{"report_id":"26b0c5ca-dd84-40d9-be26-1a7ab2a977a4","version":6,"status":"done","tags":[],"date":"2025-09-05T13:43:23Z","url":{"schema":"http","addr":"claim-quackai.xyz/","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"claim-quackai.xyz/","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"title":"Quack AI - AI Governance for DAOs \u0026 Web3 Protocols | Quack AI"},"submit":{"url":{"schema":"http","addr":"claim-quackai.xyz/","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-10T13:43:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":6,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-05T13:42:55Z","timestamp":1757079775,"ip_dst":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.17","port":58492,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-09-05T13:42:55.984098+0000\",\"flow_id\":1509173810424833,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":58492,\"dest_ip\":\"172.67.74.152\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3436,\"start\":\"2025-09-05T13:42:55.977921+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-05T13:42:55Z","timestamp":1757079775,"ip_dst":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.17","port":38054,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)","source":"{\"timestamp\":\"2025-09-05T13:42:55.991233+0000\",\"flow_id\":190657505259117,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":38054,\"dest_ip\":\"104.26.14.157\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058790,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"binance.llamarpc.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3447,\"start\":\"2025-09-05T13:42:55.978541+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-05T13:42:55Z","timestamp":1757079775,"ip_dst":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.17","port":58500,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-09-05T13:42:55.994872+0000\",\"flow_id\":1561731325230891,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":58500,\"dest_ip\":\"172.67.74.152\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3436,\"start\":\"2025-09-05T13:42:55.982827+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-05T13:42:56Z","timestamp":1757079776,"ip_dst":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.17","port":38066,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)","source":"{\"timestamp\":\"2025-09-05T13:42:56.005622+0000\",\"flow_id\":2038893601826863,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":38066,\"dest_ip\":\"104.26.14.157\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058790,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"binance.llamarpc.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3448,\"start\":\"2025-09-05T13:42:55.993327+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-05T13:42:56Z","timestamp":1757079776,"ip_dst":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.17","port":38070,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)","source":"{\"timestamp\":\"2025-09-05T13:42:56.010954+0000\",\"flow_id\":2187121513151667,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":38070,\"dest_ip\":\"104.26.14.157\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058790,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"binance.llamarpc.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3447,\"start\":\"2025-09-05T13:42:55.998579+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-05T13:42:56Z","timestamp":1757079776,"ip_dst":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.17","port":38084,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)","source":"{\"timestamp\":\"2025-09-05T13:42:56.023245+0000\",\"flow_id\":983298014657845,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":38084,\"dest_ip\":\"104.26.14.157\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058790,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"binance.llamarpc.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":922,\"bytes_toclient\":3521,\"start\":\"2025-09-05T13:42:55.998709+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-09-03T15:20:50.935949Z","alert_count":0,"request_count":2,"received_data":798854,"sent_data":904,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"binance.llamarpc.com","ip":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-02-07","domain_rank":2101135,"first_seen":"2023-09-18T00:31:06Z","last_seen":"2025-09-03T03:13:16.081247Z","alert_count":0,"request_count":4,"received_data":14817,"sent_data":2050,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"claim-quackai.xyz","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-05","domain_rank":0,"first_seen":"2025-09-05T13:43:27.093031Z","last_seen":"2025-09-05T13:43:27.093031Z","alert_count":0,"request_count":57,"received_data":6973047,"sent_data":26413,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"api.ipify.org","ip":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-05","domain_rank":8166,"first_seen":"2014-10-06T12:38:43Z","last_seen":"2025-09-03T23:51:20.030348Z","alert_count":0,"request_count":2,"received_data":939,"sent_data":870,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-05T13:42:55Z","timestamp":1757079775,"ip_dst":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.17","port":58492,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-09-05T13:42:55.984098+0000\",\"flow_id\":1509173810424833,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":58492,\"dest_ip\":\"172.67.74.152\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3436,\"start\":\"2025-09-05T13:42:55.977921+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-05T13:42:55Z","timestamp":1757079775,"ip_dst":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.17","port":38054,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)","source":"{\"timestamp\":\"2025-09-05T13:42:55.991233+0000\",\"flow_id\":190657505259117,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":38054,\"dest_ip\":\"104.26.14.157\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058790,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"binance.llamarpc.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3447,\"start\":\"2025-09-05T13:42:55.978541+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-05T13:42:55Z","timestamp":1757079775,"ip_dst":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.17","port":58500,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-09-05T13:42:55.994872+0000\",\"flow_id\":1561731325230891,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":58500,\"dest_ip\":\"172.67.74.152\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3436,\"start\":\"2025-09-05T13:42:55.982827+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-05T13:42:56Z","timestamp":1757079776,"ip_dst":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.17","port":38066,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)","source":"{\"timestamp\":\"2025-09-05T13:42:56.005622+0000\",\"flow_id\":2038893601826863,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":38066,\"dest_ip\":\"104.26.14.157\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058790,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"binance.llamarpc.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3448,\"start\":\"2025-09-05T13:42:55.993327+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-05T13:42:56Z","timestamp":1757079776,"ip_dst":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.17","port":38070,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)","source":"{\"timestamp\":\"2025-09-05T13:42:56.010954+0000\",\"flow_id\":2187121513151667,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":38070,\"dest_ip\":\"104.26.14.157\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058790,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"binance.llamarpc.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3447,\"start\":\"2025-09-05T13:42:55.998579+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-05T13:42:56Z","timestamp":1757079776,"ip_dst":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.17","port":38084,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)","source":"{\"timestamp\":\"2025-09-05T13:42:56.023245+0000\",\"flow_id\":983298014657845,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":38084,\"dest_ip\":\"104.26.14.157\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058790,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"binance.llamarpc.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":922,\"bytes_toclient\":3521,\"start\":\"2025-09-05T13:42:55.998709+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"claim-quackai.xyz/490e8645-ddf1-4221-9967-e8a9e534207c","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec26a722169cb2cef03353fcf8dd144a","sha1":"6eec6673abcde3d29547796a38361256d9efde1c","sha256":"01861fcd47bc63bb7be76c480bad4c6cc987c8996ab0e023a4e692b68c94b05c","sha512":"c885e5d94bd96fa4a573524356e0ca7398b1489f5a39fc1120cf7f4e469950630ad3e9f48dd0392acd36da390c27a4be1e81da943d1d9ecd48890d1691e416cf","ssdeep":"6144:Ufg7z90bnvLZqnWTI9esVTMuyEvtzXNglxQP92L:VzBe6kEdOxQoL","tlshash":"bf740980b261b07247da24e10477540af339e96c744a40acf6a8d8fb7dbd589957ff38","size":357754,"data":"","first_seen":"2025-07-12T22:38:09.13306Z","last_seen":"2026-08-18T19:16:43.145039Z","times_seen":5093,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/ethers/5.6.9/ethers.umd.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"268d19762594655239a29d058a7e8b44","sha1":"f06da2f7a68114b8dda38a0d782d65ddacc9c0e8","sha256":"95c66625ee20f53d542e23dded002b021b24e9d28c3d193a076d45cba4dc8618","sha512":"55e6b3e48536891a5ad0106b26525e4607c9ece0075ad5496535ef81d1fbb377dfb0b50286594c0aa0b405bf9e791c4696b674ea260813f4772ac7220ab82fdc","ssdeep":"12288:TfLmYQI/yjP+H8Xb29/nNUgE6te1R5WJW:TfCPalnNfE6taD","tlshash":"29f42b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","size":735973,"data":"","first_seen":"2023-03-07T12:58:29Z","last_seen":"2026-08-18T19:16:43.115819Z","times_seen":8493,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-19T04:16:38.124671Z","times_seen":238039,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f68e784a0312a878ed45aac4ceb8d1a6","sha1":"52f4c53a1debbd31d7282cbe64d6d5ad56cf078c","sha256":"cd36a991a7d553482798d4a9d5db7b10fd90e1ef140d60bf0f9ae7e936107123","sha512":"234bc9dac62b99288008582c53eb60d60a6650c10c05720454f6aa274a9e61743ca76268f64af3fe9b0f3d178bcb8855d63431d05ba940da9fc6732dd36ca491","ssdeep":"","tlshash":"37e02b286f6651f926b33595c71f7280e86000735042c801fe1cf64a4f80f1938b0fc9","size":334,"data":"","first_seen":"2025-07-21T04:20:59.807781Z","last_seen":"2026-06-04T04:08:18.207034Z","times_seen":158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9c6de0df2bf028d93924aff92487904","sha1":"6596050516dd12af52d9b0e7b18ed837f1d81300","sha256":"769a555de553babc35a3338f344dd7aa16260c93cea2c7db290707c90484e7cc","sha512":"6be4940eec0dcd70efcf85eb21c5c7b827f4f3dfe2240a0de259ab5c9835f179ddb8a2ba6250c73516a5bf8c9dd4de3438a23cd2d162745faba9314a18fa1615","ssdeep":"1536:R8K6Znxmj9rlvCOhI64j7AtSPtNPU9ArHMLlk:RV6+jKOh4z","tlshash":"65535bc0629c5491a3b76480087f740b7073353b0a1d5aacf658faefacacad6907cd39","size":60819,"data":"","first_seen":"2023-11-02T21:20:28Z","last_seen":"2026-08-19T02:46:31.517521Z","times_seen":31941,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-19T04:39:22.848475Z","times_seen":745804,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/a405a0d2-a2ea-4c07-bc8e-1393f48079b1","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d158050d49867f6dae661384069f7abf","sha1":"e50557e15d10194e0022d9756401502a71b0bb62","sha256":"60f702d0a8b397120a2e51d5d7cb4865a42f4360695521f57eef65995db7236e","sha512":"cbc91204a6775ec92f9d60f5632084b9f91ecd636ca8aa6c2e6cad1c775ff886d249139ba4d343121cfafcc2f1cdd9230df5c2ba4046f99d5d87ff68df551fa7","ssdeep":"24576:UnSzu+FIDf1XhQ8W/50O2ZihRF7aHXU1ZaxjDPy6796b9Lepi+ik:ROTnSwPr/ik","tlshash":"ac36430bc8085e74f5b59987223349cac6042981556f33df735eaeabeb89f6358e101f","size":4886923,"data":"","first_seen":"2025-09-05T13:41:30.127901Z","last_seen":"2