{"report_id":"075873d5-950f-4cd2-b73e-648656dcbda0","version":6,"status":"done","tags":[],"date":"2026-01-09T00:13:11Z","url":{"schema":"http","addr":"whale-claims.live","fqdn":"whale-claims.live","domain":"whale-claims.live","tld":"live"},"ip":{"addr":"104.21.11.36","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"whale-claims.live/","fqdn":"whale-claims.live","domain":"whale-claims.live","tld":"live"},"title":"$WHITEWHALE","dom":{"size":373197,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (5917)","md5":"fabf7300e6f44c18e299cb6dbb80773e","sha1":"db9d8302c30245fb573261e93d81dbdf3a669364","sha256":"e7c57562c61e769a9514f0b66eeae5be36d1df27a5f04e0c453fbe9ee8151ae4","sha512":"76499617d7a4d86852def61aa3819eba93577dee318c869604348628dccae838f965e43e2c934f79676607ee861ba0649d3e11c31e4d966105053478b550b1bb","ssdeep":"3072:ihrGqFndSo72S36ti1HTJSkvRhgxSKqXSl8la2uO/JBWjkbgLsKh/fAIjR/PngJ1:grGidTokvRhgxSK8ung","tlshash":"be84732f157321507e53a17c2bff1685a234d407ee4adc6c7ece1990cf9a2a87c96788","dom_hash":"domhashf758c36436a7b135f685019283269d08","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"whale-claims.live","fqdn":"whale-claims.live","domain":"whale-claims.live","tld":"live"},"ip":{"addr":"104.21.11.36","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-13T00:13:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"whale-claims.live","ip":{"addr":"172.67.165.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-01-09T00:13:12.426515Z","last_seen":"2026-01-09T00:13:12.426515Z","alert_count":0,"request_count":11,"received_data":1433516,"sent_data":5312,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"whale-claims.live/engine.io.cjs.js","fqdn":"whale-claims.live","domain":"whale-claims.live","tld":"live"},"ip":{"addr":"172.67.165.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"08dc3b6d15f9bbb9006ca3ecfaa98992","sha1":"f63b4e3a5b1c99fe4beca6aa68c9d727889112c8","sha256":"5885dfd13d800107729d51bd8c69be59a05c128a2d46aaec4e24e4697157e93c","sha512":"7ab0d317e559ec545e65f66ef4c1de0b34cc3deff42c652de808ab453ccbcd5d82a63e1e8a46ca6e19a282ab9f9c84a9a06caa18054c8052eac061383206a3fc","ssdeep":"3072:HmboCYM0GSRxc7oSwSLBdr0n/cHI1Wz9cdcSmRKiqX5U+w3r:HmbiM0GSRqc3SLBdr0EHI1WhcdxiqOrb","tlshash":"9674ccc8f2d6265ef2e4a20d89129159d4fc75083b4e580ff6d35a47a3ea8d0b8f7346","size":337875,"data":"","first_seen":"2026-01-09T00:13:17.13455Z","last_seen":"2026-01-09T00:13:17.13455Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whale-claims.live/","fqdn":"whale-claims.live","domain":"whale-claims.live","tld":"live"},"ip":{"addr":"172.67.165.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"67d312e6f108f2848985448347f14758","sha1":"92c0019d7f46d84e94e0f6eaa017ca34c30763a0","sha256":"41be0b79ea542af72f57dbbc2c5a361d7e6ce7a3f2a2a04eed6deb231483fba4","sha512":"d0e4d3607a3c8fd201f5ff12c2356a9f240e4fd863767cc243aba101d34445055e7db3d78774bc02c92647838b0d8454f03c8287e99d6647e6c39f31dc5bb7cb","ssdeep":"3072:lJ8m/2WOI+v6NhlOaYtp9DrCn/CFI1kz9O1uA6RQ88l5iQMvl:lWuXOI+ghxSp9DrCKFI1khO1P88O5d","tlshash":"ad64b9c8f2d7265ef2e4a20d99229159d4fc7908374e581fb6d35a03a7e68c0b8f7346","size":330990,"data":"","first_seen":"2026-01-09T00:13:17.140138Z","last_seen":"2026-01-09T00:13:17.140138Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whale-claims.live/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fchromatic.beta.js%3Ft%3D29465292%26u%3Dwam3WrFzAWBaCfjlGDY5MjU2NDNmMjhjZmYzYzM0MDI3YTkzMaORYxBNOYWLVBj9Vg","fqdn":"whale-claims.live","domain":"whale-claims.live","tld":"live"},"ip":{"addr":"172.67.165.