{"report_id":"0d0c0097-bb2c-429f-b679-b06f379db8e9","version":6,"status":"done","tags":[],"date":"2026-03-31T13:47:28Z","url":{"schema":"https","addr":"beourtheiofy.pages.dev","fqdn":"beourtheiofy.pages.dev","domain":"beourtheiofy.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.105","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"beourtheiofy.pages.dev/","fqdn":"beourtheiofy.pages.dev","domain":"beourtheiofy.pages.dev","tld":"pages.dev"},"title":"World Libirty Financia - Bridge USD1 Across Chains","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T11:57:30.813986Z","times_seen":17835961,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"beourtheiofy.pages.dev","fqdn":"beourtheiofy.pages.dev","domain":"beourtheiofy.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.105","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-05T13:47:28Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claimlink.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-03-29T22:35:00.993215Z","alert_count":0,"request_count":2,"received_data":147709,"sent_data":882,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"beourtheiofy.pages.dev","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-03-31T13:47:31.016515Z","last_seen":"2026-03-31T13:47:31.016515Z","alert_count":0,"request_count":2,"received_data":303127,"sent_data":881,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:5.1.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"cdn.iconscout.com","ip":{"addr":"104.18.40.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-06-01","domain_rank":1011342,"first_seen":"2017-01-06T17:08:07Z","last_seen":"2026-03-28T06:33:08.852384Z","alert_count":0,"request_count":1,"received_data":23222,"sent_data":520,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"claimlink.shop","ip":{"addr":"45.148.121.138","port":443,"asn":64425,"as":"SKB Enterprise B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-06-28","domain_rank":0,"first_seen":"2026-01-02T16:47:09.409678Z","last_seen":"2026-03-11T01:36:04.816095Z","alert_count":6,"request_count":6,"received_data":17086867,"sent_data":2393,"comment":"","tags":null,"fingerprints":null},{"fqdn":"vectorseek.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-12-17","domain_rank":295243,"first_seen":"2020-12-31T05:12:31Z","last_seen":"2026-03-31T13:41:45.527048Z","alert_count":0,"request_count":1,"received_data":124443,"sent_data":468,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"miro.medium.com","ip":{"addr":"162.159.152.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1998-05-27","domain_rank":117795,"first_seen":"2017-08-01T13:23:26Z","last_seen":"2026-03-31T13:24:51.523329Z","alert_count":0,"request_count":1,"received_data":71317,"sent_data":437,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"images.mirror-media.xyz","ip":{"addr":"3.167.2.72","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2020-12-22","domain_rank":0,"first_seen":"2022-05-04T12:23:15Z","last_seen":"2026-03-30T08:25:25.445217Z","alert_count":0,"request_count":1,"received_data":3123596,"sent_data":465,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-29T22:20:07.848058Z","alert_count":0,"request_count":1,"received_data":3076,"sent_data":467,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-03-29T23:04:54.250741Z","alert_count":0,"request_count":1,"received_data":70857,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"beourtheiofy.pages.dev/botblocker.js","fqdn":"beourtheiofy.pages.dev","domain":"beourtheiofy.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://beourtheiofy.pages.dev/","date":"2026-03-31T13:47:05.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"beourtheiofy.pages.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 31 Mar 2026 08:48:49 GMT","end":"Mon, 29 Jun 2026 08:48:48 GMT"},"fingerprint":{"sha1":"F6:2C:4B:69:CA:0F:48:51:97:94:47:F8:BE:67:C2:AD:D9:A6:DA:17","sha256":"43:0C:91:63:82:7A:DC:6C:C4:08:6B:E7:A0:76:A9:7A:52:8A:62:11:D9:3F:F5:46:EB:09:D0:AC:76:29:EB:F7"}}},"request":{"raw":"GET /botblocker.js HTTP/1.1\r\nHost: beourtheiofy.