{"report_id":"31a5c321-bab0-4d49-9902-8c82f5f00975","version":6,"status":"done","tags":[],"date":"2026-04-04T12:39:03Z","url":{"schema":"http","addr":"pepe-claims.app","fqdn":"pepe-claims.app","domain":"pepe-claims.app","tld":"app"},"ip":{"addr":"172.67.159.167","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"pepe-claims.app/","fqdn":"pepe-claims.app","domain":"pepe-claims.app","tld":"app"},"title":"PEPE Token Airdrop: Complete Missions and Get Rewarded","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"pepe-claims.app","fqdn":"pepe-claims.app","domain":"pepe-claims.app","tld":"app"},"ip":{"addr":"172.67.159.167","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-09T12:39:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"pepe-claims.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"pepe-claims.app","ip":{"addr":"172.67.159.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":18,"request_count":18,"received_data":5700330,"sent_data":8430,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Webflow","description":"Webflow is Software-as-a-Service (SaaS) for website building and hosting.","website":"https://webflow.com","common_platform_enumeration":"","icon":"webflow.svg","categories":["Page builders","CMS"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}]},{"fqdn":"assets-global.website-files.com","ip":{"addr":"104.18.34.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-01-23","domain_rank":265625,"first_seen":"2020-11-01T15:14:58Z","last_seen":"2026-04-03T06:17:34.049331Z","alert_count":0,"request_count":1,"received_data":21797,"sent_data":502,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"pepe-claims.app/js/utilwidget-5.1.9.min.js","fqdn":"pepe-claims.app","domain":"pepe-claims.app","tld":"app"},"ip":{"addr":"172.67.159.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c779d67a76e5128424d8e935ce5201c","sha1":"bd54e36070f193ddb2eadc12a9f09bec07867488","sha256":"94cb0707bdeed02a29f6a126403426db620f8700c55c59ba2a3256a5c42b7a8e","sha512":"4c11866d4cf4f6ce9dd3535ece781630cda6ee9d4ad9e46902748b2f420ea9c684ad22eae34fbdb0358d72092e24713f3278d2d9c650c6a8086a7badf4be0ad6","ssdeep":"1536:fwT3GYTag1AxIFVEhHMTdEmh1z8ayI7W+Q0O665ZoBCVcXmhzg46AKj:fwTWYTag1A2F4sTdL7ogO5Zo4VcXmumY","tlshash":"f7342de5db9bd4ec8e9111cec073f845e4584963ceacb493aa2ddec17519f22808727b","size":237589,"data":"","first_seen":"2026-02-20T16:36:44.220065Z","last_seen":"2026-04-04T12:39:09.126619Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pepe-claims.app/5d900eb3-3ba3-49e5-8c07-9f24c6ab2852","fqdn":"pepe-claims.app","domain":"pepe-claims.app","tld":"app"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f11bcdc7b7757c117a8de0db3a4c25b8","sha1":"962e4d08a960106c829d0f9d492d7b891927adab","sha256":"b60b89c0c92cf57329c8590a2c5540cece4def64e4e7bf04f2d39b8ffa3b2748","sha512":"7461553dadb09db423bda8c47a58f8cdade82aa710a0f4415cde912e7a88cd4471ea86aa58a2e5097c90e2cb45ac410104019c56a04c35955e827f0bb0796040","ssdeep":"6144:vkWGL6BSn5NGCk3zi0mCw8wLPNU2HZjGfty3:cjkSnv1k20mCwFnHRGfty3","tlshash":"1044810609ac4f7986ec22e015f72cc401794e0ad9dc3cbfb9ada1579e25bd6e0c279d","size":259964,"data":"","first_seen":"2025-07-13T03:04:16.940864Z","last_seen":"2026-04-04T15:34:34.208741Z","times_seen":4916,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"pepe-claims.app/memereum1.png","fqdn":"pepe-claims.app","domain":"pepe-claims.app","tld":"app"},"ip":{"addr":"172.67.159.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pepe-claims.app/","date":"2026-04-04T12:38:41.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pepe-claims.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 07:42:55 GMT","end":"Fri, 03 Jul 2026 07:42:54 GMT"},"fingerprint":{"sha1":"70:F3:7B:63:E0:6D:93:B8:BE:4A:C1:11:46:86:B2:C4:4D:E2:D3:7E","sha256":"48:CA:2D:67:9F:AF:47:FD:4E:77:3D:C2:AD:71:F9:B3:38:28:DB:4D:DD:DA:E3:A8:7A:FA:41:E0:C7:0F:E7:15"}}},"request":{"raw":"GET /memereum1.png HTTP/1.1\r\nHost: pepe-claims.