{"report_id":"25bcefe7-ff30-48b6-8c03-0c471fd57026","version":6,"status":"done","tags":[],"date":"2026-03-30T01:56:35Z","url":{"schema":"http","addr":"claim.avantisf.icu","fqdn":"claim.avantisf.icu","domain":"avantisf.icu","tld":"icu"},"ip":{"addr":"104.21.74.117","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"claim.avantisf.icu/","fqdn":"claim.avantisf.icu","domain":"avantisf.icu","tld":"icu"},"title":"Avantis Foundation","dom":{"size":70446,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (32566)","md5":"a949b2d0b42a5460c039dfe5313bec86","sha1":"0d314eb1921b74df7bed2ae63441679642acdc05","sha256":"8380f7eb0e66f1da9fd3e1787d31bbebb6177aa022b8a64f69f80dc1db2eafd0","sha512":"070e81b739abdb8f223908cb1f7cf6d7d4b7a85105b27328f86dd091981f7612b350d554ceba8111603e8c853ea41e5c9ff0cb1ba4867eb8e8f70e9f13559a7c","ssdeep":"1536:lpqXEebx/c64Jysq7v0CjIYbVTkqewvzoCX:lp4EeCCjIYtkqew","tlshash":"d063c990b548923fb927851eaac0e70c75e5f502edb3085db10cd0868fd3ede3a79699","dom_hash":"domhash0917f0d14886bd6381de8f0d7a25a480","first_seen":"2026-03-30T01:56:39.443696Z","last_seen":"2026-03-30T01:58:25.815179Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"claim.avantisf.icu","fqdn":"claim.avantisf.icu","domain":"avantisf.icu","tld":"icu"},"ip":{"addr":"104.21.74.117","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-04T01:56:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-30T01:56:13Z","timestamp":1774835773,"ip_dst":{"addr":"104.21.74.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":47496,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2026-03-30T01:56:13.735639+0000\",\"flow_id\":1324043260993351,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":47496,\"dest_ip\":\"104.21.74.117\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"claim.avantisf.icu\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":920,\"bytes_toclient\":2687,\"start\":\"2026-03-30T01:56:13.728903+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"claim.avantisf.icu","ip":{"addr":"104.21.74.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-05","domain_rank":0,"first_seen":"2026-03-30T01:56:35.83299Z","last_seen":"2026-03-30T01:56:35.83299Z","alert_count":0,"request_count":19,"received_data":379271,"sent_data":8825,"comment":"","tags":null,"fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"foundation.avantisfi.com","ip":{"addr":"104.20.34.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-11-25","domain_rank":0,"first_seen":"2025-09-16T17:10:25.693055Z","last_seen":"2025-11-05T02:35:26.418327Z","alert_count":0,"request_count":1,"received_data":4397,"sent_data":461,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"claim.avantisf.icu/","fqdn":"claim.avantisf.icu","domain":"avantisf.icu","tld":"icu"},"ip":{"addr":"104.21.74.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ebc0685ef2f3809d6463dd4625eb0e72","sha1":"7aafb1b10b193c3ad7f740e8374f213b2c64351d","sha256":"d9c3b0adf44c5accd45379dd81627d6e1c609513bdeaa0278b03c5ce89f6ee85","sha512":"236823242fe15b73b9bb1aab929b4e45b239abeebcb7d05fc005af12652b564b4e9c4930a4c4706efb5ca32e6eea5462ac8c5dcc45dffdda026ac5d500baba30","ssdeep":"","tlshash":"acd0a75503946748e11902a341310ffea1614d09677f0cb986a49356d77d6987431def","size":234,"data":"","first_seen":"2026-03-30T01:56:39.468376Z","last_seen":"2026-03-30T01:58:25.837938Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.avantisf.icu/app.js?v=1773982993281","fqdn":"claim.avantisf.icu","domain":"avantisf.icu","tld":"icu"},"ip":{"addr":"104.21.74.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c16c380d37e4649e0fb83ab77d96a67f","sha1":"e25cf7a759c093d09ebff129b9014978f176e706","sha256":"5e0a37b41caf1415384e6bc60b731495af0e17e1a4310f5fa782c54173049b45","sha512":"36ece891fcb08d3455bf00c8fb8fe05347c8004ba48a88f0eb0cc246525bff2b4377b2675b87081c2508c25ae53279bdf3f5337a7e5f685112c149ddbf018617","ssdeep":"1536:hKRT8U4HZZX5A4iaQjn9q7xPbuIYbVIReKj7GhWwF4L200:UT8v84iaQ79QaIY2R5ta/","tlshash":"8bc36da7a200b23b77bb456eb1d1d6043a785401fc6244a4b46cd4815ffbd8f12bbb7a","size":128618,"data":"","first_seen":"2026-03-30T01:56:39.463417Z","last_seen":"2026-03-30T01:58:25.820152Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.avantisf.icu/","fqdn":"claim.avantisf.icu","domain":"avantisf.icu","tld":"icu"},"ip":{"addr":"104.21.74.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"297a907d4e5b4c2198915e66274d9c9a","sha1":"e0f98af49ab0f7a270e2d739436181f924449098","sha256":"0fdbc26d9d5bd7f6a4bc38acfb91fc663c57463d43a08447f1386b3354cd84de","sha512":"48487cbd59e60a259a5836fc0315243da500d617e94e06b3073f79bb834bd141c9e5cfb59c42a3c2086c920c21be5996e589d4658513cf31d95bfc5757a4a44e","ssdeep":"","tlshash":"1371bc3beb00173bdc8fb9fdced5b4c02e62497262496560691ce102b16cd7087bed88","size":3741,"data":"","first_seen":"2025-08-14T22:39:51.132287Z","last_seen":"2026-08-15T18:29:27.711588Z","times_seen":3242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"claim.avantisf.icu/risk_checker/browserID?browserID=ss","fqdn":"claim.avantisf.icu","domain":"avantisf.icu","tld":"icu"},"ip":{"addr":"104.21.74.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim.avantisf.icu/","date":"2026-03-30T01:56:15.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avantisf.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 11:44:51 GMT","end":"Wed, 03 Jun 2026 11:44:50 GMT"},"fingerprint":{"sha1":"39:7E:38:C6:7E:A3:A4:EA:CD:BE:B0:8B:2E:A7:EA:DF:0F:94:2C:B6","sha256":"8D:2C:D8:2C:4D:D6:84:B7:6D:C0:41:70:4C:44:47:72:71:8A:C5:4D:67:56:41:57:D4:01:FB:18:6D:10:3B:1C"}}},"request":{"raw":"GET /risk_checker/browserID?browserID=ss HTTP/1.1\r\nHost: claim.avantisf.