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","size":656642,"data":"","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-07-21T09:33:26.183344Z","times_seen":2637,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"whale-claims.live/","fqdn":"whale-claims.live","domain":"whale-claims.live","tld":"live"},"ip":{"addr":"172.67.165.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-09T00:12:48.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whale-claims.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 08:21:58 GMT","end":"Wed, 01 Apr 2026 09:20:39 GMT"},"fingerprint":{"sha1":"9B:DE:F8:A6:C2:A3:02:E6:DA:83:8D:F5:29:77:C8:8B:FA:59:45:C1","sha256":"B1:B4:E6:A1:E7:FD:D8:CC:90:4A:55:55:12:24:2E:42:1D:5B:0D:3F:39:18:35:5D:86:EB:2C:F9:08:C5:1A:0E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: whale-claims.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 09 Jan 2026 00:12:48 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Thu, 01 Jan 2026 08:55:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YIZbxLxvAJ1bZcuyzrTU1HgNDiGGncUI6riLJxgIrJP7d6AxZuNjeVHSwAi7W2nPDYWHaM4jJQ0gg5K1wibjiVs9Ab%2B6naes%2B%2BI5Dvd83hhN\"}]}\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bafb9a2dc1d723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":373691,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5917)","md5":"2bbd9ac9eb057dba52a8c0c25a714a96","sha1":"2b92c1802462cefaf1d242ec64e84e51c54696e8","sha256":"27743439f1afcb6451bd3eb7373facacf9ddcf7be67bb357c29937ff89e5371f","sha512":"41d5e2fffd8df6ae415eb1ab50cdba16fb9a5b2e8e983af16dfb6510eb1f288b84bd73517e82a0af720b0145a30939de14c7f758e24100e794245bf074e1f7e2","ssdeep":"3072:EhrGqFndSo72S36ti1HTJSkvRhgxSKqXSl8la2uO/JBWjkbgLsKh/fAIjR/PngJd:irGidTokvRhgxSK8u2z","tlshash":"9784732f157321507e53a17c2bff1685a234d407ee4adc6c7ece1990cf9a2a87c96788","first_seen":"2026-01-09T00:13:17.116416Z","last_seen":"2026-01-09T00:13:17.116416Z","times_seen":1,"resource_available":false,"data":null}},"time_used":494,"timings":{"blocked":67,"dns":45,"connect":3,"send":0,"wait":359,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whale-claims.live/css2.css","fqdn":"whale-claims.live","domain":"whale-claims.live","tld":"live"},"ip":{"addr":"172.67.165.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://whale-claims.live/","date":"2026-01-09T00:12:49.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whale-claims.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 08:21:58 GMT","end":"Wed, 01 Apr 2026 09:20:39 GMT"},"fingerprint":{"sha1":"9B:DE:F8:A6:C2:A3:02:E6:DA:83:8D:F5:29:77:C8:8B:FA:59:45:C1","sha256":"B1:B4:E6:A1:E7:FD:D8:CC:90:4A:55:55:12:24:2E:42:1D:5B:0D:3F:39:18:35:5D:86:EB:2C:F9:08:C5:1A:0E"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: whale-claims.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whale-claims.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 00:12:49 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Thu, 01 Jan 2026 08:55:50 GMT\r\netag: