7","sha256":"2e1b293750a9cc3e853f1ed1ccecfd351d638ef0370aa6b0c23ff18dde0437a3","sha512":"795c45fff92e493ddf87dd8c632e59aed5a3a686cc2ffe0cc795f0a6bbb587c936c3f0e9c72ad643eb8865339cfb66f8a2398be8117e2abbfba43f79374298d1","ssdeep":"384:DebEnp0dIelWm4BKnzNOGMfKrV0XK93iMiiRaPadQDa:FmMPfKrV0XdJadca","tlshash":"fad2a32abaf3353154b331ff67afa609352060431805cd043e5cd644afe5ea99bb7ad8","size":30909,"data":"","first_seen":"2026-02-13T03:15:33.499042Z","last_seen":"2026-02-14T02:37:39.347603Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fumbl.xyz/secureproxy?s=%2Fipfs%2FfAU2sSW45IWqvavf2UqD8w22b8abd29f48da8a9a7f33cf602daabf%3Ft%3D1771036634024","fqdn":"fumbl.xyz","domain":"fumbl.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eea2e99548bf1b2e175f94c41c7ee947","sha1":"eb6cd184ebc1533e522018841fff75a6e0f79735","sha256":"64d3938f7afcaa7581e08902522c18c0d004394feaf9c51b79ca8858b4805d15","sha512":"503094fd8a0be9ddfbcd8095eb772442fd6ff6ef763083ef4b35f44f8c0e442dbba5ae54f2c56897e3a18cfb216b195d7422f822fba72730abc4d8f44246d705","ssdeep":"6144:/ujB8gltIeTM5/S8g6zRh5gDAnIHQHDk2tKM4aaFPjv8DjgYf0PfcfGfr7lFcuUv:YhltVM/g61slHH2tKBhv8ycKMf","tlshash":"8ff43cceb78d1d7340a263e757b3d82eff880eaa854b595057c29c9122c4fa351e8d9c","size":727178,"data":"","first_seen":"2026-02-14T02:37:39.358529Z","last_seen":"2026-02-14T02:37:39.358529Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fumbl.xyz/","fqdn":"fumbl.xyz","domain":"fumbl.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a13aa89625dedadc1756bade17ecc295","sha1":"6a0fcb1ea23fe01de012e015768a93eb1445d620","sha256":"c053ddd423e8c370d9237dd58ae81a75037b7282659261c2f0fb2cfee23914b1","sha512":"5e6c556f7f8a34797e9ea7a05bbe26bf82c58a158621e04ffa301e6c687e71a5ee9c483984ffb85978aaf7f8abb58261bcd0ac1d0960e18d7a8617a5c0ad46fa","ssdeep":"","tlshash":"33c02264e960c830051d21aa2038628c29c0293c4082e0aa86bc898b1898f800e88112","size":186,"data":"","first_seen":"2026-02-13T03:15:33.537735Z","last_seen":"2026-02-14T02:37:39.365318Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fumbl.xyz/","fqdn":"fumbl.xyz","domain":"fumbl.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"78ec0033e082cbf07abe847a95eeab8d","sha1":"c61834c8e1fbe6f63cd1c3157cd2c137e53c5ddd","sha256":"ff8c5ac197e1ab2687026b6b59400761272e8f51402a7918f0d1b5a811cf9cb2","sha512":"ea1f2bbb8b95b8606ea7efa37f80fe29eccf40f294ae9b71a932bec6a50677b7b1fcaaa77d203ff3bd871c8eca0035529e9699296d3f3074943e4df6b2fcd413","ssdeep":"","tlshash":"679004051413d07141f401414307f33cd50000144550fc55144cd17c7c007070c4ccc3","size":41,"data":"","first_seen":"2026-01-24T11:08:20.216171Z","last_seen":"2026-02-27T07:07:57.561288Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fumbl.xyz/wallets/bitkeep.png","fqdn":"fumbl.xyz","domain":"fumbl.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fumbl.xyz/","date":"2026-02-14T02:37:13.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fumbl.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 02:47:22 GMT","end":"Tue, 12 May 2026 03:45:45 GMT"},"fingerprint":{"sha1":"67:49:1F:91:7B:32:D7:13:DF:91:F2:5C:75:F1:59:87:FC:0C:78:7E","sha256":"00:F7:83:70:61:95:1B:66:AB:A2:E9:ED:F2:AA:DF:AC:27:99:21:66:8F:CA:4F:C1:38:EC:89:A3:74:45:EC:23"}}},"request":{"raw":"GET /wallets/bitkeep.png HTTP/1.1\r\nHost: fumbl.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fumbl.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 02:37:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 11688\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 12 Feb 2026 01:36:40 GMT\r\netag: \"698d2ea8-2da8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 84130\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gYNi9PktM1PRYYy8ln%2BG2qU6E6NhgGDW%2BztlCBMK4VCuVJ94k8A7tqkjvTMxIIgJZPIqesfoMA8v5PcwFz0Glnxd4Lm4IOz0PA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd92eb0cca18deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11688,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"3d18a339aa10be266935d9a0c4a67f83","sha1":"a9d79e08a1b18a98c69ff9fe1adf1d9dbe6b8b48","sha256":"4f6a4abd4bd4d40422da26c262f3ec94d9c97b985f57131cde3dbc1aff7c3934","sha512":"035960e84a008dce27a30d1c5d91a5ed27702a61a0d1cf55d936a2b67b55c479598095c726f4187224c2fb4b1eaa269cb24380d427126bf59703abf92e583315","ssdeep":"192:LSV199ODGrJpgEcV274uliG3sTfVigTqhOYUv8u9enwTfZYVQM:GV1bODcpgEcql5wfVigrZ8u9ew7WVQM","tlshash":"753275139d099a83f12893f8ff034eac6e1a6b4cf8573afb10224ed739655520c9a07d","first_seen":"2026-02-13T03:15:33.496521Z","last_seen":"2026-02-14T02:37:39.337075Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fumbl.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fumbl.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fumbl.xyz/wallets/mathwallet.png","fqdn":"fumbl.xyz","domain":"fumbl.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fumbl.xyz/","date":"2026-02-14T02:37:13.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fumbl.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 02:47:22 GMT","end":"Tue, 12 May 2026 03:45:45 GMT"},"fingerprint":{"sha1":"67:49:1F:91:7B:32:D7:13:DF:91:F2:5C:75:F1:59:87:FC:0C:78:7E","sha256":"00:F7:83:70:61:95:1B:66:AB:A2:E9:ED:F2:AA:DF:AC:27:99:21:66:8F:CA:4F:C1:38:EC:89:A3:74:45:EC:23"}}},"request":{"raw":"GET /wallets/mathwallet.png HTTP/1.1\r\nHost: fumbl.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fumbl.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 02:37:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 11153\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 12 Feb 2026 01:36:40 GMT\r\netag: \"698d2ea8-2b91\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 84130\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kmlZqtDlHIPpJtjldqLRgPwBnQbLA4NFjX1Jmi%2BEcKJkLY7%2ByEDhVsoecWRCRNkV4B9128UFTdpUstzxUl4cHpNqMezI%2Fec7RQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd92eb0ccb18deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11153,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"653aa7fea2956abe35c04ec8cbdaf8e3","sha1":"68644f145bebb25a8725cf2f797553a7238e0e20","sha256":"f975581bbab9b2fdaaf2c460147ee248b0290b877908c3f3e3d87dee9c8a2ca9","sha512":"5cd931cfd9e5b8bac8a81673f48c48e0e6b3d126ccd66d016eb15bc7aad7c4e9083e425945087bf0fea94f1be6e2611aa1a9c5cf80292899125015df37f824aa","ssdeep":"192:LSd89XWXi4iKVK6Me6FNsPyDWZpOsk+IknPFxi+V31IGzUSuLOOlamWw:Gd8NWyeEFNsP+VO7i+52GzXQyrw","tlshash":"3532c7139e159b83e66183e9be030e9d5f162a1cf8923afb10638ed77824b755c4d06e","first_seen":"2026-02-13T03:15:33.518Z","last_seen":"2026-02-14T02:37:39.33861Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fumbl.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fumbl.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fumbl.xyz/","date":"2026-02-14T02:37:14.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://fumbl.