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim.avantisf.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 30 Mar 2026 01:56:15 GMT\r\nserver: cloudflare\r\ncontent-location: browserID.php\r\nvary: negotiate\r\ntcn: choice\r\nx-powered-by: PHP/7.4.33\r\naccess-control-allow-origin: \r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\naccess-control-max-age: 3600\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: PHPSESSID=9vvk78vqldga33a8g79ras40ji; path=/; secure; HttpOnly; SameSite=None\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GfccRoL9MHFs1F3kDm5gXgESszjy26ffkIi0F5DuoqMt4SNdIDaDQ0fFqJm9MmtTUd7upbNuvzFv6TknObUznb3Eo8hp0k3cSZkoEQYayVigEVz0eehyimBMkI5FD3oLXMeW2W0%3D\"}]}\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncontent-type: application/json\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e437f2fab00b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6470ef99e169f0933faa5a921c194efd","sha1":"89f1c12972ae87aefeb5a4d8c8bc5efdf63c7c98","sha256":"a7610fe9526de426a16ab18e331819c84e089e96d0e45b86d7558f2569fbdd05","sha512":"53ceb118eb2fd501218abaa9f25ddae71d2c5c45a7d497975c996702d15a24f8a924ad34071a3a61fce50074e1a26209bc769e0d8d2b0be97b87a77caad94bec","ssdeep":"","tlshash":"b4800020082800308ca80e80800828202beaae82e2bb208a0a2c0ca0be000c08028028","first_seen":"2026-03-30T01:56:39.4492Z","last_seen":"2026-03-30T01:56:39.4492Z","times_seen":1,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.avantisf.icu/token.svg","fqdn":"claim.avantisf.icu","domain":"avantisf.icu","tld":"icu"},"ip":{"addr":"104.21.74.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://claim.avantisf.icu/","date":"2026-03-30T01:56:15.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avantisf.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 11:44:51 GMT","end":"Wed, 03 Jun 2026 11:44:50 GMT"},"fingerprint":{"sha1":"39:7E:38:C6:7E:A3:A4:EA:CD:BE:B0:8B:2E:A7:EA:DF:0F:94:2C:B6","sha256":"8D:2C:D8:2C:4D:D6:84:B7:6D:C0:41:70:4C:44:47:72:71:8A:C5:4D:67:56:41:57:D4:01:FB:18:6D:10:3B:1C"}}},"request":{"raw":"GET /token.svg HTTP/1.1\r\nHost: claim.avantisf.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.avantisf.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 30 Mar 2026 01:56:15 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 10 Sep 2025 14:08:25 GMT\r\netag: W/\"253-19933f4cf24\"\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rDcGmzK7lh48lVZ96fHPSQkILHJn4ZGc2lC%2BIQw4%2FTXwfBxQx2rUGZpfMs8RrmbG8He%2F0P4H3pip2GsEjjg7Wei8EUD0dqXNGPwUaERcuvVlzAfidxuWTEgHaELRcxffQR4rntc%3D\"}]}\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\ncf-ray: 9e437f2a2ac4b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":595,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4f02f0bfd562805d6d53f52001ee6d6c","sha1":"141ecdddc36c8f6bfb3868939382cd00ee934cc9","sha256":"54f4a2b429dcc44b90d8c81a6d6edd307b468ee32242c339f4887d0a0a23d48e","sha512":"bdf9cb170adeb4146a22ec5db40bf48e49d9d914383d032125aa43d6d49db1096c4c9ca4dbcdeffac59cff0b006de25622b97906cbb9d391b84ea04da27e5a29","ssdeep":"","tlshash":"64f0acd2b05ce2d4d913d361f53e3039ae4f38e9a62913c454c15d4abc858af980459d","first_seen":"2025-09-11T20:55:49.988375Z","last_seen":"2026-04-23T19:44:56.606009Z","times_seen":19,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.avantisf.icu/build.svg","fqdn":"claim.avantisf.icu","domain":"avantisf.icu","tld":"icu"},"ip":{"addr":"104.21.74.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://claim.avantisf.icu/","date":"2026-03-30T01:56:15.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avantisf.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 11:44:51 GMT","end":"Wed, 03 Jun 2026 11:44:50 GMT"},"fingerprint":{"sha1":"39:7E:38:C6:7E:A3:A4:EA:CD:BE:B0:8B:2E:A7:EA:DF:0F:94:2C:B6","sha256":"8D:2C:D8:2C:4D:D6:84:B7:6D:C0:41:70:4C:44:47:72:71:8A:C5:4D:67:56:41:57:D4:01:FB:18:6D:10:3B:1C"}}},"request":{"raw":"GET /build.svg HTTP/1.1\r\nHost: claim.avantisf.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.avantisf.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 30 Mar 2026 01:56:15 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 10 Sep 2025 14:08:25 GMT\r\netag: W/\"430-19933f4ceb7\"\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MnV6aLoOB5blh9CSctlhca%2B%2BBPZglDFbuPe0aP0YQd6taZBVmuQPlIFphbTa0DkRGsZlo%2FPMgQTNSszmGISPq%2BgyUna5P3XO9s11HjBzAW7XngR0z%2FFIrCY9H2jqcdG2RF%2FjjKM%3D\"}]}\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\ncf-ray: 9e437f2a2ac7b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1072,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"038f6502c2dba487e11155eec2f988e4","sha1":"14ad4803a31140423bbe8750073cc825929a0453","sha256":"815dac536a98405440b4b2bf234e9c6c0debba349e436d94acd87ba842ab862c","sha512":"6391fda7943e1e809ab06b17cdb23a23ab77cf14422aa83712cb67e35bdf004a45426424048e998db9362f8af645342a54132083f92b7308ecd2a6ca43ed2b7e","ssdeep":"","tlshash":"d4111fa7f96ca5c0a5415be0aa609e573a1f34f66f83e7c58111ea15d72907ee00fe00","first_seen":"2025-09-11T20:55:50.001001Z","last_seen":"2026-04-23T19:44:56.60812Z","times_seen":15,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.avantisf.icu/docs.svg","fqdn":"claim.avantisf.icu","domain":"avantisf.icu","tld":"icu"},"ip":{"addr":"104.21.74.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://claim.avantisf.icu/","date":"2026-03-30T01:56:15.