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pepe-claims.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 12:38:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 306163\r\nlast-modified: Sat, 04 Apr 2026 08:36:56 GMT\r\netag: \"69d0cda8-4abf3\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PdLFjkhcV0bHZrMWRbe5BuZZIxpiihDXS0BE4UGJ6B0zKm8cWlQgxpXqCI%2Bk0xpigUX3VwwhfQq8pUyY6i4Epinq645yDgiXDSh9zLI9h8pGICEAxZIHw2zOadQGIOiDH5E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e705f1fdd855694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":306163,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 952 x 966, 8-bit/color RGBA, non-interlaced","md5":"915a03babed81bd7dba8d112b22b2730","sha1":"2757c6b16a9645d14cc34d0815a3fbc591293e6e","sha256":"3f908fbafd64619413d7fe08bf2f91d8a03c800a8c7b69e709782ff6fdf26fd0","sha512":"6c32fa8b4f63a2e6c68c4f3641b4a669ae475d26ca67fc7012111e29b9f27d365357a3160fd089486449419cf6c906e746fa45d553ab1c5d31c5a1dce66b2d1f","ssdeep":"6144:3Qof7YoCEdb04vIaDQ+Lz0ND02pbsX4oYzbyne/EYKSGV2013w7kI:AjEdJJshbsKye/EYKSB013w7kI","tlshash":"4254236e3c0ae825f8aea073543c4eff3910616794d049d8006f9d2cabdf56ad61eb17","first_seen":"2026-04-04T12:39:09.109679Z","last_seen":"2026-04-04T12:39:09.109679Z","times_seen":1,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":139,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"pepe-claims.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pepe-claims.app/6583d1f9f31288d455a85163_Rocks-bg-p-500.webp","fqdn":"pepe-claims.app","domain":"pepe-claims.app","tld":"app"},"ip":{"addr":"172.67.159.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://pepe-claims.app/","date":"2026-04-04T12:38:41.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pepe-claims.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 07:42:55 GMT","end":"Fri, 03 Jul 2026 07:42:54 GMT"},"fingerprint":{"sha1":"70:F3:7B:63:E0:6D:93:B8:BE:4A:C1:11:46:86:B2:C4:4D:E2:D3:7E","sha256":"48:CA:2D:67:9F:AF:47:FD:4E:77:3D:C2:AD:71:F9:B3:38:28:DB:4D:DD:DA:E3:A8:7A:FA:41:E0:C7:0F:E7:15"}}},"request":{"raw":"GET /6583d1f9f31288d455a85163_Rocks-bg-p-500.webp HTTP/1.1\r\nHost: pepe-claims.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pepe-claims.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 12:38:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21956\r\nlast-modified: Sat, 04 Apr 2026 08:36:56 GMT\r\netag: \"69d0cda8-55c4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jp94J3ZtEFp1ZdEaub9NgCAXKcgH4HrTL%2FTlio%2BE%2FUrxu3aSyTh5ELf%2BEIkKjZS2CSUm4LZcUhToLd8k2%2B94q92TxEey%2FrnGs%2F87tU%2FpoqSSlvhB4BdavYLcmq23I58d0HY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e705f1fdd875694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21956,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2a7e1565f650fb4b2bf15c0f0c5f53fd","sha1":"e0160e45b391dfa81f63c1a56b8e2a15293a1cc3","sha256":"ccb02d2ef52fa152f301c50b22fdd10d907a3a5082e96b87734c996785729480","sha512":"63c78136e015d8e8f8cb69cda4621731a6426e053c5376a34eda2072907c2e79b0152d93a3ab0fa9b242b1d55ba0f4930755d0e4840683d225914873c4f3405b","ssdeep":"384:c9ewqDjdH02TKzfPmRCZmQ1Rs8EPBMAQ04sHxgnEqJ+J2c+V6o1az50Wa75qaCZs:cCJ3GzfPzZmQc8E+u4sOnEnho6n5nOPL","tlshash":"dea2d0ca9b9404a6b9afcc233f1c258c996af4998793117c0923600a11ba6e577966fc","first_seen":"2025-01-02T20:20:01.020058Z","last_seen":"2026-04-04T12:39:09.111319Z","times_seen":79,"resource_available":false,"data":null}},"time_used":1136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1109,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"pepe-claims.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets-global.website-files.com/64daf30b4d883a6ecefe00db/658416ecdea35aeef637dcaf_webclop.jpg","fqdn":"assets-global.website-files.com","domain":"website-files.com","tld":"com"},"ip":{"addr":"104.18.34.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pepe-claims.app/","date":"2026-04-04T12:38:42.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"website-files.