W/\"c77-19b78c53cd7\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ld%2BKXU7i%2BeUJas%2Ff%2FBXj4i1EPZ6dLao%2FLXbMPRShqtmuIH0iRXFhZkvDY%2BLgQfskiOCbIATWwYI5nBc%2FJ%2FQC%2Faurg35J8kqP%2BGzPFFPsSNVz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bafb9a64e0c4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3191,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"e0a30516969628e03d52fee4340786a5","sha1":"acc07aca4d80945fdbb230bf526c998618629f13","sha256":"341c2fe63d51d678908c909a6d8d55ec06c759ba6a48e30a15cc46ab34bb83b6","sha512":"3b84f8b555cd775fefddef82343211481d2e53b452edce385aa3cf51d467dcdee94e48409d3b5ebbf8026f193e5eb39ef4b3df1b713554967b1670a3938f65c5","ssdeep":"","tlshash":"db61dc40042b6600eb935ed523ce3f32ae2eb1516409d9255ffe085cbcfbc66836671d","first_seen":"2025-12-23T21:19:41.105848Z","last_seen":"2026-01-09T00:13:17.119208Z","times_seen":2,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whale-claims.live/_gP_1RrxsjcxVyin9l9n_j2hTd52.woff2","fqdn":"whale-claims.live","domain":"whale-claims.live","tld":"live"},"ip":{"addr":"172.67.165.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whale-claims.live/","date":"2026-01-09T00:12:49.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whale-claims.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 08:21:58 GMT","end":"Wed, 01 Apr 2026 09:20:39 GMT"},"fingerprint":{"sha1":"9B:DE:F8:A6:C2:A3:02:E6:DA:83:8D:F5:29:77:C8:8B:FA:59:45:C1","sha256":"B1:B4:E6:A1:E7:FD:D8:CC:90:4A:55:55:12:24:2E:42:1D:5B:0D:3F:39:18:35:5D:86:EB:2C:F9:08:C5:1A:0E"}}},"request":{"raw":"GET /_gP_1RrxsjcxVyin9l9n_j2hTd52.woff2 HTTP/1.1\r\nHost: whale-claims.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whale-claims.live/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 00:12:50 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 17360\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Thu, 01 Jan 2026 08:55:50 GMT\r\netag: W/\"43d0-19b78c53cd3\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oaXHom5tDQrUberuQZ3ybbNZvOE%2BhoVC8IB3SoN%2Bp0vTGn6D64MVhBqTEkU2JyDvjh6F6ZMjZ8KT5n9pEOK%2FLRT3ElgU5kIk6ogNHV84tm5V\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bafb9aabf894c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":17360,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 17360, version 1.0","md5":"70322c317b1f4e2e17dbc6b672f95f5f","sha1":"f3dff7c50e1aea33814c6aeeca177ae3ff900bfc","sha256":"3877b522181765adf66ba89bd68d288ecb9f2483b441baab3424646b0c7aaa0a","sha512":"83048e60c06b142d87fc1c236e4c1c025953bb9fc3ac9913f04660738679607c3dde4cbe7c3fd563e09b4609d284420ebcabc0637da58c48cb0db208087803f1","ssdeep":"384:WfC2S+GObRDijMwcY6tE+ICzuxdyMAngwp:W1S+RTDxICzPvp","tlshash":"1972e1edcab11465de8510ee2f1a3d89a941fba8c31043f19dc7fe56c0a4e34c798ea0","first_seen":"2023-05-03T01:37:24Z","last_seen":"2026-07-22T15:21:56.518614Z","times_seen":946,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":331,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whale-claims.live/X7nP4b87HvSqjb_WIi2yDCRwoQ_k7367_B-i2yQag0-mac3O8SL8EemK.woff2","fqdn":"whale-claims.live","domain":"whale-claims.live","tld":"live"},"ip":{"addr":"172.67.165.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whale-claims.live/","date":"2026-01-09T00:12:49.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whale-claims.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 08:21:58 GMT","end":"Wed, 01 Apr 2026 09:20:39 GMT"},"fingerprint":{"sha1":"9B:DE:F8:A6:C2:A3:02:E6:DA:83:8D:F5:29:77:C8:8B:FA:59:45:C1","sha256":"B1:B4:E6:A1:E7:FD:D8:CC:90:4A:55:55:12:24:2E:42:1D:5B:0D:3F:39:18:35:5D:86:EB:2C:F9:08:C5:1A:0E"}}},"request":{"raw":"GET /X7nP4b87HvSqjb_WIi2yDCRwoQ_k7367_B-i2yQag0-mac3O8SL8EemK.woff2 HTTP/1.1\r\nHost: whale-claims.