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avantisf.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 11:44:51 GMT","end":"Wed, 03 Jun 2026 11:44:50 GMT"},"fingerprint":{"sha1":"39:7E:38:C6:7E:A3:A4:EA:CD:BE:B0:8B:2E:A7:EA:DF:0F:94:2C:B6","sha256":"8D:2C:D8:2C:4D:D6:84:B7:6D:C0:41:70:4C:44:47:72:71:8A:C5:4D:67:56:41:57:D4:01:FB:18:6D:10:3B:1C"}}},"request":{"raw":"GET /docs.svg HTTP/1.1\r\nHost: claim.avantisf.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.avantisf.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 30 Mar 2026 01:56:15 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 10 Sep 2025 14:08:25 GMT\r\netag: W/\"6b4-19933f4ced6\"\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zsvwakFefpcQafxPNuNcHx%2FquF54zKJO80ABgxbb8A56%2B%2BXXOOiocLJH%2B4TaF0OTN%2FwMfjgFFAAtwKe%2BBHILmm8D5LcHDJ2vSuc0kNg78bctqX2sOpJkeIIWVO8QTsRpG%2BWxd9o%3D\"}]}\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\ncf-ray: 9e437f2a2ac8b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1716,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b7e14856e090c4dc5af80d85fccbbc43","sha1":"e633ea2c59969b2899f6e4f63dbb86f151001480","sha256":"430e2ba0e05bc64b33d0be5583b024d092e881349b521154ac0b2d68cd3d5a2b","sha512":"ca41f25c2978420aca7e6f42a974c09369e81e0c49a1ce78b1c251942e24d0c06632ca9f6ab5b44b6ebfe1d500f594cd793d0a8366b33b39f1127bc4e7a9b660","ssdeep":"","tlshash":"4f3132fa535441d0ec8383f4ca236cb8721e1cfd7914dbd64264f89ae747355c0a79a4","first_seen":"2025-09-11T20:55:50.002681Z","last_seen":"2026-04-23T19:44:56.611036Z","times_seen":15,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.avantisf.icu/discord.svg","fqdn":"claim.avantisf.icu","domain":"avantisf.icu","tld":"icu"},"ip":{"addr":"104.21.74.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://claim.avantisf.icu/","date":"2026-03-30T01:56:15.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avantisf.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 11:44:51 GMT","end":"Wed, 03 Jun 2026 11:44:50 GMT"},"fingerprint":{"sha1":"39:7E:38:C6:7E:A3:A4:EA:CD:BE:B0:8B:2E:A7:EA:DF:0F:94:2C:B6","sha256":"8D:2C:D8:2C:4D:D6:84:B7:6D:C0:41:70:4C:44:47:72:71:8A:C5:4D:67:56:41:57:D4:01:FB:18:6D:10:3B:1C"}}},"request":{"raw":"GET /discord.svg HTTP/1.1\r\nHost: claim.avantisf.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.avantisf.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 30 Mar 2026 01:56:15 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 10 Sep 2025 14:08:25 GMT\r\netag: W/\"525-19933f4cec6\"\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DQE89PR3ceUEy2PFSO1Ho2LrMRTwlmUcvnbPLOKcbPDfvmvB%2FJrKIIawQI6BwD5QY0kC6mY6M%2FnV3imidSV%2BPfEqdTa9cz6AWBJdvTBZ70S%2FDoaipx8UtpT0bO84D4xJDdUPp3E%3D\"}]}\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\ncf-ray: 9e437f2a3acab4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1317,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ba54a2bfdea0fa0f7291d50c2ba88ec6","sha1":"9cae6a3f5cd6b4d1905ff9fba502d0cc850c7fc8","sha256":"24b4d1640d76e81af170a1ca6f9ae143c033b79b8e39b9b1fe38dbfd4d8a56a5","sha512":"94f24812829ba4b214c475dd728d1c8d2c93e917f3e6fb80c9dd8acd74587dc6bea1a82a507094015c4e924fff5c0b8461ba19afd60c725e7d53d5ee1e1085b7","ssdeep":"","tlshash":"fa2115b652ac3af4870bdb94d015012876933cff77de87a98281e9d0e7060584cd9ce4","first_seen":"2025-09-11T20:55:50.00376Z","last_seen":"2026-04-23T19:44:56.583068Z","times_seen":12,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.avantisf.icu/","fqdn":"claim.avantisf.icu","domain":"avantisf.icu","tld":"icu"},"ip":{"addr":"104.21.74.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-30T01:56:13.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avantisf.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 11:44:51 GMT","end":"Wed, 03 Jun 2026 11:44:50 GMT"},"fingerprint":{"sha1":"39:7E:38:C6:7E:A3:A4:EA:CD:BE:B0:8B:2E:A7:EA:DF:0F:94:2C:B6","sha256":"8D:2C:D8:2C:4D:D6:84:B7:6D:C0:41:70:4C:44:47:72:71:8A:C5:4D:67:56:41:57:D4:01:FB:18:6D:10:3B:1C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: claim.avantisf.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 01:56:14 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sbuuAGWLevrGJwKSBGFXaR7ox3XZmuEUOqQ7JPtD7OdI228Fc3J4W6APr%2FCsyJ%2FxSEeaE9s8APcfa4GRnXB0VSp8dklXX7WGekHjA6Z2emdZ16wNqUFYzF8voA8Fu5OyXxSkd84%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9e437f21e84056bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":39852,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (20701)","md5":"ce84504fa24529177560dd7460894a3f","sha1":"fffad526fef59aa53e860082bd8b106c0bba3c72","sha256":"c34ab5cc7132c8f10fd4188013e8b08c90b3e56d73167f9889d10e71431cfa82","sha512":"9c728084251511129cb0f5a00ec7fd7fa7afe00091f3746dfee1f7f5ebf4b351517529579bb02e81808d84d756d464e6ce852c0172a523f649f059a95a2ef080","ssdeep":"768:NpDXE0rGV4xksc64Jysq7v0CH8jyRBzOI5MgVl2+VM9vzoCX:NpDXEebx/c64Jysq7v0CH8m2lvzoCX","tlshash":"34031b60b508033e1c3ba655efc4e61c5111f902df13589ab24d24cbeed6fe63ab5a4d","first_seen":"2026-03-30T01:56:39.453975Z","last_seen":"2026-03-30T01:58:25.828092Z","times_seen":2,"resource_available":false,"data":null}},"time_used":888,"timings":{"blocked":49,"dns":36,"connect":1,"send":0,"wait":789,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.avantisf.icu/token-bg.mp4","fqdn":"claim.avantisf.icu","domain":"avantisf.icu","tld":"icu"},"ip":{"addr":"104.21.74.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://claim.avantisf.icu/","date":"2026-03-30T01:56:15.