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 31 Mar 2026 13:47:05 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bncn916pYs7F8eTVLWpiq4VNqZIdB%2B3AauX%2Fp9mZyIV7q4XHTSxfOurk%2BCDV%2FjGrsleEv%2FtF4NwaJaBxhIasdjHkLe7uOyDWjZonAbtZ1pkd2EopzwfZvUmLlH6Oytj2MJ3wk%2BaRaLBz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"04de3d72720cc293c791c0abab95b2af\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e4fcdcd5b197127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2784,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"8fc752b7957e02e731c4962e2ea93f92","sha1":"5f3ec45b061a6c615db6c05862c494531869e9df","sha256":"921cffd47921e1ef925d42fff973eded2833f2f7d7adfee612612eef47c672d8","sha512":"0c35a65a936a6608697faa85cc3035a1d2bcc14a974a505c872ceab68aaa7b20dffb704185ee10e00d38afd6143a74493ece86be9c892a7c00a7fa86af350c7a","ssdeep":"","tlshash":"045184e994fe72374af730b96153f384fa39a462f260b5b4be1d0124a888d6d4133d4a","first_seen":"2026-03-31T13:47:35.089442Z","last_seen":"2026-03-31T13:49:50.659501Z","times_seen":2,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.iconscout.com/icon/free/png-256/free-metamask-logo-icon-download-in-svg-png-gif-file-formats--browser-extension-chrome-logos-icons-2261817.png","fqdn":"cdn.iconscout.com","domain":"iconscout.com","tld":"com"},"ip":{"addr":"104.18.40.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://beourtheiofy.pages.dev/","date":"2026-03-31T13:47:05.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iconscout.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 01:54:04 GMT","end":"Thu, 28 May 2026 02:54:01 GMT"},"fingerprint":{"sha1":"64:30:74:2B:5E:6B:1F:6A:02:3F:11:1E:0B:42:CE:B8:5F:89:A2:35","sha256":"9B:35:0B:34:74:B2:A6:56:7C:7B:D9:4D:19:11:49:30:A2:7F:B2:9B:9A:02:7F:02:DF:21:C2:69:57:A4:ED:F8"}}},"request":{"raw":"GET /icon/free/png-256/free-metamask-logo-icon-download-in-svg-png-gif-file-formats--browser-extension-chrome-logos-icons-2261817.png HTTP/1.1\r\nHost: cdn.iconscout.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 13:47:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21892\r\nserver: cloudflare\r\nset-cookie: __cf_bm=smKrnpc4hQdBFJ0V6MIfXNqfsJk3LmPIkX2niN0w6Hc-1774964825.2331555-1.0.1.1-14SM7eI7dMjELZZV.cKeowB9NFSMXeFr6TH7q05kx7ho_HxcoEq4omgV4KRoZR5EGOmoQ7Li0pOIFZPq6pEgursYYo0rdQiHhPU_r8NeQrg0Q7Ya1yDLFW2WuCVCKSrY; HttpOnly; Secure; Path=/; Domain=iconscout.com; Expires=Tue, 31 Mar 2026 14:17:05 GMT\r\netag: \"94ab490ca05b42dcdfaf9252b8e81ab4\"\r\nlast-modified: Thu, 20 Aug 2020 06:30:30 GMT\r\nx-amz-replication-status: REPLICA\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: Pgx5Zv6stiR9kHNv1GT.0.0VlgQzJ_by\r\nvia: 1.1 google\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Accept,X-CSRF-TOKEN,Authorization,Client-ID\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncf-polished: ok, orig_size=29430\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nvary: accept, accept-encoding\r\naccept-ranges: bytes\r\nage: 233755\r\nexpires: Wed, 31 Mar 2027 13:47:05 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\ncf-ray: 9e4fcdcdbe4cb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":21892,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2533662cdaffc4a2f6b9fab77e44087f","sha1":"91c82ada7d3c0056d709526a3a0cf3287cd52e58","sha256":"80cd4c8ad32841e20cf2688cabbb05155ebba53876c5b9fae48307c35dd65570","sha512":"a720c8bd17c56c3250116c186179161fee7a04489ef2707d514b34636c249401e15e294662404f772a19a2769b23c2cf69bbf4d9c1e50ad8ccf8f23f704a9b5b","ssdeep":"384:u+4tJokuTQlmdOe/Y/nnltZcO7zo/xl+G7mD3gaRJp6ZqQBcbaxZSmNSjVV5cqy0:uJt6ClmACYNtZcOixlUTGRWaxAmoVcb0","tlshash":"bea2e0e970c78d1bbe51e796c4c976b0821173cd22cb1fe0895ac2d2836dea41d3459e","first_seen":"2025-08-11T16:08:27.787417Z","last_seen":"2026-04-20T23:52:46.308765Z","times_seen":37,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":41,"dns":22,"connect":1,"send":0,"wait":18,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claimlink.shop/assets/w-modal.js?v=09.19.205","fqdn":"claimlink.shop","domain":"claimlink.shop","tld":"shop"},"ip":{"addr":"45.148.121.138","port":443,"asn":64425,"as":"SKB Enterprise B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://beourtheiofy.pages.dev/","date":"2026-03-31T13:47:05.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimlink.