{"report_id":"e79e4c18-13ad-4904-a68d-fd8b5c3ef677","version":6,"status":"done","tags":[],"date":"2026-02-14T08:03:09Z","url":{"schema":"https","addr":"mrshrimp.bond/","fqdn":"mrshrimp.bond","domain":"mrshrimp.bond","tld":"bond"},"ip":{"addr":"64.29.17.65","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.mrshrimp.bond/","fqdn":"www.mrshrimp.bond","domain":"mrshrimp.bond","tld":"bond"},"title":"Mr. Shrimp | $MRSHRIMP","dom":{"size":82191,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65446), with no line terminators","md5":"1542b10bbc285a307df43c4f48128235","sha1":"80c22de2d9eef2e505db964abe71b08017fa04e4","sha256":"4bc5487e3f0f772603b3c72ded959091e0c6b39ba954fbe1c0e734dbf42bb1df","sha512":"ed25a7e623101a7e2b35fe335057c9fccb818638b5184bb6d30d22dfa91a9e4cc623b25a6df11f3a63d73800ee7dc4259e8ba88777a99f33c496ae5d50c377e4","ssdeep":"1536:l0DTsfTJzzaPPW76spmeklfdcr4vvbDuhRLa+apflYp:l0czzaPPq","tlshash":"cb8396346301456ea117a7f4f6b1afaca07ec748dd1f8d5cb3ec91a3278bca48e16590","dom_hash":"domhashc8ed9fbe06235176ac3a52288708a16c","first_seen":"2026-02-14T08:03:15.092886Z","last_seen":"2026-02-14T08:03:15.092886Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"mrshrimp.bond/","fqdn":"mrshrimp.bond","domain":"mrshrimp.bond","tld":"bond"},"ip":{"addr":"64.29.17.65","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T08:03:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"mrshrimp.bond","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"www.mrshrimp.bond","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"mrshrimp.bond","ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-01-27","domain_rank":0,"first_seen":"2026-02-14T08:03:11.246226Z","last_seen":"2026-02-14T08:03:11.246226Z","alert_count":1,"request_count":1,"received_data":81089,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.mrshrimp.bond","ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-01-27","domain_rank":0,"first_seen":"2026-02-14T08:03:11.229192Z","last_seen":"2026-02-14T08:03:11.229192Z","alert_count":24,"request_count":24,"received_data":15569881,"sent_data":11049,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.transparenttextures.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-02-12","domain_rank":1483376,"first_seen":"2014-04-11T07:48:17Z","last_seen":"2026-02-13T10:22:31.777026Z","alert_count":0,"request_count":1,"received_data":1356,"sent_data":457,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.mrshrimp.bond/","fqdn":"www.mrshrimp.bond","domain":"mrshrimp.bond","tld":"bond"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-08-12T00:54:03.975708Z","times_seen":221360,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mrshrimp.bond/_next/static/chunks/d702a24e2b6c48fa.js","fqdn":"www.mrshrimp.bond","domain":"mrshrimp.bond","tld":"bond"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5175253ffde993512ffd91c027fbaf3","sha1":"2e4bb6826e9fb3b4f97699df1636acd2ae1ea4ad","sha256":"e5145e1f806082749a14528961fadee162a33a48b2262793c2b682882ae4dd40","sha512":"f0e7b98e6db3308fabe5d02eb777d917f45f64a3d1e463d812046fd00e016e2e742a3317a6473b7d7c1e46f123fe61067801e0785fb545039a0387b9fd94d4f0","ssdeep":"1536:tWFM99WJw52OPYqkRaKJhjqbUqEHqorS2TAOf22fpPYqLBQjJ4hTTV:tlQGkc4jqPEHqiAOfXKgQjqTV","tlshash":"5ed3f7f931d1f4820ba744a6c03f0006f32d4d77289e64a0a3e5ddea756459de1b3faa","size":130895,"data":"","first_seen":"2026-01-27T14:15:38.24344Z","last_seen":"2026-08-09T09:49:33.784058Z","times_seen":632,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mrshrimp.bond/_next/static/chunks/6e9c40de0daa1c08.js","fqdn":"www.mrshrimp.bond","domain":"mrshrimp.bond","tld":"bond"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d96f64ee879025b6563f1c39f6e22cc4","sha1":"b0439120c1030e98bcbddcf3356e00a39b95c956","sha256":"7dbfd0d82764e9816b7db9ded2be9c1948f30cb2b68bca5c752ff8cc45a1161b","sha512":"dd2e27b6f3c26ba9c805918e9331b67ea202da7db59fef296e825150983ba272c2eeea1fe5f68fb0807ff5c9fef55c69def988b5468562621239df17e0522294","ssdeep":"1536:KILlGNdt8OJpjVGLG6ZImDQWA2vgDODPjwakZWRgsjG7TR4l01x9qQuwHRtNglim:Kekvt8OJphGL76uQWJDjCW6PZGFRdX","tlshash":"0d142b997351b959d3db4194d86f4509b33f0ed8ac0e443c72bda8db285048872bbfba","size":195200,"data":"","first_seen":"2026-02-14T08:03:15.13443Z","last_seen":"2026-02-14T08:03:15.13443Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mrshrimp.bond/_next/static/chunks/ff1a16fafef87110.js","fqdn":"www.mrshrimp.bond","domain":"mrshrimp.bond","tld":"bond"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5458632ee5cb3da028baebb11d5f70dd","sha1":"57e264834d3635e52fbbd3d93135842c09ce8525","sha256":"e9786b1305894e4119bb9811a816dac9cf576755596dd989ee15b455749fc35e","sha512":"28ae4e3a3828f99d64b7d4bfc7238d56c9ad910ce267dcb6c01e53be00c88f8a7f024640680d2bd66240a9972322744ee9147883a12ff8c92717c27ebb3fef50","ssdeep":"","tlshash":"63d02b702150f8d84086a4cc8836424bf52928b262fe3895d7ae8cb16174f0c51e1e55","size":282,"data":"","first_seen":"2025-08-20T23:30:20.185011Z","last_seen":"2026-08-11T23:39:12.580743Z","times_seen":26692,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mrshrimp.bond/","fqdn":"www.mrshrimp.bond","domain":"mrshrimp.bond","tld":"bond"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9367a77516038468853c107d32d11425","sha1":"6568834de96773be1d7c9a7145b52c0e1e953672","sha256":"00e5ee1b81f1b4825f4da45e0e2be12971ed6022f98e6c63a4d65ca482b12843","sha512":"388357dc03936bf314b81d2ceea100d8516fa8952ba431a5cc6146c3d3fcf882be2e67d4156f38971eef0ee183a11a05efe4da63e4d44f8482e52491a47dcdae","ssdeep":"","tlshash":"7d21a269f80ef8613d21cd1f11260f3b94e9ec3a4030655db35fc9cc4235c6a53489a2","size":1129,"data":"","first_seen":"2026-02-14T08:03:15.136545Z","last_seen":"2026-02-14T08:03:15.136545Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mrshrimp.bond/_next/static/chunks/turbopack-c09eb1fd0b7bd1d4.js","fqdn":"www.mrshrimp.bond","domain":"mrshrimp.bond","tld":"bond"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cca489dd1585f7e362486749fbb13029","sha1":"304dc2abdb71d53d33a5d7d512b920a6f930bfca","sha256":"665d99a9ba1c6696146e60a968814134cf9e457e1943093de64edb79303392e1","sha512":"cf4f405e02ba6313019e4b087494612e23111941c402093d580f80d032ff23508be7ce8fc6a2e7e6c049665b01be35afdf8f7d27f467274147acfc9b79025ad5","ssdeep":"192:Q74eFn8/Esp1U91EG5T1uCO9ledFMhMJg4W9PZcxkUk1IsiyLxW:Q74e2OvO9len6JZZQLyLxW","tlshash":"8322e7ea33a6f07743af90e6907f4044f1795468145d581c936ce8fa38398ae49e3f27","size":10671,"data":"","first_seen":"2026-02-14T08:03:15.130059Z","last_seen":"2026-02-14T08:03:15.130059Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mrshrimp.bond/_next/static/chunks/ecef2a6275901125.js","fqdn":"www.mrshrimp.bond","domain":"mrshrimp.bond","tld":"bond"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d343c11c634d2eb5075ef7434af182f1","sha1":"bfaf53a0e4ff6085c7ddf159e66cd142a650f5eb","sha256":"f5475e308a2975d8fca598af338bb972db2fbb1b4ee60b2bb18c0a6e2e20fb34","sha512":"e622acd63c036434a1b52e66f13025959c7ecf0dec8ba91942968987ede66f7fb7757068fc140ee0e08089fd8a1c3fef3d449419a379195dd4c74805066c49fb","ssdeep":"3072:tVhLHlPuSSY2UzBRaWcG8TP36kNAHTjWmN6ZXtb967+pB:tVhLHxuSSY2Uz9rH3FSXtb967+pB","tlshash":"07240be83995f6626ab302a710af1803733c252b280d4d60a351fdddb57845eb17bf9e","size":224413,"data":"","first_seen":"2026-01-27T14:15:38.215422Z","last_seen":"2026-07-22T19:29:18.041407Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mrshrimp.bond/","fqdn":"www.mrshrimp.bond","domain":"mrshrimp.bond","tld":"bond"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9c6150c0ca0b9057d70755c7c63fb82b","sha1":"a482100e5d403333885e97d7a91edb87833abbc4","sha256":"0e3d45b208e68fc3415aae177aeeed211b952fdb1180a5a63792bb44b8b776b7","sha512":"03c6847928388743357f23fedd46d6be76d3bb250beee6bbbfdf26fe1688d14d98c63489c52814312ed46082fa55d983d332600e3b56d2df10e9f9daca68f4c7","ssdeep":"","tlshash":"3d51bd3d7404de4bfcae3d69127e9d3a10cd897b43a4deb88688ce100a4647a37d6dc0","size":3114,"data":"","first_seen":"2026-02-14T08:03:15.13795Z","last_seen":"2026-02-14T08:03:15.13795Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mrshrimp.bond/_next/static/chunks/d2be