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avantisf.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 11:44:51 GMT","end":"Wed, 03 Jun 2026 11:44:50 GMT"},"fingerprint":{"sha1":"39:7E:38:C6:7E:A3:A4:EA:CD:BE:B0:8B:2E:A7:EA:DF:0F:94:2C:B6","sha256":"8D:2C:D8:2C:4D:D6:84:B7:6D:C0:41:70:4C:44:47:72:71:8A:C5:4D:67:56:41:57:D4:01:FB:18:6D:10:3B:1C"}}},"request":{"raw":"GET /token-bg.mp4 HTTP/1.1\r\nHost: claim.avantisf.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.avantisf.icu/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Mon, 30 Mar 2026 01:56:15 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-length: 4340316\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 10 Sep 2025 14:08:25 GMT\r\netag: W/\"423a5c-19933f4cf14\"\r\ncontent-type: video/mp4\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-range: bytes 0-4340315/4340316\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UjPACHmHxshgjZRLwIPok7DlAGwsHuhBzhSrG2spxaFViDUScLjNa4ndPo7QVswQE7NuTF8I%2BgYowcof%2Bp7IqgjkCHwvy4TiT9skybPPnzRNA8KJAj8qToBVW43Ze9skGpUnwAM%3D\"}]}\r\ncf-ray: 9e437f2a1ac0b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40044,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"d1ded250e41ddbf5ebd5722dca71856b","sha1":"831a0263f0ce7b96db8bd2ed7951b1793580619b","sha256":"9d8a3d8d0e6dff1175942c03453639470daee814eee2fe6c23b7cebba40197c3","sha512":"32edabbbade96a59c44ab040abcfb73c15512f0075f71f0af1fa740a328a20c0d491c824f7d86239d5cb5a01c353aa7b84e652d8b1f646c21d514c7a4e7f5a44","ssdeep":"768:wYcs1EjRKWvxJCaMYWzMrPzQZrX6rEjKm4ojDVXQgJTpDJyeybZiNrf0ylqto:3cPKsbMYXzAr6rwV6gJTJ2bO0ylh","tlshash":"2903f225806fd09cc8e60a7809ffbea96043da0d62fc16b77d3dbe307544964d459b2d","first_seen":"2026-03-30T01:56:39.454912Z","last_seen":"2026-03-30T01:58:25.828873Z","times_seen":2,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.avantisf.icu/avantis-logo.svg","fqdn":"claim.avantisf.icu","domain":"avantisf.icu","tld":"icu"},"ip":{"addr":"104.21.74.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://claim.avantisf.icu/","date":"2026-03-30T01:56:15.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avantisf.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 11:44:51 GMT","end":"Wed, 03 Jun 2026 11:44:50 GMT"},"fingerprint":{"sha1":"39:7E:38:C6:7E:A3:A4:EA:CD:BE:B0:8B:2E:A7:EA:DF:0F:94:2C:B6","sha256":"8D:2C:D8:2C:4D:D6:84:B7:6D:C0:41:70:4C:44:47:72:71:8A:C5:4D:67:56:41:57:D4:01:FB:18:6D:10:3B:1C"}}},"request":{"raw":"GET /avantis-logo.svg HTTP/1.1\r\nHost: claim.avantisf.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.avantisf.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 30 Mar 2026 01:56:15 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 10 Sep 2025 14:08:25 GMT\r\netag: W/\"d9a-19933f4ceb7\"\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mPW6B31FOgXo58fLu6JVCgtB5fjDm%2FQipDuqrWqQq5yXgVf33tKYiLq3QsRg6kMUa4kQSpSu3uYMXfBnviLT5Kyd%2F0MrWxoQuhBmCw9wnq3%2B0ruSK%2FYzrIrKdF9u1%2BeU9x4%2BQZU%3D\"}]}\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\ncf-ray: 9e437f2a1ac2b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":3482,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2264b58fce587bdc3d49fcfd59256494","sha1":"a83996d8825a7b7b6db04aacbf01a9103ffc9983","sha256":"ea662c6ba07d1c5e22db7d1b4539ef170abb64fbf228f98f6837986156356177","sha512":"045195eecd74bc6c14ea44b660cef202d8ebbfdd11880fc330209d98d32d04985e64f29d263101f4905eb1b7e4ff33d2d5954ae868936c9c6f6bcc4734776134","ssdeep":"","tlshash":"d07182d669eca0f405069bb8ce2218b57d1ba4f6ebd4ee31c2515f4ab48449a8e4c8d0","first_seen":"2025-09-11T20:55:50.012424Z","last_seen":"2026-04-23T19:44:56.605258Z","times_seen":20,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.avantisf.icu/foundation.svg","fqdn":"claim.avantisf.icu","domain":"avantisf.icu","tld":"icu"},"ip":{"addr":"104.21.74.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://claim.avantisf.icu/","date":"2026-03-30T01:56:15.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avantisf.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 11:44:51 GMT","end":"Wed, 03 Jun 2026 11:44:50 GMT"},"fingerprint":{"sha1":"39:7E:38:C6:7E:A3:A4:EA:CD:BE:B0:8B:2E:A7:EA:DF:0F:94:2C:B6","sha256":"8D:2C:D8:2C:4D:D6:84:B7:6D:C0:41:70:4C:44:47:72:71:8A:C5:4D:67:56:41:57:D4:01:FB:18:6D:10:3B:1C"}}},"request":{"raw":"GET /foundation.svg HTTP/1.1\r\nHost: claim.avantisf.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.avantisf.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 30 Mar 2026 01:56:15 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 10 Sep 2025 14:08:25 GMT\r\netag: W/\"573-19933f4cee5\"\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gbKx%2BMO%2BA7cOHc9uYf6P7qaY0RvpesbxDPJZ1Gwp22IoCkY%2B5HraaEd8UN7ih4rxSuFML%2BIJJg22Njpt0YHgQ4FRNp92YOhhDD8TaKADR99gaTHozZoHMLslBiKaro03wUZvQhQ%3D\"}]}\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\ncf-ray: 9e437f2a1ac3b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1395,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4e61f00cf685af671e87acec39cd3230","sha1":"e156019a053aa117240310413128fd995fc61f89","sha256":"6a137e09b791ac89e24fd160eb591c7378f665ef1dbb1eb20e3c7047b9b2e8d6","sha512":"c8aea7bd172206ad4baf15940ea4af44c590197a738aa38f16fd2281a98c2a1bc533f26ad01fec4930bc113f52170826f17fff53cd5ff9e490daf1ed1cb18c04","ssdeep":"","tlshash":"07211470c3fc54f0941bbbc8d633a6a0712b18fd9f35cb4a9881d505793828b49c5c21","first_seen":"2025-09-11T20:55:50.008142Z","last_seen":"2026-04-23T19:44:56.58174Z","times_seen":17,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.avantisf.icu/airdrop-active.svg","fqdn":"claim.avantisf.icu","domain":"avantisf.icu","tld":"icu"},"ip":{"addr":"104.21.74.