{"report_id":"fa82055b-9810-4cd3-8688-e80dd159f4a0","version":0,"status":"done","tags":[],"date":"2026-08-31T08:24:04Z","url":{"schema":"http","addr":"onlymarms.meme-giveaway.fun/","fqdn":"onlymarms.meme-giveaway.fun","domain":"meme-giveaway.fun","tld":"fun"},"ip":{"addr":"172.67.140.23","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"onlymarms.meme-giveaway.fun/","fqdn":"onlymarms.meme-giveaway.fun","domain":"meme-giveaway.fun","tld":"fun"},"title":"$OnlyMarms — The OnlyMarms Meme Coin Fan Page","dom":{"size":72617,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (63092)","md5":"574ce698719fa620b8f76284e6641c85","sha1":"942cd9a2ee6025a2c5a15bbe14ea16f27a885545","sha256":"8ee7f1b767e71f703bac1581208119b48c9c7ff2038e3f056a8adb39af8ee1e0","sha512":"34de35e281c3e7e731c4c63aacda7f36e8145203280d364363a75b3cc125583a521fc3261f76fd3f9b1f47daaadc947c6606423a1a27c9be7a5444b28c75f8ad","ssdeep":"768:mYMzQH2L0r82It4uSRhKut5NFgl+FU+xHyvfSDIJPJWf3b8fzwZPROHXL0hDgmwy:mYMzqyrYpKI5ux9sH","tlshash":"e063b660b150193f361787fab1d4ef59a0a19309c9235528f3fc41e36bcadb79eb21a4","dom_hash":"domhash48a868d8295af10a4c30240554f0dcf9","first_seen":"2026-08-22T10:22:21.179476Z","last_seen":"2026-08-31T08:24:06.419341Z","times_seen":20,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"onlymarms.meme-giveaway.fun/","fqdn":"onlymarms.meme-giveaway.fun","domain":"meme-giveaway.fun","tld":"fun"},"ip":{"addr":"172.67.140.23","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-05T08:24:04Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"onlymarms.meme-giveaway.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"onlymarms.meme-giveaway.fun","ip":{"addr":"104.21.87.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-21","domain_rank":0,"first_seen":"2026-08-31T07:44:18.9048Z","last_seen":"2026-08-31T07:44:19.545886Z","alert_count":18,"request_count":18,"received_data":3577061,"sent_data":9676,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Lovable","description":"Lovable is an AI-powered, no-code platform that lets users build functional web apps from natural language prompts instead of writing code.","website":"https://lovable.dev/","common_platform_enumeration":"","icon":"Lovable.png","categories":["CMS"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-30T22:24:29.229878Z","alert_count":0,"request_count":1,"received_data":10792,"sent_data":543,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"tuesday-corporal.web-dist.cc","ip":{"addr":"172.67.169.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-02","domain_rank":0,"first_seen":"2026-08-22T10:22:17.370063Z","last_seen":"2026-08-31T07:36:10.104765Z","alert_count":0,"request_count":1,"received_data":646,"sent_data":502,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"onlymarms.meme-giveaway.fun/","fqdn":"onlymarms.meme-giveaway.fun","domain":"meme-giveaway.fun","tld":"fun"},"ip":{"addr":"104.21.87.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c9bdbad6ebbbd133c934040cb8a6ad5b","sha1":"d603d374ed67b4ecde1c7e201b4b41e1329ee440","sha256":"5acea54eea175e62fe005412108b10898d75bfb3acf92d02c159258cf5b1cbb3","sha512":"5ebd5f4ac702c594d669baf0b2370ae066dd00add484d5ac6e967f4f806e07548bce92ac8f0d7a1c77a1523f5a3ef2e3a926101f27c71c5aaf7027de4a1c1a2b","ssdeep":"","tlshash":"7de02e286aa624f925b338d2cb1eb282e86000735081c801fc1cf54a0f84e6838b1fc9","size":311,"data":"","first_seen":"2026-06-10T12:51:54.41043Z","last_seen":"2026-08-31T08:24:06.421704Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"onlymarms.meme-giveaway.fun/E_X1vFsgVQzOyK5W.jpg","fqdn":"onlymarms.meme-giveaway.fun","domain":"meme-giveaway.fun","tld":"fun"},"ip":{"addr":"104.21.87.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onlymarms.meme-giveaway.fun/index_2","date":"2026-08-31T08:23:35.245Z","timestamp":1788164615245,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meme-giveaway.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 00:23:52 GMT","end":"Thu, 19 Nov 2026 01:23:49 GMT"},"fingerprint":{"sha1":"D6:1C:53:9A:15:32:C1:6F:87:4F:BD:D1:1C:80:32:5A:71:00:CA:AE","sha256":"D7:B2:64:BC:90:AC:7D:2E:81:AB:F4:B6:85:DC:67:BC:CC:58:BA:99:86:7E:C2:0A:C2:30:A0:70:58:1D:34:EA"}}},"request":{"raw":"GET /E_X1vFsgVQzOyK5W.jpg HTTP/1.1\r\nHost: onlymarms.meme-giveaway.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onlymarms.meme-giveaway.fun/index_2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 31 Aug 2026 08:23:35 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"37e29d6224ef5dd08110c95b0a84fa75\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mos6HPpWvYRIKup66eyE2vK5pxIzfFKr62t9g7ODgda9b96QZo4j2MCrrlbKn3m3JbcpuBa08PucPCwSJBwrfFoCVFO9ahHrRoV1tOR7zxm0zOsJGRrNfvxeAaDpGjArjJZh9KL9aJ2Y%2BKnvAaA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a33aa24d4e2f0b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 106917\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106917,"size_decoded":107591,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x675, components 3","md5":"b86cc5c3299d39d686ce3accec56cfbb","sha1":"5ff5ca062ee64257d1da5d11771c768ed36fad95","sha256":"bb1551e13710f1b737dbe2fb2781bc02af632bbbe3952076f69057460ba06793","sha512":"85ceaaa874c04a288ed702f2b7092960b73949dd99fd1a4ecb183b8b8a1b35e0e2e4e3cb817f9f66a76f9da9376ae433f12545f7334081631b86f922a1b3b286","ssdeep":"3072:C72USd2vUaFiJVI2xBYurSYwKgvQqyS89K:C72USd8U5VFxBD8KgYLSGK","tlshash":"9fa3120bd24db439961cd4ad1623f49bb24fcb612c7d5b90632d0fc74ee10eb89a5b4a","first_seen":"2026-08-22T10:22:21.17321Z","last_seen":"2026-08-31T08:24:06.403812Z","times_seen":11,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"onlymarms.meme-giveaway.