314c3ece3fbe.js","fqdn":"www.mrshrimp.bond","domain":"mrshrimp.bond","tld":"bond"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e189b2054d05a586f4fd6eec2888c203","sha1":"7d92609e0338be85a1f0085efa31f699878f269c","sha256":"a6248517cd3ee53a8186b51c59e1e764e3dc0c512f4acbd50e818f9884663e21","sha512":"1c0e250e62e070ed252776fbd469b27c9c19dc68e695b9e90003b746e3ab6f9c919b39ed1890d581bc0bec54a0b8b2b8a68a415db186d4d278121cbe124a8ad6","ssdeep":"384:735z75Bq9E0m1YmRDQ0cJ3tn79Fg/Ag8qWtOPSNxErV:D5z9BX0ZMOx3ErV","tlshash":"fed2e8717395f9a352db85d9d03a0015f2290d3530ae24b07394dcef368dc89a1fafa9","size":30681,"data":"","first_seen":"2026-01-15T14:11:00.285057Z","last_seen":"2026-08-11T16:52:36.578079Z","times_seen":7161,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mrshrimp.bond/_next/static/chunks/20d1a56625def336.js","fqdn":"www.mrshrimp.bond","domain":"mrshrimp.bond","tld":"bond"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ebc6e0b337b9d229f8337ae8145ba563","sha1":"dfa8cfe52da4b4b75ab01a8578568c1b8429832b","sha256":"4f14fb04c698c6d7ef41671c6ae5862f4780bbbfadcf97f110c7f71b41757ee1","sha512":"8f1cfd53b6364d1c2066ee9ac8745f29ae850bbd7ffe08138400932667fe0675964f158718c4afbe2f83a7ed429f95d561253c6b46d330b2116d1fb2ec381694","ssdeep":"96:VH9JNBo29HlQlFDSoK9p9d4cXM/17brNFSgld2I1t6gI8v2tm5I7ucp0v2NA:Tf9FQl9So84OONbBhUmkjlprO","tlshash":"9dc1c6a972eaf8d1239750d4843f5007f1392e32156ca0e0b396e9f138945dda2b3fe9","size":5763,"data":"","first_seen":"2026-01-21T20:10:59.315966Z","last_seen":"2026-08-08T07:41:03.715153Z","times_seen":316,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mrshrimp.bond/_next/static/chunks/806bdb8e4a6a9b95.js","fqdn":"www.mrshrimp.bond","domain":"mrshrimp.bond","tld":"bond"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f65a26fc967effb4743ebe3c0107142f","sha1":"8eaee9afb9b7fa9ffa437fa6441ec2e04c9e7fd9","sha256":"75dcd02f1ebada9b1e2a59092f8a4f065581c787f19f668d64533d16e3f9031a","sha512":"6afe94efb78439b403be73838091524354bd22a4614df9e307290649d72751980a3bfbeaca3bcf1ccb277c6e204e2117c190dac0b63abda28e1166d7c201e447","ssdeep":"384:K7pbbvCaRAybE+t+cYTuVF3Bo5VDBqgg9BkECoeZoPUE+2l1mbnhxtw6xR:YY+lvr3CVDBqgg9evXZoPUsm7v","tlshash":"3703b6b672d4faa2139340e0843b2017f2690c76116d7470a7e4ccdbb6588dda6bbfd9","size":38872,"data":"","first_seen":"2026-01-16T19:39:37.792192Z","last_seen":"2026-08-11T16:52:36.589882Z","times_seen":1027,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mrshrimp.bond/","fqdn":"www.mrshrimp.bond","domain":"mrshrimp.bond","tld":"bond"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8c371a1b23c199d7ac65ccb8390f8ab8","sha1":"44e8ed0f13885c921a759ebd7643ea3a95f96eff","sha256":"c7653a63eeff58621c1f9e0e84f8ba6f6f92efd3ede1b3290167936907d51d49","sha512":"c1fa31579ef3b8f388f72307d96d63ea5aa1d9aaaf60536f7d237cf42f9f2e6514b8dc5d99561f5dc4bf9d04bd6d3e50af20fc7ddb72ebb61c9cb2e83dcce8ec","ssdeep":"","tlshash":"59b09b64e015fda555b545616525e445226f504d29581450111791551609d141717dc0","size":112,"data":"","first_seen":"2025-10-26T14:54:28.298694Z","last_seen":"2026-08-11T23:43:50.517394Z","times_seen":3200,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mrshrimp.bond/","fqdn":"www.mrshrimp.bond","domain":"mrshrimp.bond","tld":"bond"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ead1170c9dfbf7532937baba62fa5960","sha1":"257de8a3449dba9cf75d12f22dd599eb1918daba","sha256":"a02adeac656735dc917fa4ff254de086511dec279a4898e554ef22a308af0ead","sha512":"607a993ca2896b8cfccb41ceb33f318ba2535d8f92b191f7c51b24f2477728654abcd002cd7b2d64c5e41eafca6342802b5342c8d2e0df0550e47d7ebfd765fe","ssdeep":"","tlshash":"8fc08090cc42cc1dc6660f361c3b1c3521ddd9b4074555469dd5d9381985b3105b5d9d","size":177,"data":"","first_seen":"2023-08-13T20:19:29Z","last_seen":"2026-08-11T23:43:50.517862Z","times_seen":5053,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mrshrimp.bond/","fqdn":"www.mrshrimp.bond","domain":"mrshrimp.bond","tld":"bond"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"70ff1587f3d83cf408eb02c0dae61e91","sha1":"788bd2259f6b58ba3471b87daa3e6973c0e35a64","sha256":"3183b838a035882776be8eb74b10a344746b850890f1d5a60b1a815650323ece","sha512":"91c8ee61a7db651207e04ed290ddabbc328b96949d448091af2198157560faae3d2d83b9646c64fa87d76887046f80116301064f9baee882fc152e52d14ebb9b","ssdeep":"","tlshash":"64f05950bc1afd05ea12ad1a087d2cb781cd8b6a4464aa8865adccc48533c796a92e99","size":531,"data":"","first_seen":"2026-02-14T08:03:15.140574Z","last_seen":"2026-02-14T08:03:15.140574Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"mrshrimp.bond/","fqdn":"mrshrimp.bond","domain":"mrshrimp.bond","tld":"bond"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T08:02:47.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrshrimp.bond","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 13:11:33 GMT","end":"Mon, 27 Apr 2026 13:11:32 GMT"},"fingerprint":{"sha1":"87:BD:E1:4E:A2:8F:D0:D0:B7:BA:F6:F3:52:09:10:35:2B:12:9E:C1","sha256":"BF:FC:6A:FA:E7:74:E1:1B:DD:4E:20:30:2B:BB:33:77:3B:8E:24:D8:CA:C5:2C:CF:3A:82:AD:B4:F2:4A:3C:95"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mrshrimp.bond\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html\r\ndate: Sat, 14 Feb 2026 08:02:48 GMT\r\nlocation: https://www.mrshrimp.bond/\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-id: arn1::nnlqq-1771056167870-66a15795d54e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80771,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T00:57:33.442795Z","times_seen":17846528,"resource_available":true,"data":null}},"time_used":237,"timings":{"blocked":111,"dns":75,"connect":1,"send":0,"wait":10,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"mrshrimp.bond","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mrshrimp.bond/shrimp1.gif","fqdn":"www.mrshrimp.bond","domain":"mrshrimp.bond","tld":"bond"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mrshrimp.bond/","date":"2026-02-14T08:02:48.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrshrimp.bond","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 13:11:33 GMT","end":"Mon, 27 Apr 2026 13:11:32 GMT"},"fingerprint":{"sha1":"87:BD:E1:4E:A2:8F:D0:D0:B7:BA:F6:F3:52:09:10:35:2B:12:9E:C1","sha256":"BF:FC:6A:FA:E7:74:E1:1B:DD:4E:20:30:2B:BB:33:77:3B:8E:24:D8:CA:C5:2C:CF:3A:82:AD:B4:F2:4A:3C:95"}}},"request":{"raw":"GET /shrimp1.gif HTTP/1.1\r\nHost: www.mrshrimp.bond\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mrshrimp.bond/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"shrimp1.gif\"\r\ncontent-type: image/gif\r\ndate: Sat, 14 Feb 2026 08:02:49 GMT\r\netag: \"146fe32615293e9b52cc33e8c0dfa9a5\"\r\nlast-modified: Sat, 14 Feb 2026 08:02:49 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /shrimp1.gif\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::442tj-1771056168628-01ff302a7fcb\r\ncontent-length: 12860453\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12860453,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1280 x 720","md5":"edd63cc8df38bcc41d387727053bcddc","sha1":"1f0465e6e52e7462e7de6a7de334aa302c6cede1","sha256":"cafe21d8b76b1ed47a75bb769c528ab20f6d1ee6ec17d7cee29002217bc61d67","sha512":"593aeb05f8ef40e0475fdb134cde1782139c7141f1c25c632c818a50c96e5f86461d5a6ecbba92cc95707526326a6ecced1b56838f8acc26d04bea56cbdaac85","ssdeep":"24576:slrvrDdhfY69HPTyNotXqekxD5TNoxzzFAsQPEd3jx:ervn3ftNPTT6/9oxvmsxdTx","tlshash":"852533a351acc5b2f91aba35a301b4538ca9cc7dc5eb780a11397d59c7fb6c917a080f","first_seen":"2026-02-14T08:03:15.099009Z","last_seen":"2026-02-14T08:03:15.099009Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1500,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":864,"receive":636,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"www.mrshrimp.bond","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mrshrimp.bond/s5.png","fqdn":"www.mrshrimp.bond","domain":"mrshrimp.bond","tld":"bond"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.mrshrimp.bond/","date":"2026-02-14T08:02:49.