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://claim.avantisf.icu/","date":"2026-03-30T01:56:15.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avantisf.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 11:44:51 GMT","end":"Wed, 03 Jun 2026 11:44:50 GMT"},"fingerprint":{"sha1":"39:7E:38:C6:7E:A3:A4:EA:CD:BE:B0:8B:2E:A7:EA:DF:0F:94:2C:B6","sha256":"8D:2C:D8:2C:4D:D6:84:B7:6D:C0:41:70:4C:44:47:72:71:8A:C5:4D:67:56:41:57:D4:01:FB:18:6D:10:3B:1C"}}},"request":{"raw":"GET /airdrop-active.svg HTTP/1.1\r\nHost: claim.avantisf.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.avantisf.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 30 Mar 2026 01:56:15 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 10 Sep 2025 14:08:25 GMT\r\netag: W/\"941-19933f4cea7\"\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6DPlE784ME%2FdQ2QZO2%2B6piclkeZleD4WBHxX1YMeF5wyKnjlbFWy066R5WO1utwI5N91UhbDvxdQ8FlXJMbxem%2FcnEukHjuEhgEQwQmaB3PrJtUDePofWjejNgWitcEpRLwOh0M%3D\"}]}\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\ncf-ray: 9e437f2a2ac5b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2369,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"36fafd9fb90ec6316c3bef2e24eca761","sha1":"83a506e143bbbe0826fcf0c011eeda588e5d9590","sha256":"d130e041ba65f40a3c965136b38cf585fe440f45aee5ce467d7ca800945a192b","sha512":"59f0c1057567b6f50ce27f56f4ef7f8985ec68de392ef2ad4ce77d90cd67b1a3d005550de96015de9c5129ae0d762ee578e1a9e8bdcbe5306a764cb87543eda1","ssdeep":"","tlshash":"094170f5524cd7c0a40a57b8ee0a4ae2b7363af9eeb8c44813d0b9b4b416131986ded4","first_seen":"2025-09-11T20:55:49.990136Z","last_seen":"2026-04-23T19:44:56.59579Z","times_seen":12,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"foundation.avantisfi.com/appicons/appicon-192.png","fqdn":"foundation.avantisfi.com","domain":"avantisfi.com","tld":"com"},"ip":{"addr":"104.20.34.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.avantisf.icu/","date":"2026-03-30T01:56:15.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avantisfi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 16:00:36 GMT","end":"Fri, 29 May 2026 17:00:20 GMT"},"fingerprint":{"sha1":"7E:8B:ED:9A:9A:A7:6C:1F:B2:30:4B:C0:24:6A:07:95:A4:49:47:98","sha256":"E8:70:A5:46:E2:AA:24:FB:37:CA:23:33:7F:87:7B:0B:3B:EE:78:7E:A3:D9:74:D9:E9:D7:AB:B3:7F:D9:66:39"}}},"request":{"raw":"GET /appicons/appicon-192.png HTTP/1.1\r\nHost: foundation.avantisfi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.avantisf.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 01:56:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 3775\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 65716\r\ncache-control: public, max-age=14400, must-revalidate\r\ncontent-disposition: inline; filename=\"appicon-192.png\"\r\netag: \"622ec63cb1a39c5c988331cd45815d66\"\r\nlast-modified: Sun, 29 Mar 2026 07:40:58 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /appicons/appicon-192.png\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7r54l-1774835775530-261ef1c7860c\r\ncf-cache-status: MISS\r\ncf-ray: 9e437f2c9be256c6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3775,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 384 x 384, 8-bit/color RGBA, non-interlaced","md5":"622ec63cb1a39c5c988331cd45815d66","sha1":"5d74ba5c7b276c77a0c435015b59181ff9996a81","sha256":"18de10db67c0064de2591fbb3711fe103016420b8f6ae37b32695be3a740ac62","sha512":"7dde5086717bf87809eeba642a5d0d98966d331734803287f919418647ded52b81870adee8ab45ece90dff8a323913f114e025b6a497f3b29da20615b9dac14c","ssdeep":"","tlshash":"cd7129c33afbfb45ab1ad85900162f402a919d16ccfe9bb5486ceedf37409352368724","first_seen":"2025-09-16T17:10:30.761842Z","last_seen":"2026-04-23T19:44:56.6023Z","times_seen":11,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":42,"connect":2,"send":0,"wait":90,"receive":1,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.avantisf.icu/staking.svg","fqdn":"claim.avantisf.icu","domain":"avantisf.icu","tld":"icu"},"ip":{"addr":"104.21.74.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://claim.avantisf.icu/","date":"2026-03-30T01:56:15.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avantisf.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 11:44:51 GMT","end":"Wed, 03 Jun 2026 11:44:50 GMT"},"fingerprint":{"sha1":"39:7E:38:C6:7E:A3:A4:EA:CD:BE:B0:8B:2E:A7:EA:DF:0F:94:2C:B6","sha256":"8D:2C:D8:2C:4D:D6:84:B7:6D:C0:41:70:4C:44:47:72:71:8A:C5:4D:67:56:41:57:D4:01:FB:18:6D:10:3B:1C"}}},"request":{"raw":"GET /staking.svg HTTP/1.1\r\nHost: claim.avantisf.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.avantisf.