{"report_id":"11fbfad1-161a-41bb-83c5-0982f8b00ebf","version":0,"status":"done","tags":[],"date":"2026-08-14T17:20:29Z","url":{"schema":"http","addr":"orcaclaim.live/","fqdn":"orcaclaim.live","domain":"orcaclaim.live","tld":"live"},"ip":{"addr":"172.67.129.13","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"orcaclaim.live/","fqdn":"orcaclaim.live","domain":"orcaclaim.live","tld":"live"},"title":"Orca — Claim $Dolphin","dom":{"size":14622,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"64473566c9cf1e4c48fd2ae928fd2361","sha1":"a45bf1615870fc2c39e1feb1d9b0a0ea5ef07763","sha256":"0bca750a07b1382611c05e64a06603da6f60990542b9a1c6a61905f946537b98","sha512":"d015b3b9e2ce282ad6ff2a7f0064112810cd2fb1748099d6b466daf25f395a7c757776b229cbc49f148a3fa8b678e835a2cdbfc7545d931935e5b2f75039362d","ssdeep":"192:YNxSrUE4wzFsllTJCAgQZ6/1n5gMPEJPAtllBE1dR6qucYPI7OoT3nUP4OhFKb73:ixDNs66hW/hJpPp","tlshash":"f16240996ae31105a517e1b02bfb571d3734c117c90bcc6c7bee26d88f481c9ea96b88","dom_hash":"domhash04da31bced0cd86638adb8747f12a8e8","first_seen":"2026-08-14T17:20:34.524159Z","last_seen":"2026-08-14T17:20:34.524159Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"orcaclaim.live/","fqdn":"orcaclaim.live","domain":"orcaclaim.live","tld":"live"},"ip":{"addr":"172.67.129.13","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-18T17:20:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"orcaclaim.live","ip":{"addr":"172.67.129.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-14T17:20:30.460576Z","last_seen":"2026-08-14T17:20:30.460576Z","alert_count":0,"request_count":4,"received_data":679145,"sent_data":2033,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-09T22:23:43.881052Z","alert_count":0,"request_count":1,"received_data":7878,"sent_data":540,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-09T22:20:44.514027Z","alert_count":0,"request_count":4,"received_data":34696,"sent_data":2224,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"orcaclaim.live/","fqdn":"orcaclaim.live","domain":"orcaclaim.live","tld":"live"},"ip":{"addr":"172.67.129.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fad4ad9545c6262b11082913f74c2218","sha1":"c27de2436a98f2a43f3a5d4a9151542754b4d03c","sha256":"c21ea7223be54fee5e69be8b44d310744578cc6d77326ee406e71b93dc3c1ab1","sha512":"0dfbe0f9b2520b354711dfa9bf69a5a39140db3c85020c315a5d740160080561cbd00f80a2692eb6e7790b4de5716f0d9648d357af34a01a1b169234bccdf27a","ssdeep":"","tlshash":"77c080e0da758d71161c10f7d374a2d8b950252d65e3a5d9c3fc88d6649cec14f58414","size":180,"data":"","first_seen":"2026-08-14T17:20:34.534439Z","last_seen":"2026-08-14T17:20:34.534439Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orcaclaim.live/secureproxy?s=%2Fipfs%2FzuR2jfa8mA5RENbqQfSVug230b8b47d31727a19b9723f80ccf47f9%3Ft%3D1786728001005","fqdn":"orcaclaim.live","domain":"orcaclaim.live","tld":"live"},"ip":{"addr":"172.67.129.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"834a717d1825f45ea62c159cd46b23af","sha1":"ec60acd40826743d48995a0c3f2a14c141640683","sha256":"e53c53117f22f23c411e2b1e7580f4e82004666d7565d366863c323419a8b8e6","sha512":"c4836b6e6f852056a4c75be88d85f8640e071c7809310f2397d9b28a720610502a40aa48e3ec793b6d0926df6ba4e92d57f42ed9104d60dacd83d7c56575f5c2","ssdeep":"6144:ch5gDGrq9NWCEiox3Ti/1gFQZDeoV5oMPNFppHSyyA:csmq9NWCEiox3Ti/ESVPHSyyA","tlshash":"74d4cbd0b34a56bbd8d6b2b7043349afdfa82906064b188bd2e7dce4725470791dc9bc","size":645583,"data":"","first_seen":"2026-08-14T17:20:34.529915Z","last_seen":"2026-08-14T17:20:34.529915Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"orcaclaim.live/","fqdn":"orcaclaim.live","domain":"orcaclaim.live","tld":"live"},"ip":{"addr":"172.67.129.