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 23:27:33 GMT","end":"Mon, 25 May 2026 23:27:32 GMT"},"fingerprint":{"sha1":"A6:9D:35:91:0F:CA:FC:63:7A:1B:35:79:3D:65:00:1C:2E:DC:DA:BC","sha256":"BD:32:01:55:B1:0E:E4:EE:0E:3E:D6:0A:B1:DC:8A:62:C6:C5:DF:ED:64:22:2A:0D:3F:D2:85:4E:4D:BE:A7:8A"}}},"request":{"raw":"GET /assets/w-modal.js?v=09.19.205 HTTP/1.1\r\nHost: claimlink.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 07 Apr 2026 13:47:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 20 Sep 2025 12:58:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1591804\r\ndate: Tue, 31 Mar 2026 13:47:05 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2777892,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"6af27896a8d013bc8af0a637e592d9c8","sha1":"a349c638934eabcd50beb5bccf5f5651a5331123","sha256":"69a351f3557cec325a3ceaaacbe457005a9b00fe2e9787157ddc33a9bd921ee2","sha512":"7a5f55e4f9995e0cb081701fcf2c59cfcbfa3f40ede539a2686342f6c0d7c991a2ccb5f4c93539eba190551d77e75e18ad09f33545a6dd79df1ab5636da18cf7","ssdeep":"6144:uSSK6guMiZ0BthSjMwAbZ98C0/V+p3mZZ6XRqerKUr/:uSS9guMziMwAP8v+p2H6XRDDr/","tlshash":"e8252260c251e9fcda04de01de3ca31c9932179ee5f9b7f026a8f816dd86817286c9f5","first_seen":"2025-10-02T14:10:04.530316Z","last_seen":"2026-04-12T17:18:45.855995Z","times_seen":20,"resource_available":false,"data":null}},"time_used":494,"timings":{"blocked":-1,"dns":118,"connect":37,"send":0,"wait":68,"receive":219,"ssl":45},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claimlink.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claimlink.shop/assets/modules.js?v=09.19.205","fqdn":"claimlink.shop","domain":"claimlink.shop","tld":"shop"},"ip":{"addr":"45.148.121.138","port":443,"asn":64425,"as":"SKB Enterprise B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://beourtheiofy.pages.dev/","date":"2026-03-31T13:47:05.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimlink.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 23:27:33 GMT","end":"Mon, 25 May 2026 23:27:32 GMT"},"fingerprint":{"sha1":"A6:9D:35:91:0F:CA:FC:63:7A:1B:35:79:3D:65:00:1C:2E:DC:DA:BC","sha256":"BD:32:01:55:B1:0E:E4:EE:0E:3E:D6:0A:B1:DC:8A:62:C6:C5:DF:ED:64:22:2A:0D:3F:D2:85:4E:4D:BE:A7:8A"}}},"request":{"raw":"GET /assets/modules.js?v=09.19.205 HTTP/1.1\r\nHost: claimlink.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 07 Apr 2026 13:47:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 20 Sep 2025 12:59:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2929153\r\ndate: Tue, 31 Mar 2026 13:47:05 GMT\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10148352,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"cd81f640d8e2a50d3ce77251bdd30375","sha1":"d8af4e2cff4c32ceb9398bd21823aa7129a98410","sha256":"3bf5db4b4318c7ac1444fdc4591418b125484a929e781ae3472a5d2942a55cdd","sha512":"a8f55454d6a9101c4cabe3905416aa0fdb48067d3cf193cb915362ec8d3a2760566d3799041c7b36a80083a6dd7fa2fa52bf9ad2a8a00ddeaea31d23f3844147","ssdeep":"24576:I3DUOKDazpZr5wZuDhneVNtTCLxrmUQd9W+7ykkiYjAIk7U:K/","tlshash":"b525aedaca04c6ee61030ffbff1064c9c7d56d199ac4cdf4e2aefd81d59ea699428240","first_seen":"2025-10-15T01:32:43.207637Z","last_seen":"2026-03-31T13:49:50.658343Z","times_seen":14,"resource_available":false,"data":null}},"time_used":653,"timings":{"blocked":-1,"dns":117,"connect":24,"send":0,"wait":23,"receive":448,"ssl":38},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claimlink.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"beourtheiofy.pages.dev/","fqdn":"beourtheiofy.pages.dev","domain":"beourtheiofy.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-31T13:47:04.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"beourtheiofy.pages.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 31 Mar 2026 08:48:49 GMT","end":"Mon, 29 Jun 2026 08:48:48 GMT"},"fingerprint":{"sha1":"F6:2C:4B:69:CA:0F:48:51:97:94:47:F8:BE:67:C2:AD:D9:A6:DA:17","sha256":"43:0C:91:63:82:7A:DC:6C:C4:08:6B:E7:A0:76:A9:7A:52:8A:62:11:D9:3F:F5:46:EB:09:D0:AC:76:29:EB:F7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: beourtheiofy.