025-09-10T17:16:28.80456Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/a4587da5-e230-4b04-9d67-e58b65c57201","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"05997da4a9c3d58ef33a7cf3d716af57","sha1":"3a7a7913c31aa2787a11dc6ba6fb5b5f2c525ac1","sha256":"e268ded9f58238c3885b4e0e83ddf10ea9552c488dd25538c8569ec2beff7eb9","sha512":"83413571115e6b39abe7e3b6573a81b3198125b35ae13e31d14c7cb3c81790b24a11cd81531a58922386bbf6e2d41ab6e449fc3206c8b7f20932820cdf58aefe","ssdeep":"49152:D+2KKNjyR5WP4CQjNn9GU6lCLsSPOnLUfJ8KZTcbQQqG7r8aQO/iSJNHoRO2sxSQ:RD8ew45JV","tlshash":"20f591496bf660358213f0795e6f8801b234a40b2949ed5c7e9c92f09f4953c8bf6fe9","size":3517001,"data":"","first_seen":"2025-07-12T22:38:09.134446Z","last_seen":"2026-08-18T19:16:43.149705Z","times_seen":4178,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"269184e3504aae95e2b0ce7666438b00","sha1":"a6802ee4c1021b344ee662a82068467329d50fd9","sha256":"2ab42cf0412a38c90d3d9ca5ac3f441f89a0db07f5e04ced3b3cca4d5f164f62","sha512":"e08b1f8d74ebbbad7f7a059ae8e0275d8bd6e9b94faf9bf9b2433b84a8be65e760962485bbb5be78cf36d6190ea356b4e2c14561557a80935f99105a52d99b5b","ssdeep":"","tlshash":"96c0120970746566048e786d08cf08897f268412610849c599dcc8547fb1e6942b084c","size":173,"data":"","first_seen":"2024-12-04T06:49:00.889058Z","last_seen":"2026-08-14T05:17:33.678588Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"297a907d4e5b4c2198915e66274d9c9a","sha1":"e0f98af49ab0f7a270e2d739436181f924449098","sha256":"0fdbc26d9d5bd7f6a4bc38acfb91fc663c57463d43a08447f1386b3354cd84de","sha512":"48487cbd59e60a259a5836fc0315243da500d617e94e06b3073f79bb834bd141c9e5cfb59c42a3c2086c920c21be5996e589d4658513cf31d95bfc5757a4a44e","ssdeep":"","tlshash":"1371bc3beb00173bdc8fb9fdced5b4c02e62497262496560691ce102b16cd7087bed88","size":3741,"data":"","first_seen":"2025-08-14T22:39:51.132287Z","last_seen":"2026-08-15T18:29:27.711588Z","times_seen":3242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"claim-quackai.xyz/","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-05T13:42:49.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:49 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h%2FyV%2FlAET4VM35lZStUHrVOnyeCzELGzlR%2BKurtEHGC2hJ0mUBijOaArsrbwFUwjoj03aTHjvnmmnIYCzz%2BAbDwMt4z6dWQAVfUc1kOOXg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 97a626efcbf9b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":499966,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (48004)","md5":"ee6755a04473bd484c0d84c13da826ad","sha1":"78f19a2f2fe50c41b5d61c57ecc919ebb41b41c8","sha256":"b537b4b4bbe5f9542261aa89e67a1e5d6555a98a9091225f4d287ba266dc6f8b","sha512":"30e02b3497256183714d3828f91a87ffe5f64aa83b7885389c19294a524f1c409a4141a9df9e98344f0e026587e47f9d821c57148eb657ed86ada2e7f88cb0b6","ssdeep":"6144:fQekZEwh1XAOkdDm33yT5grZep0dTaIlPFCCe6K:cZEwh1XAOkdDm33yT5grZep0dTzPgD","tlshash":"a3b40ab4924003b8f1134b9fdad97e5412f970d7bfd1188cf35a24838b97ae9226e527","first_seen":"2025-09-05T13:43:34.182617Z","last_seen":"2025-09-05T13:43:34.182617Z","times_seen":1,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":71,"dns":1,"connect":1,"send":0,"wait":93,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/entry.B0b_3z4T.css","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:49.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /entry.B0b_3z4T.css HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:49 GMT\r\ncontent-type: text/css\r\ncontent-length: 108\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\netag: \"76-63e0cecdd47a9-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BR4RO5yQXjMhKtIUTRAQcZNv90G%2BARQAST3j894EEQmrvRTKdnSgUN%2Fal3iPUcHaymmm0NPLhaZm7RbvhSJgaN3Aw0jOXDsBmh60ZuSH4A%3D%3D\"}]}\r\nage: 89\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97a626f23e60b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"2eb38e46b56441adbdc9d9cc8b111b79","sha1":"083428a2e46015608f88c72519b37e7a919330eb","sha256":"cba18cc10e6ea930691b40b99617f3fb2eabd42ccb76bdae60858aa950a0f562","sha512":"d22e51be2162dfd9288163459312c5d8e88a01fcbc9ac5da847ecea244d7f6bb5d4db53825618a132c87635be2005d41326b561f348de51b9b0d035dcfb59739","ssdeep":"","tlshash":"d4b092ad0a522c554c8a478238a14db840bde2d33a7f0b8466a12d82a3429b00032283","first_seen":"2025-01-02T18:04:11.533774Z","last_seen":"2026-08-16T02:44:24.292338Z","times_seen":30,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/css2-1.css","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:49.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /css2-1.css HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:49 GMT\r\ncontent-type: text/css\r\ncontent-length: 730\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\netag: \"238c-63e0cecdd3039-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qUJydMykc4pm%2FjGSTLUBQaIOAEt8QNHWAph%2FWRz0FjGkto7t42y5q%2B4B7eT6x%2BEX%2BAm8LbDDOH8xZi1UCe57ecuKXDkfT1noUEek%2Fiwoaw%3D%3D\"}]}\r\nage: 90\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97a626f23e65b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9100,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"2697aa3ac7b847513fe0243c985c479b","sha1":"bbce27c9f7e67d54286e634b280818db09a13de8","sha256":"95575391bb55a8a178fea41d43dd09b1fddd957c6e6d49e9be9263e57092f7d6","sha512":"fd990ca8107b081bac7485242188dca4ba0549d9406fd3a0861999143da2d61ab70a65a41901e922e1a69fb4f978a2a1831675104d95d344169cafac9567d12d","ssdeep":"192:9TNSbO34o5DMTOB0O3/v581Tro9O3iS5lWTEv+O3RB5Gp:NvWsk1i6a","tlshash":"8a127b91002b6400a7a70cc277ce3f3aaedd6044a049da782ffd0d8a6cdeda953a175d","first_seen":"2025-06-02T11:49:35.475344Z","last_seen":"2026-08-07T09:24:33.808336Z","times_seen":286,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/e15d9325cc65c0e62977de14dd10b484cc52086c.png","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:49.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /e15d9325cc65c0e62977de14dd10b484cc52086c.png HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 306\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\netag: \"132-63e0cecdd3bf1\"\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZrZ%2BEo%2BBTreu5sw2RMFg8fyT%2FpJOoCfiBO7X9QW72kQAhEKOo05hHit83G8G0Zwe5O9lB9YcvKohPnpQ63EEkjqgZl1eltbUQuaeKiwgbA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncf-ray: 97a626f23e66b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":306,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"834137777f967ba97b4d0a7968a05e1f","sha1":"e15d9325cc65c0e62977de14dd10b484cc52086c","sha256":"44660d5677d46874b86de569ff0a1fff49721c0216a99369bea237b1bed6cc52","sha512":"ceab336f6f924fced8e95b5166c976b8c98cd24d86990eb6faec865d6bce2751d2ab1d1dd492a61e53e57a66e884af254b6dee9c6c03b7289ea9087c452e4e15","ssdeep":"","tlshash":"3ee07d83af683994c1138d568f09b067cc42854f2548d247870343341c620dc58c8806","first_seen":"2025-09-05T13:43:34.191854Z","last_seen":"2025-09-05T13:43:34.191854Z","times_seen":1,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/cc426a7d5e05290e57c556dca1f1d8ea88441f6b.svg","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:50.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /cc426a7d5e05290e57c556dca1f1d8ea88441f6b.svg HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:49 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K2hLxXYEbqi0KObrI%2B00TeH4cE3YqX1wHRuUcyEy%2FSwGfjbTL42PXLWH616i5QzTz0f3xJjaiAcJBOtJVV1t2w7QyCOGp2QTyWOHQonbSg%3D%3D\"}]}\r\nage: 90\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"120-63e0cecdd2482\"\r\ncontent-encoding: br\r\ncf-ray: 97a626f24e82b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":288,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9f6e1b70a575bdff737640d7a6a82911","sha1":"cc426a7d5e05290e57c556dca1f1d8ea88441f6b","sha256":"6bcfca17f157f0e66352b36d8467f0e8eeaed339499ffe0ba28652bf5a781082","sha512":"a1a645eae9b9b5de1cedbed584ab92c6821efea2354286e95ab57070f7a2a56c9b7ea9ef8a5e1472204ec8da5372a621ff386868e0c15d5ecd0143fc5416cff7","ssdeep":"","tlshash":"b4d0c2fb31e5be89c23bc77ab5fca4156076d8f0ab8a9004d6076601ee045612a59dbc","first_seen":"2025-09-05T13:43:34.194849Z","last_seen":"2025-09-05T13:43:34.194849Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/214a2125cd74e8a423e89ae5aa991d3f7add4dd5.svg","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:50.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /214a2125cd74e8a423e89ae5aa991d3f7add4dd5.svg HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:50 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e3ilXJjuQv4N3QaYMTs%2B9BLl2DNmWf5%2BCuF2jcIzEigm%2F6nb49dr9k71DMLmSU7eD%2BmyLL9xXfn9XpfcnURby1xVmPvmZP2%2BZSheZ7%2BT0w%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"14d-63e0cecdcda4a\"\r\ncontent-encoding: br\r\ncf-ray: 97a626f25e93b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":333,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5c914133a89a2e192c468896fd9166b6","sha1":"214a2125cd74e8a423e89ae5aa991d3f7add4dd5","sha256":"3a5d5e1553150766fe2664598159386e118503e3b55bb8931cd526ad5cfdfce2","sha512":"04d4546fcdf358e487c2478bf57b095d376f584cccae752f6039ee6292b424cf158976996f50605ac9f9d05d2ae41739ed2bee1e837186f3f419515ffa7f445e","ssdeep":"","tlshash":"fbe02677e2ea8e0cf10247b1caf93e102020934931c19088d4360538c1a825ebe3889d","first_seen":"2025-09-05T13:43:34.197747Z","last_seen":"2025-09-05T13:43:34.197747Z","times_seen":1,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/c187ca82ae1d8af52c48a82a363e22294824f28d.svg","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:50.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /c187ca82ae1d8af52c48a82a363e22294824f28d.svg HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:49 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uGG8LkkhIsDWcg7z%2F3kv%2FbZebi7b0czZQqdUuEZQS39h4LSTc4qINb7EgsrcE99SzEXDZC0pb%2BMBA%2B81r34iv5T9jGiUnQ5qj0tkMZskwA%3D%3D\"}]}\r\nage: 89\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"eac-63e0cecdd209a\"\r\ncontent-encoding: br\r\ncf-ray: 97a626f26eaeb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3756,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cb7791afa108558b8d67626b87cbf5d3","sha1":"c187ca82ae1d8af52c48a82a363e22294824f28d","sha256":"2341964582e91b0cdd9f1b167ca3125be80f5d945bef700aeee538e8afe98c1f","sha512":"78e6c35cd5a66faf4a6c24849f03685e600ac95e3e83e66986e57ed5a03d73644fe76981f58ebe5c712b16d716254d9aef350d4e23d5fa2b8444ac05eafcf634","ssdeep":"","tlshash":"667196e133b5d6b8e808bbbd063a74748d9a28d67533e0e483862e04d58541d8dfacf7","first_seen":"2025-09-05T13:43:34.200318Z","last_seen":"2025-09-05T13:43:34.200318Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/n2.BLnHOvlW.png","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:54.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /n2.BLnHOvlW.png HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/index.BwlTPWBb.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 308748\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\netag: \"4b60c-63e0cecdf2437\"\r\naccept-ranges: bytes\r\nage: 90\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CyKU9Ml0k6hb5qagpzkT%2FjpQY2vBY7YxyHQQryrclduF6AWHTqfc%2FZvzOHwfKb8Y4qYeullXZ5oxzlKx2acJcpkb4InT%2BHOJ4E1sWxywAdgc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97a6270f19631ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":308748,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1100 x 580, 8-bit/color RGB, non-interlaced","md5":"07cc9aaedf2985b5dfac80c2f0835756","sha1":"14ef3cad0fc7ff963e5e6b83a4faad45962d2163","sha256":"721db152ed59fe44f3a690fff34e112fe08048d1969cdef4fbf89c94b70b0f44","sha512":"29a88a9ce6799c898a8ce6ea87889746ad39d47408f0f731d75e9ccea7d707250b749b54140caabfb6c07e797682d1782f8dee7c09287e31401f2df9a7e5d422","ssdeep":"6144:4fsrejPR4aMvMtov+XSLWq9eEqqSrDe+46mGx2zjn34KzKHgHjP/CL:4fsSjP9mSB/4ZGw339zKHgHT6L","tlshash":"3c64231948be49e3f1f92354a01bfbacad0b3905a989d349f1c3e05c744f7925f88e96","first_seen":"2025-09-05T13:43:34.202721Z","last_seen":"2025-09-05T13:43:34.202721Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/n3.B21pyErY.png","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:54.