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-14T17:20:00.514Z","timestamp":1786728000514,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orcaclaim.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 09:24:34 GMT","end":"Wed, 11 Nov 2026 10:23:14 GMT"},"fingerprint":{"sha1":"B3:12:12:B2:4B:3F:93:21:F3:5F:3B:42:F4:24:E7:25:17:3E:32:60","sha256":"54:1B:08:91:EB:91:22:85:64:DF:32:42:AB:2B:E7:15:92:08:78:EC:2E:60:37:07:85:5D:B3:D5:8E:0B:81:A9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: orcaclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 14 Aug 2026 17:20:00 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Thu, 13 Aug 2026 07:30:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\npriority: u=0,i\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XPqrjvgMOXyGurOrhOo22PBuZapoHSRjday2xAne4Y82OcTstKzPBP9xvnWtX9lqCvPWKLvqlMrePSatOxclXRv7NcGxm%2B5R%2BV%2BMOdlpAE7KHXhLUTrSh%2FTq3MlOxK8Ozg%3D%3D\"}]}\r\ncf-ray: a2b1a0b3be9a568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14391,"size_decoded":4435,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"0ed6faca3b5e91d08bf4b3c68546cbf9","sha1":"2947409c6672da182f6209777a423368d3bf6969","sha256":"613c5d24d4bd141a05be9d4eb1cf70e28f9521440237ce2191d548519915505d","sha512":"d9406ee0f6d5749af00de793887478bbf6fa42f7285b571b6ad18289c6474cb2928673e8b5a14b2e9a675962ff1fc0bd024442b322a3fe3a0972e2ebbfc673ae","ssdeep":"192:SNaQycE4wzFsllTJCAgQZ6/1n5gMPEJPAtllBE1dR6qucYPI7OoT3nUP4OhFKb7c:wa6Ns66hW/hJmn","tlshash":"6d5261996ae31105a517e1b02bf7571e3734c117c90bcc6c7bee26d8cf491c8ea96b88","first_seen":"2026-08-14T17:20:34.527486Z","last_seen":"2026-08-14T17:20:34.527486Z","times_seen":1,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":0,"dns":71,"connect":14,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://orcaclaim.live/","date":"2026-08-14T17:20:01.260Z","timestamp":1786728001260,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:43 GMT","end":"Mon, 12 Oct 2026 18:07:42 GMT"},"fingerprint":{"sha1":"3C:2E:4A:58:D0:DB:8D:00:50:7D:0E:E6:87:DE:CA:95:B3:BA:1B:89","sha256":"C2:4F:05:DF:4B:24:E4:A9:E4:2A:30:66:F4:78:E7:75:AC:AE:71:43:E7:DA:3E:24:4B:A3:AA:9A:39:4E:E2:E1"}}},"request":{"raw":"GET /css2?family=Poppins:wght@300;400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orcaclaim.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 14 Aug 2026 17:20:01 GMT\r\ndate: Fri, 14 Aug 2026 17:20:01 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7194,"size_decoded":1268,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"decfdd5c1d4641c6a7376c279e919bc9","sha1":"d377d929f02f2391bc82f2f14fbd87e158ee60c2","sha256":"180566c0e1ffbea69e6fa9822f1c16f482eab99432061a24eab48d5ea6f99c7d","sha512":"e1107096d83aa115a61e7d9346bb4dfcdc03ca8df7b62e9266afe593fa3fa929013045bf95173d7106a3f7b645a5d1ed2b76e7e6b6be46976efe7a525329fd0f","ssdeep":"96:SO1arO1aTJc+ukO1aaN3OEanOEaCJc+ukOEauN3OXa3OXavJc+ukOXaON3OxMacI:4hHdPgKQcXr3lVwa3RzJ/apsn","tlshash":"a2e1acd1087be114ab871cc123cf7d36ee1e9255b810e5786bfd0c98adabc654362b2d","first_seen":"2025-09-17T12:42:58.198837Z","last_seen":"2026-08-14T17:20:34.529119Z","times_seen":2195,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":34,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orcaclaim.live/secureproxy?s=%2Fipfs%2FzuR2jfa8mA5RENbqQfSVug230b8b47d31727a19b9723f80ccf47f9%3Ft%3D1786728001005","fqdn":"orcaclaim.live","domain":"orcaclaim.live","tld":"live"},"ip":{"addr":"172.67.129.