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 30 Mar 2026 01:56:15 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 10 Sep 2025 14:08:25 GMT\r\netag: W/\"232-19933f4cf05\"\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e%2Fd2rvUSHksRtaLTFWhBjxwAet9R7yMLK4eeXlv9q3F1Dkp6N2aJlbB4hNVVt1j%2BvHniVK2XaNxsRr4JWhM67EKyeqSQNVMcqXJkF%2ByZXORa%2F%2B7EjZjw9HtPlpaaXsgxyTWJsJw%3D\"}]}\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\ncf-ray: 9e437f2a2ac6b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":562,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d6bbd480c402363762adda7e6503e080","sha1":"711e49720c9f7a6ca214b55fe5bea1c27b7b89ca","sha256":"d09b18132c3db85018b095d05787d4c90e5bb09aa9d20ab0dcee01f7b2396094","sha512":"6c255f56073afc917f26317cea9e1f1c95bcf25ffbe0016c36f2bca98bf03e0a567f87537d078202699aa7ce271afc20300f3c6207260cef472a17a913d86600","ssdeep":"","tlshash":"92f0463a105c06c8100b8bb0c70ce3a9487f05fdea719a104cc2b4b3e1d6295b6099f0","first_seen":"2025-09-11T20:55:49.996809Z","last_seen":"2026-04-23T19:44:56.603741Z","times_seen":15,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.avantisf.icu/token-bg.mp4","fqdn":"claim.avantisf.icu","domain":"avantisf.icu","tld":"icu"},"ip":{"addr":"104.21.74.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://claim.avantisf.icu/","date":"2026-03-30T01:56:15.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avantisf.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 11:44:51 GMT","end":"Wed, 03 Jun 2026 11:44:50 GMT"},"fingerprint":{"sha1":"39:7E:38:C6:7E:A3:A4:EA:CD:BE:B0:8B:2E:A7:EA:DF:0F:94:2C:B6","sha256":"8D:2C:D8:2C:4D:D6:84:B7:6D:C0:41:70:4C:44:47:72:71:8A:C5:4D:67:56:41:57:D4:01:FB:18:6D:10:3B:1C"}}},"request":{"raw":"GET /token-bg.mp4 HTTP/1.1\r\nHost: claim.avantisf.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=65536-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.avantisf.icu/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Mon, 30 Mar 2026 01:56:15 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-length: 4274780\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 10 Sep 2025 14:08:25 GMT\r\netag: W/\"423a5c-19933f4cf14\"\r\ncontent-type: video/mp4\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-range: bytes 65536-4340315/4340316\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5YG1io%2B5TSFvBEB9is%2FKnGyvZ7CTUdT3GFn5k4tYZspV2YyCx%2BZCWYQ8tw2BokDlcP%2B0m2NaF%2BA%2F4jkngClJ8Br01n6DgmUdE8qR7eIY9Ttt1aMdIIftFK9o3JxM%2Fu%2FmuH2uD2c%3D\"}]}\r\ncf-ray: 9e437f2e9af3b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":43064,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"7e1c50d4c767906c4925d692bb8d09c8","sha1":"a299efe657f124f23d48c6dcc9ca8c5e617f7881","sha256":"ded7b15a32bf85f99280945dc7c53ecb261a3936efdacc58dca14244c5d414c1","sha512":"26beabb50fa616b62741b9a67ff5fc95fa902933da69383a157c85642c47f656c214d6e3d93fb93b22ff43a8844b61a0ab19a56429969a6f32b865196d752792","ssdeep":"768:D48ldjerAi3Oz9/IzrmAQ0ddufEpQ4NHTvOy0nkNfzjl3vXgiQ2Y34rRm/:DnwzrZef7qv2nktjl3vXgiQ2q4Vm/","tlshash":"a213f12e512f032e2e47e550fba9ed2ce77d0384e81d05354a5cc24557e8a9f3eca9e8","first_seen":"2026-03-30T01:56:39.461562Z","last_seen":"2026-03-30T01:56:39.461562Z","times_seen":1,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"claim.avantisf.icu/","fqdn":"claim.avantisf.icu","domain":"avantisf.icu","tld":"icu"},"ip":{"addr":"104.21.74.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://claim.avantisf.icu/","date":"2026-03-30T01:56:16.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avantisf.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 11:44:51 GMT","end":"Wed, 03 Jun 2026 11:44:50 GMT"},"fingerprint":{"sha1":"39:7E:38:C6:7E:A3:A4:EA:CD:BE:B0:8B:2E:A7:EA:DF:0F:94:2C:B6","sha256":"8D:2C:D8:2C:4D:D6:84:B7:6D:C0:41:70:4C:44:47:72:71:8A:C5:4D:67:56:41:57:D4:01:FB:18:6D:10:3B:1C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: claim.avantisf.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://claim.avantisf.icu\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: wxbkocPu14F+/Kp3LHaaUQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: PHPSESSID=9vvk78vqldga33a8g79ras40ji\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Mon, 30 Mar 2026 01:56:16 GMT\r\nConnection: upgrade\r\nSec-WebSocket-Accept: cDV6PP6j+4WqpdixmgH4DWLMkE8=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nUpgrade: websocket\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=3jyNHaPyZL0wStGSAv9ku2CXWm3vdm3FZRogM8cZ%2BMjQlw%2BUs5JilKTtwlsD9MGuB6z%2B57BSCchLZ6fqLoQVLYjDBrC65%2FIxUy6pYGCbxPwp%2FPIXQft2BlGYmCQ%2BWuWGgjHLleY%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9e437f312c7f5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=594\u0026min_rtt=513\u0026rtt_var=196\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2347\u0026recv_bytes=1210\u0026delivery_rate=5062937\u0026cwnd=52\u0026unsent_bytes=0\u0026cid=975f3f8cec15a0a3\u0026ts=156\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T06:25:51.925155Z","times_seen":17931059,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":0,"dns":33,"connect":35,"send":0,"wait":38,"receive":0,"ssl":152},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.avantisf.icu/x.svg","fqdn":"claim.avantisf.icu","domain":"avantisf.icu","tld":"icu"},"ip":{"addr":"104.21.74.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://claim.avantisf.icu/","date":"2026-03-30T01:56:15.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avantisf.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 11:44:51 GMT","end":"Wed, 03 Jun 2026 11:44:50 GMT"},"fingerprint":{"sha1":"39:7E:38:C6:7E:A3:A4:EA:CD:BE:B0:8B:2E:A7:EA:DF:0F:94:2C:B6","sha256":"8D:2C:D8:2C:4D:D6:84:B7:6D:C0:41:70:4C:44:47:72:71:8A:C5:4D:67:56:41:57:D4:01:FB:18:6D:10:3B:1C"}}},"request":{"raw":"GET /x.svg HTTP/1.1\r\nHost: claim.avantisf.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.avantisf.