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 13:47:04 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TF5mRLhKDjkCQ%2FG9ONk%2B5QqiD3aDubic5ymlQR8Tw1aog7IjoQEwDlf3mXHKNmr%2Fw0vJdv5L2RZYezzJYIpH2s2Ujlpb7tu7Nju41rm%2F04QS4pjTdcrHbfoZZVXWfqfw7v08PApHmrsw\"}]}\r\netag: W/\"03b3edf787180d8a37e73afed79f703c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e4fcdcbabdbc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap:5.1.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":298800,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (44317)","md5":"8271dffafbd8876831117bc7986e63cd","sha1":"5839808304fc4a4f31fe452954e704d4e31aeca0","sha256":"402e385c690565bb1ce292b6d9dcb60bb4b24efc7e2de750f6cca8647e128db0","sha512":"5b6057bffe25b3153b8dd5638a1ff38306a9a169d6837ffb79bcdf90160b3d86c70d33823ff557bc465530d6ee0280bf116adcd4e2079d2fae79d85a9689be99","ssdeep":"6144:sjQ+4xEQsisGQbVbxzbVbx4bVbxUH1rHwOkrrK9eiXYW7FW3seZGtA:MQ+qEQsB5N5W5OH1rQOqrK4iXYuFW3rn","tlshash":"b5548cb78993103d2e1712bb52ed7a1fa105f0c39d5a6bd9b39e81a073c72f14a93349","first_seen":"2026-03-31T13:47:35.09337Z","last_seen":"2026-03-31T13:49:50.655095Z","times_seen":2,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":39,"dns":28,"connect":1,"send":0,"wait":57,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vectorseek.com/wp-content/uploads/2024/07/Trust-Wallet-Shield-Logo-Vector-Logo-Vector.svg-.png","fqdn":"vectorseek.com","domain":"vectorseek.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://beourtheiofy.pages.dev/","date":"2026-03-31T13:47:05.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vectorseek.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 23:52:34 GMT","end":"Sat, 09 May 2026 00:51:05 GMT"},"fingerprint":{"sha1":"5D:C1:B2:7F:9D:43:5E:75:EA:6E:F7:A2:C0:D2:B3:1C:3E:6E:13:99","sha256":"A8:6B:8A:57:00:44:D7:D5:CD:0A:E3:5A:3F:F3:35:41:7A:C8:D9:5D:29:D4:C8:1A:8F:14:4E:0C:D2:9E:5C:F0"}}},"request":{"raw":"GET /wp-content/uploads/2024/07/Trust-Wallet-Shield-Logo-Vector-Logo-Vector.svg-.png HTTP/1.1\r\nHost: vectorseek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 13:47:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 123587\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\nlast-modified: Mon, 22 Jul 2024 13:55:49 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\nexpires: Tue, 30 Mar 2027 08:24:58 GMT\r\nage: 105726\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ULF4m2ByMz5MeRlOPQFyGPrI4aSQtAOP9K%2Fx3oSfIc78uugYhp2yN1D3Lq%2BkWB9kysMO1bIcQacfhxZKYwD35LaX%2B7LZCc%2Be1V5owNzkNN6xuvnYuTDPXiE94A9Z5iYErg%3D%3D\"}]}\r\ncf-ray: 9e4fcdcdadff120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":123587,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1656 x 1867, 8-bit/color RGBA, non-interlaced","md5":"e95d18ba4f40719e19835ad70d61db2e","sha1":"7832a6c9011bd2de3e36bb4eeeaca0e32b0d855b","sha256":"589588af0c16cc17c58e35231454eb76c1dac82ef925186b32b8fab5473bf162","sha512":"971d56c9c7331b1fd37b0ad94757e953b8f7a5b952685cc8b399d7b94571d39048d48bdae439a2245409795787e8f054a7cf97cbc84ab734b6dc557db9abfbea","ssdeep":"3072:O5fqjKqmvrV7RXvoc5NlRYKpBD/ElqkJ7Synyayv/i:O5fgQzV7m2PRYoD/EkkJOMMv/i","tlshash":"56c3f1f4ca438d8ad54e91f81f214b69b37901686c7cbe4b8ebcc2125ce9385e2274c5","first_seen":"2025-06-28T21:14:36.002504Z","last_seen":"2026-08-06T01:36:55.871821Z","times_seen":72,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":32,"dns":21,"connect":1,"send":0,"wait":10,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claimlink.shop/assets/w-loader.js?v=09.19.205","fqdn":"claimlink.shop","domain":"claimlink.shop","tld":"shop"},"ip":{"addr":"45.148.121.138","port":443,"asn":64425,"as":"SKB Enterprise B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://beourtheiofy.pages.dev/","date":"2026-03-31T13:47:05.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimlink.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 23:27:33 GMT","end":"Mon, 25 May 2026 23:27:32 GMT"},"fingerprint":{"sha1":"A6:9D:35:91:0F:CA:FC:63:7A:1B:35:79:3D:65:00:1C:2E:DC:DA:BC","sha256":"BD:32:01:55:B1:0E:E4:EE:0E:3E:D6:0A:B1:DC:8A:62:C6:C5:DF:ED:64:22:2A:0D:3F:D2:85:4E:4D:BE:A7:8A"}}},"request":{"raw":"GET /assets/w-loader.js?v=09.19.205 HTTP/1.1\r\nHost: claimlink.