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onlymarms.meme-giveaway.fun/css2.css","fqdn":"onlymarms.meme-giveaway.fun","domain":"meme-giveaway.fun","tld":"fun"},"ip":{"addr":"104.21.87.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://onlymarms.meme-giveaway.fun/","date":"2026-08-31T08:23:34.612Z","timestamp":1788164614612,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meme-giveaway.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 00:23:52 GMT","end":"Thu, 19 Nov 2026 01:23:49 GMT"},"fingerprint":{"sha1":"D6:1C:53:9A:15:32:C1:6F:87:4F:BD:D1:1C:80:32:5A:71:00:CA:AE","sha256":"D7:B2:64:BC:90:AC:7D:2E:81:AB:F4:B6:85:DC:67:BC:CC:58:BA:99:86:7E:C2:0A:C2:30:A0:70:58:1D:34:EA"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: onlymarms.meme-giveaway.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onlymarms.meme-giveaway.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 31 Aug 2026 08:23:34 GMT\r\netag: W/\"8e17382163771bfff2c7fca38ed1c16d\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TD03hGXi%2FmC%2FZTPb5hjEPvgO2LWgWwFV%2FRUhJZzUNee3io7t3MAbKlFmZNheYAjFEbueoanTTWdOZtbcsFQcn%2FF9e5PZo%2B3XU8rJyPG6uQM49A01Vd4F%2Fi0EVJbXyJXQwXFNvF864c7rG2%2BT14s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a33aa2495dde0b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9354,"size_decoded":1473,"mime_type":"text/css","magic":"ASCII text","md5":"411e6f467bf4f7d600ae2f1ce99e6f8c","sha1":"b07230411397dc18009e2febd5ada64bfe695ebb","sha256":"74b38320cae596780b83b66cbf79cfddccb4c0dce4c3417fe8f999167b3bfe9f","sha512":"58bd2b1cd1b2a1d033394426ceb0bbcde7158a3a47b57559fd9d5b30bf23fb6455c620c53763c43ef16df156a3504c8e7be4950e0304be432ba52b40cb157b2f","ssdeep":"192:6MqwbcVMg6bm/O9pOnZnsmO8OaTOLOkaRLNLaiLEua/Lrta4c:HDWkTmbLOel4o","tlshash":"ca12bc90087a6200d7971cc233ce7f36ae5db2506445ea386ffe1458bc9ac6563b1b4d","first_seen":"2026-08-22T10:22:21.171988Z","last_seen":"2026-08-31T08:24:06.405704Z","times_seen":11,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"onlymarms.meme-giveaway.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://onlymarms.meme-giveaway.fun/","date":"2026-08-31T08:23:34.614Z","timestamp":1788164614614,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onlymarms.meme-giveaway.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 31 Aug 2026 08:23:34 GMT\r\ndate: Mon, 31 Aug 2026 08:23:34 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":1447,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-08-31T11:08:10.845496Z","times_seen":42265,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":2,"connect":17,"send":0,"wait":35,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onlymarms.meme-giveaway.fun/index_1.html","fqdn":"onlymarms.meme-giveaway.fun","domain":"meme-giveaway.fun","tld":"fun"},"ip":{"addr":"104.21.87.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://onlymarms.meme-giveaway.fun/","date":"2026-08-31T08:23:34.619Z","timestamp":1788164614619,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meme-giveaway.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 00:23:52 GMT","end":"Thu, 19 Nov 2026 01:23:49 GMT"},"fingerprint":{"sha1":"D6:1C:53:9A:15:32:C1:6F:87:4F:BD:D1:1C:80:32:5A:71:00:CA:AE","sha256":"D7:B2:64:BC:90:AC:7D:2E:81:AB:F4:B6:85:DC:67:BC:CC:58:BA:99:86:7E:C2:0A:C2:30:A0:70:58:1D:34:EA"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: onlymarms.meme-giveaway.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onlymarms.meme-giveaway.fun/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 307 \r\ndate: Mon, 31 Aug 2026 08:23:34 GMT\r\nserver-timing: cfExtPri\r\nlocation: /index_1\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NcaQdi0oN%2BUq4nfnk%2FCGpEyHrZ6UYgBTWNOeF1b8i%2Bu9NxJ13RoycXg7QhjmKPk9GcmXKPvzZv2jkj6oYQkoDVpdwpcyCQ1Qid7gkIVoYElAERgwHQ2IjspLeDpCSW121TmxQlDNTNaK74mbNzM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a33aa2495de10b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T11:32:42.475929Z","times_seen":18201525,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"onlymarms.meme-giveaway.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onlymarms.meme-giveaway.fun/marmot-hero.png","fqdn":"onlymarms.meme-giveaway.fun","domain":"meme-giveaway.fun","tld":"fun"},"ip":{"addr":"104.21.87.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onlymarms.meme-giveaway.fun/","date":"2026-08-31T08:23:34.626Z","timestamp":1788164614626,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meme-giveaway.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 00:23:52 GMT","end":"Thu, 19 Nov 2026 01:23:49 GMT"},"fingerprint":{"sha1":"D6:1C:53:9A:15:32:C1:6F:87:4F:BD:D1:1C:80:32:5A:71:00:CA:AE","sha256":"D7:B2:64:BC:90:AC:7D:2E:81:AB:F4:B6:85:DC:67:BC:CC:58:BA:99:86:7E:C2:0A:C2:30:A0:70:58:1D:34:EA"}}},"request":{"raw":"GET /marmot-hero.png HTTP/1.1\r\nHost: onlymarms.meme-giveaway.