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 30 Mar 2026 01:56:15 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 10 Sep 2025 14:08:25 GMT\r\netag: W/\"15a-19933f4cf33\"\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hx%2Ff5M16A3M5CofFODGbQ%2FJXANfb7q%2F9cpTiTL1KXNNJhK4tiynLU7NwGkU%2BAFvkwNvIZrF%2F%2FoWEjzJtrenYhWID9t%2FwOsFgz76L94M%2B7VCcYFPrfCHC9WmL7vSjGSmBbtjrWbk%3D\"}]}\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\ncf-ray: 9e437f2a2ac9b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":346,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fc8fddbd69061efe631254cce168c3c4","sha1":"2b1e9f173dc735b5297c54e9d36aa3969576af12","sha256":"ff673461cacd3278a5e52b5ac2152c1191638ffa083ca4dd7fb9a69d2cb517e9","sha512":"0ab265481bf3bea007896e647b47c1e74ea7e314e39c82d24e0a54196e306ec264c1442eefba8a48e4b8ccbbb748563f210e1765d92cbae4d1dcff5f1e12c841","ssdeep":"","tlshash":"d2e026b6e98c86908904c3c4b01db7b7a0af50e27bcc85dd87416706ab884c60c5a1e0","first_seen":"2025-09-11T20:55:50.013561Z","last_seen":"2026-04-23T19:44:56.597385Z","times_seen":12,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.avantisf.icu/app.js?v=1773982993281","fqdn":"claim.avantisf.icu","domain":"avantisf.icu","tld":"icu"},"ip":{"addr":"104.21.74.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.avantisf.icu/","date":"2026-03-30T01:56:14.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avantisf.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 11:44:51 GMT","end":"Wed, 03 Jun 2026 11:44:50 GMT"},"fingerprint":{"sha1":"39:7E:38:C6:7E:A3:A4:EA:CD:BE:B0:8B:2E:A7:EA:DF:0F:94:2C:B6","sha256":"8D:2C:D8:2C:4D:D6:84:B7:6D:C0:41:70:4C:44:47:72:71:8A:C5:4D:67:56:41:57:D4:01:FB:18:6D:10:3B:1C"}}},"request":{"raw":"GET /app.js?v=1773982993281 HTTP/1.1\r\nHost: claim.avantisf.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.avantisf.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 30 Mar 2026 01:56:14 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 20 Mar 2026 05:03:13 GMT\r\netag: W/\"1f66a-19d09a04b81\"\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vQuu6z6s%2FgMvXfFfqvzZbzO7neSXY%2Fm2F2N8pqCklUap6jsAdpSY%2FBcUG%2F2Y%2FdImy8y0GA66oWqaOfn6RggUgTnaWsZe4l6UzLCg%2FuNahvKR2jpHIxu6NZqQPEj6JUPWJ7IB%2B3Q%3D\"}]}\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\ncf-ray: 9e437f27fabbb4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":128618,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c16c380d37e4649e0fb83ab77d96a67f","sha1":"e25cf7a759c093d09ebff129b9014978f176e706","sha256":"5e0a37b41caf1415384e6bc60b731495af0e17e1a4310f5fa782c54173049b45","sha512":"36ece891fcb08d3455bf00c8fb8fe05347c8004ba48a88f0eb0cc246525bff2b4377b2675b87081c2508c25ae53279bdf3f5337a7e5f685112c149ddbf018617","ssdeep":"1536:hKRT8U4HZZX5A4iaQjn9q7xPbuIYbVIReKj7GhWwF4L200:UT8v84iaQ79QaIY2R5ta/","tlshash":"8bc36da7a200b23b77bb456eb1d1d6043a785401fc6244a4b46cd4815ffbd8f12bbb7a","first_seen":"2026-03-30T01:56:39.463417Z","last_seen":"2026-03-30T01:58:25.820152Z","times_seen":2,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.avantisf.icu/f0d266ccd6d69750.css","fqdn":"claim.avantisf.icu","domain":"avantisf.icu","tld":"icu"},"ip":{"addr":"104.21.74.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim.avantisf.icu/","date":"2026-03-30T01:56:14.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avantisf.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 11:44:51 GMT","end":"Wed, 03 Jun 2026 11:44:50 GMT"},"fingerprint":{"sha1":"39:7E:38:C6:7E:A3:A4:EA:CD:BE:B0:8B:2E:A7:EA:DF:0F:94:2C:B6","sha256":"8D:2C:D8:2C:4D:D6:84:B7:6D:C0:41:70:4C:44:47:72:71:8A:C5:4D:67:56:41:57:D4:01:FB:18:6D:10:3B:1C"}}},"request":{"raw":"GET /f0d266ccd6d69750.css HTTP/1.1\r\nHost: claim.avantisf.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.avantisf.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 30 Mar 2026 01:56:14 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 10 Sep 2025 14:08:25 GMT\r\netag: W/\"75e4-19933f4ced6\"\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dChzY8kWg9TjGwlymnoaAewa2FavbwE%2FZ15VibsN%2B%2BE9jjjxLeMUTrnZmQl6OGRO1oEjABi3EHDmFMRHWVUnkTxP8XUTtTm1RR0nBIqYgbTEiPW8XONKH2puaswVyZ7VIsrUiig%3D\"}]}\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\ncf-ray: 9e437f27fab9b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30180,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (30180), with no line terminators","md5":"cc0392d86e11d47d91b1dd396ab24d04","sha1":"a259b1240eb6e94274a72728796c87767000542f","sha256":"d0a296afaa2ae0bab91c296388a7a3fc4d34cb67a2213fe583486c1714b9643c","sha512":"8a23c5b147945bfd8f3a7e6e13c2b0e0762f834e5300e44b38e4e3070dac5fc6de7048b1c30600ef77a6ab4c8fdddb1924807ccad0d7ca2b30c53ba4d13108aa","ssdeep":"384:TpSed283ZcW23qWF7O36AgzyAIfPo8PFEINxlop:TpSUJoAgzyAco8PFEwxmp","tlshash":"41d20d093e2d3f39ba13a32440c098ac520b775fdebd4797ac91235d9d9d78432aca79","first_seen":"2025-09-16T17:10:30.755417Z","last_seen":"2026-03-30T01:58:25.831017Z","times_seen":6,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.avantisf.icu/0802f5e039c465f6.css","fqdn":"claim.avantisf.icu","domain":"avantisf.icu","tld":"icu"},"ip":{"addr":"104.21.74.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim.avantisf.icu/","date":"2026-03-30T01:56:14.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avantisf.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 11:44:51 GMT","end":"Wed, 03 Jun 2026 11:44:50 GMT"},"fingerprint":{"sha1":"39:7E:38:C6:7E:A3:A4:EA:CD:BE:B0:8B:2E:A7:EA:DF:0F:94:2C:B6","sha256":"8D:2C:D8:2C:4D:D6:84:B7:6D:C0:41:70:4C:44:47:72:71:8A:C5:4D:67:56:41:57:D4:01:FB:18:6D:10:3B:1C"}}},"request":{"raw":"GET /0802f5e039c465f6.css HTTP/1.1\r\nHost: claim.avantisf.