{"report_id":"e890cff5-3b49-4562-afd4-c48653d9eee2","version":0,"status":"done","tags":[],"date":"2026-09-05T15:25:29Z","url":{"schema":"http","addr":"rugmerfer.top/","fqdn":"rugmerfer.top","domain":"rugmerfer.top","tld":"top"},"ip":{"addr":"172.67.160.119","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rugmerfer.top/","fqdn":"rugmerfer.top","domain":"rugmerfer.top","tld":"top"},"title":"LaunchTool: No-Code Solana Token Creator for Crypto Projects - Launchtool","dom":{"size":115921,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (26910)","md5":"b41a161968d35561662d21e5a56b8b92","sha1":"84683bfa63c10c7e2c1de331933c0590cabd8771","sha256":"5167f2c21b65575e2bd8716719d8c507f525d9b24c461d49a8c5c60b7e615323","sha512":"0ed8b97913f2fbfcd584681fd097386aa7372418377fd8aac2c3c5c8f9332e35cf1b8eecddbae2e28990b856a451c8fcef44286761508ad9af2e8724be97ab36","ssdeep":"768:7viFJ2uvwpLUnhzQH2L0r82It4uSRhKut5NFgl+FU+xHyvfSDIJPJWf3b8fzwZPC:WiuGYzqyrYImJ/D2uK4n2QZO","tlshash":"59b39451f411083a7e2369eb4ff98f1ca17360478856ea587efd21c6dfc6bb68e61204","dom_hash":"domhashd6acbdf3fbdd930e685438b67ddc318b","first_seen":"2026-09-05T15:25:32.42245Z","last_seen":"2026-09-05T15:25:32.42245Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rugmerfer.top/","fqdn":"rugmerfer.top","domain":"rugmerfer.top","tld":"top"},"ip":{"addr":"172.67.160.119","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-10T15:25:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"rugmerfer.top","ip":{"addr":"104.21.42.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-04","domain_rank":0,"first_seen":"2026-09-05T14:51:12.271985Z","last_seen":"2026-09-05T14:51:12.271985Z","alert_count":56,"request_count":28,"received_data":2008495,"sent_data":13885,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-30T22:24:29.229878Z","alert_count":0,"request_count":1,"received_data":10792,"sent_data":529,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.launchtool.io","ip":{"addr":"66.33.60.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-02-04","domain_rank":0,"first_seen":"2025-04-04T07:31:47.620966Z","last_seen":"2026-09-05T14:51:12.936099Z","alert_count":0,"request_count":1,"received_data":12133,"sent_data":537,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rugmerfer.top/","fqdn":"rugmerfer.top","domain":"rugmerfer.top","tld":"top"},"ip":{"addr":"104.21.42.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"92607c2f653d44a76ebaa4fef6c7c7cb","sha1":"704a8a3da1eea619e925340d356bc307550df7a3","sha256":"3924a66d7dc3a2328ffb9237511c88aa8dbb75d83172e6e3f7cef834b249dde1","sha512":"85830719242772e4f9bbb39c1661842ec9cb2cac41cabe03a67f18c62d15f2d566c240f150467bd750a774d0840f45714a867bbd670db0b8240595cedec1b5ea","ssdeep":"192:YiYxyelmOKDn0O6ItCc95qnjnYoPU5UBhkFw8qdsOtKc5q3+vYM8KfYv10:jYvlmx0O6ItXWnjnYosPFw8qdsOtKcsC","tlshash":"1a223746ce685a29f2b1685bce746ced18f70f9bb520e3f15ceb3cf7a944450c511248","size":9991,"data":"","first_seen":"2026-09-05T15:25:32.479605Z","last_seen":"2026-09-05T15:25:32.479605Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rugmerfer.top/_nuxt/assets/index.js","fqdn":"rugmerfer.top","domain":"rugmerfer.top","tld":"top"},"ip":{"addr":"104.21.42.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a7e1ac2fb4e756b9fbf638806c9b3fb","sha1":"657b7e46437657618adbeaf91fb9363ec834f8d1","sha256":"10759a3ec62958e09b5d1e6c9ed9e92f20cad1ced9b0732258032e7984beae3a","sha512":"2cfc6a0d59d9e5564fe57ef6e268066abd0fb9d1736e236d4c31b1306898433d308aa4c37a900a2d6c74cafd7d92b280115a42e287f6c0996e3cff492877c6f0","ssdeep":"12288:zA62DFsWhDwhKFPuarTosBgBAOwI/aZe2D:tW5w+PuoEsBgf5m","tlshash":"8b25b7671370a56e2032fcc83b945cf528fd6897984f87b5a343e9a0d5b4ca1a3d37a1","size":978424,"data":"","first_seen":"2026-09-04T23:27:08.152623Z","last_seen":"2026-09-06T17:22:29.694903Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rugmerfer.top/","fqdn":"rugmerfer.top","domain":"rugmerfer.top","tld":"top"},"ip":{"addr":"104.21.42.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0407a70543d4578cbd0d81129baad5d2","sha1":"34bf05fcb7f4f742b305cce3204ac4ddc9d89200","sha256":"141cdb6a0b91cfd0e7feaa6b821a8f5e8e0d6127ecc14629a2bb4ca86ceb3c37","sha512":"2fea8038589cf5f736230a5f076049d65ec9dedfca4dae4e67bf49f10ada6f49ae103d53fbfc49da902c405b6cd254cc22abececbff6911541c7739c188ca014","ssdeep":"6144:Gz6ViBovWN0WmeSyQYF7/eT0N1O72JMH97jT+IfEOdxYf9VkCagBcIs2C2uzQSxU:i6VgvN0WNWIN1OSJqTIsvQSMuThO","tlshash":"0315a6251375a53a1173c0d83f8844ca28bd6ca798cf87b5a343e2a1d9b4c91b3e77e5","size":944836,"data":"","first_seen":"2026-09-04T23:27:08.170812Z","last_seen":"2026-09-06T17:22:29.732437Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"1.17.26","filename":"https://rugmerfer.top/_nuxt/assets/index.js line 1 \u003e Function","line_number":3,"column_number":781753}]},"http":[{"url":{"schema":"https","addr":"rugmerfer.top/css2.css","fqdn":"rugmerfer.top","domain":"rugmerfer.top","tld":"top"},"ip":{"addr":"104.21.42.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rugmerfer.top/","date":"2026-09-05T15:24:57.542Z","timestamp":1788621897542,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rugmerfer.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 10:45:01 GMT","end":"Thu, 29 Oct 2026 11:44:51 GMT"},"fingerprint":{"sha1":"FB:DE:33:DD:11:C2:3A:15:94:A5:96:69:86:FB:8E:E3:2F:0E:86:B4","sha256":"62:D6:4D:63:C3:2F:8B:18:E7:90:D0:47:43:BF:8C:54:78:C8:09:A8:52:4C:22:14:E4:DC:AE:6E:D2:C5:9C:53"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: rugmerfer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rugmerfer.top/index-Cf6pVGfC-ms76v.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 15:24:57 GMT\r\ncontent-type: text/css\r\netag: W/\"6a9c206f-975\"\r\npriority: u=2,i=?0\r\nlast-modified: Sat, 05 Sep 2026 14:00:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZukgXg%2FGbH6TskIGL%2FF%2FSCVyzkzpTvE8POjDc%2Fuiqs16UrFdhcBa3xGX8bYjGIGZFUQ30KPJ8zS%2B1gzU3ZpvyICONTpD%2FsIE%2FNvg0J%2FyxXxByLNmkJIWo%2Bh8Vmc7qZDH\"}]}\r\nage: 2066\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3663e6bacf01525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2421,"size_decoded":1135,"mime_type":"text/css","magic":"ASCII text","md5":"ab61ea4ecfdaef57a47f0419596f911d","sha1":"4e6fb3c3de6996896fbe5aa449a5b7b5eca3b2b3","sha256":"2b4067b0762c9df8f12ec90840e3efd1ecfe437249931523299e4b9d63102f9e","sha512":"a9ed4e736a025c1cef4cedca3697a31a4dc11272dcda08d17347dd737f4115ae38bf210f15b502d22bf22b0da1f80156e0bfc01ff10a8bd32d68ef2723c81bbe","ssdeep":"","tlshash":"9d418940086e6510e7a75cc426cd7e62ea1eb25464559d34bffe0048bcabc7c5372b4d","first_seen":"2025-08-18T13:12:54.34958Z","last_seen":"2026-09-05T15:25:32.42707Z","times_seen":68,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rugmerfer.top/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z9mXg.woff2","fqdn":"rugmerfer.top","domain":"rugmerfer.top","tld":"top"},"ip":{"addr":"104.21.42.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rugmerfer.top/","date":"2026-09-05T15:24:57.680Z","timestamp":1788621897680,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rugmerfer.