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://orcaclaim.live/","date":"2026-08-14T17:20:01.264Z","timestamp":1786728001264,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orcaclaim.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 09:24:34 GMT","end":"Wed, 11 Nov 2026 10:23:14 GMT"},"fingerprint":{"sha1":"B3:12:12:B2:4B:3F:93:21:F3:5F:3B:42:F4:24:E7:25:17:3E:32:60","sha256":"54:1B:08:91:EB:91:22:85:64:DF:32:42:AB:2B:E7:15:92:08:78:EC:2E:60:37:07:85:5D:B3:D5:8E:0B:81:A9"}}},"request":{"raw":"GET /secureproxy?s=%2Fipfs%2FzuR2jfa8mA5RENbqQfSVug230b8b47d31727a19b9723f80ccf47f9%3Ft%3D1786728001005 HTTP/1.1\r\nHost: orcaclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orcaclaim.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 14 Aug 2026 17:20:01 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: max-age=2592000\r\netag: W/\"9d9cf-7GCs1AgmdD1ImVoMPyoUwUFkBoM\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=fVDePbGM4l7BTaZ2y4dyIw.js\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/14/2026 17:20:01\r\ncdn-edgestorageid: 883\r\ncdn-requestid: 120acebe6b17973c4f51e947fb49c606\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HtUKDzUyZFLGElFWKn9qXNAWAe1l99WxwiE7bJi0fDB62KRpnpRe9TvBOIWRRfA6ldY6Zy%2Fty%2FqokZHFKKB58jSppY3Ls9g9X3m%2Flfb5x42pBW2oDhmFR56H2TbqopcxDg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2b1a0b7eef2568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":645583,"size_decoded":142690,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"834a717d1825f45ea62c159cd46b23af","sha1":"ec60acd40826743d48995a0c3f2a14c141640683","sha256":"e53c53117f22f23c411e2b1e7580f4e82004666d7565d366863c323419a8b8e6","sha512":"c4836b6e6f852056a4c75be88d85f8640e071c7809310f2397d9b28a720610502a40aa48e3ec793b6d0926df6ba4e92d57f42ed9104d60dacd83d7c56575f5c2","ssdeep":"6144:ch5gDGrq9NWCEiox3Ti/1gFQZDeoV5oMPNFppHSyyA:csmq9NWCEiox3Ti/ESVPHSyyA","tlshash":"74d4cbd0b34a56bbd8d6b2b7043349afdfa82906064b188bd2e7dce4725470791dc9bc","first_seen":"2026-08-14T17:20:34.529915Z","last_seen":"2026-08-14T17:20:34.529915Z","times_seen":1,"resource_available":true,"data":null}},"time_used":689,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":574,"receive":115,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://orcaclaim.live/","date":"2026-08-14T17:20:01.385Z","timestamp":1786728001385,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://orcaclaim.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 13 Aug 2026 02:57:15 GMT\r\nexpires: Fri, 13 Aug 2027 02:57:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 138166\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":7884,"size_decoded":8696,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-08-14T19:43:31.843781Z","times_seen":391434,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":19,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://orcaclaim.live/","date":"2026-08-14T17:20:01.387Z","timestamp":1786728001387,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://orcaclaim.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 12 Aug 2026 13:10:21 GMT\r\nexpires: Thu, 12 Aug 2027 13:10:21 GMT\r\ncache-control: public, max-age=31536000\r\nage: 187780\r\nlast-modified: Mon, 15 Sep 2025 16:33:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":8000,"size_decoded":8812,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-08-14T19:43:31.840958Z","times_seen":292725,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://orcaclaim.live/","date":"2026-08-14T17:20:01.392Z","timestamp":1786728001392,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://orcaclaim.