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 01:16:16 GMT","end":"Wed, 27 May 2026 02:16:01 GMT"},"fingerprint":{"sha1":"43:2F:7A:5C:7B:DB:7B:B2:C1:9F:00:12:63:71:9B:59:99:40:0F:DA","sha256":"FF:84:B1:98:57:09:A3:02:E7:48:DD:C9:AF:80:4A:56:4A:34:0A:D6:53:B0:C0:4D:B5:CE:E1:C7:E0:21:CD:B9"}}},"request":{"raw":"GET /64daf30b4d883a6ecefe00db/658416ecdea35aeef637dcaf_webclop.jpg HTTP/1.1\r\nHost: assets-global.website-files.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pepe-claims.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 12:38:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21075\r\ncf-ray: 9e705f260a3a723c-OSL\r\ncache-control: public, max-age=31536000\r\ncf-bgj: h2pri\r\netag: \"6185c2aa3e0a35d77516580569447b34\"\r\nlast-modified: Thu, 21 Dec 2023 10:43:57 GMT\r\nx-amz-id-2: ft2K7DB0OINbt8PpXKV3cGU20JwGUahseJR2bgCtw3qqaM5hBkMQHp1hDlFvmuYpMOTEbZRDLa0X7Y63QRqbAYsfdmHYJzLD\r\nx-amz-request-id: AXHQ12K6NKW8PM29\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: G2GRUi1Ygh_u3eUOuj.lvQ.RdelNh1zF\r\ncf-cache-status: HIT\r\nexpires: Sun, 04 Apr 2027 12:38:43 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":21075,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 256x256, components 3","md5":"6185c2aa3e0a35d77516580569447b34","sha1":"23b2db8758ae753e9d4fa022b09fcd2743d3b86c","sha256":"fcf44047e184c53a9bfbcb9dc772c40234e65f6d3e36df48dc7575d5939f80dd","sha512":"12272860402e0317d18d68bcbe5fd86aa70b893ddf9082812cd0c7173797fc5398febf86d30fca9938ef3c7b3ec8df33add98f414b5ecfc873a81c31f9b6edeb","ssdeep":"384:xJmvN/D+30ZemtdpLKR6nIGXMKwixOpVV6l8Jbahij86VwMCCBQn9GQH:xJaD+3Iemtq/L4SJehCNVDS9GQH","tlshash":"a8929d75f3c3c719a72796ac497cbcb723c9528490c220a71123de52e291fb9128b5bc","first_seen":"2025-08-20T12:42:25.778308Z","last_seen":"2026-04-04T12:39:09.11216Z","times_seen":78,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":4,"dns":1,"connect":1,"send":0,"wait":364,"receive":1,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pepe-claims.app/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K4.woff2","fqdn":"pepe-claims.app","domain":"pepe-claims.app","tld":"app"},"ip":{"addr":"172.67.159.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pepe-claims.app/","date":"2026-04-04T12:38:41.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pepe-claims.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 07:42:55 GMT","end":"Fri, 03 Jul 2026 07:42:54 GMT"},"fingerprint":{"sha1":"70:F3:7B:63:E0:6D:93:B8:BE:4A:C1:11:46:86:B2:C4:4D:E2:D3:7E","sha256":"48:CA:2D:67:9F:AF:47:FD:4E:77:3D:C2:AD:71:F9:B3:38:28:DB:4D:DD:DA:E3:A8:7A:FA:41:E0:C7:0F:E7:15"}}},"request":{"raw":"GET /rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K4.woff2 HTTP/1.1\r\nHost: pepe-claims.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pepe-claims.app/css.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 12:38:42 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 37000\r\nlast-modified: Sat, 04 Apr 2026 08:36:56 GMT\r\netag: \"69d0cda8-9088\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o%2FR6pAZCu045OOOkCkCGIWBTIDPk%2FN%2B9Hn2%2FVqHxoQqUOJQBSzRxjqFa9POXaCeVKXgM%2BPHhiFjOqr1rLu7aH21XBIGQfYMJYPpkK2g0J6JI%2BF2EKpaVD%2B08O%2Fnd9nA8WKU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e705f1f9d7e5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37000, version 1.0","md5":"c15d94aa24b88af859f1724b62b08d84","sha1":"13c9ceece82e23eadb9f4e6dbabdd6a617f5e285","sha256":"f2113de896c7ffcc1d75fe539e9ba823bb93ada5cbf6fa83873d35a042b2ca46","sha512":"68c5c4fbaf73538b3f59799947927767678c58629be61adb3eb9b299e5157c34c92b244b8c3a1cdc4d068e63e63a0bf24d059ad93269a8ce44436822b7bacb3c","ssdeep":"768:+7NrmonVe/ftWNhibugOI6fRNBmxaYmrzg4Y/eL0mA7YnyJ2wvlq3EWPZoH:eNnnsi4ugOI6fWZp/eL00yJ2w0U4Zy","tlshash":"62f2f18b98bef05ef893d770d9c67f1d188aabdcb84ec8c9498e824511aa5453c1dc3d","first_seen":"2023-07-13T05:26:47Z","last_seen":"2026-04-04T12:39:09.11303Z","times_seen":929,"resource_available":false,"data":null}},"time_used":1151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1102,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"pepe-claims.