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 10:45:01 GMT","end":"Thu, 29 Oct 2026 11:44:51 GMT"},"fingerprint":{"sha1":"FB:DE:33:DD:11:C2:3A:15:94:A5:96:69:86:FB:8E:E3:2F:0E:86:B4","sha256":"62:D6:4D:63:C3:2F:8B:18:E7:90:D0:47:43:BF:8C:54:78:C8:09:A8:52:4C:22:14:E4:DC:AE:6E:D2:C5:9C:53"}}},"request":{"raw":"GET /rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z9mXg.woff2 HTTP/1.1\r\nHost: rugmerfer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rugmerfer.top/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 15:24:57 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nlast-modified: Sat, 05 Sep 2026 14:00:15 GMT\r\netag: \"6a9c206f-8fa4\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 2066\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DXAafx%2Bh2BPvevcD23DbBrxLdSPawFNIdZrCBQQtGnc0J%2FPTuKYdlVswmb5w%2FB4iRQ3ReuSj4qmrc9BADJ%2BD4MiFz%2BjwCskwDpCoA8vHffMuXjFAPeItEr7LuhLC5ciI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3663e6c8d131525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 36772\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36772,"size_decoded":37514,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36772, version 1.0","md5":"bca21fe1983e7d9137ef6e68e05f3aee","sha1":"cd18280bfa37a4c44d5530899fe10a249310e6eb","sha256":"8905a3719ff792d3b18a7c40ae820c9fce92782bb7696abc29d6987ebc93cd82","sha512":"7de38ecc3943257f71ae0e4c8ec2b2262e67f8e235b80b9f65f01bbfdbfb7bf8cb417da480369f8c15af417fd5d99077521b2a291116e98597a08b2e5690a7dd","ssdeep":"768:kPlbiLgQjNsieA/HfR7GAsNMnlPQWnoIPSHFVWNI4zWEHKQ+CkUy6isu:kUL7saHfRiMnlPQaoIPSHFVWNI4dHKsk","tlshash":"41f2f1d26bee0c0f52142565692b39f0881dec8f9f8bf7e8245cbdc699c3458197744e","first_seen":"2024-03-27T22:43:15Z","last_seen":"2026-09-19T06:57:17.600451Z","times_seen":531,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rugmerfer.top/api/is-banned","fqdn":"rugmerfer.top","domain":"rugmerfer.top","tld":"top"},"ip":{"addr":"104.21.42.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rugmerfer.top/","date":"2026-09-05T15:24:58.829Z","timestamp":1788621898829,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rugmerfer.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 10:45:01 GMT","end":"Thu, 29 Oct 2026 11:44:51 GMT"},"fingerprint":{"sha1":"FB:DE:33:DD:11:C2:3A:15:94:A5:96:69:86:FB:8E:E3:2F:0E:86:B4","sha256":"62:D6:4D:63:C3:2F:8B:18:E7:90:D0:47:43:BF:8C:54:78:C8:09:A8:52:4C:22:14:E4:DC:AE:6E:D2:C5:9C:53"}}},"request":{"raw":"GET /api/is-banned HTTP/1.1\r\nHost: rugmerfer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rugmerfer.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 15:24:59 GMT\r\ncontent-type: application/json\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncache-control: private, max-age=300\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bGr9wYg4JjkdVc6oDPCViHn7bBgoYUdVfHBDYin3kr9ZSKtiR%2BwbFPvEXF2eioqM4do311FNs5PAr1fapDCxZL6j0SDWD0xDftu5QAfTml5ZrF264q9baA%2BHgGNakT8X\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3663e73bde51525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":744,"mime_type":"application/json","magic":"very short file (no magic)","md5":"cfcd208495d565ef66e7dff9f98764da","sha1":"b6589fc6ab0dc82cf12099d1c2d40ab994e8410c","sha256":"5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9","sha512":"31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000000","first_seen":"2023-03-07T01:37:31Z","last_seen":"2026-09-21T07:33:44.999014Z","times_seen":123719,"resource_available":true,"data":null}},"time_used":524,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":524,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rugmerfer.top/_nuxt/assets/index.js","fqdn":"rugmerfer.top","domain":"rugmerfer.top","tld":"top"},"ip":{"addr":"104.21.42.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rugmerfer.top/","date":"2026-09-05T15:24:56.801Z","timestamp":1788621896801,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rugmerfer.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 10:45:01 GMT","end":"Thu, 29 Oct 2026 11:44:51 GMT"},"fingerprint":{"sha1":"FB:DE:33:DD:11:C2:3A:15:94:A5:96:69:86:FB:8E:E3:2F:0E:86:B4","sha256":"62:D6:4D:63:C3:2F:8B:18:E7:90:D0:47:43:BF:8C:54:78:C8:09:A8:52:4C:22:14:E4:DC:AE:6E:D2:C5:9C:53"}}},"request":{"raw":"GET /_nuxt/assets/index.js HTTP/1.1\r\nHost: rugmerfer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rugmerfer.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 15:24:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 04 Sep 2026 23:17:14 GMT\r\netag: W/\"6a9b517a-ef36a\"\r\naccess-control-allow-origin: *\r\ncache-control: no-store, no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3uunKC95Tpf9uMN3NbDdEzOI420HlRwHyzCy5tEvQMhERWdtxBZi6yu1Wbw1rzqGL%2BKzbZWc5qnxQTsQg8Wr3kKKl0IUWMTgEmrHHmRNZRXSPHhomJyi3%2FZa2qdTqiBJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3663e670c6c1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":979818,"size_decoded":236997,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (63378), with no line terminators","md5":"4a7e1ac2fb4e756b9fbf638806c9b3fb","sha1":"657b7e46437657618adbeaf91fb9363ec834f8d1","sha256":"10759a3ec62958e09b5d1e6c9ed9e92f20cad1ced9b0732258032e7984beae3a","sha512":"2cfc6a0d59d9e5564fe57ef6e268066abd0fb9d1736e236d4c31b1306898433d308aa4c37a900a2d6c74cafd7d92b280115a42e287f6c0996e3cff492877c6f0","ssdeep":"12288:zA62DFsWhDwhKFPuarTosBgBAOwI/aZe2D:tW5w+PuoEsBgf5m","tlshash":"8b25b7671370a56e2032fcc83b945cf528fd6897984f87b5a343e9a0d5b4ca1a3d37a1","first_seen":"2026-09-04T23:27:08.152623Z","last_seen":"2026-09-06T17:22:29.694903Z","times_seen":41,"resource_available":true,"data":null}},"time_used":1671,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":703,"receive":968,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rugmerfer.top/star.png","fqdn":"rugmerfer.top","domain":"rugmerfer.top","tld":"top"},"ip":{"addr":"104.21.42.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rugmerfer.top/","date":"2026-09-05T15:24:56.815Z","timestamp":1788621896815,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rugmerfer.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 10:45:01 GMT","end":"Thu, 29 Oct 2026 11:44:51 GMT"},"fingerprint":{"sha1":"FB:DE:33:DD:11:C2:3A:15:94:A5:96:69:86:FB:8E:E3:2F:0E:86:B4","sha256":"62:D6:4D:63:C3:2F:8B:18:E7:90:D0:47:43:BF:8C:54:78:C8:09:A8:52:4C:22:14:E4:DC:AE:6E:D2:C5:9C:53"}}},"request":{"raw":"GET /star.png HTTP/1.1\r\nHost: rugmerfer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rugmerfer.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 15:24:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Sat, 05 Sep 2026 14:00:18 GMT\r\netag: \"6a9c2072-101a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 2066\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fjnz%2Fa0gzl4%2F%2FazCRU%2FvjyekExdv8xhQ4t%2Fu%2FyAROzl70mqccMUZZ5AozRnCJMCtUTwwvF1pa411a18VNbSAypWsdUwdRj4lA2Uam7QpuFERD8WJ3%2F3cR7l0A%2F%2B7KZGQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3663e671c711525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4122\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4122,"size_decoded":4869,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"b91766e03065d78cf47360177a0c1690","sha1":"5ad5fc7f6a0a1204d87e38d7e71c73f637a87746","sha256":"2698d384f8834b07b3fb744ed981e9390c0b35feb972de36f6b9bcbb95753a8e","sha512":"a5919516f1a0318112d5510854ea220492b7dbef5c2d6b714a75d17af08f51c44227ce059c711147fc51f15b60554c25c57fb6a562a94f33526c9833da302678","ssdeep":"96:pgS7LflpsCMLayCJ83+n5BdXn8hafZXaPOOcFtg9j:pgiLfyayCLnXdXGwa2OcFtG","tlshash":"85816ca3595fe0e0933361e37429018c41ad825c4e209fe63ed5f82ca26b2273d17a2e","first_seen":"2026-09-05T14:51:14.696367Z","last_seen":"2026-09-05T15:25:32.43322Z","times_seen":2,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rugmerfer.top/card3.png","fqdn":"rugmerfer.top","domain":"rugmerfer.top","tld":"top"},"ip":{"addr":"104.21.42.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rugmerfer.top/","date":"2026-09-05T15:24:56.827Z","timestamp":1788621896827,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rugmerfer.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 10:45:01 GMT","end":"Thu, 29 Oct 2026 11:44:51 GMT"},"fingerprint":{"sha1":"FB:DE:33:DD:11:C2:3A:15:94:A5:96:69:86:FB:8E:E3:2F:0E:86:B4","sha256":"62:D6:4D:63:C3:2F:8B:18:E7:90:D0:47:43:BF:8C:54:78:C8:09:A8:52:4C:22:14:E4:DC:AE:6E:D2:C5:9C:53"}}},"request":{"raw":"GET /card3.png HTTP/1.1\r\nHost: rugmerfer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rugmerfer.