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrshrimp.bond","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 13:11:33 GMT","end":"Mon, 27 Apr 2026 13:11:32 GMT"},"fingerprint":{"sha1":"87:BD:E1:4E:A2:8F:D0:D0:B7:BA:F6:F3:52:09:10:35:2B:12:9E:C1","sha256":"BF:FC:6A:FA:E7:74:E1:1B:DD:4E:20:30:2B:BB:33:77:3B:8E:24:D8:CA:C5:2C:CF:3A:82:AD:B4:F2:4A:3C:95"}}},"request":{"raw":"GET /s5.png HTTP/1.1\r\nHost: www.mrshrimp.bond\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mrshrimp.bond/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 135566\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"s5.png\"\r\ncontent-type: image/png\r\ndate: Sat, 14 Feb 2026 08:02:49 GMT\r\netag: \"644fc26d882248c3a2bc29ef7bb905bf\"\r\nlast-modified: Thu, 12 Feb 2026 18:23:22 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /s5.png\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::vrmww-1771056169004-2e2523d912e5\r\ncontent-length: 321197\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":321197,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 464 x 463, 8-bit/color RGB, non-interlaced","md5":"644fc26d882248c3a2bc29ef7bb905bf","sha1":"d87afdff8c86415e3006fbae10dcc90f1ba36790","sha256":"27c9906db4eea5ea178a5c649587d8a36e4ccb6fb9279e8c34ae297c3a9dd0e5","sha512":"d36881f042e531e5297232438395a6f2e67ba3eb92be8e65223b04e825725af1d59416c8383a0f20b882490b54cb9d067ad4be3c3b82ad24cdbfc8cb8fe0afee","ssdeep":"6144:sq7nwOLreuqgkiX4SCXplHKvGMGOYuaFZIF8c9+VbcyHRV2nmyGEmQ:sq7nw21wz2kFZE59qwyxwnmu","tlshash":"9f642384d5efc223a8a23fb985739892a645607a353d1b11f0923f45b6ecf709d78372","first_seen":"2026-02-14T08:03:15.101874Z","last_seen":"2026-02-14T08:03:15.101874Z","times_seen":1,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"www.mrshrimp.bond","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mrshrimp.bond/_next/static/chunks/d2be314c3ece3fbe.js","fqdn":"www.mrshrimp.bond","domain":"mrshrimp.bond","tld":"bond"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mrshrimp.bond/","date":"2026-02-14T08:02:48.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrshrimp.bond","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 13:11:33 GMT","end":"Mon, 27 Apr 2026 13:11:32 GMT"},"fingerprint":{"sha1":"87:BD:E1:4E:A2:8F:D0:D0:B7:BA:F6:F3:52:09:10:35:2B:12:9E:C1","sha256":"BF:FC:6A:FA:E7:74:E1:1B:DD:4E:20:30:2B:BB:33:77:3B:8E:24:D8:CA:C5:2C:CF:3A:82:AD:B4:F2:4A:3C:95"}}},"request":{"raw":"GET /_next/static/chunks/d2be314c3ece3fbe.js HTTP/1.1\r\nHost: www.mrshrimp.bond\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mrshrimp.bond/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"d2be314c3ece3fbe.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 14 Feb 2026 08:02:48 GMT\r\netag: \"cbc4e7a64361250309bcded06d974418\"\r\nlast-modified: Sat, 14 Feb 2026 08:02:48 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/d2be314c3ece3fbe.js\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::2c82p-1771056168636-5297e4369882\r\ncontent-length: 7778\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30681,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (30679), with no line terminators","md5":"e189b2054d05a586f4fd6eec2888c203","sha1":"7d92609e0338be85a1f0085efa31f699878f269c","sha256":"a6248517cd3ee53a8186b51c59e1e764e3dc0c512f4acbd50e818f9884663e21","sha512":"1c0e250e62e070ed252776fbd469b27c9c19dc68e695b9e90003b746e3ab6f9c919b39ed1890d581bc0bec54a0b8b2b8a68a415db186d4d278121cbe124a8ad6","ssdeep":"384:735z75Bq9E0m1YmRDQ0cJ3tn79Fg/Ag8qWtOPSNxErV:D5z9BX0ZMOx3ErV","tlshash":"fed2e8717395f9a352db85d9d03a0015f2290d3530ae24b07394dcef368dc89a1fafa9","first_seen":"2026-01-15T14:11:00.285057Z","last_seen":"2026-08-11T16:52:36.578079Z","times_seen":7161,"resource_available":true,"data":null}},"time_used":357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":356,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"www.mrshrimp.bond","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mrshrimp.bond/s4.png","fqdn":"www.mrshrimp.bond","domain":"mrshrimp.bond","tld":"bond"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.mrshrimp.bond/","date":"2026-02-14T08:02:49.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrshrimp.bond","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 13:11:33 GMT","end":"Mon, 27 Apr 2026 13:11:32 GMT"},"fingerprint":{"sha1":"87:BD:E1:4E:A2:8F:D0:D0:B7:BA:F6:F3:52:09:10:35:2B:12:9E:C1","sha256":"BF:FC:6A:FA:E7:74:E1:1B:DD:4E:20:30:2B:BB:33:77:3B:8E:24:D8:CA:C5:2C:CF:3A:82:AD:B4:F2:4A:3C:95"}}},"request":{"raw":"GET /s4.png HTTP/1.1\r\nHost: www.mrshrimp.bond\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mrshrimp.bond/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"s4.png\"\r\ncontent-type: image/png\r\ndate: Sat, 14 Feb 2026 08:02:49 GMT\r\netag: \"fc7c109e163bde99a693fdcd62d9114e\"\r\nlast-modified: Sat, 14 Feb 2026 08:02:49 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /s4.png\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::c5tfv-1771056169004-dc28393db5e8\r\ncontent-length: 283176\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":283176,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 462 x 465, 8-bit/color RGB, non-interlaced","md5":"fc7c109e163bde99a693fdcd62d9114e","sha1":"67b2290bb6d9ad8560e0cdce386130e8f60ae391","sha256":"6a3c6051285000d408512fb3be8bf7fbec8ae59697f7a08d5c53d2668c2e31e1","sha512":"69715519d2ea05bde72121be2878ef466db2b30f9ec1d8e6b485518dfba39130519dc041d3bb1741c00e382604e9eabe29e71d4d7f32fe3548546b8e60a01637","ssdeep":"6144:N66Y/NadfymIGDUZLBk1lFnlFopeker5+22V:N66YladKmIoUNYlFnlFkiJa","tlshash":"cb542360c59b8baf421ad3844cdd358bfaeea4eb521b8075e5e290d5ff2fb250510f42","first_seen":"2026-02-14T08:03:15.105667Z","last_seen":"2026-02-14T08:03:15.105667Z","times_seen":1,"resource_available":false,"data":null}},"time_used":460,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":444,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"www.mrshrimp.bond","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mrshrimp.bond/?_rsc=ivliq","fqdn":"www.mrshrimp.bond","domain":"mrshrimp.bond","tld":"bond"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.mrshrimp.bond/","date":"2026-02-14T08:02:49.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrshrimp.bond","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 13:11:33 GMT","end":"Mon, 27 Apr 2026 13:11:32 GMT"},"fingerprint":{"sha1":"87:BD:E1:4E:A2:8F:D0:D0:B7:BA:F6:F3:52:09:10:35:2B:12:9E:C1","sha256":"BF:FC:6A:FA:E7:74:E1:1B:DD:4E:20:30:2B:BB:33:77:3B:8E:24:D8:CA:C5:2C:CF:3A:82:AD:B4:F2:4A:3C:95"}}},"request":{"raw":"GET /?_rsc=ivliq HTTP/1.1\r\nHost: www.mrshrimp.bond\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.mrshrimp.bond/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /__PAGE__\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1524580\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-type: text/x-component\r\ndate: Sat, 14 Feb 2026 08:02:50 GMT\r\netag: \"23e90ce25eed9bfce46c6f94b3836a12\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /index.segments/__PAGE__.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::2c82p-1771056170132-00210b232cb0\r\ncontent-length: 956\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":956,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (498)","md5":"12abdeb2fcbbe405d529aacc2d24190e","sha1":"79391add5d983ea1300c9356d05af91c3b76b2fe","sha256":"872055ff8b46acd75eb970c0e798ded24d5b82dd03c3b1f435450feb80610aad","sha512":"4b7755b0d4f22e76a3d4a51e3efe678facbb418f7cd2427e66803d869d38de1182cae308f32de61920d7956f89172b9631c52e4826668ab9f5e914a3944c91b2","ssdeep":"","tlshash":"ed119c3bda0de95b2d61cc5d282b9b27325e583b81308c6cd3afccec025996927440d1","first_seen":"2026-02-14T08:03:15.108444Z","last_seen":"2026-02-14T08:03:15.108444Z","times_seen":1,"resource_available":false,"data":null}},"time_used":585,"timings":{"blocked":341,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"www.mrshrimp.bond","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mrshrimp.bond/_next/static/chunks/d702a24e2b6c48fa.js","fqdn":"www.mrshrimp.bond","domain":"mrshrimp.bond","tld":"bond"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mrshrimp.bond/","date":"2026-02-14T08:02:48.