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whale-claims.live/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 00:12:50 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 16076\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Thu, 01 Jan 2026 08:55:50 GMT\r\netag: W/\"3ecc-19b78c53ce3\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0bXwmNXnh5TUpvpzT%2FXdiLJYkCpwVPVVa3YaSM0CCdwNDywAT5erynQN77%2B%2BUdB5MKxK1HrNcfSTKwX81eNeChlLIamTNjKdM4Yu%2FXSA2aBg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bafb9aadf8f4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16076,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 16076, version 1.0","md5":"93ea52bfd454a8de4c051e70696fa07a","sha1":"c345033f24d8380d109fbecaeb5583cc69cc89b4","sha256":"9cf74f703532ef61311d6c6dd32a582b6e410727f5fce1dbf5570cbe6b023c2f","sha512":"1d7ab00b14468bdce5e70c6d37c02f9527456f8f9ad081773130080dc521ff86188f5afa7f23ac39ae132eccd9df36791cdca6263bae610ece6899506b60f214","ssdeep":"384:aAhu/WReeixJ1VNYxFv7mpo5TDywXllm18:/k/WReeApq2w1lm18","tlshash":"e572d0659d463505690ebc65a1c91d02fe5f1cdb5391a3283c8184dd0fa763a2f4d37b","first_seen":"2025-09-14T13:54:00.544591Z","last_seen":"2026-07-16T08:44:34.170913Z","times_seen":81,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":326,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whale-claims.live/X7nP4b87HvSqjb_WIi2yDCRwoQ_k7367_B-i2yQag0-mac3OLyX8EemK.woff2","fqdn":"whale-claims.live","domain":"whale-claims.live","tld":"live"},"ip":{"addr":"172.67.165.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whale-claims.live/","date":"2026-01-09T00:12:49.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whale-claims.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 08:21:58 GMT","end":"Wed, 01 Apr 2026 09:20:39 GMT"},"fingerprint":{"sha1":"9B:DE:F8:A6:C2:A3:02:E6:DA:83:8D:F5:29:77:C8:8B:FA:59:45:C1","sha256":"B1:B4:E6:A1:E7:FD:D8:CC:90:4A:55:55:12:24:2E:42:1D:5B:0D:3F:39:18:35:5D:86:EB:2C:F9:08:C5:1A:0E"}}},"request":{"raw":"GET /X7nP4b87HvSqjb_WIi2yDCRwoQ_k7367_B-i2yQag0-mac3OLyX8EemK.woff2 HTTP/1.1\r\nHost: whale-claims.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whale-claims.live/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 00:12:50 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 16468\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Thu, 01 Jan 2026 08:55:50 GMT\r\netag: W/\"4054-19b78c53ccb\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TCx%2F9Sn8JGWMG1Y1U%2B1Vrh78c1WTEAoBNBy3IlzL13ANYWBLhKOhZBvK2lHxpfO5OAkAuKiyW74sNOeRBmWU3aLKfQoTefidIyHg%2FieUMHuv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bafb9aacf8c4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":16468,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 16468, version 1.0","md5":"f56ba4069e244c2dc8bbc09f5ac8301e","sha1":"b9fca786c012785cbf8f04efea9e69e8c2faafbf","sha256":"b62f2898de150f019961f4884a49f83dcd2ce74375be5e0992c594ebb8f30294","sha512":"3fea43bcd4b37f5a42af7f2aefc1255d7e22b7a8e6d77cdcc13b6a96e0ff376d6c9a97ce516313e666cccc2a1a09d1f052ce6d23ee800e3bba0a1c7aba1abd86","ssdeep":"384:RmGmOaBfNlRYERFJjB8xPtkxuX9HvMiFyueItyN//:RmGJpAFJjexPtkxwEXN//","tlshash":"e772d04d1136a5b82c9ee7791b9d2bdcc5fd71858824be6c0c28e1cb858f74d524c326","first_seen":"2025-09-19T20:47:50.708146Z","last_seen":"2026-07-18T02:12:38.740896Z","times_seen":17,"resource_available":false,"data":null}},"time_used":779,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":778,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whale-claims.live//secureproxy?s=%2Fjmpd%2F","fqdn":"whale-claims.live","domain":"whale-claims.live","tld":"live"},"ip":{"addr":"172.67.165.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://whale-claims.live/","date":"2026-01-09T00:12:52.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whale-claims.