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 15:24:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Sat, 05 Sep 2026 14:00:17 GMT\r\netag: \"6a9c2071-150da\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 2066\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iMiYyNHPlsN6BFVoZxVOq5%2BgK3W%2FOg3HUL7qQdz%2B0eYyfD%2B5IZOj0lX7JQWDaPZXDHOp%2FkFQ7N4kHQfz%2B1sZF4e0t8HFf0YwS5YS0ZsGpkmwC7tDwyW7gqU%2FVL4sQ5GY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3663e672c7b1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 86234\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86234,"size_decoded":86977,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"5716e68b38f0b7ae77f1f8ff49d92132","sha1":"c9178ce61804b82d12b64f2c9c1323ee367d474c","sha256":"9394203ad16dd49a7582dbab3da45efb601c6d42c350807ea47526facbc83445","sha512":"f9648ee2c61c39d4f847761e442f311b8a5c4f766c4aef97149587fe2e2fb0dccb841d77fa869ee44143df67a472099429843f4aa905e9542395850424ed1f0d","ssdeep":"1536:Nr6bFscTPNmKkr3eIr/S6CYSmcib22ivYNtRMax3tLtQb/Ql/bps3dvn:h6bCMN3kqIDTPXD36eps3R","tlshash":"7e83020d6364085eea821a0fcc44ced6a45edb60896cff9116c0ecd789646eaf874d7f","first_seen":"2026-09-05T14:51:14.709305Z","last_seen":"2026-09-05T15:25:32.435758Z","times_seen":2,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rugmerfer.top/faq.png","fqdn":"rugmerfer.top","domain":"rugmerfer.top","tld":"top"},"ip":{"addr":"104.21.42.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rugmerfer.top/","date":"2026-09-05T15:24:56.828Z","timestamp":1788621896828,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rugmerfer.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 10:45:01 GMT","end":"Thu, 29 Oct 2026 11:44:51 GMT"},"fingerprint":{"sha1":"FB:DE:33:DD:11:C2:3A:15:94:A5:96:69:86:FB:8E:E3:2F:0E:86:B4","sha256":"62:D6:4D:63:C3:2F:8B:18:E7:90:D0:47:43:BF:8C:54:78:C8:09:A8:52:4C:22:14:E4:DC:AE:6E:D2:C5:9C:53"}}},"request":{"raw":"GET /faq.png HTTP/1.1\r\nHost: rugmerfer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rugmerfer.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 15:24:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Sat, 05 Sep 2026 14:00:17 GMT\r\netag: \"6a9c2071-d412\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 2066\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=45QdlwHluWe4Ffqbujk%2BBxYPMPfJtOA1Tjyio66nGU%2BAuVog43E5Bw%2FDsHoURdG2yAeRnyj7XIDgc%2FJtblIsFZrq9Uiyf5hZGHk2KhW9YgJjAklDqUZtuFHSYfL7TTJx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3663e672c7c1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 54290\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54290,"size_decoded":55026,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"fad5020208ec4180db20b71715fd383a","sha1":"877d63def84834d9de8287c17b94faced0c4a348","sha256":"ce7291bad727d376cfdfcfbf04778c2ca83f8f03111db2365c33dcc396e19886","sha512":"4161330c14f4359728392cb0620642a554d9af5576f7811c914da8806e301d672d49d3078e295f9d72093c7b4a5d6c0db4b869dc7b4e48e9f075ca4ac42be144","ssdeep":"1536:6uWXXYVi8I62cJXbzIMGzyHH2e/kHMXc9dv:6BXXAip6FvIMGzyn2VMXc9dv","tlshash":"ec33025046bb51d860fa753f1138e1701ab4d440e57abecab361a40e4bb723a93f25df","first_seen":"2026-09-05T14:51:14.714446Z","last_seen":"2026-09-05T15:25:32.438192Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rugmerfer.top/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z9mXg.woff2","fqdn":"rugmerfer.top","domain":"rugmerfer.top","tld":"top"},"ip":{"addr":"104.21.42.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rugmerfer.top/","date":"2026-09-05T15:24:57.678Z","timestamp":1788621897678,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rugmerfer.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 10:45:01 GMT","end":"Thu, 29 Oct 2026 11:44:51 GMT"},"fingerprint":{"sha1":"FB:DE:33:DD:11:C2:3A:15:94:A5:96:69:86:FB:8E:E3:2F:0E:86:B4","sha256":"62:D6:4D:63:C3:2F:8B:18:E7:90:D0:47:43:BF:8C:54:78:C8:09:A8:52:4C:22:14:E4:DC:AE:6E:D2:C5:9C:53"}}},"request":{"raw":"GET /rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z9mXg.woff2 HTTP/1.1\r\nHost: rugmerfer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rugmerfer.top/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 15:24:57 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nlast-modified: Sat, 05 Sep 2026 14:00:15 GMT\r\netag: \"6a9c206f-8fa4\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 2066\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a8%2B%2BCuT5zlFr7qYYhmb0TKOe5lysi7B1sTxl5AqOcTZrC0vu3czGGUsFj%2BiDy00CHK2hHdYosMM%2BGeM5YzBwrFQBGZbNfS%2Fx2C6oo5JZpGp%2BnF1ER81Rhn0uPO%2B6VY2P\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3663e6c7d111525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 36772\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36772,"size_decoded":37518,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36772, version 1.0","md5":"bca21fe1983e7d9137ef6e68e05f3aee","sha1":"cd18280bfa37a4c44d5530899fe10a249310e6eb","sha256":"8905a3719ff792d3b18a7c40ae820c9fce92782bb7696abc29d6987ebc93cd82","sha512":"7de38ecc3943257f71ae0e4c8ec2b2262e67f8e235b80b9f65f01bbfdbfb7bf8cb417da480369f8c15af417fd5d99077521b2a291116e98597a08b2e5690a7dd","ssdeep":"768:kPlbiLgQjNsieA/HfR7GAsNMnlPQWnoIPSHFVWNI4zWEHKQ+CkUy6isu:kUL7saHfRiMnlPQaoIPSHFVWNI4dHKsk","tlshash":"41f2f1d26bee0c0f52142565692b39f0881dec8f9f8bf7e8245cbdc699c3458197744e","first_seen":"2024-03-27T22:43:15Z","last_seen":"2026-09-19T06:57:17.600451Z","times_seen":531,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rugmerfer.top/copy.png","fqdn":"rugmerfer.top","domain":"rugmerfer.top","tld":"top"},"ip":{"addr":"104.21.42.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rugmerfer.top/","date":"2026-09-05T15:24:56.824Z","timestamp":1788621896824,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rugmerfer.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 10:45:01 GMT","end":"Thu, 29 Oct 2026 11:44:51 GMT"},"fingerprint":{"sha1":"FB:DE:33:DD:11:C2:3A:15:94:A5:96:69:86:FB:8E:E3:2F:0E:86:B4","sha256":"62:D6:4D:63:C3:2F:8B:18:E7:90:D0:47:43:BF:8C:54:78:C8:09:A8:52:4C:22:14:E4:DC:AE:6E:D2:C5:9C:53"}}},"request":{"raw":"GET /copy.png HTTP/1.1\r\nHost: rugmerfer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rugmerfer.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 15:24:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Sat, 05 Sep 2026 14:00:16 GMT\r\netag: \"6a9c2070-156\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 2066\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fLJUmEJ8KEXd191iN8hGSXrfRSs7yQPTxtA4bqnIwfbYbJbJVMw%2F6YsQZrHnBdoIEBq7coGrnmiBELT6CoX301NyNT%2BcOKIjRY4ZTfppHHr%2FeozJZ%2BupmLyU6U6dB39j\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3663e672c781525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 342\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":342,"size_decoded":1075,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"da5d87fab56e1c2ea2b66097e356da8c","sha1":"1958428246d119fc55fd7c706f2512e8bf91190b","sha256":"421f56409fc3fd91dea8954909550c1be6182b66c363d43e8713513ac4250ff2","sha512":"f97fae328f064857da8eb27747e205f439b6daea733ca8e23e6bed00b6fbf5b0238916e4d21302e1c45d0f4d1eb71467c26eb8bccb68db8b58f75ff3a6974faa","ssdeep":"","tlshash":"28e02de1e3388af8cb0dcc332b0ca6dc51011c22ee41e86013238db778f42e02c4282c","first_seen":"2026-09-05T14:51:14.691986Z","last_seen":"2026-09-05T15:25:32.440289Z","times_seen":2,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rugmerfer.top/","date":"2026-09-05T15:24:58.813Z","timestamp":1788621898813,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rugmerfer.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 05 Sep 2026 15:24:58 GMT\r\ndate: Sat, 05 Sep 2026 15:24:58 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":1447,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-09-21T08:33:47.893787Z","times_seen":46836,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":34,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rugmerfer.top/","fqdn":"rugmerfer.top","domain":"rugmerfer.top","tld":"top"},"ip":{"addr":"104.21.42.