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31432\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 03:09:36 GMT\r\nexpires: Sat, 13 Feb 2027 03:09:36 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:52:37 GMT\r\ncontent-type: font/woff2\r\nage: 84458\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31432,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31432, version 1.0","md5":"b636a65da4f00129f08c7df6e5dd75ac","sha1":"4f27206c4b1caf8b7805597fcbc6922ff5805daa","sha256":"83c005d49d8a6a50474c73a5a36ac0468076e9c4a29da7bdb14995d80560a5be","sha512":"77ad92edddd5fc9ce47b8b329cf41b2fec895ea01a97b9122df3766163998fadcbe47c868631208636c4e587136ddd390d38e3e9da2743758c9da2c77a66f859","ssdeep":"768:a8+AGQwBrw24YHLKRG5lBF260n1e5vhjJKWWAD95I9Puggtx:B+AiBrw2fHL+GyvYtYADM9Pug0x","tlshash":"52e2f274ea41ca57676335ed4203e99d015fa318ebf6fd40869ccad2a506bcb7c4033a","first_seen":"2024-10-21T03:03:54.505463Z","last_seen":"2026-08-13T15:13:30.018741Z","times_seen":12773,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":135,"dns":3,"connect":21,"send":0,"wait":8,"receive":3,"ssl":108},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fumbl.xyz/wallets/solflare.svg","fqdn":"fumbl.xyz","domain":"fumbl.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fumbl.xyz/","date":"2026-02-14T02:37:13.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fumbl.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 02:47:22 GMT","end":"Tue, 12 May 2026 03:45:45 GMT"},"fingerprint":{"sha1":"67:49:1F:91:7B:32:D7:13:DF:91:F2:5C:75:F1:59:87:FC:0C:78:7E","sha256":"00:F7:83:70:61:95:1B:66:AB:A2:E9:ED:F2:AA:DF:AC:27:99:21:66:8F:CA:4F:C1:38:EC:89:A3:74:45:EC:23"}}},"request":{"raw":"GET /wallets/solflare.svg HTTP/1.1\r\nHost: fumbl.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fumbl.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 02:37:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 12 Feb 2026 01:36:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 84130\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k9LMoiprNOuO%2BTpD%2BvNYYZzQq5%2BUjPXBkc0XFb36X2cXZrT86s9h%2B8tVe3Aq%2FEKlKt25d3Yz8%2Bvn8bNCe5Y7ssQu1BsTePW79A%3D%3D\"}]}\r\netag: W/\"698d2ea8-4d5\"\r\ncontent-encoding: br\r\ncf-ray: 9cd92eb0bc888deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1237,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9dffb9cd1431adb96e6bbd104a782597","sha1":"6ac27b67bd325daeefc659cfc2a0dec96fde0ecf","sha256":"439425652f5cd837f161708cd0863af374abc6898b5dec962836b772983c3713","sha512":"85e2098c1be136ab487dce8d0dce0348ba678abe52269f8b6ae9d40fec4889beb8fc0806516add4ff2d2593df95da6cac93f6e3b2fb63e1344f5cb5cc0e4b35e","ssdeep":"","tlshash":"702151f7eac827d4e08bc741e4612855b86334fd337dc19bc2907e80487608ec84dc98","first_seen":"2026-02-13T03:15:33.509149Z","last_seen":"2026-08-04T05:41:39.05976Z","times_seen":3,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fumbl.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fumbl.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fumbl.xyz/wallets/metamask.svg","fqdn":"fumbl.xyz","domain":"fumbl.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fumbl.xyz/","date":"2026-02-14T02:37:13.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fumbl.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 02:47:22 GMT","end":"Tue, 12 May 2026 03:45:45 GMT"},"fingerprint":{"sha1":"67:49:1F:91:7B:32:D7:13:DF:91:F2:5C:75:F1:59:87:FC:0C:78:7E","sha256":"00:F7:83:70:61:95:1B:66:AB:A2:E9:ED:F2:AA:DF:AC:27:99:21:66:8F:CA:4F:C1:38:EC:89:A3:74:45:EC:23"}}},"request":{"raw":"GET /wallets/metamask.svg HTTP/1.1\r\nHost: fumbl.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fumbl.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 02:37:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 12 Feb 2026 01:36:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 84130\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MFrqNYHVnuvTJPAsvwfdPzSgDIFFjcb15dXRwdGDolcnygTafeI%2BsTplv1CLPSVy1IxDWAie%2BtWllEk1eqXEimRa3s2yuzKLDQ%3D%3D\"}]}\r\netag: W/\"698d2ea8-8b3\"\r\ncontent-encoding: br\r\ncf-ray: 9cd92eb0bc898deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2227,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d0b392b4c819b0b7f69868430089367c","sha1":"974aee5b83259821263d76343efd041f226f7644","sha256":"2c3b5ffa7ea23ecb71bdc61a4c5f6092ae28eb089e78fb9eaa9624768e6854ec","sha512":"39dc19a8689eb630bf1cbf5a31d9de623d20dba41a2cc609a1c4de8919ffef2e0e649d343aac302d7d4fedee5d3f5a834f90d2259ad567fe055eb25addbf7b68","ssdeep":"","tlshash":"204111d9b3c4a2c595158bf9e817a8b7703b2cf9b635cb85dd50220567315138c9edcc","first_seen":"2026-02-13T03:15:33.477262Z","last_seen":"2026-06-19T13:21:36.672426Z","times_seen":9,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fumbl.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fumbl.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fumbl.xyz/wallets/exodus.svg","fqdn":"fumbl.xyz","domain":"fumbl.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fumbl.xyz/","date":"2026-02-14T02:37:13.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fumbl.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 02:47:22 GMT","end":"Tue, 12 May 2026 03:45:45 GMT"},"fingerprint":{"sha1":"67:49:1F:91:7B:32:D7:13:DF:91:F2:5C:75:F1:59:87:FC:0C:78:7E","sha256":"00:F7:83:70:61:95:1B:66:AB:A2:E9:ED:F2:AA:DF:AC:27:99:21:66:8F:CA:4F:C1:38:EC:89:A3:74:45:EC:23"}}},"request":{"raw":"GET /wallets/exodus.svg HTTP/1.1\r\nHost: fumbl.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fumbl.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 02:37:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 12 Feb 2026 01:36:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L%2BldK3VQCKsTOwkg0PKJGcGgefyr9Im0p3m3zFLRWd8QVpXJ%2BV%2BfjTxPsBtfXwYt4gAK7I%2FfWpw0prsDBmI5LrEwfz6ZUqNqaw%3D%3D\"}]}\r\netag: W/\"698d2ea8-919\"\r\ncontent-encoding: br\r\ncf-ray: 9cd92eb0cca08deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2329,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"793d72e93d5c120ff9b56a6532846074","sha1":"bcd8e03f97cc853957cc42ce807a16be3bdc3855","sha256":"d3f8782983b2f921080d86f3d924c0c640c95891f746fed4841e14415595afec","sha512":"441ee23895c8fefd30e84cd9c9a3097fc909cc6e8842e0550294e8c4be3e3c318c45b825c06f7c02be1dc6de0b0cbdca5e724a1f54342c0d3b1066c1b0e156eb","ssdeep":"","tlshash":"2341cc6af169ac33e9d9d3ccd850943521b6e1f3e88986a091c0fb0e36244c32e1f5d5","first_seen":"2026-02-13T03:15:33.526031Z","last_seen":"2026-02-14T02:37:39.342454Z","times_seen":2,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fumbl.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fumbl.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fumbl.xyz/","date":"2026-02-14T02:37:14.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://fumbl.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 12 Feb 2026 16:32:02 GMT\r\nexpires: Fri, 12 Feb 2027 16:32:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 122712\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22288,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-08-13T15:54:35.745806Z","times_seen":27336,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":141,"dns":1,"connect":21,"send":0,"wait":11,"receive":1,"ssl":116},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fumbl.xyz/","date":"2026-02-14T02:37:14.