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onlymarms.meme-giveaway.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 31 Aug 2026 08:23:34 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"2aa35438001b73022b00a2ca2a96af2d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T6Gj34RzSZVfXcoSxOFya%2FDYEKdMKZIF%2Fu9DhlsgLw8rC47fC8vWHjyca42BTzuMKJHCQJVgMdlJUSmB0wYUuqQ4P2QdydC9lVmz%2F3BAim8rfAEcVIRMoBp8nkDxBsEJBs6hUmMli85Cpm9d978%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a33aa2496de20b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 247856\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":247856,"size_decoded":248533,"mime_type":"image/png","magic":"PNG image data, 371 x 539, 8-bit/color RGBA, non-interlaced","md5":"3e283e2e8898d96e6055508f74d6c4bb","sha1":"d8639b07bf577955a9427f4d20be3d5cde918d06","sha256":"b147ab896796583cf069955967c70d1458d6e3b3e1646b2ca691aa514e778415","sha512":"4c6a289b9ab0b65371af9c170d12697364dcba63179cab4d10c52a8188e866719b58c06ddd5cea67181bb12cd9e190c7ed38e9309f50df8cda2cb936bb50fb0f","ssdeep":"3072:JnCvb5zHVCp+tGca8WSzH0yxI07TuR11XPFbFMdcbgbB6pujTx1TswPn6Ugx2vBY:0vb5G8HHaRJuZB6c/IwCRIvBY","tlshash":"ac3413ed41e90bb1ea71117914cbb27785c02a9337649d9791c9ee38942c32cd26cfbb","first_seen":"2026-08-22T10:22:21.183412Z","last_seen":"2026-08-31T08:24:06.409397Z","times_seen":11,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"onlymarms.meme-giveaway.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onlymarms.meme-giveaway.fun/09cca2ba192d3f4bed0a85e225491784718c133a.svg","fqdn":"onlymarms.meme-giveaway.fun","domain":"meme-giveaway.fun","tld":"fun"},"ip":{"addr":"104.21.87.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onlymarms.meme-giveaway.fun/","date":"2026-08-31T08:23:34.775Z","timestamp":1788164614775,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meme-giveaway.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 00:23:52 GMT","end":"Thu, 19 Nov 2026 01:23:49 GMT"},"fingerprint":{"sha1":"D6:1C:53:9A:15:32:C1:6F:87:4F:BD:D1:1C:80:32:5A:71:00:CA:AE","sha256":"D7:B2:64:BC:90:AC:7D:2E:81:AB:F4:B6:85:DC:67:BC:CC:58:BA:99:86:7E:C2:0A:C2:30:A0:70:58:1D:34:EA"}}},"request":{"raw":"GET /09cca2ba192d3f4bed0a85e225491784718c133a.svg HTTP/1.1\r\nHost: onlymarms.meme-giveaway.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onlymarms.meme-giveaway.fun/styles-BsJNR3Vj.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 31 Aug 2026 08:23:34 GMT\r\netag: W/\"f5e4b2e40b6923f7e3fc7e7bddd485f3\"\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=naUzX3DK2ebn5R6MsVct6hF0EMRIkE3LUns9toV%2FKla4RUFZ0BrV17eVlIZh0PFgAtMFzjiLHovg394u4V59%2BXPuUTbdrOoBhmedLNhFD8UQThcqJ85aF2LsEBIi8O62gGCOG1Rm5yQCx490UC4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a33aa24a5de90b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":308,"size_decoded":900,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e7cde171acf37859caabbd4da4a9c9fc","sha1":"09cca2ba192d3f4bed0a85e225491784718c133a","sha256":"11bcd113a24ae58895fdae6e6745c71456d77e1b6f74b0e8e8a1318dd5132d1f","sha512":"759abc370efbb1f1b3e1b213cc8300062a7f68b749d7dcde341315e72793a378dff6267d15519063f0255825d19a6cd9f178a0633e66a7f665b49c6098326b36","ssdeep":"","tlshash":"c9e07d5848f5558f4d0c53f18d488ca05c2ee1d401bd1b725cbb4140c20e0116de7238","first_seen":"2026-08-22T10:22:21.190319Z","last_seen":"2026-08-31T08:24:06.410512Z","times_seen":11,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"onlymarms.meme-giveaway.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onlymarms.meme-giveaway.fun/-nFhOHM81r4j6k0gjAW3mujVU2B2G_VB0PD2.woff2","fqdn":"onlymarms.meme-giveaway.fun","domain":"meme-giveaway.fun","tld":"fun"},"ip":{"addr":"104.21.87.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://onlymarms.meme-giveaway.fun/","date":"2026-08-31T08:23:34.841Z","timestamp":1788164614841,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meme-giveaway.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 00:23:52 GMT","end":"Thu, 19 Nov 2026 01:23:49 GMT"},"fingerprint":{"sha1":"D6:1C:53:9A:15:32:C1:6F:87:4F:BD:D1:1C:80:32:5A:71:00:CA:AE","sha256":"D7:B2:64:BC:90:AC:7D:2E:81:AB:F4:B6:85:DC:67:BC:CC:58:BA:99:86:7E:C2:0A:C2:30:A0:70:58:1D:34:EA"}}},"request":{"raw":"GET /-nFhOHM81r4j6k0gjAW3mujVU2B2G_VB0PD2.woff2 HTTP/1.1\r\nHost: onlymarms.meme-giveaway.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onlymarms.meme-giveaway.fun/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 31 Aug 2026 08:23:34 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: application/octet-stream\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"85d286179bd1c36c5d0dc3c63d56be3d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ToY4oEsXtzmsiRmJdRIhW5cTiGkEgs1BpLUb0C29cF71mCcRB7bVJ%2FBCNDP2gLYxBrF%2FGnvGR0nYf9MeMz5hNYDpbChMEdUv5yTWZVn5sm4l0Lt36Qb6nwmX6sqN3WwcUkM%2BYZpXR%2FF%2Fkm02ZPk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a33aa24acdec0b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 24572\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24572,"size_decoded":25270,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 24572, version 1.0","md5":"581414e1e5772fb61dd2de0efe6746c6","sha1":"b4de16f725d7403de71766d74cb79ee7fc47d1b9","sha256":"ed8b291611e32fa2d2900488dd48fc95faf0957b2ef7ddf1527e8d21dd9cf2df","sha512":"9f934be123abb4de1047c95021effd867b5f3cd352431fd2ce65a18d5866b487549531bbf0bf839770ad0c6fec2f5c37af650dd7d3bd9f11dd115c740145f7d8","ssdeep":"384:sTBxfZpbHUP71Xrp6tdJfuz4PQdl9J1pQGQl5SQUADVOlhsyF:sTBhb0P71sNf0xdl9s7Olhs+","tlshash":"2ab2e185177e2b48dd4221325d5fffd22d1e4be644fab386e82f27e14d640176e80687","first_seen":"2025-09-23T02:11:44.907793Z","last_seen":"2026-08-31T08:24:06.411483Z","times_seen":711,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"onlymarms.meme-giveaway.