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /n3.B21pyErY.png HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/index.BwlTPWBb.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 343964\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\netag: \"53f9c-63e0cecdf3ba7\"\r\naccept-ranges: bytes\r\nage: 90\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q2bA4d9y7BLUQwb8W71235MYFfsMo0ASLxX1EWlIiddAB%2BJLpCXqfX8s%2B7a0a1aG5yF53nPebsIgnyBKj8vVOTeQhJqFa52u%2Ff6gqRv3k2yz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97a6270f29691ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":343964,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1600 x 830, 8-bit/color RGB, non-interlaced","md5":"d74153055da3a93a01150a2b8ef4d2b8","sha1":"15f7c71569963ca856099eff152bed1ff9fe647a","sha256":"d8a798a7543365dc8e2a81227679c5c8beb481c00bf5b25966472ba98a8d678c","sha512":"8f61fbcaecc1be82241175466ca74d27239451e7e91deef44bd46cbfc9766a0ada5279d04222b9b2de5b0345cccf52f41a9cf2edc6bd3117757cf6e511b470d0","ssdeep":"6144:mDqBwNjTP6pntxRSUXoWXISMYnMYMXrG1NSPCbaJ6NwIxFQjiqjPCgg:mDNNPP6pRSUb4SMudQrz67Nimx","tlshash":"af7412d396ac0c3b08b9277170f39034cdd799a7de395625bac2ed8ae1c4c46b833959","first_seen":"2025-09-05T13:43:34.205621Z","last_seen":"2025-09-05T13:43:34.205621Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/step12.Cp9bYf_8.svg","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:50.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /step12.Cp9bYf_8.svg HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:49 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j%2BE%2F5DwfKdu%2FLfLYaHt3yhUSTg0ZjmEtBy5%2BLvGEayuyGT0aSYBaS1awwTiGB1o15kLWS71fjEBaqi61%2B%2BfcNOPSTqk4RsIzOuMbDomenQ%3D%3D\"}]}\r\nage: 89\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"1660-63e0cecdc6902\"\r\ncontent-encoding: br\r\ncf-ray: 97a626f24e6fb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5728,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"938cd436dabf1b35441fcf23098be23f","sha1":"32afeb74bfeac4cf63360676af2171ffcf7f2ff1","sha256":"f0d31ae6d15627fb2cc423ae4f8d2f47193ae5400afdc1565a89413f31e071a9","sha512":"4b4f4d3267b9191a72f8384835be05196c38ded693833ecdc78ef579a8134b3674169e64f3e2300a679c0dd7ba50a8ab73f8e00127b4474afa92fb313a77c759","ssdeep":"96:H9tbEyyy1zFpon/Fens2aWK5IEEtBFG4OuF1kEc+mhUyuJRBXKW/W3Ryri:T1JpoEnR7G4fFDmUyuJRBXNe3Ry+","tlshash":"52c183ddb7440bb4f11263a8e70a7068391f54e61fe652a0c8eb1e3618619ad9d3fcc6","first_seen":"2025-09-05T13:43:34.207611Z","last_seen":"2025-09-05T13:43:34.207611Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/7b260d720a88abc515face5989c255616a35a912.svg","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:50.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /7b260d720a88abc515face5989c255616a35a912.svg HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:50 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=THMI3IxLpztEKy9WsBLbjcjfaudo00ACP1DYs1PzW64AGkVAxT%2Fzz8sNeYE2gcs%2B0SZF%2F7%2F2suCmZvIwsQpL%2FKJ4V9KAC5u0hTSLs1QWPg%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"f53-63e0cecdcaf52\"\r\ncontent-encoding: br\r\ncf-ray: 97a626f24e71b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3923,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1361bcce9d7c59238d38127e612b9b90","sha1":"7b260d720a88abc515face5989c255616a35a912","sha256":"af0caa625353accb7f1b8d20c0bdf41d60279b34665f94a8b9c87404a1d9950d","sha512":"8f94db7e25b2bc5522f3976b7ad35aeda9b0953d42156ebd22342fd41e7ecdbf7a6b3b9730658d29641d06b6e937b72889b72b6409ecd4bc0582fefcd6457d3c","ssdeep":"","tlshash":"ab8154a8366593b4e10ea3f6ee3e6026f71e14e552c54728cb0b5e0ca5020bcdc52ce2","first_seen":"2025-09-05T13:43:34.209214Z","last_seen":"2025-09-05T13:43:34.209214Z","times_seen":1,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/73299065e44b0fe882bbf76e37fb7d44fbfe3001.svg","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:50.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /73299065e44b0fe882bbf76e37fb7d44fbfe3001.svg HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:49 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fb262VWEtfUj15sc7vawgKhwuAZQ%2BwkcxdsOaBCvw1UltVFu14CebPpM2H3nUMI7oyAOWFULsRK5dPTm7%2BL0tkRTfeUfhq5iw9Y5E9NcJA%3D%3D\"}]}\r\nage: 89\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"ca7-63e0cecdd015a\"\r\ncontent-encoding: br\r\ncf-ray: 97a626f25e8ab517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3239,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"123ba72da58ad80d86694ea18bcefeee","sha1":"73299065e44b0fe882bbf76e37fb7d44fbfe3001","sha256":"30402f6da41840ae27878a97434775013d5ac34641780957eb1dda760f66ea5e","sha512":"c428fbad91e84d963faadc60bd68714af8fa89c4b03f185541b592bd7aaf95e161e6e2e80e5e160a1b237a9b23c6357af72a73142b33bd8b10b1f42e1dfaaff9","ssdeep":"","tlshash":"046120d1b3d55aecf402dbf0d62364a13a371aa63715d1448aa24d7ecaa332c5c7acc7","first_seen":"2025-09-05T13:43:34.210591Z","last_seen":"2025-09-05T13:43:34.210591Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/1.Br8nIsX6.svg","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:50.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /1.Br8nIsX6.svg HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:50 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S3wfoQDPzXSfQczXiJxi9kocWnUInMXZ1clmcNUZVACwdqD%2BG52ciHBJpxBnCM8Q1AAbpOIP8LZJ%2FuvdETYW0OeI4wN1E8HXPfwEipjVZw%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"b220-63e0cecdc97e2\"\r\ncontent-encoding: br\r\ncf-ray: 97a626f25e95b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45600,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"150a80a4731971c01ddad865ce5e30f6","sha1":"478700e09bf18943ce6dc1d1384514e90844092a","sha256":"41d0b73543593dca40be0e2de295680aa4c8b6091030110e115b3d902b50d1e0","sha512":"98df0008805871847ce3dd2dad0d8a7216c375fa184dc0dfe0046a8c45f9977433b2599756068828b1f6e4e69eb74de2458b01cdcd2d327793d901f0ae1ad4a8","ssdeep":"768:e3CG4dHCSo/3k28paRDhQmlbIF+xQikPD/jyieccTpIt6oft+gywTZMRK54s:ey7a2PTjuc666oft+eSK5B","tlshash":"e22394c427b1d3f8f946f2f6da33f0967e4d2ae6b5048d65c3a52e01c4964988f968c3","first_seen":"2025-09-05T13:43:34.212383Z","last_seen":"2025-09-05T13:43:34.212383Z","times_seen":1,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/index.BwlTPWBb.css","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:49.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /index.BwlTPWBb.css HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:50 GMT\r\ncontent-type: text/css\r\ncontent-length: 811\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\netag: \"af2-63e0cecde9f68-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dd7w84FCGroqAlnPHmb3ihqAQwfHS3YJghaPNgu%2FBJFhNZkMj%2Bh3Pd9JJsh1Bq9yAxgXf0PIGsjGo1cF71UAxwqWoQtMGbx%2FM6siNwv8cQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 97a626f23e64b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2802,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2801)","md5":"0b26c03b45043ae90cee5924a4f4d081","sha1":"b126963565fd09e647cb4cc78ffadc18efdf133f","sha256":"d5077677eb2f748f81801da972583e54687a4d2467a9340d5cbe6e2d9d90a262","sha512":"1fb981fc37881521f5a3344ac0da63201c418b5d31cf58bd8c5d9f7f62baa85a3f4aeb5dab61cca17babe18f9ccdd332c54a332492a9801c370f1625663a236f","ssdeep":"","tlshash":"3c51cb38fe8c2012f57be641d8e4575a516ce393e4260b5e33d321a958cb0f4367eba2","first_seen":"2025-09-05T13:43:34.214011Z","last_seen":"2025-09-05T13:43:34.214011Z","times_seen":1,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/step11.BEeRogHD.svg","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:50.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /step11.BEeRogHD.svg HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:50 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BpAAtZZxl093THUl0k2cNkwRcoRAVS89l57YVT7N7CRrJx8ygHwOZV2zYaQhFR%2BDWvl0oUH6WTAtgZN42FzfVCGh3E7KOr8y9Mp%2FixdzSg%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"152a-63e0cecdc651a\"\r\ncontent-encoding: br\r\ncf-ray: 97a626f24e6bb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5418,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"43f834cb77732cf24cc7d56d3c8cd711","sha1":"77d6bb5c76e7d5544ad129eb57f35846e0be1b0e","sha256":"7eab02307ee7f2b84731adb711e38626d5420a2790a8958bed4b8444c0da24aa","sha512":"5e6016bd3a12c81743e4d0fdd411c8054175598de3e9f5bb08f1f29367e0c05752a89c9388c35544012db70d58cf0e41b2752f859043e25eb66b2bff1a35afbe","ssdeep":"96:JXC4+Q5oXzTcyObN4dCFqaYZ1SDjmaL1DOQcMNmpcFCIZGa0:YdTcy2gCDYmjV9KMLFCIg","tlshash":"56b156efbbd8a1f4c104d394531514b9320b60fb2ae2cb6cc79a9f5dab6049d8c59cc5","first_seen":"2025-09-05T13:43:34.215771Z","last_seen":"2025-09-05T13:43:34.215771Z","times_seen":1,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/11.BKKNKXXN.svg","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:50.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /11.BKKNKXXN.svg HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:50 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K%2BBF5CexLa3azq56nM9Vmf6YrVUPg04jVTKaBouAGf8ffs%2BrkOtKhoPxWOOAIsf0ZiqgVpyGBiyLynr5KR%2FrZUiuP08GD0v6L7kKQ0mcyA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6bf7-63e0cecdcd27a\"\r\ncontent-encoding: br\r\ncf-ray: 97a626f26eaab517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27639,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1fe997c7a2252f349701804759aad803","sha1":"78ff70b0e2edbc4ac48ee375211e2580da9b81bc","sha256":"2ad60839777e4f5ea30c4a4eb2cc17762b4fde899e381bc42f862f556b914c33","sha512":"783e942c72f18d75083839f882b93fa3d2069af8ea8086c5909c75fccb6c73de03a1038c046f19e0be5c4ccc323257b1bf4bb7653886b4f88cf0db4cd42da4f7","ssdeep":"384:noR+4pf4UCAiNl4X5SktnOHpmYsS1CTjAt+CwQeZMFtlpry6m8Lj:i+497y4Xo0nMt+FWfsIj","tlshash":"62c2d070661f182d9a00d6e061ca1f2274b5aca0fc7c755ca6e056bfcc59e90daceb1c","first_seen":"2025-09-05T13:43:34.217839Z","last_seen":"2025-09-05T13:43:34.217839Z","times_seen":1,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/secureproxy.php?e=ping_proxy","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:55.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /secureproxy.php?e=ping_proxy HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-quackai.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:56 GMT\r\ncontent-length: 7732\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\netag: \"1e34-63e0cecdc6132\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WOhvUshM9BpSdqMDVtCLOTKXj1FkMOaMEKbGEq1lZAkE01IEibeFXsRLRFiD9km75AGtRtUB1ge9u46NTMQZaZvYjlsoaCTXInk%2BVNmTIQfW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97a62717d8c91ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7732,"size_decoded":0,"mime_type":"text/html","magic":"PHP script, ASCII text","md5":"266ba4231e44862da9e32e4f9b6a8012","sha1":"eb2b688e2b06e66a65aa7446809b35e10aba6d7b","sha256":"a568132ebe184290adad1a5970f34e9191d3f38894c640ba6d4d0acd9237cc4d","sha512":"59fd83eb968a9342a72a2214e6c9718e02f558f7abf9cb4938b8b7eb01e5645e140b4b92a656ba78cd9a31d244fb0fcde96a4e313739cd9496ca3d81b777fb65","ssdeep":"192:q6vgpPDNF6iTypG/+WA4yAXg9bDI6C4VCRnw0Zy5q:epLeit2WBwRhVmX","tlshash":"b8f1611079e37a80a177e0bda74fb8086609a80b441ed909be5c23931fc033cebf169d","first_seen":"2025-07-12T22:38:09.124273Z","last_seen":"2026-04-09T02:34:42.258638Z","times_seen":964,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:55.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 03:22:08 GMT","end":"Thu, 04 Dec 2025 04:21:53 GMT"},"fingerprint":{"sha1":"E6:3E:4F:B3:FC:53:DD:27:D8:25:AA:72:59:23:FF:63:FD:4F:1C:73","sha256":"B4:1F:47:61:EC:D3:B5:F8:B4:5E:F2:BF:CD:E8:CA:5A:7F:1E:80:E0:D8:8E:F2:70:3C:14:BB:81:DE:13:23:9A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-quackai.xyz/\r\nOrigin: https://claim-quackai.