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://fumbl.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31432\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 03:09:36 GMT\r\nexpires: Sat, 13 Feb 2027 03:09:36 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:52:37 GMT\r\ncontent-type: font/woff2\r\nage: 84458\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31432,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31432, version 1.0","md5":"b636a65da4f00129f08c7df6e5dd75ac","sha1":"4f27206c4b1caf8b7805597fcbc6922ff5805daa","sha256":"83c005d49d8a6a50474c73a5a36ac0468076e9c4a29da7bdb14995d80560a5be","sha512":"77ad92edddd5fc9ce47b8b329cf41b2fec895ea01a97b9122df3766163998fadcbe47c868631208636c4e587136ddd390d38e3e9da2743758c9da2c77a66f859","ssdeep":"768:a8+AGQwBrw24YHLKRG5lBF260n1e5vhjJKWWAD95I9Puggtx:B+AiBrw2fHL+GyvYtYADM9Pug0x","tlshash":"52e2f274ea41ca57676335ed4203e99d015fa318ebf6fd40869ccad2a506bcb7c4033a","first_seen":"2024-10-21T03:03:54.505463Z","last_seen":"2026-08-13T15:13:30.018741Z","times_seen":12773,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":56,"dns":0,"connect":9,"send":0,"wait":8,"receive":8,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fumbl.xyz/secureproxy?s=%2Fjmpd%2F","fqdn":"fumbl.xyz","domain":"fumbl.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fumbl.xyz/","date":"2026-02-14T02:37:15.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fumbl.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 02:47:22 GMT","end":"Tue, 12 May 2026 03:45:45 GMT"},"fingerprint":{"sha1":"67:49:1F:91:7B:32:D7:13:DF:91:F2:5C:75:F1:59:87:FC:0C:78:7E","sha256":"00:F7:83:70:61:95:1B:66:AB:A2:E9:ED:F2:AA:DF:AC:27:99:21:66:8F:CA:4F:C1:38:EC:89:A3:74:45:EC:23"}}},"request":{"raw":"POST /secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: fumbl.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fumbl.xyz/\r\ncontent-type: application/json\r\nContent-Length: 1424\r\nOrigin: https://fumbl.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1424,"data":"{\"route\":\"n9POyFeFG1tUtiSU-z9JOx3n\",\"payload\":\"0hqM-6_N52QB8gIdAyAAFwCpAuYCKwDGAh0AAQIANAMAAO8nhn2XtsKCAWCMNm9wYshg5KAPQmACAAAtEKrWrQTrK7LIZ9tgbGLw6ikwEyaUhmMT-B4mlWS3hkbq_ieVp-N5Ux_fV3SfTxypJtDrlOfcJLYU7aumnLohJqYzxJvI65xy_XJ-hu2PSDidSXX0PtYQwbgp9Bd4Wh7CNGBFO41rkUmpGtaXwstrJgC25Pz6Oha8r308QJzIG6kMLPzLC4VVu3v1Xo2gnMkcD0x8oA1WAJL9GiHKmV0Tvo22dXXxhp2PRCf1SrP96PEyxi-npFZrO9B70J3VFaWEMLJnguLWgc8KEsIMefsXQKy_rysJKbfe5UjK4yQ4X5xPO2fRG9QKXimVlWnaT_cFmUQdPYNW-azo81M435O56emdCbtfOyIDWaIYNTvPxj9w8nE6q3AorivQetQ5I5v9cv-ZE1QuW6cMURgMkOjyGZnMeuwBOMzdcKHZY3cLQl3pujuoFHdUR9SzsQdr8cS1Cxx2KHt7nEyuPaVS4ugI3rnDniEctKxSGAYqiIh4BPcDrI4Fj46tgu4_6Cip_3dMMM33HQ0m1sjVf2PGlzrPPgnkceYE1IMlWQi4qXmB5zGub7NMjUyqkf6UfpJEUq3keZSwHrviSMWee7WE9wSkGmYp_c6n7yqBj9lYmOuEgvyiUNm5BlnNphxRkh6xn1z36f7RQF53_z7JZed5zOAQP-uY5SudNTgKtVG575L98mjWz-6AMWesCVGjD7dtdwUSFnsoNbjERA2kHG3cX8Uxs6IwtUsa1HHWoAArhlC4cQVWy3v1uz3iRug421eYavNybKaAe0dCohi4w2T9vX4M20yVQSbLVhwfrfy5JIcF0YCFgSKhSdnWR0PP6yyHIsSVXy0TamXRf3a0Oo58vpxtSQw9TCMR5xThLd2oGiVayHNb3g6nQ8BnhLF5kq_lNPfeTvnfHXr5l6LF04ewMEr4_qo9A6NmvITPCEwHFxZ0WVLTY1OvppzJ_VkMVSHnmK_ew9VTRazgwwppFSd-_xXA_YZHlo7TY2y8pQ_o0TCZMzIITRzZ-R2e9jAgIg2jHhAJrEE6imORaX0XKwF3B40HxDiyoiYhBdvungURwqzxdPgVBsODgQN2F1MB2xRpu0-cKXwOUyVMh1Zq5k8mtF2pk3TZBcVJDhGCL8UQ\",\"challenge\":\"eyJpZCI6ImlaYzNlUlVoM1A4SjFlMzB0YURSS3ciLCJub25jZSI6NTM1LCJoYXNoIjoiMDBhOTMzMDJkZTIwOWIzM2NhM2Y2YzcyMzY2ZjY0N2ViM2YxN2RkYmJhYTQxYjVhYTY1MzcyZjhhYzBiMWEwOSJ9\"}"}},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Sat, 14 Feb 2026 02:37:16 GMT\r\nserver: cloudflare\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"a-bAsFyilMr4Ra1hIU5PyoyFRunpI\"\r\nx-ratelimit-limit: 10000\r\nx-ratelimit-remaining: 9999\r\nx-ratelimit-reset: 1771036695907\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 02/14/2026 02:37:16\r\ncdn-edgestorageid: 883\r\ncdn-requestid: 10cfe82a7078a2a8bcde517226899d35\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4yFkSfFLnEL4HhRf51T1L5qa4%2FCexLXaltRGqe7t6sH494UQNvrV7R9Knxa%2F5Ix3hgSGEi2eaaZMvCB%2FIs8pPDAdEsLiIbP4Cw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd92ebd484d8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T15:51:54.234848Z","times_seen":17873320,"resource_available":true,"data":null}},"time_used":847,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":843,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fumbl.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fumbl.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fumbl.xyz/wallets/glow.svg","fqdn":"fumbl.xyz","domain":"fumbl.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fumbl.xyz/","date":"2026-02-14T02:37:13.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fumbl.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 02:47:22 GMT","end":"Tue, 12 May 2026 03:45:45 GMT"},"fingerprint":{"sha1":"67:49:1F:91:7B:32:D7:13:DF:91:F2:5C:75:F1:59:87:FC:0C:78:7E","sha256":"00:F7:83:70:61:95:1B:66:AB:A2:E9:ED:F2:AA:DF:AC:27:99:21:66:8F:CA:4F:C1:38:EC:89:A3:74:45:EC:23"}}},"request":{"raw":"GET /wallets/glow.svg HTTP/1.1\r\nHost: fumbl.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fumbl.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 02:37:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 12 Feb 2026 01:36:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 84130\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kH0AkvpYr%2BiXdf9iNkI0CgXxh7repNCXuFjFgCIzSQ0sbolmws5PBM4mgyU%2BbFxtIj%2BA8zSPAH0nc8kkFAaQMnVj5UkbeW1vpw%3D%3D\"}]}\r\netag: W/\"698d2ea8-3d9\"\r\ncontent-encoding: br\r\ncf-ray: 9cd92eb0cca68deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":985,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"814ba8a4ceb32ef3a19ba6ca7f48d609","sha1":"01dd824ea04088803e5e0af1ddc287c481c70367","sha256":"763bba4ab187846c93478fdbf440c563019dbeddcf26e3a0704c4866b512c5a3","sha512":"e9aa65b8dfc33441a338ecebb4d4a7b9d379f6cd2ba491df54c9cbc8609485d9a9436dcfdb8f55ac79ba0a28623f50e18505929628f450b687a382bd5a3057a7","ssdeep":"","tlshash":"b4110eb5934d69e5e745cba28629dc792a0124b7bb97cda882d0e604356818630adce0","first_seen":"2026-02-13T03:15:33.505705Z","last_seen":"2026-02-14T02:37:39.344507Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fumbl.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fumbl.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fumbl.xyz/wallets/okx.svg","fqdn":"fumbl.xyz","domain":"fumbl.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fumbl.xyz/","date":"2026-02-14T02:37:13.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fumbl.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 02:47:22 GMT","end":"Tue, 12 May 2026 03:45:45 GMT"},"fingerprint":{"sha1":"67:49:1F:91:7B:32:D7:13:DF:91:F2:5C:75:F1:59:87:FC:0C:78:7E","sha256":"00:F7:83:70:61:95:1B:66:AB:A2:E9:ED:F2:AA:DF:AC:27:99:21:66:8F:CA:4F:C1:38:EC:89:A3:74:45:EC:23"}}},"request":{"raw":"GET /wallets/okx.svg HTTP/1.1\r\nHost: fumbl.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fumbl.