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrshrimp.bond","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 13:11:33 GMT","end":"Mon, 27 Apr 2026 13:11:32 GMT"},"fingerprint":{"sha1":"87:BD:E1:4E:A2:8F:D0:D0:B7:BA:F6:F3:52:09:10:35:2B:12:9E:C1","sha256":"BF:FC:6A:FA:E7:74:E1:1B:DD:4E:20:30:2B:BB:33:77:3B:8E:24:D8:CA:C5:2C:CF:3A:82:AD:B4:F2:4A:3C:95"}}},"request":{"raw":"GET /_next/static/chunks/d702a24e2b6c48fa.js HTTP/1.1\r\nHost: www.mrshrimp.bond\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mrshrimp.bond/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 135567\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"d702a24e2b6c48fa.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 14 Feb 2026 08:02:49 GMT\r\netag: \"dc359dd72ada4de17d7c9c881ed1ec37\"\r\nlast-modified: Thu, 12 Feb 2026 18:23:21 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/d702a24e2b6c48fa.js\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::w8ts2-1771056168633-a1050b80b1af\r\ncontent-length: 36766\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":130895,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f5175253ffde993512ffd91c027fbaf3","sha1":"2e4bb6826e9fb3b4f97699df1636acd2ae1ea4ad","sha256":"e5145e1f806082749a14528961fadee162a33a48b2262793c2b682882ae4dd40","sha512":"f0e7b98e6db3308fabe5d02eb777d917f45f64a3d1e463d812046fd00e016e2e742a3317a6473b7d7c1e46f123fe61067801e0785fb545039a0387b9fd94d4f0","ssdeep":"1536:tWFM99WJw52OPYqkRaKJhjqbUqEHqorS2TAOf22fpPYqLBQjJ4hTTV:tlQGkc4jqPEHqiAOfXKgQjqTV","tlshash":"5ed3f7f931d1f4820ba744a6c03f0006f32d4d77289e64a0a3e5ddea756459de1b3faa","first_seen":"2026-01-27T14:15:38.24344Z","last_seen":"2026-08-09T09:49:33.784058Z","times_seen":632,"resource_available":true,"data":null}},"time_used":420,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":419,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"www.mrshrimp.bond","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mrshrimp.bond/s2.png","fqdn":"www.mrshrimp.bond","domain":"mrshrimp.bond","tld":"bond"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.mrshrimp.bond/","date":"2026-02-14T08:02:48.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrshrimp.bond","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 13:11:33 GMT","end":"Mon, 27 Apr 2026 13:11:32 GMT"},"fingerprint":{"sha1":"87:BD:E1:4E:A2:8F:D0:D0:B7:BA:F6:F3:52:09:10:35:2B:12:9E:C1","sha256":"BF:FC:6A:FA:E7:74:E1:1B:DD:4E:20:30:2B:BB:33:77:3B:8E:24:D8:CA:C5:2C:CF:3A:82:AD:B4:F2:4A:3C:95"}}},"request":{"raw":"GET /s2.png HTTP/1.1\r\nHost: www.mrshrimp.bond\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mrshrimp.bond/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 135566\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"s2.png\"\r\ncontent-type: image/png\r\ndate: Sat, 14 Feb 2026 08:02:49 GMT\r\netag: \"fadc726d28388592683982d2efbf5c87\"\r\nlast-modified: Thu, 12 Feb 2026 18:23:22 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /s2.png\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::vcxft-1771056169003-a692cb618360\r\ncontent-length: 284253\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":284253,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 464 x 464, 8-bit/color RGB, non-interlaced","md5":"fadc726d28388592683982d2efbf5c87","sha1":"13dbf9630baafc480afbe678704819a084ea95f4","sha256":"9353c9912371abd212ea479c88b7d043a725ed4da66f73c48b0d0b4ec7c1eac6","sha512":"a773bce4e7386179710373eba7e6e79c1a4fab2f9cd75340471a467c3015534da3542a31864a56c0705cc77d00fca9b06f5c9035e30cbeeb8a0a904153cc3826","ssdeep":"6144:lwsRbR5N+Qy3FkSrGgJQq+PV+ZD+jtyJQtkx9n6uG:lwsRbRH+f3FkSrTJTCQoUQtkvn6H","tlshash":"dc5423ec1c7c867956ffad23350a048591c065029a67a7c17529f88ff6ef064ddb33a2","first_seen":"2026-02-14T08:03:15.111462Z","last_seen":"2026-02-14T08:03:15.111462Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"www.mrshrimp.bond","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mrshrimp.bond/?_rsc=1pn8p","fqdn":"www.mrshrimp.bond","domain":"mrshrimp.bond","tld":"bond"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.mrshrimp.bond/","date":"2026-02-14T08:02:49.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrshrimp.bond","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 13:11:33 GMT","end":"Mon, 27 Apr 2026 13:11:32 GMT"},"fingerprint":{"sha1":"87:BD:E1:4E:A2:8F:D0:D0:B7:BA:F6:F3:52:09:10:35:2B:12:9E:C1","sha256":"BF:FC:6A:FA:E7:74:E1:1B:DD:4E:20:30:2B:BB:33:77:3B:8E:24:D8:CA:C5:2C:CF:3A:82:AD:B4:F2:4A:3C:95"}}},"request":{"raw":"GET /?_rsc=1pn8p HTTP/1.1\r\nHost: www.mrshrimp.bond\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.mrshrimp.bond/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 1524580\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/x-component\r\ndate: Sat, 14 Feb 2026 08:02:50 GMT\r\netag: W/\"f00cf117ce023f07685a1ec2ecf7bf88\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /index.segments/_head.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::w8ts2-1771056170131-8432ea16ee0e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1162,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (773)","md5":"156240e576e03037d1376a7577545a9d","sha1":"f3bcc8778ae3a0c041d78c274160475b4db1e99a","sha256":"973555bdd8346e3881430ddb6126416f2fe9bb98d8081341a85ea530f0e14dc6","sha512":"c5e1f199692eb56c8f90f635d6bb48c5680b266a641b57e1d50652429a2be111665ddfb490e55e3108cb334144ebd48e697df41ef474c33707dff88c0f840663","ssdeep":"","tlshash":"f02103359a09ec2f3e678c49045fd31b636d123b86341db5811ecd5c079e13a2b462e1","first_seen":"2026-02-14T08:03:15.113188Z","last_seen":"2026-02-14T08:03:15.113188Z","times_seen":1,"resource_available":false,"data":null}},"time_used":556,"timings":{"blocked":345,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"www.mrshrimp.bond","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mrshrimp.bond/_next/static/chunks/806bdb8e4a6a9b95.js","fqdn":"www.mrshrimp.bond","domain":"mrshrimp.bond","tld":"bond"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mrshrimp.bond/","date":"2026-02-14T08:02:48.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrshrimp.bond","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 13:11:33 GMT","end":"Mon, 27 Apr 2026 13:11:32 GMT"},"fingerprint":{"sha1":"87:BD:E1:4E:A2:8F:D0:D0:B7:BA:F6:F3:52:09:10:35:2B:12:9E:C1","sha256":"BF:FC:6A:FA:E7:74:E1:1B:DD:4E:20:30:2B:BB:33:77:3B:8E:24:D8:CA:C5:2C:CF:3A:82:AD:B4:F2:4A:3C:95"}}},"request":{"raw":"GET /_next/static/chunks/806bdb8e4a6a9b95.js HTTP/1.1\r\nHost: www.mrshrimp.bond\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mrshrimp.bond/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 135566\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"806bdb8e4a6a9b95.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 14 Feb 2026 08:02:48 GMT\r\netag: \"5e11238a2a6beebbe21ea3074bffda72\"\r\nlast-modified: Thu, 12 Feb 2026 18:23:22 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/806bdb8e4a6a9b95.js\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::nx5rf-1771056168639-473fe3898f60\r\ncontent-length: 8812\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":38872,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (22688)","md5":"f65a26fc967effb4743ebe3c0107142f","sha1":"8eaee9afb9b7fa9ffa437fa6441ec2e04c9e7fd9","sha256":"75dcd02f1ebada9b1e2a59092f8a4f065581c787f19f668d64533d16e3f9031a","sha512":"6afe94efb78439b403be73838091524354bd22a4614df9e307290649d72751980a3bfbeaca3bcf1ccb277c6e204e2117c190dac0b63abda28e1166d7c201e447","ssdeep":"384:K7pbbvCaRAybE+t+cYTuVF3Bo5VDBqgg9BkECoeZoPUE+2l1mbnhxtw6xR:YY+lvr3CVDBqgg9evXZoPUsm7v","tlshash":"3703b6b672d4faa2139340e0843b2017f2690c76116d7470a7e4ccdbb6588dda6bbfd9","first_seen":"2026-01-16T19:39:37.792192Z","last_seen":"2026-08-11T16:52:36.589882Z","times_seen":1027,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"www.mrshrimp.bond","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mrshrimp.bond/favicon.ico?favicon.0b3bf435.ico","fqdn":"www.mrshrimp.bond","domain":"mrshrimp.bond","tld":"bond"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mrshrimp.bond/","date":"2026-02-14T08:02:50.