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onlymarms.meme-giveaway.fun/blumstein-abc-interview.mp4","fqdn":"onlymarms.meme-giveaway.fun","domain":"meme-giveaway.fun","tld":"fun"},"ip":{"addr":"104.21.87.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://onlymarms.meme-giveaway.fun/","date":"2026-08-31T08:23:34.630Z","timestamp":1788164614630,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meme-giveaway.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 00:23:52 GMT","end":"Thu, 19 Nov 2026 01:23:49 GMT"},"fingerprint":{"sha1":"D6:1C:53:9A:15:32:C1:6F:87:4F:BD:D1:1C:80:32:5A:71:00:CA:AE","sha256":"D7:B2:64:BC:90:AC:7D:2E:81:AB:F4:B6:85:DC:67:BC:CC:58:BA:99:86:7E:C2:0A:C2:30:A0:70:58:1D:34:EA"}}},"request":{"raw":"GET /blumstein-abc-interview.mp4 HTTP/1.1\r\nHost: onlymarms.meme-giveaway.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onlymarms.meme-giveaway.fun/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 31 Aug 2026 08:23:34 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: video/mp4\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\netag: \"62f820935098338075fb1d63673adf61\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lna6cjmdt%2BAX160pTwBo%2F8FMqtf3KnhbHklZr1Yn9YGSN7247wb1sGd9Hx7g0NdmhTmuWpqBTx3mR5Q6a88hpZBKqwAdzTkgVGly4tVXvlX2PQwyxuw3QV2MKjP3cRBUJdRRmA7EMOBbe7PZsMg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a33aa2497de40b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 853108\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":853108,"size_decoded":853735,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"c22a01db64b7431d5d1a96897df610f9","sha1":"1ff5f1a49de79b8e67e6fca4762db66730e97a64","sha256":"5693ea990ceca7cea58537626acaa7289c9c8a00baefb950db406f8ad7805d8f","sha512":"91bc5077aaf1afb101e0e78c2e451a45853386153c1f572c9676b2c49e41d38ed5cdd85675d16e467581e63871d56c1fd79f3c6dc5462ff36e52a5249bc95444","ssdeep":"24576:mvGppHCtMYctFkWdhQ4bi9HHdDFdOK3nMHAhOe2BgZSkse:mubitM5NdiRHhFdnkAseU6j","tlshash":"7f05238573d90629d13159fafcc6237663baf105e68e639bb39767b82cb17009c348d8","first_seen":"2026-08-22T10:22:21.185612Z","last_seen":"2026-08-31T08:24:06.412458Z","times_seen":11,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"onlymarms.meme-giveaway.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onlymarms.meme-giveaway.fun/favicon.png","fqdn":"onlymarms.meme-giveaway.fun","domain":"meme-giveaway.fun","tld":"fun"},"ip":{"addr":"104.21.87.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onlymarms.meme-giveaway.fun/","date":"2026-08-31T08:23:35.249Z","timestamp":1788164615249,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meme-giveaway.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 00:23:52 GMT","end":"Thu, 19 Nov 2026 01:23:49 GMT"},"fingerprint":{"sha1":"D6:1C:53:9A:15:32:C1:6F:87:4F:BD:D1:1C:80:32:5A:71:00:CA:AE","sha256":"D7:B2:64:BC:90:AC:7D:2E:81:AB:F4:B6:85:DC:67:BC:CC:58:BA:99:86:7E:C2:0A:C2:30:A0:70:58:1D:34:EA"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: onlymarms.meme-giveaway.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onlymarms.meme-giveaway.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 31 Aug 2026 08:23:35 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"b6f09be9c160934bf0340e09fd4cd90d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cFzp%2BVJM5y0sRvBdztHTNCUTzHqwZAzeTHAJdZPSp%2FFVm5yVDh3L%2BZhGWFzNOhe25bjGWjCE6SXXuxyc%2BHsdXeK%2B40pc93Fh0pVecGlcht2FV63Y9TpFG%2FTBJ450%2B1GU2itM1SW8FaCy61w%2BtlQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a33aa24d4e300b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 32346\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32346,"size_decoded":33035,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"20aa6a1cc0ddf357c06383a6f2869216","sha1":"34715246e8ce14b3749b8366bffb7846bcb15edf","sha256":"d35ffcb391a40b1c5e0c3438607beb8dafdc7686d23005d69deb64087cdf1f78","sha512":"61cbf7fa2e571202e72e7a3b5d3e7f0c2a7be675ef66ff7204a95e36a1546c9bf6b26dc5bce86260633dca6ab81e3be2463377ea302727432092dad74e4c2853","ssdeep":"768:UCoEClkwUkSIwOVMEI90Afi/LSiEIGmHzd6rZOdWp27dbKJL:mx9MEI90AfWLG0MNqWkdbK5","tlshash":"19e2e16c893c893603dda7e62e3e3e099593680053da8614247873da58e4f1eef9473e","first_seen":"2026-08-22T10:22:21.175051Z","last_seen":"2026-08-31T08:24:06.413502Z","times_seen":10,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"onlymarms.meme-giveaway.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tuesday-corporal.web-dist.cc/_nuxt/assets/index.js","fqdn":"tuesday-corporal.web-dist.cc","domain":"web-dist.cc","tld":"cc"},"ip":{"addr":"172.67.169.