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-05T15:24:56.045Z","timestamp":1788621896045,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rugmerfer.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 10:45:01 GMT","end":"Thu, 29 Oct 2026 11:44:51 GMT"},"fingerprint":{"sha1":"FB:DE:33:DD:11:C2:3A:15:94:A5:96:69:86:FB:8E:E3:2F:0E:86:B4","sha256":"62:D6:4D:63:C3:2F:8B:18:E7:90:D0:47:43:BF:8C:54:78:C8:09:A8:52:4C:22:14:E4:DC:AE:6E:D2:C5:9C:53"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rugmerfer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 15:24:56 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fq%2BgW6X%2BzOfZgC558GDucTeBzLhzd%2FSENV42jqd3eedGfYgYg6AQGJWaHf0WssiDTnR%2FlAySPbisd%2Bi2Zn75BrzFiJ9Pn0tXFHO6hPhMyeKNkecPSC9HTX7jbjdaaPZW\"}]}\r\npriority: u=0,i\r\nlast-modified: Sat, 05 Sep 2026 15:00:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3663e629ba81525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]}],"data":{"size":100086,"size_decoded":15645,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10969)","md5":"da7065b70f2aec3e9fc1a4b289ffd798","sha1":"c1227b23e30c9b3006179e27eeac7b00cb3e7f4a","sha256":"f06ad88f5387c0245b80a8bd12837d2ee5cb0b984465e76377b98411a6f0e645","sha512":"3b63b3111a419749d73c9c79d61d5f1a76f7572d507e74b456d62bf606d3104e6efcc4172663b42051f289e502114a0552f5d172de927696b89191e8b5cb84f6","ssdeep":"1536:SiuGkLCmenegswiyHpe+ebe/TeegeIFe2fCSe+e0mxH7vZez+wyyv6oe6jeeZHeL:SiuGVp","tlshash":"caa39455b4220431bd37a8d75ffd5f1ca0b3814bd95ad818bfed229a8fcef84aa51240","first_seen":"2026-09-05T15:25:32.443522Z","last_seen":"2026-09-05T15:25:32.443522Z","times_seen":1,"resource_available":true,"data":null}},"time_used":685,"timings":{"blocked":-1,"dns":33,"connect":18,"send":0,"wait":546,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rugmerfer.top/index-Cf6pVGfC-ms76v.css","fqdn":"rugmerfer.top","domain":"rugmerfer.top","tld":"top"},"ip":{"addr":"104.21.42.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rugmerfer.top/","date":"2026-09-05T15:24:56.800Z","timestamp":1788621896800,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rugmerfer.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 10:45:01 GMT","end":"Thu, 29 Oct 2026 11:44:51 GMT"},"fingerprint":{"sha1":"FB:DE:33:DD:11:C2:3A:15:94:A5:96:69:86:FB:8E:E3:2F:0E:86:B4","sha256":"62:D6:4D:63:C3:2F:8B:18:E7:90:D0:47:43:BF:8C:54:78:C8:09:A8:52:4C:22:14:E4:DC:AE:6E:D2:C5:9C:53"}}},"request":{"raw":"GET /index-Cf6pVGfC-ms76v.css HTTP/1.1\r\nHost: rugmerfer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rugmerfer.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 15:24:57 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Sat, 05 Sep 2026 15:00:16 GMT\r\netag: W/\"6a9c2e80-1cb27\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JHm2ZBeIUzXxKLjANWhIm8eWw%2BfqTOkPH8m9KfTrJW6Nu5FITDHRMNXMQr1PiNa0VAEp5llKcZ0Dbcbsng7%2Fn1eEtBkt%2FCqt3uVm4nC7fWzTD0tDwqGQbkUZM0C81fbh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3663e670c6a1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":117543,"size_decoded":19551,"mime_type":"text/css","magic":"ASCII text","md5":"ffed0f99aaa56606e660ce85c040bb3d","sha1":"d4fa777dd5a94941a6fd11ab2474f2d92236679d","sha256":"c2d260a2f5d51aaecab7ad858dbceaed38aba03f488f704c75423e387f3a2520","sha512":"3fc5eb9246c12b033f45ccda3c141cb29742ed1401c89f97fca674b502586062e8900750912fc885eedc425fcf41d5de3954b1f3a6d97ae9c5a9a06e25cdf728","ssdeep":"1536:ZZ3ttLqpX+z73EPt/YBhIyUjlI2uwC3DQMx4C3QevNsUHx86TgiX+zK0he+BMx+/:rDLzCyUZIOH","tlshash":"4bb3721459b318757c13a1e463eea39db73ea0838d2efd6c7acd11144fc63f89aa2644","first_seen":"2026-09-05T15:25:32.446193Z","last_seen":"2026-09-05T15:25:32.446193Z","times_seen":1,"resource_available":true,"data":null}},"time_used":739,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":573,"receive":166,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rugmerfer.top/lock.png","fqdn":"rugmerfer.top","domain":"rugmerfer.top","tld":"top"},"ip":{"addr":"104.21.42.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rugmerfer.top/","date":"2026-09-05T15:24:56.819Z","timestamp":1788621896819,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rugmerfer.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 10:45:01 GMT","end":"Thu, 29 Oct 2026 11:44:51 GMT"},"fingerprint":{"sha1":"FB:DE:33:DD:11:C2:3A:15:94:A5:96:69:86:FB:8E:E3:2F:0E:86:B4","sha256":"62:D6:4D:63:C3:2F:8B:18:E7:90:D0:47:43:BF:8C:54:78:C8:09:A8:52:4C:22:14:E4:DC:AE:6E:D2:C5:9C:53"}}},"request":{"raw":"GET /lock.png HTTP/1.1\r\nHost: rugmerfer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rugmerfer.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 15:24:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Sat, 05 Sep 2026 14:00:16 GMT\r\netag: \"6a9c2070-12c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 2066\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3FKEs%2BRPPPUWTxl4Xzx%2BwnngUwEvasHzPAGApq8mveSeHT%2FD1lcTP2bm6848E1Fx4Plz1naJ%2BSc5Y7DXjWDPDduk3LFaucYrDeVUQ1HjHKJhRYKNaAvP8DpSvZkjDEKO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3663e672c741525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 300\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":300,"size_decoded":1033,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"abd7d0005f9c7e63a5cbc237785ae75e","sha1":"8bfcf932b4a56b45ade16fcefad3bab7f941e40e","sha256":"1f6cb55cccdc403e06c184846db698a860f8e9f509349dbf235a67abc097a3ae","sha512":"8d40e18004dd5dc1df29f2667c1a8b03a304f77673413483c3d839234754641129d86a9ebe1681003b86162f01bc2d67cd9720af913d25d4bd52da09ff6bb754","ssdeep":"","tlshash":"7fe07dd1cb62cda4ed2d4ede5a6c651451d7107c45540506c4830230a2688205b42529","first_seen":"2026-09-05T14:51:14.706588Z","last_seen":"2026-09-05T15:25:32.449842Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rugmerfer.top/plus.png","fqdn":"rugmerfer.top","domain":"rugmerfer.top","tld":"top"},"ip":{"addr":"104.21.42.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rugmerfer.top/","date":"2026-09-05T15:24:56.821Z","timestamp":1788621896821,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rugmerfer.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 10:45:01 GMT","end":"Thu, 29 Oct 2026 11:44:51 GMT"},"fingerprint":{"sha1":"FB:DE:33:DD:11:C2:3A:15:94:A5:96:69:86:FB:8E:E3:2F:0E:86:B4","sha256":"62:D6:4D:63:C3:2F:8B:18:E7:90:D0:47:43:BF:8C:54:78:C8:09:A8:52:4C:22:14:E4:DC:AE:6E:D2:C5:9C:53"}}},"request":{"raw":"GET /plus.png HTTP/1.1\r\nHost: rugmerfer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rugmerfer.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 15:24:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Sat, 05 Sep 2026 14:00:16 GMT\r\netag: \"6a9c2070-16c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 2066\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kp8CmBt%2BhPLS7zr8PnbAqRFaaqpICHyNiXutzu3lxMm7yN1T7oSBpm6jhYoCp25bwTDVK6CkdK0%2FB7v1Rj3d1gSpYF4vH5m1vycqFYobuQwCsSADHKwurRs%2FSzkH2O0c\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3663e672c751525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 364\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":364,"size_decoded":1095,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"839e1beab00e234b3cb8bead65e650d8","sha1":"aaca02302d87f8b95d5e4a87f36469f6ba2b497f","sha256":"a8e835013e3a15d90d60d740743e91a0dea2ec9674f404bf9fbc51ebe02938f1","sha512":"9174f25af446c5f6759ad4e018ccc03f63b3c823c5a64c5746df5d3357ea312deab52caa67b35b346df9ba8bd76930de82bffbfbb44594798aa100a75894317f","ssdeep":"","tlshash":"88e0c076177aea89c4f60cf3591a3824dbe60259b40441c88f5003f7e0a528d284b3f4","first_seen":"2026-09-05T14:51:14.70054Z","last_seen":"2026-09-05T15:25:32.452231Z","times_seen":2,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rugmerfer.top/world-words.png","fqdn":"rugmerfer.top","domain":"rugmerfer.top","tld":"top"},"ip":{"addr":"104.21.42.