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 02:37:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 12 Feb 2026 01:36:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 84130\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xQHbRvGisbHQhoymeF%2FmYVRyOW6Nwz2Q8U7saJlRW1fzPX1nLk%2Bdu1r06%2Bcf2X3ETVbLkFvs5t4z7BsYapH5kghFtGsBQO3ceQ%3D%3D\"}]}\r\netag: W/\"698d2ea8-f4\"\r\ncontent-encoding: br\r\ncf-ray: 9cd92eb0cc968deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":244,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a54f71872d07a99c6051baf5f94e6f9c","sha1":"0af1e92f558af8e1048cc7e9f3f4cdd43eedb1c5","sha256":"ba7689d16a8a5b2916be3f25bc407f88ba0213ce02d569452462fcbb82df68c4","sha512":"85144066cbd2b0a284dd9f908423b5527c8527f8968d1566af8b8d10d15a218755c854bbac094d3f602297487580b895450d5e6a1ece1a8947e8bbe5dfc69335","ssdeep":"","tlshash":"f1d0a7f9411c5534ea44893022f86faf209a30ffa7cc806989d3120678414872b1caab","first_seen":"2026-02-13T03:15:33.491581Z","last_seen":"2026-04-21T09:24:33.239089Z","times_seen":7,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fumbl.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fumbl.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fumbl.xyz/wallets/ctrl.png","fqdn":"fumbl.xyz","domain":"fumbl.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fumbl.xyz/","date":"2026-02-14T02:37:13.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fumbl.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 02:47:22 GMT","end":"Tue, 12 May 2026 03:45:45 GMT"},"fingerprint":{"sha1":"67:49:1F:91:7B:32:D7:13:DF:91:F2:5C:75:F1:59:87:FC:0C:78:7E","sha256":"00:F7:83:70:61:95:1B:66:AB:A2:E9:ED:F2:AA:DF:AC:27:99:21:66:8F:CA:4F:C1:38:EC:89:A3:74:45:EC:23"}}},"request":{"raw":"GET /wallets/ctrl.png HTTP/1.1\r\nHost: fumbl.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fumbl.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 02:37:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 13278\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 12 Feb 2026 01:36:40 GMT\r\netag: \"698d2ea8-33de\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oFon41l1NFl9GnDDOaw7MWOzAlnf0voHh8F8usgAtWHno%2B5jASOxO2mW33zNkN38eeQ63GecbUvcdJ2ati7TgJjElzlh1ZnK1A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd92eb0cca58deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13278,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"c7e9b1f95d4ce4f014acb0c7fec29a12","sha1":"d4d451127e2b6d058cca1150dfaee05f30232718","sha256":"960560d80280584e553ad903664b5190a1597f8faab60f6374a96579ca9b3184","sha512":"9de04f4d95a5b8a89a5ac5733c647bcc9d29ae5ababb2851f7a4e21491c31786e80e75d15506dccd86d29c992ec1d884d1f41e391c982d6f0661c553db2dd8b9","ssdeep":"192:LSSl8VxH+NQCtvALEu+Vln9Yq4d2PN6ddeFGAUkTLcd2cxaKLvy:G5H+NQ+YAzp9zjTLcfvy","tlshash":"b652091399009ad2f61c92e8fe161da86f461b0df9973dfb14260fcb7a50a364c8a17d","first_seen":"2026-02-13T03:15:33.493321Z","last_seen":"2026-02-14T02:37:39.346609Z","times_seen":2,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fumbl.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fumbl.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fumbl.xyz/script.js","fqdn":"fumbl.xyz","domain":"fumbl.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fumbl.xyz/","date":"2026-02-14T02:37:13.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fumbl.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 02:47:22 GMT","end":"Tue, 12 May 2026 03:45:45 GMT"},"fingerprint":{"sha1":"67:49:1F:91:7B:32:D7:13:DF:91:F2:5C:75:F1:59:87:FC:0C:78:7E","sha256":"00:F7:83:70:61:95:1B:66:AB:A2:E9:ED:F2:AA:DF:AC:27:99:21:66:8F:CA:4F:C1:38:EC:89:A3:74:45:EC:23"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: fumbl.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fumbl.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 02:37:13 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 12 Feb 2026 01:36:40 GMT\r\netag: W/\"698d2ea8-78bd\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 84130\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qnML6jPy9XZgGV0PwZZHw6OsZdypb2ufVtl8BJeIRNdvSyufHu%2BkaAlWXESoHv2HbXkvkunc3Y%2FsY6NWwTmGIjwDNF67rtKL2w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd92eb0ccb58deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30909,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"2d19bd3396660da1f38ed6be0c55cdcb","sha1":"e3e5f5ad17330468706e8d65fef29b575c81e8c7","sha256":"2e1b293750a9cc3e853f1ed1ccecfd351d638ef0370aa6b0c23ff18dde0437a3","sha512":"795c45fff92e493ddf87dd8c632e59aed5a3a686cc2ffe0cc795f0a6bbb587c936c3f0e9c72ad643eb8865339cfb66f8a2398be8117e2abbfba43f79374298d1","ssdeep":"384:DebEnp0dIelWm4BKnzNOGMfKrV0XK93iMiiRaPadQDa:FmMPfKrV0XdJadca","tlshash":"fad2a32abaf3353154b331ff67afa609352060431805cd043e5cd644afe5ea99bb7ad8","first_seen":"2026-02-13T03:15:33.499042Z","last_seen":"2026-02-14T02:37:39.347603Z","times_seen":2,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fumbl.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fumbl.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.coingecko.com/api/v3/simple/price?ids=solana\u0026vs_currencies=usd","fqdn":"api.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"172.66.172.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fumbl.xyz/","date":"2026-02-14T02:37:14.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.coingecko.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 16:44:52 GMT","end":"Mon, 11 May 2026 16:44:51 GMT"},"fingerprint":{"sha1":"1F:5F:12:56:B1:34:64:12:80:6B:67:59:35:2A:CE:95:F3:D8:3D:8C","sha256":"9C:17:E8:92:94:2F:13:17:DD:1C:34:CC:07:6C:6F:F0:22:8F:1C:89:7A:65:6A:38:C6:3B:40:73:96:D6:9F:C2"}}},"request":{"raw":"GET /api/v3/simple/price?ids=solana\u0026vs_currencies=usd HTTP/1.1\r\nHost: api.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fumbl.xyz/\r\nOrigin: https://fumbl.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 02:37:14 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, PUT, DELETE, GET, OPTIONS\r\naccess-control-expose-headers: link, per-page, total\r\naccess-control-max-age: 7200\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: max-age=30, public, must-revalidate, s-maxage=60\r\naccess-control-request-method: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: gzip\r\netag: W/\"77f1e57d72209c1bac8fe5136921839c\"\r\nx-request-id: f3729e32-1c8f-4908-8ce9-bce6129c2545\r\nx-runtime: 0.003782\r\nalternate-protocol: 443:npn-spdy/2\r\ncontent-security-policy-report-only: script-src https://accounts.google.com/gsi/client; frame-src https://accounts.google.com/gsi/; connect-src https://accounts.google.com/gsi/;\r\nstrict-transport-security: max-age=15724800; includeSubdomains\r\ncf-cache-status: EXPIRED\r\ncf-ray: 9cd92eb32ce249c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"39d87c81af2be482f0125ab615a6935c","sha1":"6cc7a922a49161893a83e4aba7d78de84be46e89","sha256":"94fbc19f02b574fed31857c9ac32960540cc0bccc88af17e329baa542adedc91","sha512":"45b7a4d067f58f0502fc9be3f392a28eeadf6d75aec69d815bbe665423c1781e9ab3da766e826667f19a8890d65152aec5dc066cbeb552a7c34dc66d7cf74586","ssdeep":"","tlshash":"3b70002800e00e2b0c00002308308208c2820022222c0a0c0c0ca020088c28a22808e8","first_seen":"2026-02-14T02:37:39.348876Z","last_seen":"2026-02-14T02:37:39.348876Z","times_seen":1,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":38,"dns":20,"connect":1,"send":0,"wait":159,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fumbl.xyz/favicon.ico","fqdn":"fumbl.xyz","domain":"fumbl.