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onlymarms.meme-giveaway.fun/","date":"2026-08-31T08:23:34.609Z","timestamp":1788164614609,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"GET /_nuxt/assets/index.js HTTP/1.1\r\nHost: tuesday-corporal.web-dist.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://onlymarms.meme-giveaway.fun\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onlymarms.meme-giveaway.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 08:23:35 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RFRoXijRG02c%2Fh7w6GfcXt7ATnUV8kp4BscSlmbt7d6vkeNXgnMWtgb%2BrYAybg1SLK%2F34bV%2FlUpwg%2BposTbWIb725%2Bn1fftC4V9rZGN3LQhxZcIWGZ%2BmHasjGCJ5xyhZmUTKf5F1zTAahqBMlh6m\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-store, no-cache\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a33aa2498b14b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T11:32:42.475929Z","times_seen":18201525,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onlymarms.meme-giveaway.fun/styles-BsJNR3Vj.css","fqdn":"onlymarms.meme-giveaway.fun","domain":"meme-giveaway.fun","tld":"fun"},"ip":{"addr":"104.21.87.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://onlymarms.meme-giveaway.fun/","date":"2026-08-31T08:23:34.611Z","timestamp":1788164614611,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meme-giveaway.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 00:23:52 GMT","end":"Thu, 19 Nov 2026 01:23:49 GMT"},"fingerprint":{"sha1":"D6:1C:53:9A:15:32:C1:6F:87:4F:BD:D1:1C:80:32:5A:71:00:CA:AE","sha256":"D7:B2:64:BC:90:AC:7D:2E:81:AB:F4:B6:85:DC:67:BC:CC:58:BA:99:86:7E:C2:0A:C2:30:A0:70:58:1D:34:EA"}}},"request":{"raw":"GET /styles-BsJNR3Vj.css HTTP/1.1\r\nHost: onlymarms.meme-giveaway.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onlymarms.meme-giveaway.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 31 Aug 2026 08:23:34 GMT\r\netag: W/\"b1fe64f592efea2bd1e5a5c00359c71a\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YvNhUCgieQBnYx90yPZaDJQJVv5n35ojIW3fulQEBd8TA54xomhSPOa%2BwnxIUDxbpe6vNZFDVRpcHd9X%2B5Kdx6ZJUeF6%2FnjIJ775Ui7J%2FQArh7bKneLk0N%2F75h1OOINSK16Keen3bHYuv62INJU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a33aa2495ddd0b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88393,"size_decoded":16177,"mime_type":"text/css","magic":"ASCII text, with very long lines (65470)","md5":"373a5ed3471eef25d4ed02bcdb756bfc","sha1":"aaa282261d1d1975364e3edbb43937c6727f2618","sha256":"577ec69cf003d14f68820deb9ad4143e98c9a7935e41c45af3924d3e8cad0b80","sha512":"498bf1964f6bf10c460551138e6d087286a921f73d7c325946e42b5fa376a27a1c45cc928ffd4cc8f82e964c752360d8d798893518c0276ed819e9f45f75666b","ssdeep":"1536:G4rA0hyLgaPlcySXM2cowZVwZwwZwwZwwZwwZIRBaNXaGSsMq+WDhXX78RXxW+4c:nrA0hyLgadcyP2cowZVwZwwZwwZwwZw1","tlshash":"3683b590b32ad93fbc3364f6938cb48c9119b0c1dd3545e8fa52612346c7bf6ad6b618","first_seen":"2026-08-22T10:22:21.181301Z","last_seen":"2026-08-31T08:24:06.414413Z","times_seen":11,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"onlymarms.meme-giveaway.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onlymarms.meme-giveaway.fun/index_2.html","fqdn":"onlymarms.meme-giveaway.fun","domain":"meme-giveaway.fun","tld":"fun"},"ip":{"addr":"104.21.87.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://onlymarms.meme-giveaway.fun/","date":"2026-08-31T08:23:34.616Z","timestamp":1788164614616,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meme-giveaway.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 00:23:52 GMT","end":"Thu, 19 Nov 2026 01:23:49 GMT"},"fingerprint":{"sha1":"D6:1C:53:9A:15:32:C1:6F:87:4F:BD:D1:1C:80:32:5A:71:00:CA:AE","sha256":"D7:B2:64:BC:90:AC:7D:2E:81:AB:F4:B6:85:DC:67:BC:CC:58:BA:99:86:7E:C2:0A:C2:30:A0:70:58:1D:34:EA"}}},"request":{"raw":"GET /index_2.html HTTP/1.1\r\nHost: onlymarms.meme-giveaway.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onlymarms.meme-giveaway.fun/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 307 \r\ndate: Mon, 31 Aug 2026 08:23:34 GMT\r\nserver-timing: cfExtPri\r\nlocation: /index_2\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U2kTDFipgTEhfEzcPtTtvZwYmEWUsyYd96eWw6Oc5RIKY7cydotiq2iZnKKXRIvLlypXB9zQ8uhfin41wkODoJ9CQut96uL2TsyroOLE9Qrx%2BgSKXsliDk8EW3uJgvfMcT35qxmF6cPB57JHZAU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a33aa2495ddf0b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T11:32:42.475929Z","times_seen":18201525,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"onlymarms.meme-giveaway.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onlymarms.meme-giveaway.fun/index_3.html","fqdn":"onlymarms.meme-giveaway.fun","domain":"meme-giveaway.fun","tld":"fun"},"ip":{"addr":"104.21.87.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://onlymarms.meme-giveaway.fun/","date":"2026-08-31T08:23:34.617Z","timestamp":1788164614617,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meme-giveaway.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 00:23:52 GMT","end":"Thu, 19 Nov 2026 01:23:49 GMT"},"fingerprint":{"sha1":"D6:1C:53:9A:15:32:C1:6F:87:4F:BD:D1:1C:80:32:5A:71:00:CA:AE","sha256":"D7:B2:64:BC:90:AC:7D:2E:81:AB:F4:B6:85:DC:67:BC:CC:58:BA:99:86:7E:C2:0A:C2:30:A0:70:58:1D:34:EA"}}},"request":{"raw":"GET /index_3.html HTTP/1.1\r\nHost: onlymarms.meme-giveaway.