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7748\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 13 Aug 2026 03:05:50 GMT\r\nexpires: Fri, 13 Aug 2027 03:05:50 GMT\r\ncache-control: public, max-age=31536000\r\nage: 137651\r\nlast-modified: Mon, 15 Sep 2025 16:36:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":7748,"size_decoded":8560,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7748, version 1.0","md5":"a09f2fccfee35b7247b08a1a266f0328","sha1":"0da2d17e738f46d2a09e6fb7969da451719a9820","sha256":"cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446","sha512":"5e3f9a298003b84250ec6801e08ad2a4ff8845d4c3e13ea61bec37da24d26ede13b436257882124cc0c27e9a323ba92e7d23c6ad3f48a7b75535f5ed98813a0e","ssdeep":"96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7","tlshash":"f3f19de65d1e5e8980f0102f6f6efce767950d88141dadf9a9e72f884c6ba1b04c90cd","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-08-14T19:44:23.026941Z","times_seen":276790,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":25,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orcaclaim.live/secureproxy?s=%2Fjmpd%2F","fqdn":"orcaclaim.live","domain":"orcaclaim.live","tld":"live"},"ip":{"addr":"172.67.129.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://orcaclaim.live/","date":"2026-08-14T17:20:02.366Z","timestamp":1786728002366,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orcaclaim.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 09:24:34 GMT","end":"Wed, 11 Nov 2026 10:23:14 GMT"},"fingerprint":{"sha1":"B3:12:12:B2:4B:3F:93:21:F3:5F:3B:42:F4:24:E7:25:17:3E:32:60","sha256":"54:1B:08:91:EB:91:22:85:64:DF:32:42:AB:2B:E7:15:92:08:78:EC:2E:60:37:07:85:5D:B3:D5:8E:0B:81:A9"}}},"request":{"raw":"POST /secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: orcaclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://orcaclaim.live/\r\ncontent-type: application/json\r\nContent-Length: 1324\r\nOrigin: https://orcaclaim.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1324,"data":"{\"route\":\"n9POyFeFG1tUtiSU-z9JOx3n\",\"payload\":\"0hqM-6_N52QB6AJIAy8AFADRAjwDJQANAxcAAgEAXAMAAO8nhn2XtsKCAdsh858hxiey7eguKIgCAAD1tzSVTi_fAp2bRJeUCuy77QQTOXjLwWKepxA1OjcMOtqkiQ0Z2qIV2dPxpNSV83kQ_mH45sXhqKDkeQieZwS8YldB9pYgG-b8h-cTacEItbsy0bkAAxOXdhhHr1QG-pkDIxbcp79bZlEXBZgBXPqKukxpHdOyn9VFbMn92xo8OiIz-e25XxgnZSXh6a-ULi9laYk2EaXrBiSgwpHOXFCRUR9hBXDXNdgwOBEL1V89sBhrZws-20tIwkTACGizz7I_jfhh-em9tpvHtvkIzE7X6VWG7twX8el8qv9WAEEaAdK_MlBnTR6wSoL7LNiiZQzERcUtZjo3pHder1Mydtb0lPs52CYlVMphLuGpRxxn2LKclAapD7JHM3KdrjsYq9m7_uQTxEQb_8xXoGxytsbc1g45myjT1lNfPu4edA08nB_rfA1GATFlpeYgP-0UtNVmP6wuSnxaqtSrcLCoDb7Lrx7WN896MGJ_29ZC7dbn4L-vZwydnOx1eVD0a0g7QgILS5ibCtK_sy1PwyMPeH1UlxGC2ZRg44QiUPEzcvadr0Mt4jwacMgWM1M-J3d8QEd5LXtyFpongwQQoTdFDgjJq3wRHRE0vfd3VlKYQRrkrOwtZlbFzXoT1-b1CXOjJfHjUgaFCz9gTbrrOVzpE1ZOmNxCJcNk87RKGOgLARbO5jSgwfmoci9WhiFqbMEJpOxtqpXtY7MmgJgH6USLl6vpcTySpDTVtYL1PGGjNtw3_KKklnUxt517_mz0YXDkxKHXZk_BhMjxmx9N20SEWOUdosOVJP5oSGko-3INRuO1JerDf9nAWqsE4nrYwcYFJLgmPHDE4ujM-ldE3KiltErI8t_CmLFdrgzEJIGt6Vz3t1Ou2ooKE7qb4A2YCsxdWwTzvKmCAsIFFVJCvtqvAp3b_xcxISgy-l8LIttB_agGJxTjMiH-4w1XPpIC6wEX664Ut7zUnR5p9CDeM8n_Oozri0OjOfCVCrxRLF5bD1h9iPdAb1zp2dAPbHqDt5vb3GqZZ4hmXeXur4zggA9qyfaxxSh_X7A0GGPSwUah6teiQ_QmFtuxAE5J1XPfNQotzMGNqXaKVhdmz8jxZj5J7mPYZkhECE6crbXdQ2lsBfb_1YhfCVemmPyaM5Rq9h5dXz5yRyS1rcH4vapC59OFtsgDVQsrEA\",\"challenge\":null}"}},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 