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrshrimp.bond","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 13:11:33 GMT","end":"Mon, 27 Apr 2026 13:11:32 GMT"},"fingerprint":{"sha1":"87:BD:E1:4E:A2:8F:D0:D0:B7:BA:F6:F3:52:09:10:35:2B:12:9E:C1","sha256":"BF:FC:6A:FA:E7:74:E1:1B:DD:4E:20:30:2B:BB:33:77:3B:8E:24:D8:CA:C5:2C:CF:3A:82:AD:B4:F2:4A:3C:95"}}},"request":{"raw":"GET /favicon.ico?favicon.0b3bf435.ico HTTP/1.1\r\nHost: www.mrshrimp.bond\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mrshrimp.bond/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 139123\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"favicon.ico\"\r\ncontent-encoding: br\r\ncontent-type: image/x-icon\r\ndate: Sat, 14 Feb 2026 08:02:50 GMT\r\netag: \"c30c7d42707a47a3f4591831641e50dc\"\r\nlast-modified: Thu, 12 Feb 2026 17:24:06 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /favicon.ico\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::nx5rf-1771056170490-1bce35c6ba03\r\ncontent-length: 9308\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25931,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"c30c7d42707a47a3f4591831641e50dc","sha1":"9ecfcc8f0ead0bf3d2d7c39e084b88f41cc89a2e","sha256":"2b8ad2d33455a8f736fc3a8ebf8f0bdea8848ad4c0db48a2833bd0f9cd775932","sha512":"7053e0f76e92179fb5154e2665d81897736bdcc22b002b0a3f8e212f27ef80f56224adaa09972848a20c66b064d16eafa732140461071ad70b6193c33dd517e0","ssdeep":"384:ryveIpvjGAUdJ/RN0d2q3OTirIDpXofYPj68Xg5RNy7yyTLb4v0:bIAJdhwYqZ8pYYPjSy7j3j","tlshash":"11c28e9b2b7e2015c908257641aeddfb011b5d4b28b4a20025fa3eb7b4b3735091fa7f","first_seen":"2023-04-30T22:57:19Z","last_seen":"2026-08-12T00:07:52.382136Z","times_seen":39230,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"www.mrshrimp.bond","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mrshrimp.bond/","fqdn":"www.mrshrimp.bond","domain":"mrshrimp.bond","tld":"bond"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T08:02:48.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrshrimp.bond","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 13:11:33 GMT","end":"Mon, 27 Apr 2026 13:11:32 GMT"},"fingerprint":{"sha1":"87:BD:E1:4E:A2:8F:D0:D0:B7:BA:F6:F3:52:09:10:35:2B:12:9E:C1","sha256":"BF:FC:6A:FA:E7:74:E1:1B:DD:4E:20:30:2B:BB:33:77:3B:8E:24:D8:CA:C5:2C:CF:3A:82:AD:B4:F2:4A:3C:95"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.mrshrimp.bond\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 1524619\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sat, 14 Feb 2026 08:02:48 GMT\r\netag: W/\"a48ee5b786846b587b62675351c6a0c6\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::nnlqq-1771056168156-dbafcd85b06c\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80771,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65446), with no line terminators","md5":"b4e6a40ca6f1c897c2a6533272574f94","sha1":"96e648af712dc624b4564f2a9b62df01d7409fb8","sha256":"0fe6b87b7b11ea26863556167f0c33a58aa5071c4a9ed243afeebc52710ded3f","sha512":"9d724cdcf97429b751ee0e8eab04d64aeb7b143baa5e00090d02f694d09bff3a19711c3e616b4f60d53750cf40f377e000311c64a5d9b3c6c905ffed67e54258","ssdeep":"768:yycOJW0GsPHURg6dlK6Q/HTzttKFFyDnsuFiGDDuaPaZDXvFIUAJgOi1TcNm:00D6KHTzttKFFyDnsuFFCp","tlshash":"f3839630a301956e9527a7e4b670efad60aec748cd1bce5cb3dc45a3379fca49e12580","first_seen":"2026-02-14T08:03:15.116801Z","last_seen":"2026-02-14T08:03:15.116801Z","times_seen":1,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":103,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"www.mrshrimp.bond","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mrshrimp.bond/_next/static/chunks/9354f06eadfbd5a6.css","fqdn":"www.mrshrimp.bond","domain":"mrshrimp.bond","tld":"bond"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.mrshrimp.bond/","date":"2026-02-14T08:02:48.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrshrimp.bond","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 13:11:33 GMT","end":"Mon, 27 Apr 2026 13:11:32 GMT"},"fingerprint":{"sha1":"87:BD:E1:4E:A2:8F:D0:D0:B7:BA:F6:F3:52:09:10:35:2B:12:9E:C1","sha256":"BF:FC:6A:FA:E7:74:E1:1B:DD:4E:20:30:2B:BB:33:77:3B:8E:24:D8:CA:C5:2C:CF:3A:82:AD:B4:F2:4A:3C:95"}}},"request":{"raw":"GET /_next/static/chunks/9354f06eadfbd5a6.css HTTP/1.1\r\nHost: www.mrshrimp.bond\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mrshrimp.bond/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"9354f06eadfbd5a6.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sat, 14 Feb 2026 08:02:48 GMT\r\netag: \"5a39625de88556505ccc64f805bf2828\"\r\nlast-modified: Sat, 14 Feb 2026 08:02:48 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/9354f06eadfbd5a6.css\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::nnlqq-1771056168629-466faccf4312\r\ncontent-length: 9409\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50558,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (49304)","md5":"a3b94ed8d1685e2e09385ad52702a31a","sha1":"a5960b1659efaaba44861bfc4da3c9445c3e383c","sha256":"d2a066b848c9f114ec94c376beb1fc96db856b0f1c986fd37262b91c15d45811","sha512":"81090af8b32551137e7a0bb41f466e9f71242817c57819dc89ea5acf0f5d882079b72874a3c87f6127a1ef3d8cfc7c124e2cce103380490b7a28b6c112b6cd97","ssdeep":"768:npJa9Lnf3LDilnduWoHjPjzV90Xj7AHRT8g:anjdjh+PAHt","tlshash":"603351a4a261c83fec2774f9a75cf80e7119b086de3957e8fe42210276c7bf60c96615","first_seen":"2026-02-14T08:03:15.118417Z","last_seen":"2026-02-14T08:03:15.118417Z","times_seen":1,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"www.mrshrimp.bond","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mrshrimp.bond/?_rsc=nn07o","fqdn":"www.mrshrimp.bond","domain":"mrshrimp.bond","tld":"bond"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.mrshrimp.bond/","date":"2026-02-14T08:02:49.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrshrimp.bond","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 13:11:33 GMT","end":"Mon, 27 Apr 2026 13:11:32 GMT"},"fingerprint":{"sha1":"87:BD:E1:4E:A2:8F:D0:D0:B7:BA:F6:F3:52:09:10:35:2B:12:9E:C1","sha256":"BF:FC:6A:FA:E7:74:E1:1B:DD:4E:20:30:2B:BB:33:77:3B:8E:24:D8:CA:C5:2C:CF:3A:82:AD:B4:F2:4A:3C:95"}}},"request":{"raw":"GET /?_rsc=nn07o HTTP/1.1\r\nHost: www.mrshrimp.bond\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.mrshrimp.bond/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_index\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 1524580\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/x-component\r\ndate: Sat, 14 Feb 2026 08:02:50 GMT\r\netag: W/\"771f092c89413c7643c9de57e12e586b\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /index.segments/_index.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::7bwqs-1771056170131-8ad74c3fedbf\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1841,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1544)","md5":"5fa5cc3fc184c505bfb795d7ae87b25f","sha1":"4bc6a1f5763ea16f5bfed97db1cf2f97129688da","sha256":"0c9e238af8c9df8798785e3415862024be1ec44305d3fb80a6bb5760e3bdcec5","sha512":"8744f6c58d8d2918a1f0267eaf26cde751e1af0b86448fe1bf38c93d18d20d39b866a6cf6c119e7be5bdfab6780283cba428e15af036aa7075283daf9f56da1c","ssdeep":"","tlshash":"853104359648a97e7d6bc198102fd30aa15d503f63700db9d37dde28439513e3b82bd1","first_seen":"2026-02-14T08:03:15.120226Z","last_seen":"2026-02-14T08:03:15.120226Z","times_seen":1,"resource_available":false,"data":null}},"time_used":759,"timings":{"blocked":343,"dns":0,"connect":0,"send":0,"wait":416,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"www.mrshrimp.bond","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mrshrimp.bond/favicon.ico?favicon.0b3bf435.ico","fqdn":"www.mrshrimp.bond","domain":"mrshrimp.bond","tld":"bond"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mrshrimp.bond/","date":"2026-02-14T08:02:50.