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fumbl.xyz/","date":"2026-02-14T02:37:14.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fumbl.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 02:47:22 GMT","end":"Tue, 12 May 2026 03:45:45 GMT"},"fingerprint":{"sha1":"67:49:1F:91:7B:32:D7:13:DF:91:F2:5C:75:F1:59:87:FC:0C:78:7E","sha256":"00:F7:83:70:61:95:1B:66:AB:A2:E9:ED:F2:AA:DF:AC:27:99:21:66:8F:CA:4F:C1:38:EC:89:A3:74:45:EC:23"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: fumbl.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fumbl.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 02:37:14 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 12 Feb 2026 01:36:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 84130\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qkr5c4UemsHsKiXKcm1INOKLPYWkMZzRAK1BncaQR96CBFqRIRPHt76wddJ0B0MD51roWcC2fxXT%2FiIAEz5wT8TcpPlXFh0Qrw%3D%3D\"}]}\r\netag: W/\"698d2ea8-253a\"\r\ncontent-encoding: br\r\ncf-ray: 9cd92eb4fb5e8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9530,"size_decoded":0,"mime_type":"image/x-icon","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"d75ac439a700fc6b89ede343b991a82b","sha1":"0c1f6d4c97567dc466fec265ed44f90f57dbd9e8","sha256":"2f5e335d697608758703727614d2861615a367ecb9927265bdfde9f374dce820","sha512":"bae868d7ece856e59f6f55f14910a2b5c2af7b8655c46b7354e300705d33cdcb24f1335b274461754aaf458ff4d0ae9ef694b0292f8c071e2464c0ab37536189","ssdeep":"192:LSOuTxFIa4a8v5niy5WtDENYa8FxZImS+tkxvi:GOmxFIa8vlpwhqYa8FDIF+tUvi","tlshash":"1312f593cc085553aa3423bd79531fbe21ae3e08a6020bf726312ce6f874d748d4f968","first_seen":"2026-02-13T03:15:33.501936Z","last_seen":"2026-04-02T15:14:43.042494Z","times_seen":5,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fumbl.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fumbl.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=JetBrains+Mono:wght@400;500;600;700;800\u0026family=Space+Grotesk:wght@300;400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fumbl.xyz/","date":"2026-02-14T02:37:13.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=JetBrains+Mono:wght@400;500;600;700;800\u0026family=Space+Grotesk:wght@300;400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fumbl.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Feb 2026 02:37:13 GMT\r\ndate: Sat, 14 Feb 2026 02:37:13 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18870,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"63f9dd9f449d4a227f4d22682573a612","sha1":"be9523153083223af6ab9b184cde52c3dbe189cd","sha256":"8000ea228de0657bcd2b821199d0acdb306db1b3350d56f631b28e20f021c139","sha512":"690d4682d2af871f87e001110c22b373ca50362d08415513cf7d184a24b415adc5fc627a8dae8ebd4007c5c736210e17b36b13401b89cad8f158185e4fed248c","ssdeep":"192:uG+7p3ZAXYjG9Up3qnXfmG0dp3HKXCFGbep3g5XxAGyvp3lcXEWcGGDZx/GiZC4g:fOGC6CmOK22KDgRt","tlshash":"4082eee1041b9404ea472cc633cebe35bd8ea1066081d9b9dfff18989daac72233475d","first_seen":"2026-02-13T03:15:33.479048Z","last_seen":"2026-05-20T19:10:16.98333Z","times_seen":13,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":130,"dns":0,"connect":22,"send":0,"wait":35,"receive":0,"ssl":120},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fumbl.xyz/wallets/bybit.svg","fqdn":"fumbl.xyz","domain":"fumbl.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fumbl.xyz/","date":"2026-02-14T02:37:13.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fumbl.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 02:47:22 GMT","end":"Tue, 12 May 2026 03:45:45 GMT"},"fingerprint":{"sha1":"67:49:1F:91:7B:32:D7:13:DF:91:F2:5C:75:F1:59:87:FC:0C:78:7E","sha256":"00:F7:83:70:61:95:1B:66:AB:A2:E9:ED:F2:AA:DF:AC:27:99:21:66:8F:CA:4F:C1:38:EC:89:A3:74:45:EC:23"}}},"request":{"raw":"GET /wallets/bybit.svg HTTP/1.1\r\nHost: fumbl.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fumbl.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 02:37:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 12 Feb 2026 01:36:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PNrjpGS%2BjlFqdBQvUuAeoq9XzlBnbM7TX9lytjAySRYS0po7pfuJfjBIDxLdIdMjgJIFdg40WGHE%2F8WUyhgBbHr%2FTg5At9bDwQ%3D%3D\"}]}\r\netag: W/\"698d2ea8-5d4\"\r\ncontent-encoding: br\r\ncf-ray: 9cd92eb0cc9f8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1492,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"13cef3e78d93a17c02e017df7e907264","sha1":"267b96360d58fc664d6db963ae23e570a86e452b","sha256":"79f7e4540d4ec17e7288a18f0fac9a1c9d991a7014a3f85368e19a5e13064452","sha512":"12e883d4fb43bd0a42aa5c3fceb02b4860f3fb685fb1f27a8bb47781268aa04f27e60c0c3f25a8c5897b24448cb12ee29730002200cdd5b44b9cedef110ec162","ssdeep":"","tlshash":"4931d0ca23dc7bd0a905e7f5c405a8b0abdb30f91b9083c88a400f92b7615690e8eec4","first_seen":"2026-02-13T03:15:33.525026Z","last_seen":"2026-02-14T02:37:39.351852Z","times_seen":2,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fumbl.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fumbl.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fumbl.xyz/wallets/hotwallet.png","fqdn":"fumbl.xyz","domain":"fumbl.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fumbl.xyz/","date":"2026-02-14T02:37:13.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fumbl.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 02:47:22 GMT","end":"Tue, 12 May 2026 03:45:45 GMT"},"fingerprint":{"sha1":"67:49:1F:91:7B:32:D7:13:DF:91:F2:5C:75:F1:59:87:FC:0C:78:7E","sha256":"00:F7:83:70:61:95:1B:66:AB:A2:E9:ED:F2:AA:DF:AC:27:99:21:66:8F:CA:4F:C1:38:EC:89:A3:74:45:EC:23"}}},"request":{"raw":"GET /wallets/hotwallet.png HTTP/1.1\r\nHost: fumbl.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fumbl.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 02:37:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 14197\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 12 Feb 2026 01:36:40 GMT\r\netag: \"698d2ea8-3775\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 84130\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tCc9t6VES5ATyDK03jEg4YJHhr6CoGFtwnnLgZcuvKQYiH3ckXE8mu46n91T%2FoVm4LqgOm0Om%2FlDPW4h%2FDbKN6HL53xg0WRkag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd92eb0ccb28deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14197,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"ebee8444b4e5b3c8077a83f99df73ff3","sha1":"62a7211736a32800bec3f72f17c37e53ee78e49c","sha256":"83a5a0b9cf69d8bc5dca02bf62dc248e2ea53dfc4001b180403e1386ba97a727","sha512":"e94a6d8745f895d09d073a38d09c4b1faa2591138e651df8f79adf1422d11c8fc177414437d1b3c1b8c540fb8097f77d4ee05613711d151f264cf7b2d1741bb7","ssdeep":"192:LSopdgxJpVBgkTkJ5qSofQkJ/8PB6K+BLLDcf7XqvU/9m72spYEf2hM3FtIMqPe:GoYJPdq0f3Z8p6K+VDcfGv7VpmmtIMqW","tlshash":"2d5242039d199797a51d87ecbe035e6c7f4a271cac822aff04325dcb3e546220d9e42e","first_seen":"2026-02-13T03:15:33.51018Z","last_seen":"2026-02-14T02:37:39.352734Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fumbl.