14 Aug 2026 17:20:03 GMT\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"a-bAsFyilMr4Ra1hIU5PyoyFRunpI\"\r\nx-ratelimit-limit: 20\r\nx-ratelimit-remaining: 19\r\nx-ratelimit-reset: 1786728062603\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 08/14/2026 17:20:03\r\ncdn-edgestorageid: 1444\r\ncdn-requestid: 85ed22497a1c711690a40a03bc80066c\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kzuJi0%2FfIz19tATebyZyCAUNsufS8Spf20eBUHePMCuMooDq64b2by2amqZyhSD5%2FSEHEFBtZXBHUTa7%2BYZPbhv1oJpOt1KQOdMrzCNWtRxfaAgBWROfoAj4BgSL6bpZiQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2b1a0becf49568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":3283,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T19:46:19.165243Z","times_seen":17891903,"resource_available":true,"data":null}},"time_used":828,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":828,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://orcaclaim.live/","date":"2026-08-14T17:20:01.390Z","timestamp":1786728001390,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://orcaclaim.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 11 Aug 2026 23:00:34 GMT\r\nexpires: Wed, 11 Aug 2027 23:00:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 238767\r\nlast-modified: Mon, 15 Sep 2025 16:35:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":7816,"size_decoded":8628,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-08-14T19:43:31.859233Z","times_seen":297652,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":22,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orcaclaim.live/favicon.ico","fqdn":"orcaclaim.live","domain":"orcaclaim.live","tld":"live"},"ip":{"addr":"172.67.129.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://orcaclaim.live/","date":"2026-08-14T17:20:01.581Z","timestamp":1786728001581,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orcaclaim.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 09:24:34 GMT","end":"Wed, 11 Nov 2026 10:23:14 GMT"},"fingerprint":{"sha1":"B3:12:12:B2:4B:3F:93:21:F3:5F:3B:42:F4:24:E7:25:17:3E:32:60","sha256":"54:1B:08:91:EB:91:22:85:64:DF:32:42:AB:2B:E7:15:92:08:78:EC:2E:60:37:07:85:5D:B3:D5:8E:0B:81:A9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: orcaclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orcaclaim.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 14 Aug 2026 17:20:01 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 13 Aug 2026 07:30:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BwIBeriKbpzSRtdO7aI5PrCqswrTB3LtnUzOXxXTbpF3YlU8o1zrxtQiEE1fL78S%2BerZE72xFDN%2FKKyvG%2BlPBewTAV30RttMl%2BACNRUaVn3C44%2Fo4pQy46kVE03QSoTaKQ%3D%3D\"}]}\r\ncf-ray: a2b1a0b9df01568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14391,"size_decoded":4442,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"0ed6faca3b5e91d08bf4b3c68546cbf9","sha1":"2947409c6672da182f6209777a423368d3bf6969","sha256":"613c5d24d4bd141a05be9d4eb1cf70e28f9521440237ce2191d548519915505d","sha512":"d9406ee0f6d5749af00de793887478bbf6fa42f7285b571b6ad18289c6474cb2928673e8b5a14b2e9a675962ff1fc0bd024442b322a3fe3a0972e2ebbfc673ae","ssdeep":"192:SNaQycE4wzFsllTJCAgQZ6/1n5gMPEJPAtllBE1dR6qucYPI7OoT3nUP4OhFKb7c:wa6Ns66hW/hJmn","tlshash":"6d5261996ae31105a517e1b02bf7571e3734c117c90bcc6c7bee26d8cf491c8ea96b88","first_seen":"2026-08-14T17:20:34.527486Z","last_seen":"2026-08-14T17:20:34.527486Z","times_seen":1,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}