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrshrimp.bond","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 13:11:33 GMT","end":"Mon, 27 Apr 2026 13:11:32 GMT"},"fingerprint":{"sha1":"87:BD:E1:4E:A2:8F:D0:D0:B7:BA:F6:F3:52:09:10:35:2B:12:9E:C1","sha256":"BF:FC:6A:FA:E7:74:E1:1B:DD:4E:20:30:2B:BB:33:77:3B:8E:24:D8:CA:C5:2C:CF:3A:82:AD:B4:F2:4A:3C:95"}}},"request":{"raw":"GET /favicon.ico?favicon.0b3bf435.ico HTTP/1.1\r\nHost: www.mrshrimp.bond\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mrshrimp.bond/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 139123\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"favicon.ico\"\r\ncontent-encoding: br\r\ncontent-type: image/x-icon\r\ndate: Sat, 14 Feb 2026 08:02:50 GMT\r\netag: \"c30c7d42707a47a3f4591831641e50dc\"\r\nlast-modified: Thu, 12 Feb 2026 17:24:06 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /favicon.ico\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::w8ts2-1771056170492-196369be0283\r\ncontent-length: 9308\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":25931,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"c30c7d42707a47a3f4591831641e50dc","sha1":"9ecfcc8f0ead0bf3d2d7c39e084b88f41cc89a2e","sha256":"2b8ad2d33455a8f736fc3a8ebf8f0bdea8848ad4c0db48a2833bd0f9cd775932","sha512":"7053e0f76e92179fb5154e2665d81897736bdcc22b002b0a3f8e212f27ef80f56224adaa09972848a20c66b064d16eafa732140461071ad70b6193c33dd517e0","ssdeep":"384:ryveIpvjGAUdJ/RN0d2q3OTirIDpXofYPj68Xg5RNy7yyTLb4v0:bIAJdhwYqZ8pYYPjSy7j3j","tlshash":"11c28e9b2b7e2015c908257641aeddfb011b5d4b28b4a20025fa3eb7b4b3735091fa7f","first_seen":"2023-04-30T22:57:19Z","last_seen":"2026-08-12T00:07:52.382136Z","times_seen":39230,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"www.mrshrimp.bond","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mrshrimp.bond/s6.png","fqdn":"www.mrshrimp.bond","domain":"mrshrimp.bond","tld":"bond"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.mrshrimp.bond/","date":"2026-02-14T08:02:59.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrshrimp.bond","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 13:11:33 GMT","end":"Mon, 27 Apr 2026 13:11:32 GMT"},"fingerprint":{"sha1":"87:BD:E1:4E:A2:8F:D0:D0:B7:BA:F6:F3:52:09:10:35:2B:12:9E:C1","sha256":"BF:FC:6A:FA:E7:74:E1:1B:DD:4E:20:30:2B:BB:33:77:3B:8E:24:D8:CA:C5:2C:CF:3A:82:AD:B4:F2:4A:3C:95"}}},"request":{"raw":"GET /s6.png HTTP/1.1\r\nHost: www.mrshrimp.bond\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mrshrimp.bond/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"s6.png\"\r\ncontent-type: image/png\r\ndate: Sat, 14 Feb 2026 08:02:59 GMT\r\netag: \"099196beb26a6256abeb7cf2b68e18a0\"\r\nlast-modified: Sat, 14 Feb 2026 08:02:59 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /s6.png\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::rmzwl-1771056179104-34045e70976b\r\ncontent-length: 301707\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":301707,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 464 x 464, 8-bit/color RGB, non-interlaced","md5":"099196beb26a6256abeb7cf2b68e18a0","sha1":"e91ea2727a4d39d00717184939dcac920839c110","sha256":"0d3dde75acea7a47100f1b1cce8d3be368c300d998e47b9141df68df29eb320c","sha512":"eb525366edcc0275d819bff79e872363eb72aa98306557d5260aa4e42e085562a3f1951ab37b5bb1597365206a6e330471309ad6bd23db513e3528729ecb5c31","ssdeep":"6144:VtrDsopaehrwvlaVAaBkvejHu6fQn2NCS+QaAviJvwiAraPO:7rDsfDAVKveLu6fQ2kSriJWraPO","tlshash":"945423ad46d56961d8078882ad7ba15f0463d3ffb536bf9030216a4bec5c45bc39cfa0","first_seen":"2026-02-14T08:03:15.121893Z","last_seen":"2026-02-14T08:03:15.121893Z","times_seen":1,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":304,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"www.mrshrimp.bond","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mrshrimp.bond/_next/static/media/5d52bd6c4cb3f315-s.p.610fd2a3.woff2","fqdn":"www.mrshrimp.bond","domain":"mrshrimp.bond","tld":"bond"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.mrshrimp.bond/","date":"2026-02-14T08:02:48.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrshrimp.bond","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 13:11:33 GMT","end":"Mon, 27 Apr 2026 13:11:32 GMT"},"fingerprint":{"sha1":"87:BD:E1:4E:A2:8F:D0:D0:B7:BA:F6:F3:52:09:10:35:2B:12:9E:C1","sha256":"BF:FC:6A:FA:E7:74:E1:1B:DD:4E:20:30:2B:BB:33:77:3B:8E:24:D8:CA:C5:2C:CF:3A:82:AD:B4:F2:4A:3C:95"}}},"request":{"raw":"GET /_next/static/media/5d52bd6c4cb3f315-s.p.610fd2a3.woff2 HTTP/1.1\r\nHost: www.mrshrimp.bond\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.mrshrimp.bond/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 135567\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"5d52bd6c4cb3f315-s.p.610fd2a3.woff2\"\r\ncontent-type: font/woff2\r\ndate: Sat, 14 Feb 2026 08:02:49 GMT\r\netag: \"a78a2136bd2c6a9ffa58e5f067476ebd\"\r\nlast-modified: Thu, 12 Feb 2026 18:23:21 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/media/5d52bd6c4cb3f315-s.p.610fd2a3.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::7bwqs-1771056168627-1d26c7d8b569\r\ncontent-length: 29704\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29704,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29704, version 1.0","md5":"a78a2136bd2c6a9ffa58e5f067476ebd","sha1":"57044ac146bdc816d1eb31c698277dd867596f7c","sha256":"27d49d7c8362279bf81267c615481f4be9548d7568d58889aeb1a6395dd6c070","sha512":"bc6a29522359b21119bfc43793a893785d1154e4477b45ff45230bea00ba5e57dd25a6210010470780fc07186b5958ecdbb8955679fa1bbabb8e5cf661474d54","ssdeep":"768:6qp7ykjJPj8kg9JfT+chszCPRJho5+FbW8RF0Zyj:T7XjJ4vJyAsARJW+FbW83+yj","tlshash":"96d2f1981e09ef349f0143e1434ddd622641b9517b76ebdc7fb839343d6682a1ce3298","first_seen":"2025-10-03T04:05:47.264708Z","last_seen":"2026-08-10T04:42:06.803995Z","times_seen":466,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":421,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"www.mrshrimp.bond","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mrshrimp.bond/_next/static/chunks/20d1a56625def336.js","fqdn":"www.mrshrimp.bond","domain":"mrshrimp.bond","tld":"bond"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mrshrimp.bond/","date":"2026-02-14T08:02:48.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrshrimp.bond","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 13:11:33 GMT","end":"Mon, 27 Apr 2026 13:11:32 GMT"},"fingerprint":{"sha1":"87:BD:E1:4E:A2:8F:D0:D0:B7:BA:F6:F3:52:09:10:35:2B:12:9E:C1","sha256":"BF:FC:6A:FA:E7:74:E1:1B:DD:4E:20:30:2B:BB:33:77:3B:8E:24:D8:CA:C5:2C:CF:3A:82:AD:B4:F2:4A:3C:95"}}},"request":{"raw":"GET /_next/static/chunks/20d1a56625def336.js HTTP/1.1\r\nHost: www.mrshrimp.bond\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mrshrimp.bond/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"20d1a56625def336.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 14 Feb 2026 08:02:49 GMT\r\netag: \"f7107ca877ec0a557de423d9212a967b\"\r\nlast-modified: Sat, 14 Feb 2026 08:02:49 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/20d1a56625def336.js\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::qllqf-1771056168630-15c8603cc366\r\ncontent-length: 2271\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5763,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5763), with no line terminators","md5":"ebc6e0b337b9d229f8337ae8145ba563","sha1":"dfa8cfe52da4b4b75ab01a8578568c1b8429832b","sha256":"4f14fb04c698c6d7ef41671c6ae5862f4780bbbfadcf97f110c7f71b41757ee1","sha512":"8f1cfd53b6364d1c2066ee9ac8745f29ae850bbd7ffe08138400932667fe0675964f158718c4afbe2f83a7ed429f95d561253c6b46d330b2116d1fb2ec381694","ssdeep":"96:VH9JNBo29HlQlFDSoK9p9d4cXM/17brNFSgld2I1t6gI8v2tm5I7ucp0v2NA:Tf9FQl9So84OONbBhUmkjlprO","tlshash":"9dc1c6a972eaf8d1239750d4843f5007f1392e32156ca0e0b396e9f138945dda2b3fe9","first_seen":"2026-01-21T20:10:59.315966Z","last_seen":"2026-08-08T07:41:03.715153Z","times_seen":316,"resource_available":true,"data":null}},"time_used":583,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":583,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"www.mrshrimp.bond","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.transparenttextures.com/patterns/cubes.png","fqdn":"www.transparenttextures.com","domain":"transparenttextures.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.mrshrimp.bond/","date":"2026-02-14T08:02:48.