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rugmerfer.top/","date":"2026-09-05T15:24:56.826Z","timestamp":1788621896826,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rugmerfer.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 10:45:01 GMT","end":"Thu, 29 Oct 2026 11:44:51 GMT"},"fingerprint":{"sha1":"FB:DE:33:DD:11:C2:3A:15:94:A5:96:69:86:FB:8E:E3:2F:0E:86:B4","sha256":"62:D6:4D:63:C3:2F:8B:18:E7:90:D0:47:43:BF:8C:54:78:C8:09:A8:52:4C:22:14:E4:DC:AE:6E:D2:C5:9C:53"}}},"request":{"raw":"GET /world-words.png HTTP/1.1\r\nHost: rugmerfer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rugmerfer.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 15:24:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Sat, 05 Sep 2026 14:00:18 GMT\r\netag: \"6a9c2072-1bec0\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 2066\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=umFizW8IMXs4np2RnxAMjPKHqR3OQWzRYTdYCtt7zfc6S1Hy1yXfMlCOT9fASwOOJ1uOVG7EqCbXXgmvOT82%2Fs0S4%2BZcf1XrEPLoA23QlFE9oCtSLpNRXRQVUFnExVVZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3663e672c7a1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 114368\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114368,"size_decoded":115102,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"47535a848a24a4b1e1dc1a88d6485e3f","sha1":"8d3a937e890695b78cb5c91c76276f5891af0eda","sha256":"b5eb685b639e9975d64ec588d8ac766c7b61f27427cf2065f34e17928064074c","sha512":"6cdda74651a1193f1431d2a0b404cb61ea64d349ecb62ebf18bf7d3bb370697b747af039f87fc93283e1181ef042f78bc03b666970624b3fe926fa74372e7415","ssdeep":"1536:dH1QQEdc/OEDDSuUSZLrgfNTyIfIxu+yjkSAp2oOOXu2QzTmgWrY8thm48wYLl28:MHcb6uUShavQ/aa2oVXonshmWYp22wyL","tlshash":"74b312d26b71af913d678be90fc7252501378d01bb46b49edb0684a8a0568bddf08b37","first_seen":"2026-09-05T14:51:14.708049Z","last_seen":"2026-09-05T15:25:32.454339Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rugmerfer.top/blue-sky.jpg","fqdn":"rugmerfer.top","domain":"rugmerfer.top","tld":"top"},"ip":{"addr":"104.21.42.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rugmerfer.top/","date":"2026-09-05T15:24:57.657Z","timestamp":1788621897657,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rugmerfer.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 10:45:01 GMT","end":"Thu, 29 Oct 2026 11:44:51 GMT"},"fingerprint":{"sha1":"FB:DE:33:DD:11:C2:3A:15:94:A5:96:69:86:FB:8E:E3:2F:0E:86:B4","sha256":"62:D6:4D:63:C3:2F:8B:18:E7:90:D0:47:43:BF:8C:54:78:C8:09:A8:52:4C:22:14:E4:DC:AE:6E:D2:C5:9C:53"}}},"request":{"raw":"GET /blue-sky.jpg HTTP/1.1\r\nHost: rugmerfer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rugmerfer.top/index-Cf6pVGfC-ms76v.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 15:24:57 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Sat, 05 Sep 2026 14:00:17 GMT\r\netag: \"6a9c2071-2039e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 2066\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S19zVD3VTNY93fTebnpyyUyS%2FgIJwC1C%2FHLkkrAdkLb5rmkcnsK78Xg9V7aUl8KnFlHxVk7OBG3HiiS9TW%2BBVfM6sDPW9HgQE9QfKJdErkQS%2BMIxp2x4aSZ5N6h1zbhZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3663e6c5d0c1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 131998\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":131998,"size_decoded":132737,"mime_type":"image/jpeg","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1438x1094, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"07610be23a0963005398661605a5815c","sha1":"06c567852a355be98d6d8ee1a00b0bbc2446b2f8","sha256":"631972123c321474618e8fe2811300f60d3839973fad256788044360c7ff7b31","sha512":"a618fb8f05aa4905cdcc326e4b9709d7cc6b96fac5fb31b3a99815907c4f501dae4eb664bbb60111c4271dc7a42277258e782d87cbabb85e067233268747812d","ssdeep":"1536:+oQrgNfQK/OLrV8g7n0V8hl9+6QAKNcCYOUHj8d0KtsFZcHMnQoebQdDxWoW:7QrF7N0VS3QAKqmFd4NybQdDxU","tlshash":"ebd312b79fc4bd51902129260b19c917e64d63734842fbe69a90733b2143eaf8647cf6","first_seen":"2026-09-05T14:51:14.703805Z","last_seen":"2026-09-05T15:25:32.456405Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rugmerfer.top/upload.png","fqdn":"rugmerfer.top","domain":"rugmerfer.top","tld":"top"},"ip":{"addr":"104.21.42.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rugmerfer.top/","date":"2026-09-05T15:24:56.818Z","timestamp":1788621896818,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rugmerfer.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 10:45:01 GMT","end":"Thu, 29 Oct 2026 11:44:51 GMT"},"fingerprint":{"sha1":"FB:DE:33:DD:11:C2:3A:15:94:A5:96:69:86:FB:8E:E3:2F:0E:86:B4","sha256":"62:D6:4D:63:C3:2F:8B:18:E7:90:D0:47:43:BF:8C:54:78:C8:09:A8:52:4C:22:14:E4:DC:AE:6E:D2:C5:9C:53"}}},"request":{"raw":"GET /upload.png HTTP/1.1\r\nHost: rugmerfer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rugmerfer.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 15:24:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Sat, 05 Sep 2026 14:00:16 GMT\r\netag: \"6a9c2070-a08\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 2066\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GP97UFiwDuEtgbzw5vWg5fqRXNIlKiMAE89qwyELMgGY%2F8SoBlb%2FpGvBKoaDRni87L%2BwdeiyP2N4sSyl7eEU1tWsGtiFcCDzWqPtghYATh1K%2BxxV7gjmtFtVW0MfkkBy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3663e671c731525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2568\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2568,"size_decoded":3302,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"5e00dc40e10d91ae8eb0779d80bd8ca4","sha1":"17342b388df9de1927c9d0ac53f377b0948caa78","sha256":"105775631b8496e5af6a6cc90d7f80f49eb932f1dbbff76ae41c7cd2eaf25ad5","sha512":"dece49a36c3e5ca3fdf7f7bf004b0fc8ee10af2b05e0d871f34d9e4e78d1de688bbdb790e94fcbacf702b202910feab3c2d2de988ca3fbcb2e7f63d19461d96e","ssdeep":"","tlshash":"10514c470190f7f2c6fc070972627abe69100c7499bccf3b569b83068f39668a4199cc","first_seen":"2026-09-05T14:51:14.713541Z","last_seen":"2026-09-05T15:25:32.45808Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rugmerfer.top/edit.png","fqdn":"rugmerfer.top","domain":"rugmerfer.top","tld":"top"},"ip":{"addr":"104.21.42.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rugmerfer.top/","date":"2026-09-05T15:24:56.825Z","timestamp":1788621896825,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rugmerfer.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 10:45:01 GMT","end":"Thu, 29 Oct 2026 11:44:51 GMT"},"fingerprint":{"sha1":"FB:DE:33:DD:11:C2:3A:15:94:A5:96:69:86:FB:8E:E3:2F:0E:86:B4","sha256":"62:D6:4D:63:C3:2F:8B:18:E7:90:D0:47:43:BF:8C:54:78:C8:09:A8:52:4C:22:14:E4:DC:AE:6E:D2:C5:9C:53"}}},"request":{"raw":"GET /edit.png HTTP/1.1\r\nHost: rugmerfer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rugmerfer.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 15:24:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Sat, 05 Sep 2026 14:00:16 GMT\r\netag: \"6a9c2070-136\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 2066\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UK3NmadtqTczwLjeBkftZx%2FzLJtpVv3DKEqaR3S5wIeetdZOLqRPgArMabpJM6voT%2BcmMEswZjLEyxPnQr8vv2gWzxal7ij3tfxYbNPBB3y63RE5oMwVgRiZovbYWBmp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3663e672c791525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 310\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":310,"size_decoded":1039,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"bc231095f45f797e292bf2469f292a77","sha1":"ad555d55ec1ec5bbcb96a7e8cca7c8d5e4f3319a","sha256":"721c9ddd3ddc09b7af3e116894e2fd09b3978de36310faeb8ce39b5153d81194","sha512":"b988bf67b9f63399aba89774247b61de5948f091bdd50c3076a439937d587c795ea7d7760638eb540121e5673247ba22b0ea124bdc4bd94de575038ea1eb6516","ssdeep":"","tlshash":"1be0e7715bc5d575f8d10ea7d8cffe70921414d35516df85224347603398492e711442","first_seen":"2026-09-05T14:51:14.690103Z","last_seen":"2026-09-05T15:25:32.459535Z","times_seen":2,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rugmerfer.top/telegram2.png","fqdn":"rugmerfer.top","domain":"rugmerfer.top","tld":"top"},"ip":{"addr":"104.21.42.