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 07 Apr 2026 13:47:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 20 Sep 2025 09:17:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 666548\r\ndate: Tue, 31 Mar 2026 13:47:05 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1979079,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"fecf7941482639b91cd8d01d115cd251","sha1":"bca4a26b999317c6afa87952f4edf9d53b65fae4","sha256":"8ba81f01fc74c8993fe0e113fb0336ff9f896df20bd04f25b360500e229d03b3","sha512":"09128f381e62c6cb876428b46c41a8c402a4c281c25a0cc2750c2af1839de0e6ea1a0b981dec914c7cd7de3186c147379b6502d52c19ccf181b0f69942ea3766","ssdeep":"24576:76QJaZGyA2hRiUTfciehc9sJs/iTgK25AhltX+03dWnaQvYhNkJ2XDYbXtLWwu72:DyA2PZehusJs/iTgj5Ahltu03dOauuNo","tlshash":"4e25fc123798fc4b210b5233375675e5d639f90dd248d8aef2043d68e1ec932bae56b2","first_seen":"2025-10-02T14:10:04.544537Z","last_seen":"2026-04-12T17:18:45.838557Z","times_seen":20,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":118,"connect":37,"send":0,"wait":69,"receive":145,"ssl":46},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claimlink.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"miro.medium.com/v2/resize:fit:1400/1*aGWMU1Z_3eMiO74hv_mgjA.png","fqdn":"miro.medium.com","domain":"medium.com","tld":"com"},"ip":{"addr":"162.159.152.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://beourtheiofy.pages.dev/","date":"2026-03-31T13:47:05.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"medium.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 19:59:16 GMT","end":"Wed, 10 Jun 2026 20:59:05 GMT"},"fingerprint":{"sha1":"09:82:33:43:6A:B0:29:CE:52:C2:78:BE:56:C2:66:69:2C:93:77:4D","sha256":"96:A2:77:A3:57:AE:2F:B8:AC:84:4F:CC:90:D3:13:81:B2:E3:67:90:0A:1A:95:7F:7F:03:DC:28:0B:46:B1:01"}}},"request":{"raw":"GET /v2/resize:fit:1400/1*aGWMU1Z_3eMiO74hv_mgjA.png HTTP/1.1\r\nHost: miro.medium.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 13:47:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 70294\r\ncf-ray: 9e4fcdce1bf0a41f-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"1*aGWMU1Z_3eMiO74hv_mgjA.png\"\r\ncontent-security-policy: script-src 'none'\r\netag: \"kOh5IArmqbwi-UQnx70r884GPb_iKvNGsAhWyZ59jw0/RIjY4NjU4YzUzNTY3ZmRkZTMyMjNiYmUyMWJmZjlhMDhjIg\"\r\nmedium-fulfilled-by: miro-v2/main-20260115-211822-87e762ce42\r\nx-envoy-upstream-service-time: 92\r\nx-request-id: 02e311c8-ab45-4205-869a-14b7953abbe9\r\ncf-cache-status: HIT\r\nage: 105728\r\nexpires: Wed, 31 Mar 2027 13:47:05 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: _cfuvid=pA.InLOxoxjp4P7PbbG.ELFye0MFu9Yis8a379T02yE-1774964825311-0.0.1.1-604800000; path=/; domain=.medium.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":70294,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1400 x 434, 8-bit/color RGBA, non-interlaced","md5":"bb407fc06400f75a1a863fd0a3eb0ebd","sha1":"cced92e3887fbcde26dff6fb88d9bf98ab76ca72","sha256":"b15ba5a0cb6471be7054f50c759b8245b311c2bf28307cd548bf1f8a1866556d","sha512":"cd41bbf63d9e843a15a5b4039e1ba84378f0373e57d42f7c640a289a2d5187c17bc425344acdb32b1784bff30a832cee206c5843d9bc3b07cd630946577f2472","ssdeep":"1536:7LBnY/blf1mfRh+gmWyxpPT7mOBlAihNQGbv+KFxi1fKaqZ4WUXhl3:vBnY/blEfRLsmObADWOJKak47L","tlshash":"6b6301d7cf829843edc44875e59e8ba45df01ce013ed2af45f32f1919abfa4418952c5","first_seen":"2025-08-11T16:08:27.79753Z","last_seen":"2026-08-06T01:36:55.872779Z","times_seen":37,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":99,"dns":34,"connect":1,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claimlink.shop/assets/main.js?v=09.19.205","fqdn":"claimlink.shop","domain":"claimlink.shop","tld":"shop"},"ip":{"addr":"45.148.121.138","port":443,"asn":64425,"as":"SKB Enterprise B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://beourtheiofy.pages.dev/","date":"2026-03-31T13:47:05.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimlink.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 23:27:33 GMT","end":"Mon, 25 May 2026 23:27:32 GMT"},"fingerprint":{"sha1":"A6:9D:35:91:0F:CA:FC:63:7A:1B:35:79:3D:65:00:1C:2E:DC:DA:BC","sha256":"BD:32:01:55:B1:0E:E4:EE:0E:3E:D6:0A:B1:DC:8A:62:C6:C5:DF:ED:64:22:2A:0D:3F:D2:85:4E:4D:BE:A7:8A"}}},"request":{"raw":"GET /assets/main.js?v=09.19.205 HTTP/1.1\r\nHost: claimlink.