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:56 GMT\r\ncontent-type: text/plain\r\ncontent-length: 12\r\ncf-ray: 97a627183cbc569c-OSL\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1795\u0026min_rtt=408\u0026rtt_var=2056\u0026sent=11\u0026recv=12\u0026lost=0\u0026retrans=0\u0026sent_bytes=3558\u0026recv_bytes=1152\u0026delivery_rate=7855334\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=bca827af053a36ed\u0026ts=169\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"35b0bce9d250429df012c0426f88d0bd","sha1":"f81d80af9cbeb0011316fbba3da8002b32251f7a","sha256":"da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d","sha512":"32c9df1064e730e1a2358dae62aff741118007187d89510bfbdf93efaaa7356b71a570ea8c5d96bdc0b47155bbaa77df86b6847cc4d95d2d1b7fa2a1484a7144","ssdeep":"","tlshash":"dd600003000000000c00c00cc303030303c00003c30f0000ccc00f000c003300300000","first_seen":"2023-03-07T01:19:04Z","last_seen":"2026-06-07T08:12:19.538389Z","times_seen":27001,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":53,"dns":2,"connect":7,"send":0,"wait":112,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/css2.css","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:49.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:49 GMT\r\ncontent-type: text/css\r\ncontent-length: 869\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\netag: \"4c97-63e0cecdd2c51-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w8uV0plY2TMmxHRWNfHMU5OMb1RzjK%2BuY5jqebSQdHXybngaibXx65ahfIo2Q6w%2FPIvOPIII2dPT%2FlZNVMA3xvPUlDMcIwjgZVRuZK9qGg%3D%3D\"}]}\r\nage: 90\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97a626f23e58b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19607,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"0497d2e3f22f493c5d79ba9bde899549","sha1":"263d0c131c10731b97c861d47dba8f9df650bfa9","sha256":"54f7ad92653ab3968a466df7f5c1c4c293a0ac81e60cdb3727ac64966286ad35","sha512":"0aab2b7d43df588e655ea9d5fc0ecda48278fc1010a4232742e656c3e837bbcfb5f4f5e2802946eb85daa9411cc5077317ab08ab962dff08819a9aded88c07ae","ssdeep":"384:H3H3J3kUKAHRn7zV0qgl/N1v9weUz1i1R0:XXlU1R0","tlshash":"b7929b91087ba104eb972cc127cf7e27ee5da254a444da346ffe0488bd9bc955372b1c","first_seen":"2025-08-05T21:21:44.978202Z","last_seen":"2026-08-14T05:17:33.673974Z","times_seen":21,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:54.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:54 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 7884\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\netag: \"1ecc-63e0cecdffb0e\"\r\naccept-ranges: bytes\r\nage: 90\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rhoQO0GZze6M6De%2BzK7LGMzGMaCTDKf44GuJ4reqMilWBzihpsGJWQ1xUwunpabWUliRWUrk4INxCZUKSJC4mwjK%2FzP6gOhogeMpvRteqaQ3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97a6270f498f1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-08-19T04:43:54.444651Z","times_seen":393121,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/favicon.ico","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:54.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:54 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n8ks1qMy%2Bvxuxi8B%2FWEFgC%2BtSjrJmIcQaMtulyKwQNVT9m13u4gDm7L7muLi0Mo7i%2BPpV8cl%2BgLOPUIxdRMRUjdXlFBEYH5KthC%2FoSQ6B%2FF%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 90\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\netag: W/\"10be-63e0cecdd4f79\"\r\ncontent-encoding: br\r\ncf-ray: 97a6270fca091ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"8ebb012048af3d4f406ab01b80e4b4ca","sha1":"f5d2ce3d92e02a4a6a75e8c486d82e532b4527a8","sha256":"b214e8ac6e60db2526cffdedefee21598e1e2857c9dd0ba2571eec6e060f09e1","sha512":"81c246259c3a075b1cfdd200ac906f6bc57fcc518cd8a5f200284a161b8e14bffd775886e6646ae33826c480e6088848fb6c656f25f395c6f1fa7bac4a4d69cb","ssdeep":"12:suZ/u4n/uhu/o0y+77y5LDbbbbbbbbbbVyOHH0R6/s8:sulu4Ghug0yV5ly8N","tlshash":"bd91fb47a24f33a5f6cc973fd8e49a11c935ade5209f2a57d0347e29783384c15eba14","first_seen":"2025-09-05T13:43:34.222769Z","last_seen":"2025-09-05T13:43:34.222769Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/9b7d8741da9d59fe0b27f0479183e43b501c89b9.svg","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:50.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /9b7d8741da9d59fe0b27f0479183e43b501c89b9.svg HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:49 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HUTtlt8JLI%2B4nxq6vp0kcGcIH4HQL4X3ImlhfXhmbOBfTR%2BMClSoMQGmWKA%2FMrqjZe2mQ%2BRYWZXIA1J1xehg93kF2a24iZEAYF0PoawwHQ%3D%3D\"}]}\r\nage: 89\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"2ef-63e0cecdcc6c2\"\r\ncontent-encoding: br\r\ncf-ray: 97a626f24e84b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":751,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"017fa8634ced9e8b051ed63332cb6736","sha1":"9b7d8741da9d59fe0b27f0479183e43b501c89b9","sha256":"fa15984f3b899bc1adf03e5f005ac08be6610df0a0c0e1d58e25e874109946f9","sha512":"b5c3cfb0a7ccddc897abce4d8f5019cbbfdd329c01656d595f1ffb4ed6f5377fd8f0d7d070373bad9e9cc5d15e24067c0ac7df4b06dfd57df9136b4204ffd67f","ssdeep":"","tlshash":"a30147953348ae2cb21b8731cb343d39643907667380620cc81e153e836873e6d76e9b","first_seen":"2025-09-05T13:43:34.224595Z","last_seen":"2025-09-05T13:43:34.224595Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/324c2a703cba1815d8d6ba5b902511b03512f020.svg","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:50.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /324c2a703cba1815d8d6ba5b902511b03512f020.svg HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:49 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e15Jb%2FBt%2FUSrO2x0tucDMUvE1HJnrJDdBkv6EltUeWGnv7dkYFZBsUjAzAvUfUvJUrOG62yXLAid8NfI557u08abbxsEI5fyrq7zScIt1w%3D%3D\"}]}\r\nage: 89\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"a01-63e0cecdce602\"\r\ncontent-encoding: br\r\ncf-ray: 97a626f25e9bb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2561,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8eab8a1e69ff2643963342bbe1d83e5d","sha1":"324c2a703cba1815d8d6ba5b902511b03512f020","sha256":"91e67f19a3f575c74934254a941e0ad223e1fb5a9d455378d316777543c2d9d4","sha512":"4fbcff380c653f2a325856b2f09d02997303f59e15fb2a8a2c57f80e546d7c7fdbb755a5775478e007346927f8b96f14e268843aec2c27acbed27f37c721fc6a","ssdeep":"","tlshash":"9d5131883b3c116cf84910fcea293d95b57a58dc3a86555882290a1e3c4d32a7dff8f7","first_seen":"2025-09-05T13:43:34.225906Z","last_seen":"2025-09-05T13:43:34.225906Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:55.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/crypto-js/4.2.0/crypto-js.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:55 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 19621\r\ncf-ray: 97a62715c9a2723c-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65384d58-4ca5\"\r\nlast-modified: Tue, 24 Oct 2023 23:03:52 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 72674\r\nexpires: Wed, 26 Aug 2026 13:42:55 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=B9dqoA894P9zZhM6IQay3ICCFyE9QxejOilyrw5on2H3ekLzhdMi%2Bxr5m2MRJAqatJpHNxvCD3GYxKB5k8V7qUrJ9B3CWus8%2BMfgbua%2FJdf0w%2F%2FRQYacqGr6aGDq8iocrWUBKn%2Bk\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60819,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (60819), with no line terminators","md5":"d9c6de0df2bf028d93924aff92487904","sha1":"6596050516dd12af52d9b0e7b18ed837f1d81300","sha256":"769a555de553babc35a3338f344dd7aa16260c93cea2c7db290707c90484e7cc","sha512":"6be4940eec0dcd70efcf85eb21c5c7b827f4f3dfe2240a0de259ab5c9835f179ddb8a2ba6250c73516a5bf8c9dd4de3438a23cd2d162745faba9314a18fa1615","ssdeep":"1536:R8K6Znxmj9rlvCOhI64j7AtSPtNPU9ArHMLlk:RV6+jKOh4z","tlshash":"65535bc0629c5491a3b76480087f740b7073353b0a1d5aacf658faefacacad6907cd39","first_seen":"2023-11-02T21:20:28Z","last_seen":"2026-08-19T02:46:31.517521Z","times_seen":31941,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":16,"dns":1,"connect":1,"send":0,"wait":10,"receive":1,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance.llamarpc.com/","fqdn":"binance.llamarpc.com","domain":"llamarpc.com","tld":"com"},"ip":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:56.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"llamarpc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 08:03:47 GMT","end":"Fri, 07 Nov 2025 09:03:27 GMT"},"fingerprint":{"sha1":"9C:C7:46:E0:04:44:8D:56:AE:49:1C:77:2E:C5:79:4E:1B:65:13:C6","sha256":"E9:C7:AB:36:D0:99:3A:66:DA:CB:32:87:CD:4F:AF:FE:68:21:18:37:F4:2D:E4:3D:27:91:EE:AF:2C:CB:6D:B7"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: binance.llamarpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-quackai.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://claim-quackai.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:56 GMT\r\ncontent-type: application/json\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\nx-cache: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=BbIlWhnaeSuv2fIwfLAm9W3WyguuYXYV4Ok8paeofWcpkPcQXtpT%2BhwIYQg3URY7TuY9wZgWVWbgzUH%2F3zMHLJMSjFzM1B%2FDOYzhKKEwgoM2tFAd3Dv%2FNpazquAxpbY1t2Yephhu\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 97a6271b597e56ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2621\u0026min_rtt=413\u0026rtt_var=3973\u0026sent=19\u0026recv=19\u0026lost=0\u0026retrans=0\u0026sent_bytes=7197\u0026recv_bytes=1716\u0026delivery_rate=8897081\u0026cwnd=256\u0026unsent_bytes=0\u0026cid=a45982d7d1e4c7e9\u0026ts=746\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6374,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fa3dbe9e7a67f351ee2d52c99850bf9c","sha1":"294cd26f4c0198841057707ed0b44b3cf616e5a8","sha256":"efe3b5e2a041edfb73e010d9c7b8321b7c075c78f0b5d972fe7783da8844f87b","sha512":"d46f4edc8d511404ba6bb32a1a375a1a1c66b24a11f072dbe332243df7b1489af0816a8506fb648a97dd28b0c5ceac714915bc46221ef78d12e9a8a5f1d51d45","ssdeep":"24:YUtXa257vaoWH3eGZsthXvUzZ5+hdex1qx1xxNU6xvQaNBtXX60jv:YKam3QytxvU15+doY1jNNTt9jv","tlshash":"52d108f098c98e50f19baa81b798bc9400213caf7fdf8f40415cf8b6a0f54a176a448f","first_seen":"2025-04-07T11:53:19.749574Z","last_seen":"2026-08-18T19:16:43.131127Z","times_seen":5262,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/3.a5fp1-TZ.svg","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:50.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /3.a5fp1-TZ.svg HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:50 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x1MF6trOfi2BnkzhZv2TkbD9YZnufP71%2BjcO%2B2%2FVuaYGWcUi3ozUxMA0zBmikUoQ0OqvNznWFoQ5CjHc6jY%2BmutGG6PG3LXyNh1btVRh2w%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"1ff9-63e0cecdc9fb2\"\r\ncontent-encoding: br\r\ncf-ray: 97a626f25e99b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8185,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"90db0d3f59e9c876554dbbdca1d72889","sha1":"4816c57aceec38f030c9b905161c5ffeeaa80211","sha256":"01e35bd8bc2cae97dd68fefd91842096f8d525d472c26f5bc6882cc68d622831","sha512":"b582efbc03a6b3aac14ec98b61017b1df24ce650aafa4f344032c8c50dac3341ace91f6e34a1f18eceac80a6f65d4fe23faab038770555838d654cf7c8779a3c","ssdeep":"192:PRE8bYo8ZEH8Ei7gsEBfzKrwdz3GlhA6sQpzxK76z4eAf:5bYo8Ei7BExzgAP6sQ9dz45","tlshash":"f9f174c837e883fff424f1fa5626d46a3c5724eea0c84a70ca767d586d869752f449c0","first_seen":"2025-09-05T13:43:34.228918Z","last_seen":"2025-09-05T13:43:34.228918Z","times_seen":1,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/ethers/5.6.9/ethers.umd.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:55.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/ethers/5.6.9/ethers.umd.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:55 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 125841\r\ncf-ray: 97a627169e1556ae-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"62ad87d5-1eb91\"\r\nlast-modified: Sat, 18 Jun 2022 08:07:49 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 618370\r\nexpires: Wed, 26 Aug 2026 13:42:55 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ys12bcpAuWXAz28BvUnYHndkvs3c71GCqw3IXr7JPcWRaMz6lfOIxAlMyP2jeA5dRfz1DpKVIvywLA6Xb6Pv7%2FULGnwcRhmYnLafcnqUDkRzlVW9XF7s5yongzxrV5lt5ZYXEsDj\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":735973,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"268d19762594655239a29d058a7e8b44","sha1":"f06da2f7a68114b8dda38a0d782d65ddacc9c0e8","sha256":"95c66625ee20f53d542e23dded002b021b24e9d28c3d193a076d45cba4dc8618","sha512":"55e6b3e48536891a5ad0106b26525e4607c9ece0075ad5496535ef81d1fbb377dfb0b50286594c0aa0b405bf9e791c4696b674ea260813f4772ac7220ab82fdc","ssdeep":"12288:TfLmYQI/yjP+H8Xb29/nNUgE6te1R5WJW:TfCPalnNfE6taD","tlshash":"29f42b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","first_seen":"2023-03-07T12:58:29Z","last_seen":"2026-08-18T19:16:43.115819Z","times_seen":8493,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/543d2336c23545f3c713858d46913534ecedcfd6.svg","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:50.