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 08:21:58 GMT","end":"Wed, 01 Apr 2026 09:20:39 GMT"},"fingerprint":{"sha1":"9B:DE:F8:A6:C2:A3:02:E6:DA:83:8D:F5:29:77:C8:8B:FA:59:45:C1","sha256":"B1:B4:E6:A1:E7:FD:D8:CC:90:4A:55:55:12:24:2E:42:1D:5B:0D:3F:39:18:35:5D:86:EB:2C:F9:08:C5:1A:0E"}}},"request":{"raw":"POST //secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: whale-claims.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://whale-claims.live/\r\ncontent-type: application/json\r\nContent-Length: 2196\r\nOrigin: https://whale-claims.live\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2196,"data":"{\"route\":\"8XUwkBv9vhPYfVpD1fxb7EC65sUXJdqr\",\"payload\":\"2iJdREYv1cZdFvrA8ArPkaNG9tYT8DFroPQub23gvMcJDg1w4ubcXFkKVReidaCzYm3yaQY4eGq7TYrUCE3Y4yAsjBowPQtfbSjSFkgPJUSrREPHfVEyWUiU72DBStakLttWeYfcAWoT85CsxssiTkxWHkjJS8pJREZ49bvZmFgfPkNyNjk2S5NAzHUC1WQ78fH9igGmUzd8BDzAyY9sweA7onkamDsbTz4KhxSEp5CjosBVViNf8KQnGpRJiJxxjnSU8TiLcLxp6iXqLrQxaJKTdji6Vj5EWnxvfnmns22JxcT9TC1q9Cfejs8CKhQhjKsDENa6ym84sqQXincsvu8WwajcTKmbnoc5P1wkaz1Q13XWJ5ZFCiWseZfnCsHvXdTBw7bSr6FhaXzPcbsp5DUFqzpi1VHw9orMMmzEnfNc6LbraN1h7dXC7zkKznAh6BbPaWV73tUV3dA6oZhKWfMemg1JiehuAHw6X2pKZdj9XJT3y4qhtvpmxAzJwDxMjtAxQMqUy48atrs1N22LqWaN7BVnGihGrTEndouzo5T2HCxJ12VZEtzDrsxKhWa4Z3ix5mc4QvMqNsdCbUHhzcfd7bv6Ec7J9aywyTmk5AC3JwpFv3AxRMqQoxTXR6eWbrKrCK7eiEZ6cj6s1f6B4m7KRbxWqse6Yny2ixRGRmdrFw1CuWAeBEk8bTsB6QJ31AhnbyLZhpd8gVqWzh7F3WTrNx3jGp2M1tTdMHMALrbtgaWR5qbHyv6PJFP1PfE5wPPanAmL6nEnZaFPTyGzibpeqyaSfXXdsaAGRBCbCBGkX3pMFxEbQ5L5gdYH7m1gwNBvNUcgb7NNWeN38xXGiXkaVjKFbJA8igZ86nYak9NkHZLDT1V5XdwKDKbGni75XupYBaTsqojqu5jUgF99qJBo7eJM2wEqCSYZaapiNdMNEqgUsiaTkkqg3oUMBTYRSsFHqsn5GtTVFwqhaPcQUkSgCNXdhtTpFyvJyt4j9sA89bnszwKMnVyLiskPKnceUZa9LmAcQigMfisvMncDEFgw6wtdEykXWVATJt9kknBw5zarRozjy5Hg7fEw872WTwa4LncQa65c3FhCch9aDYf88zN1wUYT8MGbNYYoCmbNrXAXyjL9ePY9p3gd7MuEYzk1TE12YiSrKRs19pvg2mmVaVi4hh29mExSgSzoezg1qXo1retrm5ADiVtbCSLBJ2k78Y9RPwZ31YKRAXcAuy5XvzE86zWxtHHgStqfmcgygswGWuBSowkUyLRxQVGzvMMHoJVn4UWRy12P7EKpYMyX77c1x7cmvVJu94oat4XMM5aku3BWkbTjRVu6A9g8CkEW4twGZFHa5n4NHfgRAQtdKoG78b2BzJtu1pjxVMQbD7bcqE5EAs2TrkcKNLFFJSZteYdoKs7hfbmRwKj1xxBezknkpfCMQkyKrkaAbDSJvg3NSxWsbCPbbUr26DfGezdRWGiJ88njFKPbWx4Vno75sFKWgUfbK2mHBZYC7jju1KD5FmWCFcxHHscZJhodp65qMB61tNAG3rs6mYkZq57dodSMZ2MCbBW9CvX5AQLrmNdErk3zhGCWpo8khHcrisB2dSacuxQcHJsy4g52vEF3dEdTmxhyFnYAxNgamfCTteKWsPXA7VAFJVqhKfNsmNqCS9ydKWfLsguMf6sQ7neeihax19iEu1ADigRwPN9EkMQyfmG44iJSvJqWYRUUSVkTfW4Ze27exi8MDdpJbCFRJxK9J124MzwdZtQhNLpRyJTUChT4rqc8b3H9mG8K4twpLc5iU1YEKa2YnVfpuNKYpBfmUuueVX7oP53o6kgQCArzvAofkY3MaVFhTBsy3aBLwq8RphmKn2xM7GNzMSH9Q3bK4JdZgiDQcb8GhY8rgiVFmfdPR1i1bQ9KqsFirPLM699EaSq2cGiXgsth3eyuqDjg8D1L4GTahBJ8vtobm5sWd9D7izYad4qksw3PSrTC7VAHRLuRnEyrNKjDwA2kfJq8q9Jh1qDM37ErXbtsqC6GTcNkhARyar32viU5DWEKbBLdfsaS3a46rLWLFfGGuW7wWjMjjacqmou1foP7deM951cvfkdisCMfHWLtgSiYaqbbVZCP3sGiJeVDf3aKBk9\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 00:12:52 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncast-mode: default\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"e1-320USHli1Ln9nKlPCihZ2kXxdVo\"\r\nx-ratelimit-limit: 10000\r\nx-ratelimit-remaining: 9999\r\nx-ratelimit-reset: 1767917632238\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 01/09/2026 00:12:52\r\ncdn-edgestorageid: 879\r\ncdn-requestid: 