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 07 Apr 2026 13:47:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 20 Sep 2025 09:13:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 751190\r\ndate: Tue, 31 Mar 2026 13:47:05 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2019644,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"790167c565eb357b6acf8106322963af","sha1":"6881398e43a5c17b1c21f411eb616edfab138b1d","sha256":"9997d7b533a274e12bfe1ad5f699d764aad895696b6a05452ddcea6c69c0d19a","sha512":"bff4ca3a91ddda3e50d1b22d341c2cf5581fa65a215ee3ef501cedb063f9abae3553db83b2b57f23281f3a1c955c90c64be57ea8277211f557517d9f0a98b528","ssdeep":"24576:rwA35zw9sIL7sQEgjy+lc31869PGNb/0VmVG2ZaaA/6u:rjwWIREge+lc318dNbvVyaA/6u","tlshash":"cc25948137c07982230b5bb9b717b1f5f53aae99a189889fe1047c94f0ddd22fae0571","first_seen":"2025-10-02T14:10:04.535609Z","last_seen":"2026-04-12T17:18:45.870272Z","times_seen":20,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":117,"connect":37,"send":0,"wait":70,"receive":130,"ssl":48},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claimlink.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.mirror-media.xyz/publication-images/Lx_fohJ8ttprQ3DmDKU9N.png?height=2048\u0026width=2048","fqdn":"images.mirror-media.xyz","domain":"mirror-media.xyz","tld":"xyz"},"ip":{"addr":"3.167.2.72","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://beourtheiofy.pages.dev/","date":"2026-03-31T13:47:05.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mirror-media.xyz","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Tue, 22 Jul 2025 00:00:00 GMT","end":"Wed, 19 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"73:65:B6:3A:5A:AE:1A:B3:AE:F5:98:06:07:83:20:6E:0C:7B:75:DC","sha256":"F8:DA:34:F4:84:CC:D3:B3:51:47:D5:66:FE:C8:2D:A8:DF:3E:E7:C2:B6:21:9D:5F:9B:3E:DF:61:B1:E4:52:94"}}},"request":{"raw":"GET /publication-images/Lx_fohJ8ttprQ3DmDKU9N.png?height=2048\u0026width=2048 HTTP/1.1\r\nHost: images.mirror-media.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 3123075\r\nlast-modified: Wed, 20 Dec 2023 18:25:10 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Tue, 31 Mar 2026 13:47:05 GMT\r\netag: \"0630e5cac5e03c449e18044ded322107\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 677df3933c00907ecb7cdafc768e98fc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: A_fD99dwgxEMYVVtrgke7EYdw00SyTC8otJEUEvHnySXnfReEVVIxQ==\r\nage: 28742\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3123075,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2048 x 2048, 8-bit/color RGBA, non-interlaced","md5":"6578a05ca1b84a32f6e6bb3fd5376f20","sha1":"b859b42f7bcdef2b75d034625ba290d6e93ea087","sha256":"4c02c8cfdef1b62a4be7048b9e92da560eb783fef4e320df13e29b17f980634b","sha512":"64a3fe6ba30eb1e0ba37bddd95b3e1783b81efe06c4b1e856d35f05e958715c69cb3184e3350557473ff1b32d7c3f58cf77be4339d89371192f36675ca35d2a6","ssdeep":"24576:aU7IkuQqH6Jrsp/0IS3C2e8LfNgJx33ms9tfcQXaJYsH:aAiHP/0ISSl8LfG4Qc6ausH","tlshash":"ca2533a74ae9d805ddd46109867f0b8e1c397ba242a7b8293572f230d5885fc1d1caae","first_seen":"2025-09-03T13:03:52.553807Z","last_seen":"2026-08-06T01:36:55.863753Z","times_seen":22,"resource_available":false,"data":null}},"time_used":1459,"timings":{"blocked":640,"dns":175,"connect":1,"send":0,"wait":24,"receive":135,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claimlink.shop/assets/eth.js?v=09.19.205","fqdn":"claimlink.shop","domain":"claimlink.shop","tld":"shop"},"ip":{"addr":"45.148.121.138","port":443,"asn":64425,"as":"SKB Enterprise B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://beourtheiofy.pages.dev/","date":"2026-03-31T13:47:05.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimlink.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 23:27:33 GMT","end":"Mon, 25 May 2026 23:27:32 GMT"},"fingerprint":{"sha1":"A6:9D:35:91:0F:CA:FC:63:7A:1B:35:79:3D:65:00:1C:2E:DC:DA:BC","sha256":"BD:32:01:55:B1:0E:E4:EE:0E:3E:D6:0A:B1:DC:8A:62:C6:C5:DF:ED:64:22:2A:0D:3F:D2:85:4E:4D:BE:A7:8A"}}},"request":{"raw":"GET /assets/eth.js?v=09.19.205 HTTP/1.1\r\nHost: claimlink.