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fumbl.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fumbl.xyz/","date":"2026-02-14T02:37:14.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://fumbl.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31432\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 03:09:36 GMT\r\nexpires: Sat, 13 Feb 2027 03:09:36 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:52:37 GMT\r\ncontent-type: font/woff2\r\nage: 84458\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31432,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31432, version 1.0","md5":"b636a65da4f00129f08c7df6e5dd75ac","sha1":"4f27206c4b1caf8b7805597fcbc6922ff5805daa","sha256":"83c005d49d8a6a50474c73a5a36ac0468076e9c4a29da7bdb14995d80560a5be","sha512":"77ad92edddd5fc9ce47b8b329cf41b2fec895ea01a97b9122df3766163998fadcbe47c868631208636c4e587136ddd390d38e3e9da2743758c9da2c77a66f859","ssdeep":"768:a8+AGQwBrw24YHLKRG5lBF260n1e5vhjJKWWAD95I9Puggtx:B+AiBrw2fHL+GyvYtYADM9Pug0x","tlshash":"52e2f274ea41ca57676335ed4203e99d015fa318ebf6fd40869ccad2a506bcb7c4033a","first_seen":"2024-10-21T03:03:54.505463Z","last_seen":"2026-08-13T15:13:30.018741Z","times_seen":12773,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":38,"dns":3,"connect":7,"send":0,"wait":15,"receive":3,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fumbl.xyz/","fqdn":"fumbl.xyz","domain":"fumbl.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T02:37:13.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fumbl.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 02:47:22 GMT","end":"Tue, 12 May 2026 03:45:45 GMT"},"fingerprint":{"sha1":"67:49:1F:91:7B:32:D7:13:DF:91:F2:5C:75:F1:59:87:FC:0C:78:7E","sha256":"00:F7:83:70:61:95:1B:66:AB:A2:E9:ED:F2:AA:DF:AC:27:99:21:66:8F:CA:4F:C1:38:EC:89:A3:74:45:EC:23"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: fumbl.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 02:37:13 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 12 Feb 2026 01:36:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MxnROZGhzGBbgD%2BnLBHQ2rFXyoYnmbP%2BWuiOSMkpP9e3tD%2FDazv8McAJ02skiO%2B31oM1xxAQjeMThnDoFFfN1zxrddo%2BQvbZmw%3D%3D\"}]}\r\nage: 84130\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9cd92eaf88aa35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14025,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"dfcd3dbb5fbf91d71c40ba80d5b9db49","sha1":"55df2a13392e75ce06c13af27419653b5120b599","sha256":"73e7213d2e4c431204f909de1d5a2fac8a246e4e44734ae6834fad76197542f3","sha512":"158bdd65e2501148d08b316677da0d80b38511809a119e85ef2da896c00e58b3e74c50c8e5845869d5d58fb167c410172667f7700a5c19a21c09acc53b5fa931","ssdeep":"192:/N+atAxFrstmaju0PR/X4fQMCufSV1v7TKrOL9rc1T0Mrj5r:lsxFrstmauCufSV1v7T1L9rcB0Mrjh","tlshash":"f85221a0b1f87b73025b91d7b5a3af223dd28143db592110b6fc99d29fe6c42ce17066","first_seen":"2026-02-13T03:15:33.51251Z","last_seen":"2026-02-14T02:37:39.353674Z","times_seen":2,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":114,"dns":96,"connect":1,"send":0,"wait":12,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fumbl.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fumbl.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fumbl.xyz/wallets/coinbase.svg","fqdn":"fumbl.xyz","domain":"fumbl.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fumbl.xyz/","date":"2026-02-14T02:37:13.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fumbl.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 02:47:22 GMT","end":"Tue, 12 May 2026 03:45:45 GMT"},"fingerprint":{"sha1":"67:49:1F:91:7B:32:D7:13:DF:91:F2:5C:75:F1:59:87:FC:0C:78:7E","sha256":"00:F7:83:70:61:95:1B:66:AB:A2:E9:ED:F2:AA:DF:AC:27:99:21:66:8F:CA:4F:C1:38:EC:89:A3:74:45:EC:23"}}},"request":{"raw":"GET /wallets/coinbase.svg HTTP/1.1\r\nHost: fumbl.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fumbl.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 02:37:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 12 Feb 2026 01:36:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 84130\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EvX4QYtBqIHw%2B0wrML%2FjLc0f5z95aoUbt%2Fv38V3h9U%2BHsMtEeKlVNGMM7gEc4Q23kj%2BGE6u%2BBT378nOYXxGNfbYIps8fyeiREw%3D%3D\"}]}\r\netag: W/\"698d2ea8-2b0\"\r\ncontent-encoding: br\r\ncf-ray: 9cd92eb0bc8c8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":688,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8b19d46dbd5551436bef08503a7bf79d","sha1":"13c20db0edcc13d32232d7af99db49d4305a2d20","sha256":"3543351df15b96fad90f400a49001bb67a35824de5868fd8d3ecc9d07bcc4d57","sha512":"0d307dfcb32411ef114e15734ca0bcb7d265be1313502d3ca5d04176589a83a3352eba8bef01c402a5538591e9b0b1fba96a32347c26b3bdaffb81ce10eab8a9","ssdeep":"","tlshash":"7501479b23fcb5c6760643bb0ba83a66147f30b41b148e7685e023d09704d390b60aa0","first_seen":"2026-02-13T03:15:33.513435Z","last_seen":"2026-04-21T09:24:33.209306Z","times_seen":8,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fumbl.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fumbl.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fumbl.xyz/wallets/trust.svg","fqdn":"fumbl.xyz","domain":"fumbl.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fumbl.xyz/","date":"2026-02-14T02:37:13.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fumbl.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 02:47:22 GMT","end":"Tue, 12 May 2026 03:45:45 GMT"},"fingerprint":{"sha1":"67:49:1F:91:7B:32:D7:13:DF:91:F2:5C:75:F1:59:87:FC:0C:78:7E","sha256":"00:F7:83:70:61:95:1B:66:AB:A2:E9:ED:F2:AA:DF:AC:27:99:21:66:8F:CA:4F:C1:38:EC:89:A3:74:45:EC:23"}}},"request":{"raw":"GET /wallets/trust.svg HTTP/1.1\r\nHost: fumbl.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fumbl.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 02:37:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 12 Feb 2026 01:36:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 84130\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Kjf65iY2bYC%2Fq%2FIiTC%2F0RZdUOEO0q1UDJ4gndyi6Y5zqLvx36FrL3PA%2BqNNXKsGfwTruhCCUN3lj0HC%2FZcOHlfmgMDJOEVJ%2BA%3D%3D\"}]}\r\netag: W/\"698d2ea8-2fa\"\r\ncontent-encoding: br\r\ncf-ray: 9cd92eb0bc8f8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":762,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e56d272e8cd4119d2e3d897bce307402","sha1":"9be87f3d7df5750aa242f80a6d173255075f0590","sha256":"094ae18434a907d5af0289b5854b3ff8051edfb54a93f72de811c11f0aa6b829","sha512":"4f3fd7cb76cee3212227e50c3708ad7c18ab2c661d580dff63bac0784ad12521c5369db7034883ee9aadafcc599456f438b1145eae5b6b564437bc6e181fa10c","ssdeep":"","tlshash":"31019017db18ee37d989c24cd019e975621a52ab6dc6c355f1a0ef0f28190d22c0e7d1","first_seen":"2026-02-13T03:15:33.495448Z","last_seen":"2026-06-19T13:21:36.664055Z","times_seen":8,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fumbl.