0cbaf817590f578896db68f7ec6abddf\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nzYfcvPJ59hjcDGv2PnDJrqZcF1vd7Krb9kEtBUzHg5obhzV5FTYuuEIGETTKdLQ4%2FQIqeXazjknkdPjnFW5KEZBSgWLEhurCEmVcs65ISyV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bafb9b93a064c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":225,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1daf3fc8eb1a78313bad22c24c84f5cc","sha1":"df6d14487962d4b9fd9ca94f0a2859da45f1755a","sha256":"77d9068df43a79393e3726129e51b1df576e4b5016b86c0ccb50821c6f12646a","sha512":"fe1e4b94e10ab84577898b7fb5ca93b0af6760cb2aae94287672e139cc74dce7df6f0635aac4b6c87567982459890eda69ee139587e93195e5155c467dfcb2f6","ssdeep":"","tlshash":"47d02324c2f2e30ac30dc04372c00cb20321a5e683631144b61d40d8e03478d00d3fc2","first_seen":"2026-01-09T00:13:17.131233Z","last_seen":"2026-01-09T00:13:17.131233Z","times_seen":1,"resource_available":false,"data":null}},"time_used":489,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":488,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whale-claims.live/engine.io.cjs.js","fqdn":"whale-claims.live","domain":"whale-claims.live","tld":"live"},"ip":{"addr":"172.67.165.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whale-claims.live/","date":"2026-01-09T00:12:49.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whale-claims.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 08:21:58 GMT","end":"Wed, 01 Apr 2026 09:20:39 GMT"},"fingerprint":{"sha1":"9B:DE:F8:A6:C2:A3:02:E6:DA:83:8D:F5:29:77:C8:8B:FA:59:45:C1","sha256":"B1:B4:E6:A1:E7:FD:D8:CC:90:4A:55:55:12:24:2E:42:1D:5B:0D:3F:39:18:35:5D:86:EB:2C:F9:08:C5:1A:0E"}}},"request":{"raw":"GET /engine.io.cjs.js HTTP/1.1\r\nHost: whale-claims.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whale-claims.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 00:12:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Thu, 01 Jan 2026 08:55:50 GMT\r\netag: W/\"527d3-19b78c53cdb\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BfV9jrqxl%2FKU7b1h7emkNgxJlVD4c0LovGj83FnMgepIGcHmhDUtoeTEwr9pJrd%2BoyNEVOWlmT%2BGO9Kn3n0TDUuTRSVzwRfZMBan7JbDseKX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bafb9a64e0d4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":337875,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65159)","md5":"08dc3b6d15f9bbb9006ca3ecfaa98992","sha1":"f63b4e3a5b1c99fe4beca6aa68c9d727889112c8","sha256":"5885dfd13d800107729d51bd8c69be59a05c128a2d46aaec4e24e4697157e93c","sha512":"7ab0d317e559ec545e65f66ef4c1de0b34cc3deff42c652de808ab453ccbcd5d82a63e1e8a46ca6e19a282ab9f9c84a9a06caa18054c8052eac061383206a3fc","ssdeep":"3072:HmboCYM0GSRxc7oSwSLBdr0n/cHI1Wz9cdcSmRKiqX5U+w3r:HmbiM0GSRqc3SLBdr0EHI1WhcdxiqOrb","tlshash":"9674ccc8f2d6265ef2e4a20d89129159d4fc75083b4e580ff6d35a47a3ea8d0b8f7346","first_seen":"2026-01-09T00:13:17.13455Z","last_seen":"2026-01-09T00:13:17.13455Z","times_seen":1,"resource_available":true,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":349,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whale-claims.live/c3cc695f375ced8237aa40901e0116e583156a3d.svg","fqdn":"whale-claims.live","domain":"whale-claims.live","tld":"live"},"ip":{"addr":"172.67.165.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whale-claims.live/","date":"2026-01-09T00:12:49.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whale-claims.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 08:21:58 GMT","end":"Wed, 01 Apr 2026 09:20:39 GMT"},"fingerprint":{"sha1":"9B:DE:F8:A6:C2:A3:02:E6:DA:83:8D:F5:29:77:C8:8B:FA:59:45:C1","sha256":"B1:B4:E6:A1:E7:FD:D8:CC:90:4A:55:55:12:24:2E:42:1D:5B:0D:3F:39:18:35:5D:86:EB:2C:F9:08:C5:1A:0E"}}},"request":{"raw":"GET /c3cc695f375ced8237aa40901e0116e583156a3d.svg HTTP/1.1\r\nHost: whale-claims.