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /543d2336c23545f3c713858d46913534ecedcfd6.svg HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:49 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cIUQfpjZGS48TBE6TbV%2FTRgPQ9g10JjcISG%2BtKwXoDDYBl1Yim5Vt6ZiHJJj%2FOGVgXuyJNbktziVWvJJgC%2Fg41NA111Xf3WDgPcviuANxA%3D%3D\"}]}\r\nage: 89\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"e0c-63e0cecdce9ea\"\r\ncontent-encoding: br\r\ncf-ray: 97a626f25ea4b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3596,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"010435ab5bb95c00399df324f56aaedc","sha1":"543d2336c23545f3c713858d46913534ecedcfd6","sha256":"da1fb59d49545bd183ad5eeaf882f526008b596e458d58455a853ea44787789c","sha512":"f7de09efb2c2826bf12379425f55a9b65f946f930ed77ad3c38bf313ce3c8210869bfc712dacb980e23f093a253b5faede51160578b515e93fef6e79f9a366d9","ssdeep":"","tlshash":"677141f17359c3f8ac19b7bb5a3c98321a4914c9708b6644c606a70476c322effd5de8","first_seen":"2025-09-05T13:43:34.231745Z","last_seen":"2025-09-05T13:43:34.231745Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/ec168bf4f64e213f00db29056e7c112db976a40e.svg","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:50.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /ec168bf4f64e213f00db29056e7c112db976a40e.svg HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:50 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oPW3QuKdq0U23%2BpXOTkT4k6apoEYxmJFA39liSOHN37rmggegibrnXrme5f2dLqeVrMw5d1Jqs1jtOwayN8lrg%2BY2mXqU6PvhZNnMsEiEw%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"10f-63e0cecdd43c1\"\r\ncontent-encoding: br\r\ncf-ray: 97a626f26eb1b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":271,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6cb73dd625f69ba271138d442c0fb072","sha1":"ec168bf4f64e213f00db29056e7c112db976a40e","sha256":"1d8661304519bf5913b676d2bf9480d5251bc24ebffd4422635af66859ad4ce2","sha512":"d433f78d98074b2dab7f3c7d051e771f34837b56f13fd0f73790ab81056bca7f5ef43e20f0037a764ccb257412924503a069c27980224e2c5d96cfb04cecc784","ssdeep":"","tlshash":"20d02bedb7840c1ce40b4b74fb757925d83822427789abc0d2522174615831b2f22998","first_seen":"2025-09-05T13:43:34.234156Z","last_seen":"2025-09-05T13:43:34.234156Z","times_seen":1,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/a52677a54a2b27e1b538a6352af8dcb350dd0806.svg","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:50.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /a52677a54a2b27e1b538a6352af8dcb350dd0806.svg HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:50 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AimPNgz5ZhRLL%2BjUiSvwvDJdbOFlpKk380jxrIIsOD%2BxNlTRlIx8YiPFZGsGPcbUb65raQM2%2BqHYGYu5LBgNyAgZPQivUz31T0vbhGsB2Q%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"398-63e0cecdd0d12\"\r\ncontent-encoding: br\r\ncf-ray: 97a626f26eb2b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":920,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d2847cb4f3fad8000b2ddfe6b5be6f67","sha1":"a52677a54a2b27e1b538a6352af8dcb350dd0806","sha256":"5b87bf5eda4a2737060a0b40499f2f48453972ece9fd95414afd8cd9771ba63c","sha512":"59bc4a6812b852d2175db80e485c67013e95079abdd36f5fe72a7d00cc00015dd4694222ee3874c4230918e1680968f1b84931f54b093031b6a404461156c3fe","ssdeep":"","tlshash":"78111ca3c1e0f6c8e70c67f2cc39ac70b93631392fbae010078a0b24a5d80378cc5892","first_seen":"2025-09-05T13:43:34.236069Z","last_seen":"2025-09-05T13:43:34.236069Z","times_seen":1,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:54.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:54 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 8000\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\netag: \"1f40-63e0cecdf7e0f\"\r\naccept-ranges: bytes\r\nage: 90\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ag2DrvxDPm8QA25NcsfnV8N164evrmPwcH40yWhBVj56T9W7uRuwAxNBSM2Dja%2F6YM8N6U0wiYEqKST%2FG9YMTbZ9h7f1hc%2BjRhmf7m8Mg%2FSL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97a6270f39801ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-08-19T04:43:54.439831Z","times_seen":294967,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance.llamarpc.com/","fqdn":"binance.llamarpc.com","domain":"llamarpc.com","tld":"com"},"ip":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:56.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"llamarpc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 08:03:47 GMT","end":"Fri, 07 Nov 2025 09:03:27 GMT"},"fingerprint":{"sha1":"9C:C7:46:E0:04:44:8D:56:AE:49:1C:77:2E:C5:79:4E:1B:65:13:C6","sha256":"E9:C7:AB:36:D0:99:3A:66:DA:CB:32:87:CD:4F:AF:FE:68:21:18:37:F4:2D:E4:3D:27:91:EE:AF:2C:CB:6D:B7"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: binance.llamarpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-quackai.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://claim-quackai.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:56 GMT\r\ncontent-type: application/json\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\nx-cache: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=RjXfeibHlDsE2BjLRcFROrxzHArs4LX2MAnSqeohIlhIlJrztMR8m%2BSf0l0XHYcjK6zGdNDOwVmcfuu4lG0FYBj4I9vrzhG%2BU9gLTgfen9STxjYE2LX4IN1HH86cUv7hJqVuF38A\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 97a6271b395656ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=3598\u0026min_rtt=413\u0026rtt_var=5888\u0026sent=13\u0026recv=16\u0026lost=0\u0026retrans=0\u0026sent_bytes=4332\u0026recv_bytes=1716\u0026delivery_rate=7634446\u0026cwnd=256\u0026unsent_bytes=0\u0026cid=a45982d7d1e4c7e9\u0026ts=714\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4902,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2188b7f1b90a143020f7faf12d10e91f","sha1":"e6a95e4d574d05948b7c8517861a71e6f69b38b8","sha256":"4a8dd94310fc027a042dc9ca0311f20e9341084839e00b8d7a830ab52cdc8096","sha512":"08e8f648099fac2b075f96396f2f9056ac526f12e5843bc16d07fd725fcd74abeed4021a9ed64f53ef3e1dbb57a707ebee71bc51b230f5b5ee4200c2da1d7b1c","ssdeep":"96:oigW53TB2SzrZYpTbDaOTkSO6mdSInccYGS9FzelVLY:r5TB2SzAT/7kSRRrze3k","tlshash":"e6a179f0ee02c891f1be4768f2ddbe0461383726eedc5a4604b45a991ee5a51bd0dccd","first_seen":"2025-01-17T17:24:07.906471Z","last_seen":"2026-08-09T15:35:30.717016Z","times_seen":4827,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/d76e39bde12a6fb3c4d0219e9f881ea813f8f525.svg","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:50.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /d76e39bde12a6fb3c4d0219e9f881ea813f8f525.svg HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:50 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kosbJnVdeSD9wuOxMsoM%2FycSIfylYGzlsdg2PyJgcKCrqe2IQAkGh05oJr9ALjel%2FvnGYAMA6ljmnkmcXPlWFlY9TiNgodJLdxYLMy3ICQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"98b-63e0cecdd3421\"\r\ncontent-encoding: br\r\ncf-ray: 97a626f25e8eb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2443,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"34d218f8d82902e68aadfad26dcab48d","sha1":"d76e39bde12a6fb3c4d0219e9f881ea813f8f525","sha256":"4eda7e1b9098e0a7513fe20d7ff6b71fb60361c434518205e24b57971c8c997a","sha512":"c8562dd092e1667595305b09dfd8450e2dfd251acd88304ed08593113247cc01d8dfd6dee3fc6ee0ef7a9a4af440ba2467ddc33da2f353a976dbaaf133f8f18b","ssdeep":"","tlshash":"dd5134f98bd0b9f1f007c7b0dc329630b53a26b77f65c71683929bb0911511e5ca9c55","first_seen":"2025-09-05T13:43:34.239649Z","last_seen":"2025-09-05T13:43:34.239649Z","times_seen":1,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/a493bb86b673ce16b73854789fc3bf71edd654d0.svg","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:50.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /a493bb86b673ce16b73854789fc3bf71edd654d0.svg HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:49 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6m2QLUF18JcWbyn2wNcw%2FgWQZNWuk9%2BRa7E%2BpYODSPjdWp0ooYYiMu2%2BSwq33NcYL5tvRUdbQJT%2BcBbBiEu4fVmiLMjM%2BezPr5FSOaZdRQ%3D%3D\"}]}\r\nage: 89\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"2fe-63e0cecdd092a\"\r\ncontent-encoding: br\r\ncf-ray: 97a626f25e9db517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":766,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"efb4964d7a6be1415abfc6fc06603e24","sha1":"a493bb86b673ce16b73854789fc3bf71edd654d0","sha256":"5ad657043db887651b3998beb73cbde28cf120f38c70f3a4df895e65cb73c8e0","sha512":"c5420c96f95f8b713a7fd40e18259e6bc115fbf38ab17819c3ac474cb7a5b72a44e6211a7c8785f4316ebdea1f3741aa6d728c649b9279e00ddb4c4a7fe256b4","ssdeep":"","tlshash":"7201bda24098c371a898fefada7c6405e449fcf0228220c0dcf91280b19821e6a4fdd7","first_seen":"2025-09-05T13:43:34.241725Z","last_seen":"2025-09-05T13:43:34.241725Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/941fb1e66c63c452b3b22d27a33643b70165e67f.svg","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:50.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /941fb1e66c63c452b3b22d27a33643b70165e67f.svg HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:50 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gr4wes3WcVZ2Pk4Xg4eHpo82HFXOl%2BSeerVcSZRH7hvT9oa9Lo7bDEmVGCxhurspiUbe5XXrc3Btf0O6%2F57lSuLiiBy22eY45GWw9SUcOw%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"912-63e0cecdcedd2\"\r\ncontent-encoding: br\r\ncf-ray: 97a626f24e7bb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2322,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1670f175bfdf343bb9addc5c5087692a","sha1":"941fb1e66c63c452b3b22d27a33643b70165e67f","sha256":"cc80e159a0590299bd6c30d2f099c04472fb4823104a50b93bd97db1d17547cf","sha512":"8c5c2e241eda1de410e4f39bc0231a3a1ab1799b7f4b86a6d035f332df6388208ef72b3cc5fcaca3eecdd2a071fb4a5df3efd3a14a6cf6c7f294ce59de3672da","ssdeep":"","tlshash":"a041637537995bb0c50ec3f5ca7d3061f92a7451328b13289623121e769412d1cfbce9","first_seen":"2025-09-05T13:43:34.244057Z","last_seen":"2025-09-05T13:43:34.244057Z","times_seen":1,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/b7532929694abf0a95a2dc83b9e64b1ebb8462cc.svg","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:50.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /b7532929694abf0a95a2dc83b9e64b1ebb8462cc.svg HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:50 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gqqPgwiFdh78AF7dN8fIrN9%2FXWBoWoBxrtUux%2B8TAc8WUSBzoZacfPwzhSdfGqBbZGJVo0tsGixtnyZBTuZ8PsElazWmwm9To2ndvz3HSQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"453-63e0cecdd18ca\"\r\ncontent-encoding: br\r\ncf-ray: 97a626f24e7cb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1107,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"54f8ef8d739a03ac415e2fafd45fe1cf","sha1":"b7532929694abf0a95a2dc83b9e64b1ebb8462cc","sha256":"806e1659866dd19a59616b0f6ec5450eabdeba8eb226f5abafb0c8f22afeb202","sha512":"22ed1b752c5349fbd3de467f8c6ad208396847d9ff90881b34c6c12beff761b66fd0f4d2b3467dbda42abd3b50cf40d5e74eb6f7c525edcb1f439452a0b4f457","ssdeep":"","tlshash":"76118ce267e0376ce20667b2e1b66d30b53f02bbb340ef95c489042557a461c6ce998b","first_seen":"2025-09-05T13:43:34.245632Z","last_seen":"2025-09-05T13:43:34.245632Z","times_seen":1,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/f91dd206d30befae798ec0fa0d7d94b0d846463d.svg","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:50.