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 07 Apr 2026 13:47:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 20 Sep 2025 09:12:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 57824\r\ndate: Tue, 31 Mar 2026 13:47:05 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":151939,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c69c7b28ca3c8203eae19849767fc0c5","sha1":"2d5769b74765dc73cce50322183ded248bf7ea22","sha256":"3357c9013b560f441dcba94d89767f679eb469589ef9e3b4661b9e15dcb48670","sha512":"b0bb3cf9da8a5b4d35968ba239cbc2ddd40ba69324ddfa79831f6cfd0288d88b640f80ac93125c6ae179496466b570c7fddeb6ee9a0144e8f6a8280dd9acfe91","ssdeep":"3072:a4oQy6FuZflvroFWJgYo6usriTzzigi4Ei2Gs9/6+6hALEP:a4oVfljoFWJgj6uJzzigi4Eis16+LLW","tlshash":"48e384c173c2bc8222471b7b772bb5e5e53a8dd971c9488ef504bc58f0b9916eae0631","first_seen":"2025-10-02T14:10:04.540227Z","last_seen":"2026-04-12T17:18:45.872651Z","times_seen":20,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":119,"connect":38,"send":0,"wait":65,"receive":25,"ssl":46},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claimlink.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.slim.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://beourtheiofy.pages.dev/","date":"2026-03-31T13:47:05.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.7.1.slim.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://beourtheiofy.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-11278\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 31 Mar 2026 13:47:05 GMT\r\nage: 2929195\r\nx-served-by: cache-lga21942-LGA, cache-hel1410024-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 17175, 8782\r\nx-timer: S1774964825.327512,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 24036\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70264,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65241)","md5":"af73dd50819a5fc22dff8b0ed2229d6c","sha1":"8b1d5dbd114b9c92f4a20139e1aca3196d94814b","sha256":"9261efb3407e3a9096e4654750d8eff6b3a663422f48845c7fbcc65034c340cf","sha512":"b0dca576e87d7eaa5850ae4e61759c065786cdb6489d68fcc82240539eebd5da522bdb4fda085ffd245808c8fe2acb2516408eb774ef26b5f6015fc6737c0ea8","ssdeep":"1536:AFUREURoe6xGT031BsGBjrg2l49E92BxjBxu/HG60QVRyPy4IQ47GK7:f6nsGBjRwBBuHzmvIQ47GK7","tlshash":"3463e7df72ca702257bb20b9107f610bf2764899680d4410f159e8e9bc7c95a827bf7e","first_seen":"2023-09-17T13:27:56Z","last_seen":"2026-08-10T18:26:53.622041Z","times_seen":5461,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":37,"connect":14,"send":0,"wait":23,"receive":2,"ssl":88},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:wght@400;500\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://beourtheiofy.pages.dev/","date":"2026-03-31T13:47:05.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:40 GMT","end":"Mon, 01 Jun 2026 08:37:39 GMT"},"fingerprint":{"sha1":"5F:99:6E:26:2A:3A:DA:FF:7F:0D:EE:C5:8B:2A:01:AE:28:26:AD:C4","sha256":"2B:88:E7:79:70:E5:E9:DE:0E:A9:0A:B8:F1:F5:C6:D6:10:77:F0:C9:0F:E6:2A:13:A3:D6:08:F9:89:A3:60:E8"}}},"request":{"raw":"GET /css2?family=Poppins:wght@400;500\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claimlink.shop/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 31 Mar 2026 13:47:05 GMT\r\ndate: Tue, 31 Mar 2026 13:47:05 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2390,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"116f798889ee350bc20ebba4cf2c4d45","sha1":"d192cdefb46b28fc33e5a00d357beca773e377b9","sha256":"25b3caa3b90e16b0073b9c9cf9af8448b9cb2dc05beba404905cb15ad569212f","sha512":"27506e4f20dc48cb04eaf9b648754d18b937c06e77dfd80b3ab7fa0bfbe585c7eda652615776a5d2bd0cefda7c0d94507591144bbbfff93509c97feeeb31ff7d","ssdeep":"","tlshash":"1141add1087be1149b831cc123cf6d37ee0e9255b810e5786bfe0c98adabc654362b2d","first_seen":"2025-09-17T09:12:48.132355Z","last_seen":"2026-08-11T06:42:47.44494Z","times_seen":1047,"resource_available":false,"data":null}},"time_used":518,"timings":{"blocked":198,"dns":7,"connect":7,"send":0,"wait":79,"receive":0,"ssl":223},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://beourtheiofy.pages.dev/","date":"2026-03-31T13:47:05.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://beourtheiofy.