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fumbl.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fumbl.xyz/wallets/magiceden.png","fqdn":"fumbl.xyz","domain":"fumbl.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fumbl.xyz/","date":"2026-02-14T02:37:13.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fumbl.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 02:47:22 GMT","end":"Tue, 12 May 2026 03:45:45 GMT"},"fingerprint":{"sha1":"67:49:1F:91:7B:32:D7:13:DF:91:F2:5C:75:F1:59:87:FC:0C:78:7E","sha256":"00:F7:83:70:61:95:1B:66:AB:A2:E9:ED:F2:AA:DF:AC:27:99:21:66:8F:CA:4F:C1:38:EC:89:A3:74:45:EC:23"}}},"request":{"raw":"GET /wallets/magiceden.png HTTP/1.1\r\nHost: fumbl.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fumbl.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 02:37:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 19127\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 12 Feb 2026 01:36:40 GMT\r\netag: \"698d2ea8-4ab7\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O9n0Mz%2B95CpJD3RO5YyC4ATGC%2FWGcNFYyRR6LLX2SwGzvxlU7Gyks6m%2BREHZ4TvBrxQlT2mpmHjs3iJs25w43jm1wrySEpIRMg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd92eb0bc928deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19127,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"1afae836c1dbfc1e3949a53a5e7f724b","sha1":"9ff4c8081193dae751ad4e8b9d9bc57a467ea029","sha256":"8055824009d4acb782115d1eb8b513736a7ef23508ab2be2f3be62367afd661d","sha512":"8c88eea650db831919f5b98a2338b87152e816a34995ec1ec58413ad1b690f5705009bcdf7d5693e23795b4a1451344ea3a7bc7f466e8a63c6735db1569b91eb","ssdeep":"384:GjNYnrkPd5YXB9RjSf4ploY6uB1+RnsMr+Y9cuLYPi1STMscih0Zq7gZFI:GZYYPd5YXxfloHBr+yc01SAs12Z1y","tlshash":"f1829d039d5d96c2d64523ddbe872a9de6042f28be8531ba0423cfe77d30aa58c8c43d","first_seen":"2026-02-13T03:15:33.488332Z","last_seen":"2026-02-14T02:37:39.356683Z","times_seen":2,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fumbl.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fumbl.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fumbl.xyz/secureproxy?s=%2Fipfs%2FfAU2sSW45IWqvavf2UqD8w22b8abd29f48da8a9a7f33cf602daabf%3Ft%3D1771036634024","fqdn":"fumbl.xyz","domain":"fumbl.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fumbl.xyz/","date":"2026-02-14T02:37:14.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fumbl.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 02:47:22 GMT","end":"Tue, 12 May 2026 03:45:45 GMT"},"fingerprint":{"sha1":"67:49:1F:91:7B:32:D7:13:DF:91:F2:5C:75:F1:59:87:FC:0C:78:7E","sha256":"00:F7:83:70:61:95:1B:66:AB:A2:E9:ED:F2:AA:DF:AC:27:99:21:66:8F:CA:4F:C1:38:EC:89:A3:74:45:EC:23"}}},"request":{"raw":"GET /secureproxy?s=%2Fipfs%2FfAU2sSW45IWqvavf2UqD8w22b8abd29f48da8a9a7f33cf602daabf%3Ft%3D1771036634024 HTTP/1.1\r\nHost: fumbl.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fumbl.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 02:37:14 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: max-age=2592000\r\netag: W/\"b188a-62zRhOvBUz5SIBiEH/91puD3lzU\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=pzfIHJz4QuuveOgwPLFqjg.js\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 02/14/2026 02:37:14\r\ncdn-edgestorageid: 883\r\ncdn-requestid: f4930b86d19814607641678100ca6b02\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h7oWy1KzUgbJICh%2BTNi38wYjf6ODMhQS6%2B0phAJPMcOJi%2Bqoc1qCt74P9AaRtghDv3V0HAUxeWqMIJtNlX%2FAoAYiR3XnL%2BbeJA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd92eb2af858deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":727178,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"eea2e99548bf1b2e175f94c41c7ee947","sha1":"eb6cd184ebc1533e522018841fff75a6e0f79735","sha256":"64d3938f7afcaa7581e08902522c18c0d004394feaf9c51b79ca8858b4805d15","sha512":"503094fd8a0be9ddfbcd8095eb772442fd6ff6ef763083ef4b35f44f8c0e442dbba5ae54f2c56897e3a18cfb216b195d7422f822fba72730abc4d8f44246d705","ssdeep":"6144:/ujB8gltIeTM5/S8g6zRh5gDAnIHQHDk2tKM4aaFPjv8DjgYf0PfcfGfr7lFcuUv:YhltVM/g61slHH2tKBhv8ycKMf","tlshash":"8ff43cceb78d1d7340a263e757b3d82eff880eaa854b595057c29c9122c4fa351e8d9c","first_seen":"2026-02-14T02:37:39.358529Z","last_seen":"2026-02-14T02:37:39.358529Z","times_seen":1,"resource_available":true,"data":null}},"time_used":796,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":618,"receive":178,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fumbl.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fumbl.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fumbl.xyz/wallets/backpack.svg","fqdn":"fumbl.xyz","domain":"fumbl.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fumbl.xyz/","date":"2026-02-14T02:37:13.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fumbl.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 02:47:22 GMT","end":"Tue, 12 May 2026 03:45:45 GMT"},"fingerprint":{"sha1":"67:49:1F:91:7B:32:D7:13:DF:91:F2:5C:75:F1:59:87:FC:0C:78:7E","sha256":"00:F7:83:70:61:95:1B:66:AB:A2:E9:ED:F2:AA:DF:AC:27:99:21:66:8F:CA:4F:C1:38:EC:89:A3:74:45:EC:23"}}},"request":{"raw":"GET /wallets/backpack.svg HTTP/1.1\r\nHost: fumbl.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fumbl.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 02:37:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 12 Feb 2026 01:36:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 84130\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=btbdSrPWrSjvQuk8jD4BLfcGDFBglhl08bdNUBUnB5YMkcDxwQfjVPlCCGzSKe6J%2FKBLIOyzfROSR66WTpvMcMOUa36GCGcuuA%3D%3D\"}]}\r\netag: W/\"698d2ea8-3fd\"\r\ncontent-encoding: br\r\ncf-ray: 9cd92eb0bc908deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1021,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d0447e0bf884abbf95266db27e2345e6","sha1":"d8ed0400d69711de165325565cafc1db8b853185","sha256":"9f60ae969abb0d0bb5ea7297b75859f52053d8cc319bc2d1e21e9634043b4759","sha512":"dbb708dc117fb2f5b6ec10419e92235c7b13dcd290b104486de99baf5b7a2a3cf5716b5ba79aa49515d1a1b1294c602c7a62493157c39be578e40da9000bb462","ssdeep":"","tlshash":"6011ccb275ca97f0dc468f39ca098cf9a87a307db7a5cbeda5e224b12630050488cc90","first_seen":"2026-02-13T03:15:33.522355Z","last_seen":"2026-04-21T09:24:33.242448Z","times_seen":7,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fumbl.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fumbl.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fumbl.xyz/styles.css","fqdn":"fumbl.xyz","domain":"fumbl.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fumbl.xyz/","date":"2026-02-14T02:37:13.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fumbl.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 02:47:22 GMT","end":"Tue, 12 May 2026 03:45:45 GMT"},"fingerprint":{"sha1":"67:49:1F:91:7B:32:D7:13:DF:91:F2:5C:75:F1:59:87:FC:0C:78:7E","sha256":"00:F7:83:70:61:95:1B:66:AB:A2:E9:ED:F2:AA:DF:AC:27:99:21:66:8F:CA:4F:C1:38:EC:89:A3:74:45:EC:23"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: fumbl.