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whale-claims.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 00:12:49 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncache-control: public, max-age=2592000\r\nlast-modified: Thu, 01 Jan 2026 08:55:50 GMT\r\netag: W/\"a6-19b78c53cd7\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YlU3%2BGdgrH1D9QGXdtnuYTyl5ZsG5oALuKWJcIS8DS1zUJZEwbTF2UM0fPBPXfDpI8c4vLlGdTfcARSzxGQCOoF55qjqWls%2BCBJbfjbewdMg\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9bafb9a69e1b4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":166,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c595b5d35102556bccdf543b437ff278","sha1":"c3cc695f375ced8237aa40901e0116e583156a3d","sha256":"d0d572cf827cf68e46b7a2c305a9c6fc7387e284b529f7b2a82117769ddd75e2","sha512":"9423785ea51db0d7e2992246f4a973ecdb050278f8644c74a1e6fc12a70560a6eb1bd6d91761ff95c7b5bd6fb295992de907fcfbb0761152959969daa61da751","ssdeep":"","tlshash":"bdc08c3c811cae04ce08c024a1be3673106f31d66fad4badf0812b2af909adb381527c","first_seen":"2025-12-23T21:19:41.119963Z","last_seen":"2026-02-12T20:17:42.469302Z","times_seen":3,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whale-claims.live/secureproxy?e=ping_proxy","fqdn":"whale-claims.live","domain":"whale-claims.live","tld":"live"},"ip":{"addr":"172.67.165.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://whale-claims.live/","date":"2026-01-09T00:12:49.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whale-claims.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 08:21:58 GMT","end":"Wed, 01 Apr 2026 09:20:39 GMT"},"fingerprint":{"sha1":"9B:DE:F8:A6:C2:A3:02:E6:DA:83:8D:F5:29:77:C8:8B:FA:59:45:C1","sha256":"B1:B4:E6:A1:E7:FD:D8:CC:90:4A:55:55:12:24:2E:42:1D:5B:0D:3F:39:18:35:5D:86:EB:2C:F9:08:C5:1A:0E"}}},"request":{"raw":"GET /secureproxy?e=ping_proxy HTTP/1.1\r\nHost: whale-claims.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://whale-claims.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 00:12:49 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: accept-encoding\r\ncast-mode: default\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nlast-modified: Fri, 09 Jan 2026 00:12:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iyHI1gSNdhk2RCWmRL8rEdv2GznnQtjd0RHmU2n0bcwn03EgM3xKKRSpWyT7CjgEeJT8Td3cdgsxkCSlzOjIvL10rY4Y6T5nwq30nBBuphnd\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9bafb9aa8f6b4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"6fdb087aa3fbfbcb8287a593a0919e61","sha1":"0e514a0662bcb69dc863953d1ce26e3d40e81a87","sha256":"9795c5ff8937f23526ccb207a5684c1fc94a7854e19c021b39d944e51f5baef2","sha512":"be5457d14c930b51b47ab152850c1ceaafe6ef88c8671b48164abbc83410b0c07a1e178540f6cdeac5f2672cadb1d1cbbb3434b3e39bc2c50c4646a2bae57437","ssdeep":"","tlshash":"fe300000300000000000000c0000000000000000000000000000000000300000000000","first_seen":"2023-04-12T09:14:15Z","last_seen":"2026-07-22T21:02:33.498872Z","times_seen":8948,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":208,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whale-claims.live/favicon.ico","fqdn":"whale-claims.live","domain":"whale-claims.live","tld":"live"},"ip":{"addr":"172.67.165.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whale-claims.live/","date":"2026-01-09T00:12:50.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whale-claims.