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 5.1.3\r\nx-jsd-version-type: version\r\netag: W/\"13131-qF5oFiTJGhBqUUwx6s+A3oF7LMM\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 31 Mar 2026 13:47:05 GMT\r\nage: 3228107\r\nx-served-by: cache-fra-eddf8230081-FRA, cache-hel1410033-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 23715\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78129,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"7ccd9d390d31af98110f74f842ea9b32","sha1":"a85e681624c91a106a514c31eacf80de817b2cc3","sha256":"f5210fa3e7f0245a4c51eb7f280092c0ef99fdd28c45e17dab8cc5854fdf4fd3","sha512":"a5ac783258178c710f7c2c1c24b4218a063bf8df2bb7a6d5bd62c5c9432ec5286fd7bd17e774d1cc63e63e4666181864fa38a447c581338ca5ec0f563071eabe","ssdeep":"1536:pppbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZY:T36WJr9ixi","tlshash":"a873c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","first_seen":"2023-03-07T01:06:26Z","last_seen":"2026-08-11T12:02:20.097186Z","times_seen":18931,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":26,"connect":15,"send":0,"wait":16,"receive":1,"ssl":82},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/boxicons@latest/css/boxicons.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://beourtheiofy.pages.dev/","date":"2026-03-31T13:47:05.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/boxicons@latest/css/boxicons.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 2.1.4\r\nx-jsd-version-type: version\r\netag: W/\"109bc-IH/O3L/2oFuyFxGxc9h5/AQWzS0\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 31 Mar 2026 13:47:05 GMT\r\nage: 33170\r\nx-served-by: cache-fra-etou8220043-FRA, cache-hel1410021-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 11872\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":68028,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"886ed8dd06c506c77cf226f4506b3c00","sha1":"207fcedcbff6a05bb21711b173d879fc0416cd2d","sha256":"620eea24b0cee1d8cc8395c80f295cf2e7b6fab962493c26b49a8d42b63a4dc9","sha512":"727d7a430f26cd304aa6ed3c5f47f08534afd3690afc5a238cd2f3d1bc29db12781fec9a970cd7285c3fe5c2f3b81642c4658803ef795f8b24cefa3c49336d4a","ssdeep":"1536:iYKTLiBm3+avY/Ys0ya9EtAAu92jneUa69jAXdMm3CYlsTMu7knbU:idw7iU","tlshash":"96633cf5e59944c93b32e447c784f74c20aaf931da421d62f26f941e6ed0a250bc6fb8","first_seen":"2023-04-05T09:10:20Z","last_seen":"2026-08-11T05:32:38.026203Z","times_seen":4651,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":126,"dns":37,"connect":15,"send":0,"wait":15,"receive":1,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claimlink.shop/assets/css/style.css?v=09.19.205","fqdn":"claimlink.shop","domain":"claimlink.shop","tld":"shop"},"ip":{"addr":"45.148.121.138","port":443,"asn":64425,"as":"SKB Enterprise B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://beourtheiofy.pages.dev/","date":"2026-03-31T13:47:05.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claimlink.shop","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 23:27:33 GMT","end":"Mon, 25 May 2026 23:27:32 GMT"},"fingerprint":{"sha1":"A6:9D:35:91:0F:CA:FC:63:7A:1B:35:79:3D:65:00:1C:2E:DC:DA:BC","sha256":"BD:32:01:55:B1:0E:E4:EE:0E:3E:D6:0A:B1:DC:8A:62:C6:C5:DF:ED:64:22:2A:0D:3F:D2:85:4E:4D:BE:A7:8A"}}},"request":{"raw":"GET /assets/css/style.css?v=09.19.205 HTTP/1.1\r\nHost: claimlink.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 07 Apr 2026 13:47:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 17 Sep 2025 14:24:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2040\r\ndate: Tue, 31 Mar 2026 13:47:05 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7830,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"e15dbe295ef31ab8b2c623804f97fdcc","sha1":"6f03282697fd9cdba35246f07ba4ba6a0ffb62b5","sha256":"d18eddca51577aad8927acf0c365637984e1529e2dc8824e5d8fd46fa17384eb","sha512":"322498ce51c8f634df38c03005f6d03f2ab43b2383ddc963049d9d3d1eebb998ce391b861cdbed1986dddcf0f685d8dcf551bcc59bc76d5013fa58238bea5fd8","ssdeep":"192:fc7pmFv7CdKVfUZtQKjy+K1Y1mqSQ5yDYy:fc11PPy","tlshash":"aaf16291dd691542313793693ba38b6ceb79000787022bfc7aed22608fa57b84674fcc","first_seen":"2025-10-02T14:10:04.537627Z","last_seen":"2026-08-06T01:36:55.860236Z","times_seen":33,"resource_available":false,"data":null}},"time_used":473,"timings":{"blocked":192,"dns":124,"connect":35,"send":0,"wait":78,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-31","alert":"Sinkholed","trigger":"claimlink.shop","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}