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fumbl.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 02:37:14 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 12 Feb 2026 01:36:40 GMT\r\netag: W/\"698d2ea8-5fee\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rBD5FvMJ7ZRbSOmfx4jSt%2FNuuQFSGiw3zV6NzCSRNRXVmwNKgYQujrdIaTuta28HHgNcBVCfz32iwvA8qkMkQ0busZYxyvrJRQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd92eb0bc858deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24558,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"f1a8fd92458efc6919786d3671a83fdf","sha1":"344bd8a50ce658ae43d409dd2ed739b008b9a908","sha256":"ee919e0a46fa9dd2a7649eef5f97c4d58c43541d17cfe5ac3a51cd8506d96870","sha512":"a581d783ceba8115695864faf9d33d79d6621b4146d8d2017b5b7c4e3bcc18480d300cec700dcaf6fc98efad37f823139bb7dc71633a9334d2157b5f0fc30209","ssdeep":"384:dmsj6wWjUgnQuEc5pPjGcVp0HgdKvCcppRoih/KFBnqcI7OeXGsBxl:dmsj6wcUgnQuEc5xGcVp0HgdKvCuzoif","tlshash":"5cb26648672c24582c2ff459b65b9fbc730ca40c8c0ecb7ca6ef1538afc52646473a99","first_seen":"2026-02-13T03:15:33.507753Z","last_seen":"2026-02-14T02:37:39.360688Z","times_seen":2,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fumbl.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fumbl.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fumbl.xyz/wallets/phantom.svg","fqdn":"fumbl.xyz","domain":"fumbl.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fumbl.xyz/","date":"2026-02-14T02:37:13.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fumbl.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 02:47:22 GMT","end":"Tue, 12 May 2026 03:45:45 GMT"},"fingerprint":{"sha1":"67:49:1F:91:7B:32:D7:13:DF:91:F2:5C:75:F1:59:87:FC:0C:78:7E","sha256":"00:F7:83:70:61:95:1B:66:AB:A2:E9:ED:F2:AA:DF:AC:27:99:21:66:8F:CA:4F:C1:38:EC:89:A3:74:45:EC:23"}}},"request":{"raw":"GET /wallets/phantom.svg HTTP/1.1\r\nHost: fumbl.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fumbl.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 02:37:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 12 Feb 2026 01:36:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r5LcO2oTzueAGocQoSOor1R5aegv%2FZ7IPLKGYczQuCp9KHbC0yVjv2lbZo4dfZJyhIH7uKaAkT2l9hKpgMcx9csTFDXFaoqOow%3D%3D\"}]}\r\netag: W/\"698d2ea8-3dc\"\r\ncontent-encoding: br\r\ncf-ray: 9cd92eb0bc878deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":988,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2f7aa228b5ad2cbbc4abcf0345d386e4","sha1":"314e7f2c9e31325b34e37997c8379cf36f520c5a","sha256":"cb282e1128526f1da613f78a6c04c13884e553f0f717c22d9805b7be2259736a","sha512":"dd73a72174b2a827857cdb986667dc7ec64233c28b8404f436035f74ae1cc900b568e52676a2cb8f0934a0be1c9ad6bc88ff757fe0b1a1b380d639fc4e91bc4d","ssdeep":"","tlshash":"b1119eb4419673d9350a6bf8b56a456bf59e30ba573ccfd89284aec0a926805408fc78","first_seen":"2026-02-13T03:15:33.481947Z","last_seen":"2026-06-19T13:21:36.667518Z","times_seen":9,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fumbl.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fumbl.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fumbl.xyz/wallets/jupiter.png","fqdn":"fumbl.xyz","domain":"fumbl.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fumbl.xyz/","date":"2026-02-14T02:37:13.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fumbl.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 02:47:22 GMT","end":"Tue, 12 May 2026 03:45:45 GMT"},"fingerprint":{"sha1":"67:49:1F:91:7B:32:D7:13:DF:91:F2:5C:75:F1:59:87:FC:0C:78:7E","sha256":"00:F7:83:70:61:95:1B:66:AB:A2:E9:ED:F2:AA:DF:AC:27:99:21:66:8F:CA:4F:C1:38:EC:89:A3:74:45:EC:23"}}},"request":{"raw":"GET /wallets/jupiter.png HTTP/1.1\r\nHost: fumbl.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fumbl.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 02:37:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 12446\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 12 Feb 2026 01:36:40 GMT\r\netag: \"698d2ea8-309e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 84130\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nHvt9CkGc1InqNNq5QR3Niex%2FAERD0gfsT7upIiyVgk2oS4ZZHaMlMWdOM%2BdN1TU5Mq80El161zWhle%2B6bX4BROVj2iEeud4Qw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd92eb0bc948deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12446,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"83a1cc659b95dcdb11918c898d23f978","sha1":"a5cad5e95c9441dd8512b030932db0450066230a","sha256":"32d32bdc84ea761c87beba9ec896a4c31818a6575cc9150478fe8925fd33fbfc","sha512":"8c92d7fab23f8727c518827cb5921b5165317c322205e912f02c2eb649c5d3ba68290299f0de9db736c2a55dd3370d1b8b1611e6b60f8c918faa6d7efeedd86c","ssdeep":"192:LSAJWsInq3OB+QF0EhAVRqXiZXk7VTX77qiJkc4pkrYjETXJycy12cmMkODi0O:GcIntBx05BXklZXG8kfH40O","tlshash":"044239179c199f43e760c3e87e465daa67892a5db48233fd51a3cedb2a24a714c0d0ac","first_seen":"2026-02-13T03:15:33.529469Z","last_seen":"2026-02-14T02:37:39.363172Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fumbl.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fumbl.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fumbl.xyz/wallets/tokenpocket.svg","fqdn":"fumbl.xyz","domain":"fumbl.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fumbl.xyz/","date":"2026-02-14T02:37:13.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fumbl.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 02:47:22 GMT","end":"Tue, 12 May 2026 03:45:45 GMT"},"fingerprint":{"sha1":"67:49:1F:91:7B:32:D7:13:DF:91:F2:5C:75:F1:59:87:FC:0C:78:7E","sha256":"00:F7:83:70:61:95:1B:66:AB:A2:E9:ED:F2:AA:DF:AC:27:99:21:66:8F:CA:4F:C1:38:EC:89:A3:74:45:EC:23"}}},"request":{"raw":"GET /wallets/tokenpocket.svg HTTP/1.1\r\nHost: fumbl.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fumbl.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 02:37:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 12 Feb 2026 01:36:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 84130\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ye2BTpZB581f%2BGzbfsQPYA1y2xYlF9vdu%2FZm1mAIX3kdxPh5EYEP7VtFXSDn69wFxStWFHpdx5P8F3etvX39jkGKQiwHjxgEVg%3D%3D\"}]}\r\netag: W/\"698d2ea8-710\"\r\ncontent-encoding: br\r\ncf-ray: 9cd92eb0ccab8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1808,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"68532d76cbc457c7d07fc485047a0a9f","sha1":"5666e1855cdc1cf55dd77bf1aee813b13d45b4d4","sha256":"36bc6ad22500662c9086ad549863612e53acaa0e23ece0a4d8d2af212cacc9a3","sha512":"c486164650fbad2c6eafde609775a2ba4e26144daf5ed3b92f9e7c60216c98cb98f48d1f7fbe6a1bcc94a4a50f51305694b4e9fd1e47ff558d68145e2da77809","ssdeep":"","tlshash":"c231bce9a1acb2e4e382e7d5d11bd023f14a71f3df5686898662ab4128541b95d4d880","first_seen":"2026-02-13T03:15:33.514377Z","last_seen":"2026-02-14T02:37:39.364255Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fumbl.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"fumbl.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