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transparenttextures.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 02:05:49 GMT","end":"Sun, 22 Mar 2026 03:04:27 GMT"},"fingerprint":{"sha1":"66:2E:81:47:1E:EC:2C:73:0C:50:C7:11:19:47:38:0D:6E:C2:DB:A2","sha256":"9F:D2:9E:0B:EB:68:2D:A0:EC:A1:1A:1F:82:9B:B2:7B:FA:C6:15:D4:69:89:83:0E:F8:90:A0:39:36:32:E9:BA"}}},"request":{"raw":"GET /patterns/cubes.png HTTP/1.1\r\nHost: www.transparenttextures.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mrshrimp.bond/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 08:02:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 633\r\nserver: cloudflare\r\nlast-modified: Mon, 04 Jul 2016 09:04:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"577a2692-279\"\r\nexpires: Mon, 23 Feb 2026 05:59:43 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nage: 1821785\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nTtLuZYAm7G2j3GQzepaUz2baSASl6xH7xnWLS55z0ZANt1RmkqfbeSm%2FQrhwdV6LSF3qU6Z2vU%2FSHqprFGWMt3zybfgWrOAGysDrAcIwCenpgxF%2FY9LPlKBZg%3D%3D\"}]}\r\ncf-ray: 9cdb0b9fdb5c1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":633,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 67 x 100, 8-bit colormap, non-interlaced","md5":"3c6467278a66af3216348e8588a69062","sha1":"10655a55ec79232904a9e80359c3adde980f24fb","sha256":"369e2fea2fdb00eb15301e187e55aa4e7cf4854dc7b665f43b874093c10cddd7","sha512":"a20c3d8e517f0c6dceebe3ca829b32cc9d045af75e9aa67b1644cf69f978a0739953af7612de3bbc7f8cf4e3864b8878fa425d07b2a2dd32b27877371fef09b2","ssdeep":"","tlshash":"0ff047f3c5c51f68975a551353a4c161ad98025377ddc34fb38bd0385ac32792a453db","first_seen":"2023-07-30T14:43:09Z","last_seen":"2026-08-11T23:38:02.457705Z","times_seen":692,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":45,"dns":20,"connect":1,"send":0,"wait":9,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.mrshrimp.bond/s1.png","fqdn":"www.mrshrimp.bond","domain":"mrshrimp.bond","tld":"bond"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.mrshrimp.bond/","date":"2026-02-14T08:02:48.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrshrimp.bond","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 13:11:33 GMT","end":"Mon, 27 Apr 2026 13:11:32 GMT"},"fingerprint":{"sha1":"87:BD:E1:4E:A2:8F:D0:D0:B7:BA:F6:F3:52:09:10:35:2B:12:9E:C1","sha256":"BF:FC:6A:FA:E7:74:E1:1B:DD:4E:20:30:2B:BB:33:77:3B:8E:24:D8:CA:C5:2C:CF:3A:82:AD:B4:F2:4A:3C:95"}}},"request":{"raw":"GET /s1.png HTTP/1.1\r\nHost: www.mrshrimp.bond\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mrshrimp.bond/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"s1.png\"\r\ncontent-type: image/png\r\ndate: Sat, 14 Feb 2026 08:02:49 GMT\r\netag: \"1c2ea391301ff09bbba5a2e634b4c34b\"\r\nlast-modified: Sat, 14 Feb 2026 08:02:49 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /s1.png\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::2c82p-1771056169001-7ffe54aa7687\r\ncontent-length: 280732\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":280732,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 464 x 462, 8-bit/color RGB, non-interlaced","md5":"1c2ea391301ff09bbba5a2e634b4c34b","sha1":"a0f9b34d39f68b2a64996bbc45a602e0a8aa04c2","sha256":"96a3e9bdeeb5c2a5f68fe540bd6fdf44b0a11f75e430e25ced62a949ef4852ca","sha512":"af9114017f1b2c6ef00717c7835d82297d822d60d9baafe5cd95c2cdb2c136016a918d2808667c5684a1e8cf1ec8b32d43334b7420ce06011017b9a7d974db95","ssdeep":"6144:QalfbJvU4sIN/fJ4ntJKma0lst9+H/jvGDmgbz:QaBJvUDIN/8tJKm3LDGv","tlshash":"d15423ce89ff19beda63275ac1539ae0d8ad4ff8da5c01d01c27c5c8a18c0f59da194a","first_seen":"2026-02-14T08:03:15.126926Z","last_seen":"2026-02-14T08:03:15.126926Z","times_seen":1,"resource_available":false,"data":null}},"time_used":446,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":424,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"www.mrshrimp.bond","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mrshrimp.bond/?_rsc=1r34m","fqdn":"www.mrshrimp.bond","domain":"mrshrimp.bond","tld":"bond"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.mrshrimp.bond/","date":"2026-02-14T08:02:49.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrshrimp.bond","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 13:11:33 GMT","end":"Mon, 27 Apr 2026 13:11:32 GMT"},"fingerprint":{"sha1":"87:BD:E1:4E:A2:8F:D0:D0:B7:BA:F6:F3:52:09:10:35:2B:12:9E:C1","sha256":"BF:FC:6A:FA:E7:74:E1:1B:DD:4E:20:30:2B:BB:33:77:3B:8E:24:D8:CA:C5:2C:CF:3A:82:AD:B4:F2:4A:3C:95"}}},"request":{"raw":"GET /?_rsc=1r34m HTTP/1.1\r\nHost: www.mrshrimp.bond\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.mrshrimp.bond/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1524584\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-type: text/x-component\r\ndate: Sat, 14 Feb 2026 08:02:49 GMT\r\netag: \"f6ac927b9d394fcef23d9e561617769d\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /index.segments/_tree.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::2c82p-1771056169417-b3cfcdeff4b4\r\ncontent-length: 458\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":458,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"ff6fdccdf081808b117cd820b91b6975","sha1":"6c4902d4f9ead8f353945727933fc31fe7b56ca5","sha256":"99d6736e117d540fd0549e08cad90f98e0575b23dafa776237a89805b168bb3c","sha512":"02519e50df8330fadeb73b9b15dabf192a904e3a0c5dd91e1e9649ccf1b45f39ebdacd87184ef289cc33da542007c31983dac601e630090132cda3aff8eeb3ae","ssdeep":"","tlshash":"09f0a36f4858ac5d98d9d44c629df70b1228db3b70948ca984cf5c10677e0381b9bb83","first_seen":"2026-02-14T08:03:15.128453Z","last_seen":"2026-02-14T08:03:15.128453Z","times_seen":1,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"www.mrshrimp.bond","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mrshrimp.bond/_next/static/chunks/turbopack-c09eb1fd0b7bd1d4.js","fqdn":"www.mrshrimp.bond","domain":"mrshrimp.bond","tld":"bond"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mrshrimp.bond/","date":"2026-02-14T08:02:48.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrshrimp.bond","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 13:11:33 GMT","end":"Mon, 27 Apr 2026 13:11:32 GMT"},"fingerprint":{"sha1":"87:BD:E1:4E:A2:8F:D0:D0:B7:BA:F6:F3:52:09:10:35:2B:12:9E:C1","sha256":"BF:FC:6A:FA:E7:74:E1:1B:DD:4E:20:30:2B:BB:33:77:3B:8E:24:D8:CA:C5:2C:CF:3A:82:AD:B4:F2:4A:3C:95"}}},"request":{"raw":"GET /_next/static/chunks/turbopack-c09eb1fd0b7bd1d4.js HTTP/1.1\r\nHost: www.mrshrimp.bond\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mrshrimp.bond/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 135566\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"turbopack-c09eb1fd0b7bd1d4.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 14 Feb 2026 08:02:48 GMT\r\netag: \"342ff5485168e8bad9ac57cd57196911\"\r\nlast-modified: Thu, 12 Feb 2026 18:23:21 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/turbopack-c09eb1fd0b7bd1d4.js\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::sgwtb-1771056168640-e30eb61043c5\r\ncontent-length: 4416\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":10671,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6402)","md5":"cca489dd1585f7e362486749fbb13029","sha1":"304dc2abdb71d53d33a5d7d512b920a6f930bfca","sha256":"665d99a9ba1c6696146e60a968814134cf9e457e1943093de64edb79303392e1","sha512":"cf4f405e02ba6313019e4b087494612e23111941c402093d580f80d032ff23508be7ce8fc6a2e7e6c049665b01be35afdf8f7d27f467274147acfc9b79025ad5","ssdeep":"192:Q74eFn8/Esp1U91EG5T1uCO9ledFMhMJg4W9PZcxkUk1IsiyLxW:Q74e2OvO9len6JZZQLyLxW","tlshash":"8322e7ea33a6f07743af90e6907f4044f1795468145d581c936ce8fa38398ae49e3f27","first_seen":"2026-02-14T08:03:15.130059Z","last_seen":"2026-02-14T08:03:15.130059Z","times_seen":1,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"www.mrshrimp.bond","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mrshrimp.bond/s3.png","fqdn":"www.mrshrimp.bond","domain":"mrshrimp.bond","tld":"bond"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.mrshrimp.bond/","date":"2026-02-14T08:02:49.