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onlymarms.meme-giveaway.fun/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 307 \r\ndate: Mon, 31 Aug 2026 08:23:34 GMT\r\nserver-timing: cfExtPri\r\nlocation: /index_3\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EW80RYo52xLhKcXM26lk1bKixFJpgaIkp32USZ5DXq8PQnwbJ9c9PCAtjF5bUiBdFzqSBz6xZwofDMp1WZTWSNHdyYuwukler3YN9hLlUmy1Ydqfc9CaFIG4ueyfml6knohEECjaJistd5mp%2BFM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a33aa2495de00b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T11:32:42.475929Z","times_seen":18201525,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"onlymarms.meme-giveaway.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onlymarms.meme-giveaway.fun/blumstein-interview.mp4","fqdn":"onlymarms.meme-giveaway.fun","domain":"meme-giveaway.fun","tld":"fun"},"ip":{"addr":"104.21.87.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://onlymarms.meme-giveaway.fun/","date":"2026-08-31T08:23:34.629Z","timestamp":1788164614629,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meme-giveaway.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 00:23:52 GMT","end":"Thu, 19 Nov 2026 01:23:49 GMT"},"fingerprint":{"sha1":"D6:1C:53:9A:15:32:C1:6F:87:4F:BD:D1:1C:80:32:5A:71:00:CA:AE","sha256":"D7:B2:64:BC:90:AC:7D:2E:81:AB:F4:B6:85:DC:67:BC:CC:58:BA:99:86:7E:C2:0A:C2:30:A0:70:58:1D:34:EA"}}},"request":{"raw":"GET /blumstein-interview.mp4 HTTP/1.1\r\nHost: onlymarms.meme-giveaway.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onlymarms.meme-giveaway.fun/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 31 Aug 2026 08:23:34 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: video/mp4\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\netag: \"d75cb86c4e6ca87a6a7d030ec749dc13\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VgmjXPQ%2ByvoXOqKuN2OUpQmbBang8dV7bbL%2FQ64qJ%2BUTs%2BP79OMmS%2BsY19h533YJUD5PChz%2BwOXXrHK3qAj%2FFYkgUllnRQnCwnW4l%2BU7yuJc17TaqfFSDWxZEM8YPVRMf4Dfx0hku3iFOcl1PXo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a33aa2497de30b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2017171\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2017171,"size_decoded":2017811,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"8a227af14f7e428f3d4437e69b923926","sha1":"1b9d65088925b4a32bf32e1a0d430934efe5f125","sha256":"364cb2f6f1af1a6e8418176fe8720a1ab261dc90f279dbcadf1e2f96ac7c328a","sha512":"029a4a9aef0013a0002cf335603353da94b2a1f60b0d3c9f4ce1d52cbd9aa171be36e8908f20462cd46a8417a5ac6f0f2041d876e05536487dc32d6728c0a711","ssdeep":"24576:WCfXPRCXzUDzV6vofC8xEeYPK4rRrjSkEQA+3x8enIjzoSD:WycyNCOkrRPSl+WRD","tlshash":"f92523a537e55013e9510b7d9df52b313ba1ecaac3aac3db81c126455eb67e06f032c8","first_seen":"2026-08-22T10:22:21.184538Z","last_seen":"2026-08-31T08:24:06.415386Z","times_seen":11,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"onlymarms.meme-giveaway.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onlymarms.meme-giveaway.fun/index_2","fqdn":"onlymarms.meme-giveaway.fun","domain":"meme-giveaway.fun","tld":"fun"},"ip":{"addr":"104.21.87.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://onlymarms.meme-giveaway.fun/","date":"2026-08-31T08:23:34.667Z","timestamp":1788164614667,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meme-giveaway.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 00:23:52 GMT","end":"Thu, 19 Nov 2026 01:23:49 GMT"},"fingerprint":{"sha1":"D6:1C:53:9A:15:32:C1:6F:87:4F:BD:D1:1C:80:32:5A:71:00:CA:AE","sha256":"D7:B2:64:BC:90:AC:7D:2E:81:AB:F4:B6:85:DC:67:BC:CC:58:BA:99:86:7E:C2:0A:C2:30:A0:70:58:1D:34:EA"}}},"request":{"raw":"GET /index_2 HTTP/1.1\r\nHost: onlymarms.meme-giveaway.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://onlymarms.meme-giveaway.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 31 Aug 2026 08:23:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xCCixMpbDTkBOkCUn95T6Cbj7WET9h7qK6UHbgZvMq6jpc3KrtMXnVIRZD6h7%2Fr8G%2FPxeM%2BZxWRnAlH1Qx%2Bi82gBstbOkFD7vW9FmDgjKaDptFOdSetucmSDSFHGhJwCxSKFD31okS7pt3nEOcc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33aa249ade60b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12560,"size_decoded":4827,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (4779)","md5":"eb8e31a36da99589aa4af0b50e100b65","sha1":"ce1e1a26cb5e47b1155c38e72a54991e727d9b86","sha256":"3641673e118a94ee420b88d920d9a588a42dfb82aef77663e726947773a4cce8","sha512":"6378c2f8f2672b3211865ec2bf48778c1b4c4b501770072f65263f44417169667bb880b7bf92dc145042ccbca44135c4f7895755986f82332f3ffc9c5c526a1d","ssdeep":"384:K2t8QLZnZrb6nKKKNk01xqarO4xmZblz7CX4KgT1a:KNQLZnZJKKNk01xqarO4xmZblz7CX4Kz","tlshash":"4842e93309800555a2979d9273a6ef0de77e510aee0658796baf3d40cbcfc8610937ee","first_seen":"2026-08-22T10:22:21.187247Z","last_seen":"2026-08-31T08:24:06.416406Z","times_seen":11,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"onlymarms.meme-giveaway.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onlymarms.meme-giveaway.fun/-nFnOHM81r4j6k0gjAW3mujVU2B2G_Bx0g.woff2","fqdn":"onlymarms.meme-giveaway.fun","domain":"meme-giveaway.fun","tld":"fun"},"ip":{"addr":"104.21.87.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://onlymarms.meme-giveaway.fun/","date":"2026-08-31T08:23:34.845Z","timestamp":1788164614845,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meme-giveaway.