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 08:21:58 GMT","end":"Wed, 01 Apr 2026 09:20:39 GMT"},"fingerprint":{"sha1":"9B:DE:F8:A6:C2:A3:02:E6:DA:83:8D:F5:29:77:C8:8B:FA:59:45:C1","sha256":"B1:B4:E6:A1:E7:FD:D8:CC:90:4A:55:55:12:24:2E:42:1D:5B:0D:3F:39:18:35:5D:86:EB:2C:F9:08:C5:1A:0E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: whale-claims.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whale-claims.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 00:12:50 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'none'\r\nx-content-type-options: nosniff, nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=6,i=?0\r\nx-cast-cache: STALE\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mTtGFIM4MmDM7CYcq3sYst1vrpl2%2B74ALnNPS5AZjaJR9z%2Fl8L%2Fn01SwVoy4TSMycWndTogSXHU%2BxoaNQNXjW1cf0Tm5A0O3MjImUoEi8Dmg\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9bafb9ad8ffb4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"84241342d84ac29592a5d9516f8edf7f","sha1":"03c53980e18e17625f439c20e7d438f066202428","sha256":"6e21162bc64073fe9e3d3d6375ca24d04fed1912a5b7716aac0cb0f2d16fae7c","sha512":"7509483335c7a30365f7f403098491ac0b44fffcc68a5cdacb86ec191f02dbda5b16a20a09e924b6a29ac938578d43bacb9a50115db5c5668ea27fe1811bd530","ssdeep":"","tlshash":"34c08c9e140012010b2087042ac1326464973b992de685006a87e027ece8a1ad987288","first_seen":"2023-04-05T13:59:49Z","last_seen":"2026-07-23T18:21:30.736058Z","times_seen":8423,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whale-claims.live/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fchromatic.beta.js%3Ft%3D29465292%26u%3Dwam3WrFzAWBaCfjlGDY5MjU2NDNmMjhjZmYzYzM0MDI3YTkzMaORYxBNOYWLVBj9Vg","fqdn":"whale-claims.live","domain":"whale-claims.live","tld":"live"},"ip":{"addr":"172.67.165.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whale-claims.live/","date":"2026-01-09T00:12:50.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whale-claims.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 08:21:58 GMT","end":"Wed, 01 Apr 2026 09:20:39 GMT"},"fingerprint":{"sha1":"9B:DE:F8:A6:C2:A3:02:E6:DA:83:8D:F5:29:77:C8:8B:FA:59:45:C1","sha256":"B1:B4:E6:A1:E7:FD:D8:CC:90:4A:55:55:12:24:2E:42:1D:5B:0D:3F:39:18:35:5D:86:EB:2C:F9:08:C5:1A:0E"}}},"request":{"raw":"GET /secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fchromatic.beta.js%3Ft%3D29465292%26u%3Dwam3WrFzAWBaCfjlGDY5MjU2NDNmMjhjZmYzYzM0MDI3YTkzMaORYxBNOYWLVBj9Vg HTTP/1.1\r\nHost: whale-claims.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whale-claims.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 09 Jan 2026 00:12:51 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncast-mode: default\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\nvary: Accept-Encoding\r\ncache-control: max-age=2592000, must-revalidate\r\netag: W/\"a0502-14+i6Bt7XM8ofHk8WpmFyqoPYWI\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=chromatic.beta.js\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 01/09/2026 00:12:50\r\ncdn-edgestorageid: 879\r\ncdn-requestid: 970eba79ea4fed42ae5719913cec1432\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jQJLwaIT9wbQQ9lVsT5SpdNegXStfxSPFe2ZecwkmSiyuDp8GYLEtzJ%2BYMCD9M7q8%2FE8%2FK4w1XaVD9DkpowzKa9F05IFAPmVvHkedUUimWVV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bafb9afe8454c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":656642,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-07-21T09:33:26.183344Z","times_seen":2637,"resource_available":true,"data":null}},"time_used":1106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":881,"receive":225,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}