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /f91dd206d30befae798ec0fa0d7d94b0d846463d.svg HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:49 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wkh0UOfLnvdaamr234GPaGYzvUfSSlcw8h8OEtkVxaLP9WKcSrQZCJyRM8NvWHEvSlDmRE%2ForwBICyQMqa7ATBu3WjLaO1%2Be3B%2FqDDV07g%3D%3D\"}]}\r\nage: 89\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"64b-63e0cecdd4b91\"\r\ncontent-encoding: br\r\ncf-ray: 97a626f25e91b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1611,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dad0a4da6c4ce3857eb064e6ae50b1af","sha1":"f91dd206d30befae798ec0fa0d7d94b0d846463d","sha256":"fc8d584676e19fa31c8cbaa7f4490f1f93a046e4cfcd9465f60fa331909ddf2b","sha512":"cdb791e26d62dde59bf253a88826cf51ffa808725d723f4f7515b8b7a91b22df8a97ab7088bc54c2224ceb10b76c7ccac14db5215ac0fc0a44e2057630d4517f","ssdeep":"","tlshash":"943151f6e7e4f3a4e10ca72490b0d4ba371735f9e112cb198384dee0eae601c8d84c94","first_seen":"2025-09-05T13:43:34.249869Z","last_seen":"2025-09-05T13:43:34.249869Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/bf8d46de4fea892549160ad485ecc239575e62cc.svg","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:50.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /bf8d46de4fea892549160ad485ecc239575e62cc.svg HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:49 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pkmYC9DbKhHj09o%2BU1lrZJj%2BwU3e8%2F1kfvo1FEpLNfSwDqfIz1NvGyP9B7O17cl9263MfJZnyVXVVyjgv7dcv4cWo%2BquduxLyjyFcrkuFw%3D%3D\"}]}\r\nage: 89\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"1f6-63e0cecdd1cb2\"\r\ncontent-encoding: br\r\ncf-ray: 97a626f26eb4b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":502,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"51c142b9846653f0eadee795a9cf57a6","sha1":"bf8d46de4fea892549160ad485ecc239575e62cc","sha256":"b01636445e972b0c4fe7b9f249dc1c79350df57ab994e84fde0007fdd7d92d93","sha512":"6d58e69770d0d804182d21d6b746f82c036cb96ed8c13764df447cf91d6300501cad540df9f76ab1aa4c2143253fb9301700a8fa3817b2998028230e66ed1042","ssdeep":"","tlshash":"48f059a5d68c69096101c3b044270837703d24f297afd891c3835724f18901b9b824a4","first_seen":"2025-09-05T13:43:34.251052Z","last_seen":"2025-09-05T13:43:34.251052Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/index_1.html","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:54.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:54 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cq6fjWujhrYCahhRE9oq9YKHwutLnb%2F3R0U7VGCtpr9n2DbdzeMt6ERKDgF7xQaHfsiJPN3GnxReObtaFsS9%2Bs19E1ExRZM076HoGaF22aaa\"}]}\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncf-ray: 97a6270ed9391ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"292f74c92c97c686c723a291030cfa93","sha1":"ff7ce2a278d64bb71b8a15797fd10276ea6f0df2","sha256":"baf0572ea402de47c8c0c44f67fe0b4af40bd7bc06f5733bac13f51bb4ac4d08","sha512":"4f34b0d47baba42b1c93958d291540f76e16fb3f67405fec9d87d0d8d57bf4ae454b63e8462a3b238ff1f6306323f7af84e182781658961d0acac1e55b70d953","ssdeep":"","tlshash":"54c02b22dc04480f3d009fd1cb8af1c4c003dc3ce8315c00b867b544e9ac131c012548","first_seen":"2024-08-19T15:34:07.77924Z","last_seen":"2026-08-17T19:34:24.12758Z","times_seen":499,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:54.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/css2-1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:54 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 48532\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\netag: \"bd94-63e0cecdc8072\"\r\naccept-ranges: bytes\r\nage: 90\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ci5qZ7XpO7Io2q8xnoz4M1pmODvZwqNh3ITOiyiMtfs9%2F5IGHsGWbHmdPaKHjtsq42ZcMi6d3vUk0d%2Fjni6Y1nkVxgDqYe%2FdV4YT6hggxIUa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97a6270f99d31ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-19T04:35:03.401139Z","times_seen":261452,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/secureproxy?e=ping_proxy","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:56.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /secureproxy?e=ping_proxy HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-quackai.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:56 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QelFZ1gxaxf1u8Na7Def%2BZ9%2FGt%2F%2BGsBvvZ1xOV4XnXE3uVBPVsu8T3CafXR0TIDvfhHcVDb92kfDq6GQM4mRY30ZoNnMhmuUF3HhJqJth%2FGu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 97a62718d9b01ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"6fdb087aa3fbfbcb8287a593a0919e61","sha1":"0e514a0662bcb69dc863953d1ce26e3d40e81a87","sha256":"9795c5ff8937f23526ccb207a5684c1fc94a7854e19c021b39d944e51f5baef2","sha512":"be5457d14c930b51b47ab152850c1ceaafe6ef88c8671b48164abbc83410b0c07a1e178540f6cdeac5f2672cadb1d1cbbb3434b3e39bc2c50c4646a2bae57437","ssdeep":"","tlshash":"fe300000300000000000000c0000000000000000000000000000000000300000000000","first_seen":"2023-04-12T09:14:15Z","last_seen":"2026-08-17T16:47:50.33609Z","times_seen":9046,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/6213815cfad05272200a360f5651f69ea89818c4.svg","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:50.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /6213815cfad05272200a360f5651f69ea89818c4.svg HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:50 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X5KZ8ByNh1hQKHh4apP8%2FYhE5WhcXt2yL2xEV6JpWKuixhjAM0wfMG%2BzMBm4RT1R4u4jaMuT0vpiGAca370bzDeD4JpjFqFPDNFZ9E2s6g%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"c74-63e0cecdcf98a\"\r\ncontent-encoding: br\r\ncf-ray: 97a626f26ea8b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3188,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2e99563b825feb53ae91c06511dacd6d","sha1":"6213815cfad05272200a360f5651f69ea89818c4","sha256":"1e0cff78b446fcfbda263c37c4e175cb26883d9b2095a708f1a52e0094401aff","sha512":"d0e06d1a4f773d725212478fd4203aa88b55941f4fb9542e89aa3da560a2e08c45996f46a006e8831c491fcae9817f19e6e85c455a4d4b0a6d07a30ab7e858da","ssdeep":"","tlshash":"976173e93f6112b4c948f2fbcf26264caa0f69c43e13b566c3a42d4df44a84c5f42987","first_seen":"2025-09-05T13:43:34.255991Z","last_seen":"2025-09-05T13:43:34.255991Z","times_seen":1,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/2802328611e308fc5b7733be914ef6d8e050e304.svg","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:50.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /2802328611e308fc5b7733be914ef6d8e050e304.svg HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:49 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gbNk9HJA%2FzQGqHVQ2YRWVcBRA%2BhlOcV05E9dcV%2FFYOnEZyxJ1iU2%2Fcuisuxjru1EOxl8MQTpjpESu8qmIjGaN6VTYxb8qZpBTWr1UPvA6g%3D%3D\"}]}\r\nage: 89\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"604-63e0cecdd0542\"\r\ncontent-encoding: br\r\ncf-ray: 97a626f26eb3b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1540,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"666a802e7476cc093ed8c89d1a9f69f3","sha1":"2802328611e308fc5b7733be914ef6d8e050e304","sha256":"e0b3fe06744254f9e21ccb10941d4dad0bae50488de3148648c5c5817b8857b0","sha512":"ba7344298cf2be1ef604b22908b6dfec6bae50863e33fe64a4451c1a7f253db954d7fd3d4f7d043d8719dcaff09d6352c6306e9ed5bb4a1e75cba9de9f2d4ac6","ssdeep":"","tlshash":"02318fefd2c173d0e446f7b0a416a5753fbb30b3a76aebc503814ad4f755019494d840","first_seen":"2025-09-05T13:43:34.257926Z","last_seen":"2025-09-05T13:43:34.257926Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz//secureproxy.php?e=ping_proxy","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:56.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET //secureproxy.php?e=ping_proxy HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-quackai.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:56 GMT\r\ncontent-length: 7732\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\netag: \"1e34-63e0cecdc6132\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Cw8X%2FNrkKvVh9ZoZ36Ef5dj1%2BV%2FAXZ07R1v6TQFvQd6XTpH0%2BlRpL94ZT05RgfaG9J1X9T0gaw%2F7mNo%2FX95oMOnWp82NUwWahdTS06k%2FYuS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97a62718594e1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7732,"size_decoded":0,"mime_type":"text/html","magic":"PHP script, ASCII text","md5":"266ba4231e44862da9e32e4f9b6a8012","sha1":"eb2b688e2b06e66a65aa7446809b35e10aba6d7b","sha256":"a568132ebe184290adad1a5970f34e9191d3f38894c640ba6d4d0acd9237cc4d","sha512":"59fd83eb968a9342a72a2214e6c9718e02f558f7abf9cb4938b8b7eb01e5645e140b4b92a656ba78cd9a31d244fb0fcde96a4e313739cd9496ca3d81b777fb65","ssdeep":"192:q6vgpPDNF6iTypG/+WA4yAXg9bDI6C4VCRnw0Zy5q:epLeit2WBwRhVmX","tlshash":"b8f1611079e37a80a177e0bda74fb8086609a80b441ed909be5c23931fc033cebf169d","first_seen":"2025-07-12T22:38:09.124273Z","last_seen":"2026-04-09T02:34:42.258638Z","times_seen":964,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/http-2.35.15.js","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:49.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /http-2.35.15.js HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:50 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\netag: \"4dbe32-63e0cecde9798-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4XUcdIclgqaiwvNSpbn%2F0%2BJnPMQXDCxswH02wK8JnInIQ6mwwsmcw9M6GdZtK0WbiZ7cTrzI0GNRWy5IdU%2BYWwuWHzSBY0A%2F7JgAQuv7Vg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 97a626f23e55b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5094962,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0a512549e999562dae341c7aa2e4b6db","sha1":"e2bf5ef4de4e99816e49469a524040aae61a1daf","sha256":"f8f78aa85281de0cce0eceee55612cd1666677574923598b04d2c54133311df5","sha512":"985b99d448aa10be410931da7ec4e44168be992fd21c32013c4513e63255330336e13d10fb5fcb7241bf51c16497f1f38b30c6c2f6498b65684f79a0dd5872c1","ssdeep":"24576:KajRNNjmfcyP+xeL1W3gRb/YWmLkwsOukzMSPbg+lsVo5/C0:Ka1NNa32SU3gNGkwdNZnt","tlshash":"632512da7e47908c8b6409da9dee7d8efc044c1689c826bbed0adc4170fd7b441d16ae","first_seen":"2025-09-05T13:41:30.106502Z","last_seen":"2025-09-10T17:16:28.794341Z","times_seen":7,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/step21.CPiV9Ebg.svg","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:50.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /step21.CPiV9Ebg.svg HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:49 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=olYezi8kKBzdS%2B5mSsardQLa7L%2FTgtBiMzjSX6fVmx2nh1oIf0UyWSomefpAyEoiyXXpAvG3V8wrGoSjIq6fP3bRahMdCC%2BSd433b26BYA%3D%3D\"}]}\r\nage: 90\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"3b5a-63e0cecdc6cea\"\r\ncontent-encoding: br\r\ncf-ray: 97a626f24e72b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15194,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7f266ed13fbbbb8272ce9b9ef2ee3b36","sha1":"610330b3fca007cf4f742def9198b933f7d792f1","sha256":"f496a19c9cede0fb1e6b84e5de4b1ad24abad11a431af9682452be0dde98078d","sha512":"59863723827d785efb61c67f188623aa825869d3a04fe46ee93d5637b37b24dd9c7fe8a79973016f8f77488fe3fc815c26cd0403823971e4c1cdc3f79ba2297e","ssdeep":"192:6XHwmqiwbrfrzVGZj96xLzKn60l/G8lLk+I6xlElVeGe0Sm3aBm78SNPfvxE4hqc:btpfVcQK60blLk+txlm/lpEiX+0X3","tlshash":"4a62d8d933a983f8f100b3f5eb1b64757f1b24e9128541b0c7a16e1aa4920edde65ccb","first_seen":"2025-09-05T13:43:34.260728Z","last_seen":"2025-09-05T13:43:34.260728Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/312cf573e4929018a69f33d980393970e2eaa47e.svg","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:50.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /312cf573e4929018a69f33d980393970e2eaa47e.svg HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:50 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z2%2BD1i9nWtPUUnml4STxtJTqFp4KRq1t97u%2B%2F%2BH1fW%2B8zRMHtzkU%2FE2OnpyKCi6S1ICrcCdkQhWPc1vFRTi05zWmLUDyLGFF6ttjWZ4CTg%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"1c1-63e0cecdce21a\"\r\ncontent-encoding: br\r\ncf-ray: 97a626f25e8db517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":449,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"52da77a508b9fb85234722528edb57ee","sha1":"312cf573e4929018a69f33d980393970e2eaa47e","sha256":"fca1efaabcecfa9abcae8fc711b547088df0fa6eca7b0a25dbf7adf88f524f1c","sha512":"23be2a5aa2c1d242cbfbd84b69376b7608bf0ae1e759bd804687999bcb1dc9ab2b6385de4e2fd18c6a84095f1d999f83fe4a75248c11d930b561a417d7067ec8","ssdeep":"","tlshash":"e5f05cee63040c2db42b8b34db55b625502b02a57b5d7500d51b42bc924033f3c73d9c","first_seen":"2025-09-05T13:43:34.263093Z","last_seen":"2025-09-05T13:43:34.263093Z","times_seen":1,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/3840bf08ab6c3e386ed9b8af1a3a19e3dbfdd288.svg","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:50.