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 00:23:52 GMT","end":"Thu, 19 Nov 2026 01:23:49 GMT"},"fingerprint":{"sha1":"D6:1C:53:9A:15:32:C1:6F:87:4F:BD:D1:1C:80:32:5A:71:00:CA:AE","sha256":"D7:B2:64:BC:90:AC:7D:2E:81:AB:F4:B6:85:DC:67:BC:CC:58:BA:99:86:7E:C2:0A:C2:30:A0:70:58:1D:34:EA"}}},"request":{"raw":"GET /-nFnOHM81r4j6k0gjAW3mujVU2B2G_Bx0g.woff2 HTTP/1.1\r\nHost: onlymarms.meme-giveaway.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onlymarms.meme-giveaway.fun/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 31 Aug 2026 08:23:34 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: application/octet-stream\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"ce6e97c9f07919fa2ff56d7e1dc13542\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7%2FmClscumx3nZMUi%2F%2BvfYqW5tN36tVDY4OjvGKWqSGRngYgWX4F3ZhocvoGWUsPuW3ucaEJMx47XBj6zO%2FdPwsbg3PJlZfOaL7m0Q9PV8Qx9euqwaR4YmWpm5mFGp2w40ilGxLnlzD3zUO0%2BiGA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a33aa24acded0b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 24744\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24744,"size_decoded":25442,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 24744, version 1.0","md5":"c27d5a47c09ebe91c013817e32b69043","sha1":"3d2a435525b8b356551cce6d09a86282a4e598d8","sha256":"fdf61e20fd2c0108e0ea28da4daca0035205b4b7fc031a3974b865b704de160a","sha512":"869245b6bd6a148eb79f10b5c2b56f622ff00a1ecaf0e16d687fb33a7d3b36397e27a4b88a1d53cbfb4f75ec5100d5f0cce31f6939114f24f0bcf651a190894a","ssdeep":"768:rJdlGwx37Ri555B9zR+J5uYlG/PwCEp24tZdD09wJ7:l6m37Ri3BRw5u2KwjJtiwF","tlshash":"55b2f18502a4e449cf1ce95b0795bebe6b1209776c069b30e533948851fd360b27d5af","first_seen":"2025-09-11T21:26:17.489332Z","last_seen":"2026-08-31T10:55:52.042645Z","times_seen":5901,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"onlymarms.meme-giveaway.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onlymarms.meme-giveaway.fun/Wnz6HAc5bAfYB2Q7ZjYY.woff2","fqdn":"onlymarms.meme-giveaway.fun","domain":"meme-giveaway.fun","tld":"fun"},"ip":{"addr":"104.21.87.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://onlymarms.meme-giveaway.fun/","date":"2026-08-31T08:23:34.848Z","timestamp":1788164614848,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meme-giveaway.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 00:23:52 GMT","end":"Thu, 19 Nov 2026 01:23:49 GMT"},"fingerprint":{"sha1":"D6:1C:53:9A:15:32:C1:6F:87:4F:BD:D1:1C:80:32:5A:71:00:CA:AE","sha256":"D7:B2:64:BC:90:AC:7D:2E:81:AB:F4:B6:85:DC:67:BC:CC:58:BA:99:86:7E:C2:0A:C2:30:A0:70:58:1D:34:EA"}}},"request":{"raw":"GET /Wnz6HAc5bAfYB2Q7ZjYY.woff2 HTTP/1.1\r\nHost: onlymarms.meme-giveaway.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onlymarms.meme-giveaway.fun/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 31 Aug 2026 08:23:34 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: application/octet-stream\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"06c036ba7796ae3aae65b16d41442d20\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R%2Bcq7PF2fk8jOq2%2FwBBKIQydHHL%2Fpw%2F5sXxf7JyuL4DPXA5LvvtKGC%2BSaHz%2BFQBZL%2FQ9Lmgwhlap3UPkyilmlNfG2mCeOlVJ7t4xR%2BiG%2B3V9QvcYzWMgXVOc2vZMDejGJGfaOo2LzYsjcgu%2FlHg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a33aa24acdee0b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 74932\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74932,"size_decoded":75640,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 74932, version 1.0","md5":"2d9de14f93a2205b45d72e60a635c3e0","sha1":"8a01467ac99e0d10cba99c1ca159f113d6bb169b","sha256":"891951df5e8b5b0f0bc760d31375405e795c666b5add70437de12d4a6482b33f","sha512":"0261d7c481b19f56e51cfeb8a53dd7f583b815eeb8ccbbe46ff404dd1abd806be65d76596f84e6a1cb06ba814df49762236642288b570598451b5da04b07c54c","ssdeep":"1536:dFAWJP/o3/+IyKuA/aTFJCH2+bDGaYm5ETsQGO5ESGq7OgCM0PaG/:dFAWJPYvyfA/aTSGtmGTjZ7Ort7","tlshash":"447302b310808680d93243f384b86541a78568f872649ffbb12f97f1a52afefc21e459","first_seen":"2025-09-07T11:41:24.114291Z","last_seen":"2026-08-31T09:04:55.212385Z","times_seen":1709,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"onlymarms.meme-giveaway.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onlymarms.meme-giveaway.fun/","fqdn":"onlymarms.meme-giveaway.fun","domain":"meme-giveaway.fun","tld":"fun"},"ip":{"addr":"104.21.87.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T08:23:34.000Z","timestamp":1788164614000,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meme-giveaway.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 00:23:52 GMT","end":"Thu, 19 Nov 2026 01:23:49 GMT"},"fingerprint":{"sha1":"D6:1C:53:9A:15:32:C1:6F:87:4F:BD:D1:1C:80:32:5A:71:00:CA:AE","sha256":"D7:B2:64:BC:90:AC:7D:2E:81:AB:F4:B6:85:DC:67:BC:CC:58:BA:99:86:7E:C2:0A:C2:30:A0:70:58:1D:34:EA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: onlymarms.meme-giveaway.