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rugmerfer.top/","date":"2026-09-05T15:24:56.830Z","timestamp":1788621896830,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rugmerfer.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 10:45:01 GMT","end":"Thu, 29 Oct 2026 11:44:51 GMT"},"fingerprint":{"sha1":"FB:DE:33:DD:11:C2:3A:15:94:A5:96:69:86:FB:8E:E3:2F:0E:86:B4","sha256":"62:D6:4D:63:C3:2F:8B:18:E7:90:D0:47:43:BF:8C:54:78:C8:09:A8:52:4C:22:14:E4:DC:AE:6E:D2:C5:9C:53"}}},"request":{"raw":"GET /telegram2.png HTTP/1.1\r\nHost: rugmerfer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rugmerfer.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 15:24:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Sat, 05 Sep 2026 14:00:17 GMT\r\netag: \"6a9c2071-560\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 2066\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iY28kOqk11nMayHPlH8SmHayZtwR8g3BWOmo8UdWZWor6TfHiI5LCxb%2BkRCl5uy6qocUCBakCGrG0P0FpyX4bEF2T5fhPEH4qtd1E3BUQRDLZ4MndddB4g5oTQEvN25g\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3663e673c7e1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1376\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1376,"size_decoded":2104,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"0b9f431e532aa9c7001eb1e87f74bb1e","sha1":"1b5135ceb74a75d06e740181479aa59a3bb78c5c","sha256":"3307d79071099bdc13c54efd32ba5ed0a6469a891d387957cc004266ca92ca24","sha512":"0fd0f5896b88faf8355e7d084efb41ef060feaacb07ca7a97924c2970a1a6e1dbde555075cd27a8e3ef4dc6cf49f931cdc063c421b71558ddec215cfc408c03d","ssdeep":"","tlshash":"c621b84b8ea55100d6175b6cf9b0684086d7bf237cb97d1a5b7c20d11bb1440b5366ee","first_seen":"2026-09-05T14:51:14.693701Z","last_seen":"2026-09-05T15:25:32.461353Z","times_seen":2,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.launchtool.io/removed.png","fqdn":"www.launchtool.io","domain":"launchtool.io","tld":"io"},"ip":{"addr":"66.33.60.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rugmerfer.top/","date":"2026-09-05T15:24:59.241Z","timestamp":1788621899241,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.launchtool.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 04:22:18 GMT","end":"Wed, 18 Nov 2026 04:22:17 GMT"},"fingerprint":{"sha1":"E1:F4:59:76:76:42:E6:8B:BE:A5:59:7B:4C:F1:3F:FB:7B:BE:5D:8B","sha256":"CE:A5:2C:5A:6C:E9:78:65:B8:B8:90:CD:61:11:F6:3B:62:6E:84:3D:80:0C:BF:91:65:9F:6A:6D:03:F1:5F:9C"}}},"request":{"raw":"GET /removed.png HTTP/1.1\r\nHost: www.launchtool.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rugmerfer.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2067\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"removed.png\"\r\ncontent-type: image/png\r\ndate: Sat, 05 Sep 2026 15:24:59 GMT\r\netag: \"bdd02d9be37fc49337d1695fedf8a98e\"\r\nlast-modified: Sat, 05 Sep 2026 14:50:32 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ptx4b-1788621899281-464b559769fd\r\ncontent-length: 11621\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":11621,"size_decoded":12133,"mime_type":"image/png","magic":"PNG image data, 89 x 122, 8-bit/color RGBA, non-interlaced","md5":"bdd02d9be37fc49337d1695fedf8a98e","sha1":"95706297a98c069aceecbe2d3a8ecffd5444db8f","sha256":"3ec40624e35293dc60e2fafbe7db460920d327e18baac7a56805866d89bb9b9e","sha512":"7234a4bfc51c853477bf768c08110f12a5bc2c57e31cbf93334b942b249861126345ded73ae6e2d0de5caea3ef5eff7c364f5f6363636e75f58fdcce098a51a2","ssdeep":"192:FJWvy2p0Ti3gAz0DKqJCRpRgzGosmVSjQSKioJNVT6zojzczI8hiOFahstzHgk/9:i6w09akhJeyzwjjZo70zASaS1AAeYHt","tlshash":"6632c0955f368df4d509335fe487501647daca812a991e3c8ae6c8d099f322ef231e3b","first_seen":"2025-11-17T13:44:02.490528Z","last_seen":"2026-09-05T15:25:32.46272Z","times_seen":20,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":26,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rugmerfer.top/removed.png","fqdn":"rugmerfer.top","domain":"rugmerfer.top","tld":"top"},"ip":{"addr":"104.21.42.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rugmerfer.top/","date":"2026-09-05T15:24:59.242Z","timestamp":1788621899242,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rugmerfer.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 10:45:01 GMT","end":"Thu, 29 Oct 2026 11:44:51 GMT"},"fingerprint":{"sha1":"FB:DE:33:DD:11:C2:3A:15:94:A5:96:69:86:FB:8E:E3:2F:0E:86:B4","sha256":"62:D6:4D:63:C3:2F:8B:18:E7:90:D0:47:43:BF:8C:54:78:C8:09:A8:52:4C:22:14:E4:DC:AE:6E:D2:C5:9C:53"}}},"request":{"raw":"GET /removed.png HTTP/1.1\r\nHost: rugmerfer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rugmerfer.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 15:24:59 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=6,i=?0\r\nlast-modified: Sat, 05 Sep 2026 14:00:17 GMT\r\netag: \"6a9c2071-11fc\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 2066\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YyQ356EWk5S5tdqqJ7aW%2BAMCgfvKF3RLREF0uoC%2BIPpUOmbG9vP7YNz160mudRhCzgtJNKKKpmfJpKfD%2FMyMiTMRu6cggkiVDDVwXTzuaJsSm0Tcj2O0Tqqq6P40AjCI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3663e764e991525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4604\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4604,"size_decoded":5340,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"cfcbf3d1d9fb5d9f15bbb08f1b7ad21e","sha1":"dd749212b424d1fc5c5b9827364e82b168e72418","sha256":"b0995b690dea821b02321568cefc0a175f73d1f10ab5cb37b7026efa3a733542","sha512":"f72eb088266a7e837c2bd51805036e6b1a720ab4f2cacca0141857908356b1a7342e044fe9ea1edb33a81f6f9530f20ed8c7af99439c7910d2334bb66ba6f87f","ssdeep":"96:xK+nEcl0vaoXX+OoecIrXqx91rU5oa1T4GOZCiO0sluyv:xpzl0vvr1c4625oaWGOZCiZsRv","tlshash":"6f916d979d3dc052807960bafc826b860e379d761b43bf981a3c3d57801bcd2e2598ed","first_seen":"2026-09-05T14:51:14.697938Z","last_seen":"2026-09-05T15:25:32.463503Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rugmerfer.top/api/config","fqdn":"rugmerfer.top","domain":"rugmerfer.top","tld":"top"},"ip":{"addr":"104.21.42.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rugmerfer.top/","date":"2026-09-05T15:24:58.831Z","timestamp":1788621898831,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rugmerfer.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 10:45:01 GMT","end":"Thu, 29 Oct 2026 11:44:51 GMT"},"fingerprint":{"sha1":"FB:DE:33:DD:11:C2:3A:15:94:A5:96:69:86:FB:8E:E3:2F:0E:86:B4","sha256":"62:D6:4D:63:C3:2F:8B:18:E7:90:D0:47:43:BF:8C:54:78:C8:09:A8:52:4C:22:14:E4:DC:AE:6E:D2:C5:9C:53"}}},"request":{"raw":"GET /api/config HTTP/1.1\r\nHost: rugmerfer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rugmerfer.top/\r\ncontent-language: en-US,q=0.8;en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 15:24:59 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1msyRIhWCpmOP3YQEZ4DyJeVQRFYixLG%2F3WpA74UZCmedK0bdZGCq5Dv4Z8OVQg2bZ7p6mkcL5WIY%2Fdap%2BlKoLpKclE5LpTUnG1z5gu2wEM3KdH3Au5yb9pbEKmm8bXC\"}]}\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a3663e73bde61525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":218,"size_decoded":949,"mime_type":"text/plain; charset=utf-8","magic":"data","md5":"15703be7af5910b5f56992f0a349bbae","sha1":"7f6a9f11bdb8fa7bed399d1e8721946371cc6016","sha256":"2e3d4f5f3ab530190d98c762aa0369e7bf5ad5d98d9d7da33ac6fdbcc5bd5796","sha512":"455ac565baaf5874c57f61dd17889f97b18e7fb25a970705f707fdf17e47a32e193e2374cc00dc099f178e886728e3a1703cdbb741e5caf3cf83a3af5040ade6","ssdeep":"","tlshash":"9fe07d496542a9355218f20a170185a2ced7b07c4b14ddf5d1186a0ce2e95a421dfa5f","first_seen":"2026-09-05T15:25:32.465009Z","last_seen":"2026-09-05T15:25:32.465009Z","times_seen":1,"resource_available":true,"data":null}},"time_used":538,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":538,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rugmerfer.top/api/visit","fqdn":"rugmerfer.top","domain":"rugmerfer.top","tld":"top"},"ip":{"addr":"104.21.42.