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /3840bf08ab6c3e386ed9b8af1a3a19e3dbfdd288.svg HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:50 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H2Hc3OIP%2BehBz6MY4Q%2FnhnOv93ehQjBKBiZt372LE9ca%2BljwfszWrF%2FCdH6CsJ96cpENXLS%2BmkDUQE%2F9MQMgelRoCL%2FMBmO%2BnrMA%2FfcH%2Fw%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"ab-63e0cecdcf5a2\"\r\ncontent-encoding: br\r\ncf-ray: 97a626f25e94b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":171,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9e0ca99305bd88776b56bc3c6a6622a9","sha1":"3840bf08ab6c3e386ed9b8af1a3a19e3dbfdd288","sha256":"c660aad3654a5f343ceef62b28194a428b8815771f05c28c1a54e40f87c7f3c6","sha512":"ed177f9f259cab22785fb0e2ceb6ed1574424d18244850ad79ccccf8e91ed8352ba3523b57d6a4e8588396b1a2ec4a92e2b6dc33ef9ff281b8aa8c5dff69f010","ssdeep":"","tlshash":"8bc080fd55448e1cc70c573319bdbc699556685901c52555d5931704f04017b6dd1d68","first_seen":"2025-09-05T13:43:34.264835Z","last_seen":"2025-09-05T13:43:34.264835Z","times_seen":1,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/6.axtUUj0f.svg","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:50.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /6.axtUUj0f.svg HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:50 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H3VNpVHdPLZYXwP65DhqfVtHo%2FrOFlOKz0EIYPONtVoqlp5tu5g4uFIx1QShYz5aUrKNSkLSc4TI0sszB2OZhc43mG7igkNi4Ed5JEO9Ww%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"223f-63e0cecdcab6a\"\r\ncontent-encoding: br\r\ncf-ray: 97a626f25ea2b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8767,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e656d9d8ad67be0d136fb4bdfdebfbda","sha1":"dd29edb070639330658bbfe6d48077e790d01acc","sha256":"f96d9b78e0c9756d1984a6160b3d88983e715810458362d2ed6b4d7a162cb7b1","sha512":"8c2f88d524ffd4644e25484e3b49828e8ff34b94c24642a345b31d79cf33061ea4e26a33757292f2177191b323840aa39661f8a086db380dd23e458e50e7f73f","ssdeep":"192:GGFDfsaScwCWz4UAQg2ox9iJRd8CYI+Kh60jKml9xgoWxI2fAUKSkn73:G8VScwC04BQVonpIXXK2vcI0Kz73","tlshash":"df02af30710c68fd6f16a41af9f8e815ee600053e49c885eee40a75add07a233a7992f","first_seen":"2025-09-05T13:43:34.266565Z","last_seen":"2025-09-05T13:43:34.266565Z","times_seen":1,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:55.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 03:22:08 GMT","end":"Thu, 04 Dec 2025 04:21:53 GMT"},"fingerprint":{"sha1":"E6:3E:4F:B3:FC:53:DD:27:D8:25:AA:72:59:23:FF:63:FD:4F:1C:73","sha256":"B4:1F:47:61:EC:D3:B5:F8:B4:5E:F2:BF:CD:E8:CA:5A:7F:1E:80:E0:D8:8E:F2:70:3C:14:BB:81:DE:13:23:9A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-quackai.xyz/\r\nOrigin: https://claim-quackai.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:56 GMT\r\ncontent-type: text/plain\r\ncontent-length: 12\r\ncf-ray: 97a627182ca2569c-OSL\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1870\u0026min_rtt=408\u0026rtt_var=2539\u0026sent=8\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=3191\u0026recv_bytes=1152\u0026delivery_rate=7855334\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=bca827af053a36ed\u0026ts=160\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"35b0bce9d250429df012c0426f88d0bd","sha1":"f81d80af9cbeb0011316fbba3da8002b32251f7a","sha256":"da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d","sha512":"32c9df1064e730e1a2358dae62aff741118007187d89510bfbdf93efaaa7356b71a570ea8c5d96bdc0b47155bbaa77df86b6847cc4d95d2d1b7fa2a1484a7144","ssdeep":"","tlshash":"dd600003000000000c00c00cc303030303c00003c30f0000ccc00f000c003300300000","first_seen":"2023-03-07T01:19:04Z","last_seen":"2026-06-07T08:12:19.538389Z","times_seen":27001,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":44,"dns":1,"connect":1,"send":0,"wait":115,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/b541982d0b84cc9b9e5157791e4a80e3e72c0b1d.svg","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:49.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /b541982d0b84cc9b9e5157791e4a80e3e72c0b1d.svg HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:49 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GGTjBOgNm2nbH6exMu3pIb5jHbyaGEwFg9kO1V2Cv895Q3xRUP8m4qD%2FmmrQgl%2BHjJ9apqhLJCbyJqPiHwY6Cu5EqWf4QekUAU8M96zdxA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"54e-63e0cecdd14e2\"\r\ncontent-encoding: br\r\ncf-ray: 97a626f23e67b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1358,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2e88d696abcef02eb832a438051b4fb4","sha1":"b541982d0b84cc9b9e5157791e4a80e3e72c0b1d","sha256":"6a7e17cbe04e0ec832159846d5eb5c30731edc67b93e3cf0eb2762c9e78df248","sha512":"a4f3efd6680c62db4b4a5b32e7cf21522b85ace77a276856ef34cb83cc6ff80a2e60c764799ff25f9d42bdbd71c16e36e861a15cc38178bb6814860551dd5e11","ssdeep":"","tlshash":"ae2101fa93c873c4e60de7a490708b2bfd5b30fa2f3ddf49421486a0e25018a558d8d4","first_seen":"2025-09-05T13:43:34.26861Z","last_seen":"2025-09-05T13:43:34.26861Z","times_seen":1,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/9f05fb4fbcdac472799c797b0f3a50de45f9780a.svg","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:49.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /9f05fb4fbcdac472799c797b0f3a50de45f9780a.svg HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:49 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1b9i%2FqgibVj07RLfky%2Bz%2FfWHFsxQL8qPnohZ5YMOoid5eSnQVW5%2FJeko%2F862gRHhstmc5zBi6sHfRvP0l0reEhD3im4s4cSYn1z1ehK%2BOQ%3D%3D\"}]}\r\nage: 89\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"2aa-63e0cecdccaaa\"\r\ncontent-encoding: br\r\ncf-ray: 97a626f23e69b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":682,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"86448cbd61230809a74b6e66c723da00","sha1":"9f05fb4fbcdac472799c797b0f3a50de45f9780a","sha256":"a7ae19dd14ddcf9befda862de3881deb0683a366e2d400078c4cf23bbc16de61","sha512":"01cfd5945089885509d308c48487b825e29dbff4d0bf2ab58334f760227cc5ddec8b85d2b23d772411ea45d8ba0c2c63ee2b5b7c43819feb07b288ad6d2e6e98","ssdeep":"","tlshash":"4b01c68d71e16be4ba49d3990cba0d78893be4a0c0923bcca290aa14e1050355fb0e99","first_seen":"2025-09-05T13:43:34.270604Z","last_seen":"2025-09-05T13:43:34.270604Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/255c4655c9d7dbdc7de41e2e89eecb1d20616d9b.svg","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:50.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /255c4655c9d7dbdc7de41e2e89eecb1d20616d9b.svg HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:49 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vpHoYQnOqbovZFtnAeWi4U9DpU8HfMPY2AwcWtFLJpxzq87i3HNjzTfqAUpTb99sKVIbwGg1qiPYqJIAhIYj%2BcjZ2p%2BEO9eyuCg0M0WmHg%3D%3D\"}]}\r\nage: 90\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"277-63e0cecdcde32\"\r\ncontent-encoding: br\r\ncf-ray: 97a626f25e90b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":631,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c3ad56159749acbbaef1c7de91c3b621","sha1":"255c4655c9d7dbdc7de41e2e89eecb1d20616d9b","sha256":"070a079f4495cd80c3cf53886d3f0646ea912269e5cfe6d2d80fd917b94855cb","sha512":"71714fba591753c9c41276ec71be99ee8a7cc8c79d67985f39a4f919c6c998a86d4a28a558fe183591fd267fca8911cb74a8db89f8147e10225c5b2493253adb","ssdeep":"","tlshash":"7df002eb57101aecdc3ec3b088137616456f2933f797e7c045450390154979a2ef3688","first_seen":"2025-09-05T13:43:34.272393Z","last_seen":"2025-09-05T13:43:34.272393Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/8.CwZHjtm_.svg","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:50.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /8.CwZHjtm_.svg HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:50 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UdA2toKTW2VCLC9pMJpxHF%2Fusvtt%2FvD0TZ0zWVX%2B8damrhFleDdSwSINLsV97POmI4v%2FBDwDGnFllauhIQE%2FfE5PQRnbIPri3xJqDFcWxQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"14cb-63e0cecdcb722\"\r\ncontent-encoding: br\r\ncf-ray: 97a626f25ea5b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5323,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1b120c4bfa45996d9b4741632f8b1a42","sha1":"108713cc187df6747863a4f93a0c780708c2a280","sha256":"318c9ee62491a3ad27698d05464b9a549cb5d453e4c87fbc25deabcd94e1208e","sha512":"f797429e940c97ce7862adbcbc51eb1d6c2502018ff8637ea6fcf10c8c888dc544ae7773a4e8a43b36ba4893b8066116547c3dfa28e76ed9d7c971caec4faf3d","ssdeep":"96:C3cagxAyz2LM3NZmvLveeurpvn4HJc5byUHkqFJBJX:2SlWMTUxur5mUxr","tlshash":"e6b1a4c07b35a774fa416bf8470b61792e616cf2b73242a5d7825f19a042816c9f8cf7","first_seen":"2025-09-05T13:43:34.274096Z","last_seen":"2025-09-05T13:43:34.274096Z","times_seen":1,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/logo-footer.BZj-BGEE.svg","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:50.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /logo-footer.BZj-BGEE.svg HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:49 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ODKXfY73dwXimqlO4Md0kpH55t%2BuubfVw9WICLjVAdhfHhZLjEZpp%2Bcf%2Fw9TuuYVN0lXGOku1sCzsr%2FrqQRXBcp1Y%2BfCM%2FfqFhpoKidMeg%3D%3D\"}]}\r\nage: 89\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"18ac-63e0cecdf04f7\"\r\ncontent-encoding: br\r\ncf-ray: 97a626f26eb0b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6316,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"139937b7c0e7c2c8f1c72ab7020e8dfb","sha1":"894394b5049541ae79ac262e77884af0fc271ae4","sha256":"12b8ecc6c7c8df74db501ed7d68ed2217a6d975f1d5729265051c81323c1052a","sha512":"5ad4037ce436ea54209b97efdb24d1e582edb991db626dab8ff64187c8c0b4a7ab5e882bd13ac6f19ac597cf506f85a60fdcec5f011b047452d90573728e01a6","ssdeep":"192:VP1d9V7kfnn7ttu6HR+7deQH0epp2GpIgUzrh:h1xkfn779HR+wQUaxIgUzV","tlshash":"8ad1b8d473e8d2f4d448abe18a2b74b97f1721e7ba61c798cbd91e395e0101ec868cc0","first_seen":"2025-09-05T13:43:34.276258Z","last_seen":"2025-09-05T13:43:34.276258Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/aos.css","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:49.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /aos.css HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:50 GMT\r\ncontent-type: text/css\r\ncontent-length: 2236\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\netag: \"65c5-63e0cecdd10fa-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ANawGGQBOGyIrBHQHH74z0qaTiUxvTK6zSaiEm12%2FGyVU5T4CKe0btRG9yg4B2ULU%2Fb5cZMwujx%2FpswQ3CY4jacb0W7%2Bp3gtkdghY3lsFA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 97a626f23e5bb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26053,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (26053), with no line terminators","md5":"847da8fca8060ca1a70f976aab1210b9","sha1":"0557d37454b67f42f2cb101e57e5070fb1193570","sha256":"1aa8845fd06e475aefe733d4e55b36a92fcd487975049c8172341827ac9cc03e","sha512":"d5c2bbf1ad68fa1b7625c696ea0f0e5d8c2aa5ebfdfba1aa3a4cfdc6604df625148489dd2adc7020b19660e4a26ce2a32ec11d8f28d9bd80eafdc67035e6a4d3","ssdeep":"768:CMJihoCcZCOud8G8tKS65wqsZQ1G+dM2cl6iCRotsV84sxIKcv4g01UeEPEQEB4D:CMJihoCcZCOud8G8tKS65wqsZCG+dM25","tlshash":"f0c24b5a7a4cd100bf831b4762df2a0859347588e5301986be3f35ca2cd5ce6b973fa9","first_seen":"2023-04-05T07:18:45Z","last_seen":"2026-08-19T04:46:44.851078Z","times_seen":45299,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/ce7fe192ba949f3fd475ce8deb13eb5f2b676ff3.svg","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:50.