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 31 Aug 2026 08:23:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=0,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=63sbPWZiPABEYUnHkmPNUowp%2Bxop62hFsspvT9%2F4j6KJn25ZUXXElaAw4A51u0bIBET%2Fq3VleqjJND6sARZKqXRvK7hR8xoz%2BH82YCum11ShbSyUrg2J7Bf7iHu0YHkAJgu%2FJOzm2062CwkKxEQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33aa245cdce0b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Lovable","description":"Lovable is an AI-powered, no-code platform that lets users build functional web apps from natural language prompts instead of writing code.","website":"https://lovable.dev/","common_platform_enumeration":"","icon":"Lovable.png","categories":["CMS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}],"data":{"size":72619,"size_decoded":14971,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (63092)","md5":"574ce698719fa620b8f76284e6641c85","sha1":"942cd9a2ee6025a2c5a15bbe14ea16f27a885545","sha256":"8ee7f1b767e71f703bac1581208119b48c9c7ff2038e3f056a8adb39af8ee1e0","sha512":"34de35e281c3e7e731c4c63aacda7f36e8145203280d364363a75b3cc125583a521fc3261f76fd3f9b1f47daaadc947c6606423a1a27c9be7a5444b28c75f8ad","ssdeep":"768:mYMzQH2L0r82It4uSRhKut5NFgl+FU+xHyvfSDIJPJWf3b8fzwZPROHXL0hDgmwy:mYMzqyrYpKI5ux9sH","tlshash":"e063b660b150193f361787fab1d4ef59a0a19309c9235528f3fc41e36bcadb79eb21a4","first_seen":"2026-08-22T10:22:21.179476Z","last_seen":"2026-08-31T08:24:06.419341Z","times_seen":20,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":33,"connect":14,"send":0,"wait":58,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"onlymarms.meme-giveaway.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onlymarms.meme-giveaway.fun/index_3","fqdn":"onlymarms.meme-giveaway.fun","domain":"meme-giveaway.fun","tld":"fun"},"ip":{"addr":"104.21.87.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://onlymarms.meme-giveaway.fun/","date":"2026-08-31T08:23:34.665Z","timestamp":1788164614665,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meme-giveaway.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 00:23:52 GMT","end":"Thu, 19 Nov 2026 01:23:49 GMT"},"fingerprint":{"sha1":"D6:1C:53:9A:15:32:C1:6F:87:4F:BD:D1:1C:80:32:5A:71:00:CA:AE","sha256":"D7:B2:64:BC:90:AC:7D:2E:81:AB:F4:B6:85:DC:67:BC:CC:58:BA:99:86:7E:C2:0A:C2:30:A0:70:58:1D:34:EA"}}},"request":{"raw":"GET /index_3 HTTP/1.1\r\nHost: onlymarms.meme-giveaway.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://onlymarms.meme-giveaway.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 31 Aug 2026 08:23:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hHareG1HGx3RZPV%2FRqNH1AQc9KEc18YVL67jJOA6j9FXVBrqB88qZD%2FdDvcuvSWIp%2Fv7AXzLTJnZeQctU4sjyvIeIIue9igQGb3w56k3j2hhYfmaVcjrRRxZDhiJ2gD%2F87TMGR%2BqaKlqSKIzISM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33aa249ade50b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":294,"size_decoded":874,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"535b808d95c649d0e95952422f3dbbd9","sha1":"028d58c95241f58ea10b289245dfb842e8a602b8","sha256":"c5872219b3f4c451c239f206a448ea8d2127d80cbb119f5950af37b4d4dc2c1f","sha512":"a4272e232e0a93be91d873df6fc21f0f45be7f3c73b0bf70dd90369728e1fd5487aec788a283209fbfd61514a5fbb91429b590f9b9fb21737c2d6c8e7f5e350a","ssdeep":"","tlshash":"cfe0ebeb917008011f2067a14fc2fc80188a7e9ef8424c697c6734a8ade92b1c033340","first_seen":"2026-08-22T10:22:21.188288Z","last_seen":"2026-08-31T08:24:06.420111Z","times_seen":11,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"onlymarms.meme-giveaway.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onlymarms.meme-giveaway.fun/index_1","fqdn":"onlymarms.meme-giveaway.fun","domain":"meme-giveaway.fun","tld":"fun"},"ip":{"addr":"104.21.87.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://onlymarms.meme-giveaway.fun/","date":"2026-08-31T08:23:34.670Z","timestamp":1788164614670,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meme-giveaway.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Aug 2026 00:23:52 GMT","end":"Thu, 19 Nov 2026 01:23:49 GMT"},"fingerprint":{"sha1":"D6:1C:53:9A:15:32:C1:6F:87:4F:BD:D1:1C:80:32:5A:71:00:CA:AE","sha256":"D7:B2:64:BC:90:AC:7D:2E:81:AB:F4:B6:85:DC:67:BC:CC:58:BA:99:86:7E:C2:0A:C2:30:A0:70:58:1D:34:EA"}}},"request":{"raw":"GET /index_1 HTTP/1.1\r\nHost: onlymarms.meme-giveaway.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://onlymarms.meme-giveaway.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 31 Aug 2026 08:23:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MqTo0%2FEkxI8f9OMqG2ScbUe9luLfTvmMbspvSOCTpnIJAqB%2B%2FzDEoF8YHovp6XmzuF6dJaomZL4pVbATGLV9oOFm7F%2BHN7FuZdW8FRWMHLqFyMoaqdJYaDIQiUKHGOKfcLbZy6miWQ%2B2ajDdI1Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33aa249bde70b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":201,"size_decoded":800,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"accffc389519d78f05c94892222f092e","sha1":"5f957871f50031c238dbc92e56c69469781d5fa9","sha256":"fcaa07a7179caba2296eb8ea54a865e7ba25dbde43a391ac7ac53d08614cba16","sha512":"c0aeb6ebee410c7d970bde7b01fcebc8736abd44820cfb62ec698795f4063ceddfe41c7de520a3cdcc611aa9a51416f7156a8381f405b66481e2b610da22babc","ssdeep":"","tlshash":"6dd02226c4054a2bac428aa0c763e380c880c33afd318c61adf1aa20f68d5258a23688","first_seen":"2025-04-19T12:20:06.699203Z","last_seen":"2026-08-31T08:24:06.420882Z","times_seen":72,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"onlymarms.meme-giveaway.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}