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrshrimp.bond","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 13:11:33 GMT","end":"Mon, 27 Apr 2026 13:11:32 GMT"},"fingerprint":{"sha1":"87:BD:E1:4E:A2:8F:D0:D0:B7:BA:F6:F3:52:09:10:35:2B:12:9E:C1","sha256":"BF:FC:6A:FA:E7:74:E1:1B:DD:4E:20:30:2B:BB:33:77:3B:8E:24:D8:CA:C5:2C:CF:3A:82:AD:B4:F2:4A:3C:95"}}},"request":{"raw":"GET /s3.png HTTP/1.1\r\nHost: www.mrshrimp.bond\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mrshrimp.bond/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"s3.png\"\r\ncontent-type: image/png\r\ndate: Sat, 14 Feb 2026 08:02:49 GMT\r\netag: \"df8e93232d2d13f2087402e352dbb95b\"\r\nlast-modified: Sat, 14 Feb 2026 08:02:49 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /s3.png\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::sgwtb-1771056169048-0fe1fb47f92e\r\ncontent-length: 369064\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":369064,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 464 x 463, 8-bit/color RGB, non-interlaced","md5":"df8e93232d2d13f2087402e352dbb95b","sha1":"592cb9d3f26a47256b43408c876a5fae086f07a4","sha256":"f293e3c4ac568c0f9b42c0b9202bf784be1d808753dfe9ed3789f81a22714f75","sha512":"24ca012ef0fa7d585daed077cc6a050858aeec33d8fb4f8d4b065680a3d12fae5e75c85f60cb42a7f045227c6c40b4d92612a0dfbe38f8f6c1fe2f6d7232d3a5","ssdeep":"6144:1tZz46LJ0MXExegswALtw8K6Z/EjPkhU9Nm8yOpw+4T0okza1xBHPI8Qek:1tpNJH0xLULPKs+kIRn4T7rxBsv","tlshash":"a87423825a8bb5e5bc97c41bf018f1ade0a96859e0e70fae163da035f03c95f6d13744","first_seen":"2026-02-14T08:03:15.131495Z","last_seen":"2026-02-14T08:03:15.131495Z","times_seen":1,"resource_available":false,"data":null}},"time_used":659,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":636,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"www.mrshrimp.bond","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mrshrimp.bond/_next/static/chunks/ecef2a6275901125.js","fqdn":"www.mrshrimp.bond","domain":"mrshrimp.bond","tld":"bond"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mrshrimp.bond/","date":"2026-02-14T08:02:48.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrshrimp.bond","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 13:11:33 GMT","end":"Mon, 27 Apr 2026 13:11:32 GMT"},"fingerprint":{"sha1":"87:BD:E1:4E:A2:8F:D0:D0:B7:BA:F6:F3:52:09:10:35:2B:12:9E:C1","sha256":"BF:FC:6A:FA:E7:74:E1:1B:DD:4E:20:30:2B:BB:33:77:3B:8E:24:D8:CA:C5:2C:CF:3A:82:AD:B4:F2:4A:3C:95"}}},"request":{"raw":"GET /_next/static/chunks/ecef2a6275901125.js HTTP/1.1\r\nHost: www.mrshrimp.bond\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mrshrimp.bond/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"ecef2a6275901125.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 14 Feb 2026 08:02:48 GMT\r\netag: \"cb98bb6e66e7eb86f89e5ea679e2918e\"\r\nlast-modified: Sat, 14 Feb 2026 08:02:48 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/ecef2a6275901125.js\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::q5zc4-1771056168633-221e046b4eed\r\ncontent-length: 71406\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":224413,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d343c11c634d2eb5075ef7434af182f1","sha1":"bfaf53a0e4ff6085c7ddf159e66cd142a650f5eb","sha256":"f5475e308a2975d8fca598af338bb972db2fbb1b4ee60b2bb18c0a6e2e20fb34","sha512":"e622acd63c036434a1b52e66f13025959c7ecf0dec8ba91942968987ede66f7fb7757068fc140ee0e08089fd8a1c3fef3d449419a379195dd4c74805066c49fb","ssdeep":"3072:tVhLHlPuSSY2UzBRaWcG8TP36kNAHTjWmN6ZXtb967+pB:tVhLHxuSSY2Uz9rH3FSXtb967+pB","tlshash":"07240be83995f6626ab302a710af1803733c252b280d4d60a351fdddb57845eb17bf9e","first_seen":"2026-01-27T14:15:38.215422Z","last_seen":"2026-07-22T19:29:18.041407Z","times_seen":71,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"www.mrshrimp.bond","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mrshrimp.bond/_next/static/chunks/ff1a16fafef87110.js","fqdn":"www.mrshrimp.bond","domain":"mrshrimp.bond","tld":"bond"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mrshrimp.bond/","date":"2026-02-14T08:02:48.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrshrimp.bond","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 13:11:33 GMT","end":"Mon, 27 Apr 2026 13:11:32 GMT"},"fingerprint":{"sha1":"87:BD:E1:4E:A2:8F:D0:D0:B7:BA:F6:F3:52:09:10:35:2B:12:9E:C1","sha256":"BF:FC:6A:FA:E7:74:E1:1B:DD:4E:20:30:2B:BB:33:77:3B:8E:24:D8:CA:C5:2C:CF:3A:82:AD:B4:F2:4A:3C:95"}}},"request":{"raw":"GET /_next/static/chunks/ff1a16fafef87110.js HTTP/1.1\r\nHost: www.mrshrimp.bond\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mrshrimp.bond/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 29610\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"ff1a16fafef87110.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 14 Feb 2026 08:02:49 GMT\r\netag: \"5458632ee5cb3da028baebb11d5f70dd\"\r\nlast-modified: Fri, 13 Feb 2026 23:49:18 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/ff1a16fafef87110.js\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::r69m8-1771056168635-d6f0b46bb85d\r\ncontent-length: 282\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":282,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with no line terminators","md5":"5458632ee5cb3da028baebb11d5f70dd","sha1":"57e264834d3635e52fbbd3d93135842c09ce8525","sha256":"e9786b1305894e4119bb9811a816dac9cf576755596dd989ee15b455749fc35e","sha512":"28ae4e3a3828f99d64b7d4bfc7238d56c9ad910ce267dcb6c01e53be00c88f8a7f024640680d2bd66240a9972322744ee9147883a12ff8c92717c27ebb3fef50","ssdeep":"","tlshash":"63d02b702150f8d84086a4cc8836424bf52928b262fe3895d7ae8cb16174f0c51e1e55","first_seen":"2025-08-20T23:30:20.185011Z","last_seen":"2026-08-11T23:39:12.580743Z","times_seen":26692,"resource_available":true,"data":null}},"time_used":414,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":414,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"www.mrshrimp.bond","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mrshrimp.bond/_next/static/chunks/6e9c40de0daa1c08.js","fqdn":"www.mrshrimp.bond","domain":"mrshrimp.bond","tld":"bond"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.mrshrimp.bond/","date":"2026-02-14T08:02:48.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mrshrimp.bond","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 13:11:33 GMT","end":"Mon, 27 Apr 2026 13:11:32 GMT"},"fingerprint":{"sha1":"87:BD:E1:4E:A2:8F:D0:D0:B7:BA:F6:F3:52:09:10:35:2B:12:9E:C1","sha256":"BF:FC:6A:FA:E7:74:E1:1B:DD:4E:20:30:2B:BB:33:77:3B:8E:24:D8:CA:C5:2C:CF:3A:82:AD:B4:F2:4A:3C:95"}}},"request":{"raw":"GET /_next/static/chunks/6e9c40de0daa1c08.js HTTP/1.1\r\nHost: www.mrshrimp.bond\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.mrshrimp.bond/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 135566\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"6e9c40de0daa1c08.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 14 Feb 2026 08:02:48 GMT\r\netag: \"113c87315e7283b59b6eae0a0bfc06aa\"\r\nlast-modified: Thu, 12 Feb 2026 18:23:21 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/6e9c40de0daa1c08.js\r\nx-vercel-cache: HIT\r\nx-vercel-enable-rewrite-caching: 1\r\nx-vercel-id: arn1::vcxft-1771056168638-00e527415f4b\r\ncontent-length: 64518\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":195200,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (46413)","md5":"d96f64ee879025b6563f1c39f6e22cc4","sha1":"b0439120c1030e98bcbddcf3356e00a39b95c956","sha256":"7dbfd0d82764e9816b7db9ded2be9c1948f30cb2b68bca5c752ff8cc45a1161b","sha512":"dd2e27b6f3c26ba9c805918e9331b67ea202da7db59fef296e825150983ba272c2eeea1fe5f68fb0807ff5c9fef55c69def988b5468562621239df17e0522294","ssdeep":"1536:KILlGNdt8OJpjVGLG6ZImDQWA2vgDODPjwakZWRgsjG7TR4l01x9qQuwHRtNglim:Kekvt8OJphGL76uQWJDjCW6PZGFRdX","tlshash":"0d142b997351b959d3db4194d86f4509b33f0ed8ac0e443c72bda8db285048872bbfba","first_seen":"2026-02-14T08:03:15.13443Z","last_seen":"2026-02-14T08:03:15.13443Z","times_seen":1,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"www.mrshrimp.bond","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}