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rugmerfer.top/","date":"2026-09-05T15:24:58.933Z","timestamp":1788621898933,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rugmerfer.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 10:45:01 GMT","end":"Thu, 29 Oct 2026 11:44:51 GMT"},"fingerprint":{"sha1":"FB:DE:33:DD:11:C2:3A:15:94:A5:96:69:86:FB:8E:E3:2F:0E:86:B4","sha256":"62:D6:4D:63:C3:2F:8B:18:E7:90:D0:47:43:BF:8C:54:78:C8:09:A8:52:4C:22:14:E4:DC:AE:6E:D2:C5:9C:53"}}},"request":{"raw":"POST /api/visit HTTP/1.1\r\nHost: rugmerfer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rugmerfer.top/\r\nOrigin: https://rugmerfer.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 15:24:59 GMT\r\ncontent-type: application/json\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IZUJtvRF50hvVGCeP%2FC%2FNzFEUpnYdOM1ZXjJJThJdMaeqOsMrnG9XLAlf1lLQcB0TOBXpmC8OByZrnHEqgLhpzlFAE975CnrALF5Ruvjq27MOJTajCoKH7AbtfeDxQfI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3663e745e1f1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":708,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-09-21T08:49:00.72975Z","times_seen":472250,"resource_available":true,"data":null}},"time_used":638,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":638,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rugmerfer.top/launch-logo.png","fqdn":"rugmerfer.top","domain":"rugmerfer.top","tld":"top"},"ip":{"addr":"104.21.42.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rugmerfer.top/","date":"2026-09-05T15:24:56.811Z","timestamp":1788621896811,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rugmerfer.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 10:45:01 GMT","end":"Thu, 29 Oct 2026 11:44:51 GMT"},"fingerprint":{"sha1":"FB:DE:33:DD:11:C2:3A:15:94:A5:96:69:86:FB:8E:E3:2F:0E:86:B4","sha256":"62:D6:4D:63:C3:2F:8B:18:E7:90:D0:47:43:BF:8C:54:78:C8:09:A8:52:4C:22:14:E4:DC:AE:6E:D2:C5:9C:53"}}},"request":{"raw":"GET /launch-logo.png HTTP/1.1\r\nHost: rugmerfer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rugmerfer.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 15:24:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Sat, 05 Sep 2026 14:00:19 GMT\r\netag: \"6a9c2073-6574\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 2066\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YUOK1RfBdlCB8FFm1j1d0VciDL09OneQeoDKXzRqRJ%2FlDFEId%2BmzgI%2Fh%2FZHp5nO8DKqQBf3j5O2e659LvOvtkPiaTf26HttV8cFzboIvHf3Q0%2B46HgljzbGEaV%2BPITDn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3663e671c6e1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25972\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25972,"size_decoded":26712,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"a2191eb448770441f4598e128ccf88e6","sha1":"6b882ce96fc8de00b073024efd701cdd2467374c","sha256":"f12af2e5931f12489654c3c2780100a81892557076aa83649589f256e41b8d11","sha512":"cd7549c5e4dc495fb95cb7d7475be2b66b6f092f908b3b6b429ce4e908eeb936cbfda172cefdb8ec1568bffa40bd4dab72a0734961514c4e713c56aa71c473f1","ssdeep":"768:grOHL58GcKPDSU8mfZCF0C6B6UMfzMoHuP+2vvRVOU:gra8Gc4DtCj6BBMvuPPvZJ","tlshash":"8ec2e17831bf649cc9d4a2f4c376796ca210a4ee02eaa4705d971dd1f1e1d085f23cae","first_seen":"2026-09-05T14:51:14.718008Z","last_seen":"2026-09-05T15:25:32.467863Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rugmerfer.top/brick.png","fqdn":"rugmerfer.top","domain":"rugmerfer.top","tld":"top"},"ip":{"addr":"104.21.42.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rugmerfer.top/","date":"2026-09-05T15:24:56.817Z","timestamp":1788621896817,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rugmerfer.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 10:45:01 GMT","end":"Thu, 29 Oct 2026 11:44:51 GMT"},"fingerprint":{"sha1":"FB:DE:33:DD:11:C2:3A:15:94:A5:96:69:86:FB:8E:E3:2F:0E:86:B4","sha256":"62:D6:4D:63:C3:2F:8B:18:E7:90:D0:47:43:BF:8C:54:78:C8:09:A8:52:4C:22:14:E4:DC:AE:6E:D2:C5:9C:53"}}},"request":{"raw":"GET /brick.png HTTP/1.1\r\nHost: rugmerfer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rugmerfer.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 15:24:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Sat, 05 Sep 2026 14:00:16 GMT\r\netag: \"6a9c2070-53e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 2066\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0dKErqR8uhWhbFPv9yqsHXjsShgIX1SDGaAxFi%2BYB2QgzgH03CRdk5VcZlNutF3hGbJ%2Bk%2FCSpXfuoMoWj%2BqsjLekc3FG3a3nYZnFSerI54zOWrfcMGMgjxIP2rojg%2B89\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3663e671c721525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1342\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1342,"size_decoded":2078,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"49697e70545b6b88a80e89f4a4c39a59","sha1":"7faa70c7a03f807acb57bf773e99121fe6d784cf","sha256":"8fe05f4f90b0f2d12ed966d44c9807e962b65004fedbf857c62fb91ac086bca6","sha512":"b017bc98af499aea573ba588ebd4f1dc5612b068b9e4235343c4d89cbc6fa9f907962f30be149b8cbb760656d787197b63b0d69f8e356d607c69761e07766190","ssdeep":"","tlshash":"a72105ba623fd2a8c27888e8203b9cd02087a1f4171fa607a22c31cbc84dc857a2a140","first_seen":"2026-09-05T14:51:14.719322Z","last_seen":"2026-09-05T15:25:32.469851Z","times_seen":2,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rugmerfer.top/refresh.png","fqdn":"rugmerfer.top","domain":"rugmerfer.top","tld":"top"},"ip":{"addr":"104.21.42.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rugmerfer.top/","date":"2026-09-05T15:24:56.823Z","timestamp":1788621896823,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rugmerfer.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 10:45:01 GMT","end":"Thu, 29 Oct 2026 11:44:51 GMT"},"fingerprint":{"sha1":"FB:DE:33:DD:11:C2:3A:15:94:A5:96:69:86:FB:8E:E3:2F:0E:86:B4","sha256":"62:D6:4D:63:C3:2F:8B:18:E7:90:D0:47:43:BF:8C:54:78:C8:09:A8:52:4C:22:14:E4:DC:AE:6E:D2:C5:9C:53"}}},"request":{"raw":"GET /refresh.png HTTP/1.1\r\nHost: rugmerfer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rugmerfer.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 15:24:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Sat, 05 Sep 2026 14:00:16 GMT\r\netag: \"6a9c2070-156\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 2066\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0r4koatVeceKFLjAWsxyLWLE4SkjAD12ct%2B33SHeVPKbsLuwclyLkri9f4d%2Bf7wQC0%2FAZG91QQKJ0kvrXzJw51FjAiOc%2FvAzUvSLSss%2FvrqnJM3t%2FLG9wbypib4WDpwN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3663e672c771525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 342\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":342,"size_decoded":1079,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"b2bc17a8c738479837577f050eac82ef","sha1":"738ae693ad7d624b2678d3af2871760f7a669511","sha256":"8299386d8285bdc72825ed3427f488ae9407136ba13b0a42e0d6d894a4ff05ef","sha512":"eb1bcae1b066fc8bc9144ae112c43f316308c9a309808a78c48877e5db0da56fb29bf7e8eb78eb9fead04208e828810c9f9dec98982bb3a61f9887249ae22a7a","ssdeep":"","tlshash":"07e02dbde80503d3e0880a780d8035bee12e34382e48fb2d3e4bdf2804ed21c3e12400","first_seen":"2026-09-05T14:51:14.701768Z","last_seen":"2026-09-05T15:25:32.471203Z","times_seen":2,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rugmerfer.top/foot-left.png","fqdn":"rugmerfer.top","domain":"rugmerfer.top","tld":"top"},"ip":{"addr":"104.21.42.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rugmerfer.top/","date":"2026-09-05T15:24:56.831Z","timestamp":1788621896831,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rugmerfer.