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /ce7fe192ba949f3fd475ce8deb13eb5f2b676ff3.svg HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:49 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HeaiMpyKC63sKl8gPJ1gqPnzCwdamLu5gnZ3qerXweLoEF%2B%2BjvjuppuFSTpfpTRO8CweF%2BRpLunHor858tOhBVwQhgOYDh0MluoVmAoH%2BQ%3D%3D\"}]}\r\nage: 90\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"3ae-63e0cecdd2869\"\r\ncontent-encoding: br\r\ncf-ray: 97a626f24e7fb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":942,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6afded812da11c3da191b05189e60fbb","sha1":"ce7fe192ba949f3fd475ce8deb13eb5f2b676ff3","sha256":"a6d36d7cc3d0153f7632323c9a5907108f7df3f700d60c41b6674d5236cca1c5","sha512":"1cc7386cc4a549f34a2c5cccbe8430c7261386e741acd6c9bcccbb2247e1b70176328a082b80a1248968e96cc2ea3c1ca9889228129fe35b7dc300a19a47de11","ssdeep":"","tlshash":"291110fef3c914d0b81edbf0b600ea72281b10737a68e541595252a8e7c941f7da5c64","first_seen":"2025-09-05T13:43:34.279293Z","last_seen":"2025-09-05T13:43:34.279293Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/73b02728c00843383c8bc2b59c440cb157ca3648.svg","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:50.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /73b02728c00843383c8bc2b59c440cb157ca3648.svg HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:50 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5sSPIdqE1O%2Bo9fQqmdTuTcx%2BLJHKcooKnTA2s20W5NHekpc%2FE18Zlu8maLG7Zf3tHh1O6JT1zK49dIuNvfAC7HfBq0cMLhH%2FCtWGP2mVwQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"92b-63e0cecdcd662\"\r\ncontent-encoding: br\r\ncf-ray: 97a626f24e80b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2347,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"610b1ad75e88f4bb5e13a9691fcef8d7","sha1":"73b02728c00843383c8bc2b59c440cb157ca3648","sha256":"2b890632c5c796c38a602b3e60d066662fe30531a3f1ba75a8b8d0bb49274b91","sha512":"7af2925540c99bf2de54020c79c8b4b5dead52481c5f1d039b3817bfea10198a35559e63bb3b70558df8e59c304a731722e21fb0b236628666592220ec6d548d","ssdeep":"","tlshash":"3d4111eb63c4baa0f18ad7f0da47daba76261eba7937c7044363855ae00011d4d6ce94","first_seen":"2025-09-05T13:43:34.282218Z","last_seen":"2025-09-05T13:43:34.282218Z","times_seen":1,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/9.ga3IK-lm.svg","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:50.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /9.ga3IK-lm.svg HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:50 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YdvzowIav%2F7VThYwWj80gBH2A8YvI3C9ywL1qBDOFDUT1PKVfVkYzWmFjcGXeDXU%2B7HiC76kdZIS0hvvplcNPJAiHlsOrTcuQI6IGCpEeQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"26992-63e0cecdcc6c2\"\r\ncontent-encoding: br\r\ncf-ray: 97a626f26ea7b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":158098,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"abb6633393841c0ddc29063f499bcad2","sha1":"9bfdc84de47beea154517651c330a1895c87e355","sha256":"a2ca420666e6ffdce978675443c72bc88204318b6dff39366feec8826a7d94fe","sha512":"996b056c3185745e09d399615b7296136a92c534645b8692b2eb67000bd6c07db86f80d58688ae2273d2d2251cec6daf5017af9003e35bc6589c8a8082de2f95","ssdeep":"1536:ANLPtcmq6qLiAqPteFYgWTfZ5nkvN3rYWoCcvxoJoyYvAy6NvF8FhxUvwC63yMt6:6lZ5RgWOYW3USVzFFIhig4ZCWcvs","tlshash":"62f36c2e5c4cab4e33321c6fcb43247e3e8625eeb64991df299f35ecd6220509661de0","first_seen":"2025-09-05T13:43:34.284263Z","last_seen":"2025-09-05T13:43:34.284263Z","times_seen":1,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance.llamarpc.com/","fqdn":"binance.llamarpc.com","domain":"llamarpc.com","tld":"com"},"ip":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:56.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"llamarpc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 08:03:47 GMT","end":"Fri, 07 Nov 2025 09:03:27 GMT"},"fingerprint":{"sha1":"9C:C7:46:E0:04:44:8D:56:AE:49:1C:77:2E:C5:79:4E:1B:65:13:C6","sha256":"E9:C7:AB:36:D0:99:3A:66:DA:CB:32:87:CD:4F:AF:FE:68:21:18:37:F4:2D:E4:3D:27:91:EE:AF:2C:CB:6D:B7"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: binance.llamarpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://claim-quackai.xyz/\r\nOrigin: https://claim-quackai.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 05 Sep 2025 13:42:56 GMT\r\ncf-ray: 97a627185ee156ca-OSL\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,POST,HEAD,PUT,DELETE,PATCH\r\naccess-control-allow-origin: *\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers, Origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Axci9YeCxl%2F1%2BfkmpEqlBXnfl3y4aiHI2Y42WMEvGKMHVNzOztHByJsJ7w%2BGs3tc2r2EiWa3cv3b2UmN6nn%2BZJy5T0VDLWW7OueRQyHx1nymhyCI%2FfFKglb%2B7PAZTm8vGv17zHby\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=823\u0026min_rtt=413\u0026rtt_var=834\u0026sent=8\u0026recv=12\u0026lost=0\u0026retrans=0\u0026sent_bytes=3202\u0026recv_bytes=1226\u0026delivery_rate=7634446\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=a45982d7d1e4c7e9\u0026ts=522\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T04:44:57.936605Z","times_seen":17967913,"resource_available":true,"data":null}},"time_used":566,"timings":{"blocked":51,"dns":3,"connect":3,"send":0,"wait":457,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/2.cgOkZQcK.svg","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:50.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /2.cgOkZQcK.svg HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:50 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uobe%2FI0nh3GtCRMHbCGNeNpgaXRbh%2FcLNeygiUET4z9JAOKrDU0KKT9vuP5DomwG4M%2Beyc1iDOzLpUCBTJZzE04pXCNOj8nXKiy260gtPA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"3cd3-63e0cecdc9bca\"\r\ncontent-encoding: br\r\ncf-ray: 97a626f25e97b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15571,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fa3bbeded793c3614a0bd28da5cc6a8d","sha1":"bd6d249b9c43837f034f124f03f7c8acee1c6c2c","sha256":"4cd03e071214071a9232a51324316eb779f6f5552985f102a03e3ea67606c3e4","sha512":"77eaf0cdcda34bb69be26c76889986d7767ad149f096dab324e9dee7026f9a882494643f8ede05b98375634a38c1d9d2a1123554ad9ad16a45eb8f4321c320cb","ssdeep":"384:bjK00bMGWLUsiaYazeqkIxgxz9x52CsAgVuXfkPg3nxLQEFQ1K:k4HUsiWksgt9x52UvsI3d2K","tlshash":"1562a4c43b36a3f8f040f5faca07a9747d4e68d6395285b9c7a52c56c45206dcea4ce3","first_seen":"2025-09-05T13:43:34.287394Z","last_seen":"2025-09-05T13:43:34.287394Z","times_seen":1,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance.llamarpc.com/","fqdn":"binance.llamarpc.com","domain":"llamarpc.com","tld":"com"},"ip":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:56.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"llamarpc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 08:03:47 GMT","end":"Fri, 07 Nov 2025 09:03:27 GMT"},"fingerprint":{"sha1":"9C:C7:46:E0:04:44:8D:56:AE:49:1C:77:2E:C5:79:4E:1B:65:13:C6","sha256":"E9:C7:AB:36:D0:99:3A:66:DA:CB:32:87:CD:4F:AF:FE:68:21:18:37:F4:2D:E4:3D:27:91:EE:AF:2C:CB:6D:B7"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: binance.llamarpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://claim-quackai.xyz/\r\nOrigin: https://claim-quackai.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 05 Sep 2025 13:42:56 GMT\r\ncf-ray: 97a627184eda56ca-OSL\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,POST,HEAD,PUT,DELETE,PATCH\r\naccess-control-allow-origin: *\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers, Origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=EeIRdF1UOWyyfsfrA63B5spDROukSLJ7Ta2bVS8CPa1sSq%2BLRdVl%2BiDd97wP5QhMzvo7TkGScyQulhdG4LRW1MCG83HfvN4eELqncu2TUuV7A9K1gd4TbIK2yUNtSSmyInv1YF5u\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1084\u0026min_rtt=413\u0026rtt_var=1146\u0026sent=11\u0026recv=14\u0026lost=0\u0026retrans=0\u0026sent_bytes=3911\u0026recv_bytes=1479\u0026delivery_rate=7634446\u0026cwnd=255\u0026unsent_bytes=0\u0026cid=a45982d7d1e4c7e9\u0026ts=532\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T04:44:57.936605Z","times_seen":17967913,"resource_available":true,"data":null}},"time_used":587,"timings":{"blocked":45,"dns":0,"connect":4,"send":0,"wait":471,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/step22.rNXgsQnu.svg","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:50.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /step22.rNXgsQnu.svg HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:50 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6NZ1XiAseNsKquswpeSfPEBI0g%2FtiZXpKQY9SnknmDCh4LS9fxV1HKjRLyRHO%2FQL5utFitecdvx0yB%2BDpuHjJO21egLSgG6aiUXjSZ3a7g%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"39b9-63e0cecdc70d2\"\r\ncontent-encoding: br\r\ncf-ray: 97a626f24e79b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14777,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"86cd5d4d32f27408c559ded299c2701a","sha1":"f2e3e1b4d4e37fc99b992887bafd93d78d08eb68","sha256":"7364bfa876bbdf8973888ca184d326f6b8ed7922914e3594a03581e87b2e7756","sha512":"a5fb05a50d3058ea52fd4606859ada11db16224f64d24d61818b337e8697969109028622db8313d3886e3c790785b3f4b9f68684d3d1d14a94585154c477f776","ssdeep":"384:IS7ipgZKFAGw7bCujdvdSY50IIXHAUBjJjLCdRqGO:IS7ipg7xd0Y50dHpBdjLCds","tlshash":"d962c8ec77a916e1e142e3e0db2b20693e0f14f96b01c754c3aa9f19ad4306d5859cc3","first_seen":"2025-09-05T13:43:34.289352Z","last_seen":"2025-09-05T13:43:34.289352Z","times_seen":1,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/7edfaf2d0eea66d4714f9c78fc66d836757ca957.svg","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:50.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /7edfaf2d0eea66d4714f9c78fc66d836757ca957.svg HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:49 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IYj83BQ4%2FYtLZL74PfM2UWYxGWJEXFu%2Bi67cfpefcNwwQPzlYfif9RBSyfzGSps0obsH%2BXQxiegyOqcenyfIwCK5pxMO56248fhY%2FkaQcQ%3D%3D\"}]}\r\nage: 90\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"120-63e0cecdcb33a\"\r\ncontent-encoding: br\r\ncf-ray: 97a626f24e83b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":288,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"43eef048a827a5604b60dcdc7aa65fae","sha1":"7edfaf2d0eea66d4714f9c78fc66d836757ca957","sha256":"939e6e9d78fabbbfadd03c3b1e55eda2431a888644eccac4e4fc8d573638106f","sha512":"486e6bc601f141632dbad83d24968ca5b75318b92e800506a36dce914184ef11a5a6af5bfb956f2e288f2a6319936e5847d5b29649a6b5951a1024f933977a94","ssdeep":"","tlshash":"abd07df731d4bf88c137c33af4fca4146072d8f05b868004c1066502ee041512a4cd7c","first_seen":"2025-09-05T13:43:34.290849Z","last_seen":"2025-09-05T13:43:34.290849Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-quackai.xyz/n1.xuLwDUE1.png","fqdn":"claim-quackai.xyz","domain":"claim-quackai.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-quackai.xyz/","date":"2025-09-05T13:42:54.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-quackai.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 11:55:45 GMT","end":"Thu, 04 Dec 2025 12:53:58 GMT"},"fingerprint":{"sha1":"68:4E:9C:59:BF:9B:34:14:87:5D:3C:35:88:EA:02:9D:72:95:B5:AD","sha256":"13:88:4D:AB:7C:1F:6A:06:F4:68:93:A5:A2:54:47:19:59:BE:D6:F7:D4:D3:EA:E8:05:A9:A9:D7:9E:53:92:7F"}}},"request":{"raw":"GET /n1.xuLwDUE1.png HTTP/1.1\r\nHost: claim-quackai.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-quackai.xyz/index.BwlTPWBb.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 05 Sep 2025 13:42:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 188276\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 12:24:54 GMT\r\netag: \"2df74-63e0cecdf1497\"\r\naccept-ranges: bytes\r\nage: 90\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mJ3osEe4wvaw8ajtOwQLvRvkJdZuggMqwdBvdguwoL%2BrqFUdv81hfBCskeRmD3qjKyDJLi34iP%2FfokK7UM9zFyTVKwXo0alfi8RPa0d%2F%2Fuz8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97a6270f19611ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":188276,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1100 x 469, 8-bit/color RGB, non-interlaced","md5":"462b945993bf0a950012ac16e9df64bb","sha1":"3ce7521de29122ce0b4bf067d68e0c4cbb581191","sha256":"0c9fa23e60726b24babae027ddc74c0cf407f77376f147bb316f65f47d0fd1ec","sha512":"1e6612745e940ebef160ce97025ddaab8f71feeac52c6c53e0a2405d1f06460d63eb94aa06b8ec719fdd1878ab58e98e0047ce78c629f0a73b6c59c5bf5c2392","ssdeep":"3072:Dvc2kwBLth/XnvuQOdgC7+dEhqJoRS/b5hft35mbOTieH+TKhnaY4dSG:DPxhHuSekEooQ/9Vt3MbuiIhnaLdp","tlshash":"140412f2d3c238614feae2e44d67c90394b7def8187d24323e8d37585a8ca4256d4aa4","first_seen":"2025-09-05T13:43:34.291815Z","last_seen":"2025-09-05T13:43:34.291815Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