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.avantisf.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 30 Mar 2026 01:56:14 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 10 Sep 2025 14:08:25 GMT\r\netag: W/\"ccf1-19933f4ce97\"\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RiX1oBlOsPvioaI9ZggbVzlMsyf5S0NyXtSuAqF6blduxON01eiLjS1qxA7IuXt%2ByItvWiB8eWUpd0tgIma59kZsINtieU5P2g8sWRb%2FEXY7UUc%2B4B6HA7n3zUlL4oYv0KcShXE%3D\"}]}\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\ncf-ray: 9e437f27fabab4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":52465,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52465), with no line terminators","md5":"47f57c16dcceeb8f4d6dd1f917d25f66","sha1":"a809ab6c5340875a76d2681d653095aa2704e98d","sha256":"e5fca2fbd32b9b1110fdbee92c69627c26f8e0e76d34202247d1be0619663e18","sha512":"5387df764fb166b5a8c63534c6ca69bfef643a6fa6534b1098ad5383a506109f3f2960665f059a55f9e95820cb2f6c95e8d1174795a8e2d3533635da5c0c87eb","ssdeep":"1536:cIXIoGLccwNsKLhhH9QlE01aON7bVuqlp9Bn9Ws98u988:RXIoGLccwNsKLn9QlEIaON7bMqlpP9D","tlshash":"2633e8a0b326e93fbc3398ba939cf84c80197581ad2616d9ff12712355c77f11e66728","first_seen":"2025-09-16T17:10:30.728302Z","last_seen":"2026-03-30T01:58:25.831729Z","times_seen":5,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.avantisf.icu/token-bg.mp4","fqdn":"claim.avantisf.icu","domain":"avantisf.icu","tld":"icu"},"ip":{"addr":"104.21.74.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://claim.avantisf.icu/","date":"2026-03-30T01:56:15.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avantisf.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 11:44:51 GMT","end":"Wed, 03 Jun 2026 11:44:50 GMT"},"fingerprint":{"sha1":"39:7E:38:C6:7E:A3:A4:EA:CD:BE:B0:8B:2E:A7:EA:DF:0F:94:2C:B6","sha256":"8D:2C:D8:2C:4D:D6:84:B7:6D:C0:41:70:4C:44:47:72:71:8A:C5:4D:67:56:41:57:D4:01:FB:18:6D:10:3B:1C"}}},"request":{"raw":"GET /token-bg.mp4 HTTP/1.1\r\nHost: claim.avantisf.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=4325376-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.avantisf.icu/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Mon, 30 Mar 2026 01:56:15 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-length: 14940\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 10 Sep 2025 14:08:25 GMT\r\netag: W/\"423a5c-19933f4cf14\"\r\ncontent-type: video/mp4\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-range: bytes 4325376-4340315/4340316\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1TBUrV9pH%2B8dbmq4gdiV6BNYvpGSbfk6FaL0GOGjgm5aKK5Lv8%2FXz95oAiMgsefR%2BUUIT1GY6%2BTNoBL%2BqIDBye5c%2Fr1bf9YTSe0m%2BTgY%2FvuKADdoPh64uRz%2F%2B%2FWawV%2F9P2EQu6w%3D\"}]}\r\ncf-ray: 9e437f2b9acdb4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14940,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"1ee45dee46fca2281a4c4cc1d86b7453","sha1":"6b70c9e1b7eb0f45fab26266c7f1ed6509846600","sha256":"a9655dd9df273ed931a7c8e6d84885ad4f3c7e0b83e966c02d9e7b743b18a855","sha512":"09fc0b6a3bd37f9e141ad6768b217f7729f5179efedee8e3c32058a6d916f9da78606f63e2bdc14539f5a30f4a72ebdde4466e1f8ded8c3e5d1257b2e1ef0cee","ssdeep":"384:6H0sVJBJ3BiZ+oooeb8hKrX2rWHj+6nt6x:6d3fRiZXhoXmWS6o","tlshash":"8b62d2a6b3346483ea44933d16e7c34673b2c432639b574f87d23738bc6a3065d625ca","first_seen":"2025-09-11T20:55:49.99318Z","last_seen":"2026-03-30T01:58:25.825648Z","times_seen":7,"resource_available":false,"data":null}},"time_used":452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":340,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.avantisf.icu/favicon-32.png","fqdn":"claim.avantisf.icu","domain":"avantisf.icu","tld":"icu"},"ip":{"addr":"104.21.74.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.avantisf.icu/","date":"2026-03-30T01:56:15.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avantisf.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 11:44:51 GMT","end":"Wed, 03 Jun 2026 11:44:50 GMT"},"fingerprint":{"sha1":"39:7E:38:C6:7E:A3:A4:EA:CD:BE:B0:8B:2E:A7:EA:DF:0F:94:2C:B6","sha256":"8D:2C:D8:2C:4D:D6:84:B7:6D:C0:41:70:4C:44:47:72:71:8A:C5:4D:67:56:41:57:D4:01:FB:18:6D:10:3B:1C"}}},"request":{"raw":"GET /favicon-32.png HTTP/1.1\r\nHost: claim.avantisf.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.avantisf.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 30 Mar 2026 01:56:15 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 10 Sep 2025 14:08:25 GMT\r\netag: W/\"2d8-19933f4cee5\"\r\ncontent-type: image/png\r\npriority: u=6,i=?0\r\ncontent-length: 728\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CZ4BcfjaifMcTU1oQYdF7LcaVRg4OSTARvkfY%2FArL5c8AJj896UNNso7GsdNMHWRmMvstqvH5I17rrL9rGeYySdxKwKHG0U9OE43c4TPTL8jFddmFz3X7kvPG12wk%2Fp%2FurVBpBQ%3D\"}]}\r\ncf-ray: 9e437f2c3ad3b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":728,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"bff11fd4b1da28a748b29e895bee8b52","sha1":"a8ad9e356e140caa6fd271b1ccf71eae1db94be0","sha256":"4e5dbbe961d19c9b8af29486037b1ab44c1a2bf5a18d5275ad9e9b48933c732e","sha512":"ef3e9576ca63815c8aaf35f728cdc2aea0d15ac83f9540c7acc607d3e906817f6ed20395720112eb8a28e216fb631402b5df84de2a23171fabd2425aec647029","ssdeep":"","tlshash":"f5016598e17e67a9ad400a5dd02430777c65863d6c6db1c76d0720a83023c67dd3fa56","first_seen":"2025-09-11T20:55:49.998233Z","last_seen":"2026-04-23T19:44:56.575527Z","times_seen":15,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}