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 10:45:01 GMT","end":"Thu, 29 Oct 2026 11:44:51 GMT"},"fingerprint":{"sha1":"FB:DE:33:DD:11:C2:3A:15:94:A5:96:69:86:FB:8E:E3:2F:0E:86:B4","sha256":"62:D6:4D:63:C3:2F:8B:18:E7:90:D0:47:43:BF:8C:54:78:C8:09:A8:52:4C:22:14:E4:DC:AE:6E:D2:C5:9C:53"}}},"request":{"raw":"GET /foot-left.png HTTP/1.1\r\nHost: rugmerfer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rugmerfer.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 15:24:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Sat, 05 Sep 2026 14:00:17 GMT\r\netag: \"6a9c2071-2e056\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 2066\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9xgJCH8QfPk2cQF8ZfeuqswC1I7MY%2Fa6SoFkEny06ii%2FAxvleLvrlIzkaocHeFCi5PAcAvpc9g1iFDpBUWMrqtwSJUyLOQYrTuUkMz%2BUOQLtcaxw1CKzSTHs2d21qjNP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3663e673c7f1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 188502\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":188502,"size_decoded":189238,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"f8c62f74888b059182f4a91cb34cb888","sha1":"396484edcdc0cbb905bd66f8429384cd4310aa94","sha256":"e4db05cad1e05e6e706c543d8ca392816c1179605329c0cd4e97c09e0ec6af98","sha512":"e7685e35af5f7ae4ffb54f7b5b7fce2f56b5b5e6c9960889a0aff956484ca5302cdbe55390d84bd8826f68f14f5fc29ebdc08128a163323e6527efe08bd59eed","ssdeep":"3072:+ouf3tuN2NEMdugYpcwVqUfFDz/C44GMSsnk2iel+rP0hK7V35ziQw9C:+oE8NTyzAqoDz/CGsk2/+rchKp3Vn","tlshash":"370412661875087781a3ab9120df0e5b6fecca4be6848db40dde2ec6ac07f535e38d15","first_seen":"2026-09-05T14:51:14.720465Z","last_seen":"2026-09-05T15:25:32.472629Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rugmerfer.top/bg-stars.webp","fqdn":"rugmerfer.top","domain":"rugmerfer.top","tld":"top"},"ip":{"addr":"104.21.42.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rugmerfer.top/","date":"2026-09-05T15:24:57.655Z","timestamp":1788621897655,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rugmerfer.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 10:45:01 GMT","end":"Thu, 29 Oct 2026 11:44:51 GMT"},"fingerprint":{"sha1":"FB:DE:33:DD:11:C2:3A:15:94:A5:96:69:86:FB:8E:E3:2F:0E:86:B4","sha256":"62:D6:4D:63:C3:2F:8B:18:E7:90:D0:47:43:BF:8C:54:78:C8:09:A8:52:4C:22:14:E4:DC:AE:6E:D2:C5:9C:53"}}},"request":{"raw":"GET /bg-stars.webp HTTP/1.1\r\nHost: rugmerfer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rugmerfer.top/index-Cf6pVGfC-ms76v.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 15:24:57 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Sat, 05 Sep 2026 14:00:19 GMT\r\netag: \"6a9c2073-16428\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 2066\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=10GhoNOiGQpyowihP6UfE3Z2Rg51LeWQvVcEhrBWWgvgPYVKrW3qScDrAffTxKFrRfPsZ%2Fh3Jkp4d%2Byskwv6gS1hfm4fpK9fXX29wrJL225x6fHr8r5qNCwvLDjwV6zZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3663e6c5d0b1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 91176\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91176,"size_decoded":91910,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"65ea911d776c58c9e7a50479100baca9","sha1":"17eb1b430a2856233d0a40f97acd31d8917588ed","sha256":"58d323c5dab6928a05f828829b39e4f3ed5b00a2b11fec3eaf0e98371fa1bb6c","sha512":"949a7c6fbc93c7b869859e96e8b0d7cff779fa5d97d01954253ef3a981f9fb1046a46de0dec0cca08a59d82d05efb65b8443df32404f3c7742d9ee94f2d4b96c","ssdeep":"1536:Qfus1oQsxIoqEZZ5/3PZ3fTmrqW5djEbSjsSU1PLXlF4tRvDtIOVC:QGs1PsxIoqEZXZTQlEbSj/Xvw","tlshash":"869302a3919f6fa361d61ab2c2e48bdb4af547350fff040a05a1b2c38564d159eb122d","first_seen":"2026-09-05T14:51:14.695163Z","last_seen":"2026-09-05T15:25:32.474351Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rugmerfer.top/globe.png","fqdn":"rugmerfer.top","domain":"rugmerfer.top","tld":"top"},"ip":{"addr":"104.21.42.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rugmerfer.top/","date":"2026-09-05T15:24:56.813Z","timestamp":1788621896813,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rugmerfer.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 10:45:01 GMT","end":"Thu, 29 Oct 2026 11:44:51 GMT"},"fingerprint":{"sha1":"FB:DE:33:DD:11:C2:3A:15:94:A5:96:69:86:FB:8E:E3:2F:0E:86:B4","sha256":"62:D6:4D:63:C3:2F:8B:18:E7:90:D0:47:43:BF:8C:54:78:C8:09:A8:52:4C:22:14:E4:DC:AE:6E:D2:C5:9C:53"}}},"request":{"raw":"GET /globe.png HTTP/1.1\r\nHost: rugmerfer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rugmerfer.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 15:24:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Sat, 05 Sep 2026 14:00:16 GMT\r\netag: \"6a9c2070-1650\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 2066\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F2bcN3fNrpn3t3e9qm3FR63q%2BHgvjatyon21zBABUWa8MgTL99%2FRHS1Vn1bkhn2o89pjKYaKxzS31TSsOkZSiIj5%2FYkAsHkb72p0KcV7EA2YcoLyypI%2FcpLCty958V%2Bq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3663e671c6f1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5712\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5712,"size_decoded":6451,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"12a1c0b2bd96c9cb33a3fae302c0aec8","sha1":"4258072bcf2598291925c6e787df36f775a1c0a5","sha256":"16740ed77d2ada4d967b2b0f68dd3d13a1be9decd784164ad6805645883788cd","sha512":"bdd0aed2d165f2ea19908ff76a669ae63b4bcf149aa177a7799fdaa5b5643f32a93ba4473e4958bddb36862a013c52e717e0b5e1ea8284670bd27d0edd9ff6f5","ssdeep":"96:a+VrNj5T6z/ianorkNP4n8tJpqiVVcfG8lXhvG8EXio1XUHSLbDihS+cG2F0HQFV:a+VrNjxAiNoin8t3rp8VhYXiouyvihBU","tlshash":"27c19e2c1532f10fda5371a3a64937f17f8d045d82995d669f07c136b104a328fa923b","first_seen":"2026-09-05T14:51:14.705127Z","last_seen":"2026-09-05T15:25:32.4762Z","times_seen":2,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rugmerfer.top/telegram1.png","fqdn":"rugmerfer.top","domain":"rugmerfer.top","tld":"top"},"ip":{"addr":"104.21.42.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rugmerfer.top/","date":"2026-09-05T15:24:56.829Z","timestamp":1788621896829,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rugmerfer.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 10:45:01 GMT","end":"Thu, 29 Oct 2026 11:44:51 GMT"},"fingerprint":{"sha1":"FB:DE:33:DD:11:C2:3A:15:94:A5:96:69:86:FB:8E:E3:2F:0E:86:B4","sha256":"62:D6:4D:63:C3:2F:8B:18:E7:90:D0:47:43:BF:8C:54:78:C8:09:A8:52:4C:22:14:E4:DC:AE:6E:D2:C5:9C:53"}}},"request":{"raw":"GET /telegram1.png HTTP/1.1\r\nHost: rugmerfer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rugmerfer.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 15:24:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Sat, 05 Sep 2026 14:00:16 GMT\r\netag: \"6a9c2070-1ae\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 2066\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D5yC8Ml30kHScK73qg%2FGlV3%2Ffjdq8zTf%2BXlLyYmLfRNu96HsRieZEDlxpzNADEsQDkDYzZGCZIIdavE8nNzz9CQdequ2QNefutrs6imH3Nd5pYn3%2FUIm%2BH2FwaDsrglJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3663e673c7d1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 430\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":430,"size_decoded":1165,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"4781d6ed6b674cb907079896ccd1f9a2","sha1":"34d153e9cd9b62742ece3c4d16c79f2d02ce2817","sha256":"64055255c17e2c1aad7cd3c83fd03035d5640a3bd23160e52b3038ae67a321e8","sha512":"864d0119876dc33145b47d551dd7a4d063b2c151d86ab7935c719ed3e74221530eb47e202dd9b63854420a5d518ef3a960f6b250ad743608ac4d9db1c22fea5c","ssdeep":"","tlshash":"c1e02355c3d298adcb95477384518a36c98a10450123981018308d4396e04e1ae76320","first_seen":"2026-09-05T14:51:14.702756Z","last_seen":"2026-09-05T15:25:32.478017Z","times_seen":2,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"rugmerfer.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}