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pepe-claims.app/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K4.woff2","fqdn":"pepe-claims.app","domain":"pepe-claims.app","tld":"app"},"ip":{"addr":"172.67.159.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pepe-claims.app/","date":"2026-04-04T12:38:41.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pepe-claims.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 07:42:55 GMT","end":"Fri, 03 Jul 2026 07:42:54 GMT"},"fingerprint":{"sha1":"70:F3:7B:63:E0:6D:93:B8:BE:4A:C1:11:46:86:B2:C4:4D:E2:D3:7E","sha256":"48:CA:2D:67:9F:AF:47:FD:4E:77:3D:C2:AD:71:F9:B3:38:28:DB:4D:DD:DA:E3:A8:7A:FA:41:E0:C7:0F:E7:15"}}},"request":{"raw":"GET /rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K4.woff2 HTTP/1.1\r\nHost: pepe-claims.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pepe-claims.app/css.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 12:38:42 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 37000\r\nlast-modified: Sat, 04 Apr 2026 08:36:56 GMT\r\netag: \"69d0cda8-9088\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=866xM%2Fbk%2BY9cKHiCSdszoNJzcVEoT7RkyCCIVPYuMk9u0HPHGsVl7oCHlzC09wpIQbo1cNeANzrS39%2Br4xbyOUMxNuO1nSXWMshYVZoMhsKWR7eZoKBnBVjS0gwAe8snmo4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e705f1f8d7c5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37000, version 1.0","md5":"c15d94aa24b88af859f1724b62b08d84","sha1":"13c9ceece82e23eadb9f4e6dbabdd6a617f5e285","sha256":"f2113de896c7ffcc1d75fe539e9ba823bb93ada5cbf6fa83873d35a042b2ca46","sha512":"68c5c4fbaf73538b3f59799947927767678c58629be61adb3eb9b299e5157c34c92b244b8c3a1cdc4d068e63e63a0bf24d059ad93269a8ce44436822b7bacb3c","ssdeep":"768:+7NrmonVe/ftWNhibugOI6fRNBmxaYmrzg4Y/eL0mA7YnyJ2wvlq3EWPZoH:eNnnsi4ugOI6fWZp/eL00yJ2w0U4Zy","tlshash":"62f2f18b98bef05ef893d770d9c67f1d188aabdcb84ec8c9498e824511aa5453c1dc3d","first_seen":"2023-07-13T05:26:47Z","last_seen":"2026-04-04T12:39:09.11303Z","times_seen":929,"resource_available":false,"data":null}},"time_used":1159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1109,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"pepe-claims.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pepe-claims.app/64f0331bf58b50b8da3c5b63_frame-decor-angle.svg","fqdn":"pepe-claims.app","domain":"pepe-claims.app","tld":"app"},"ip":{"addr":"172.67.159.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pepe-claims.app/","date":"2026-04-04T12:38:41.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pepe-claims.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 07:42:55 GMT","end":"Fri, 03 Jul 2026 07:42:54 GMT"},"fingerprint":{"sha1":"70:F3:7B:63:E0:6D:93:B8:BE:4A:C1:11:46:86:B2:C4:4D:E2:D3:7E","sha256":"48:CA:2D:67:9F:AF:47:FD:4E:77:3D:C2:AD:71:F9:B3:38:28:DB:4D:DD:DA:E3:A8:7A:FA:41:E0:C7:0F:E7:15"}}},"request":{"raw":"GET /64f0331bf58b50b8da3c5b63_frame-decor-angle.svg HTTP/1.1\r\nHost: pepe-claims.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pepe-claims.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 12:38:43 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 04 Apr 2026 08:36:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69d0cda8-d4\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GnEE8vhKJ2RpZoBco4UF%2BV2ITdUXtsB%2BoFcXeHNHvFnEMMOy4jg3foflll0%2BWgqt6S%2B3Bd%2Fs1NQhianvNMKYTsQcQPTFUK1DGh0Jj2DslbpQL4dHhDBC69Rhda38jHS%2FHIE%3D\"}]}\r\ncf-ray: 9e705f1fcd825694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":212,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"673ea5bdf395a0431c71fc4da53bb51c","sha1":"d85c020cb0757c75ae06f1e859d99bf1da6c9c21","sha256":"75f44b90b216e52ba76ebc43ba971ec97f8b095c51363b91a2a855e86881dbe4","sha512":"33d0acb8b712bc430a25e14e384b0128491d7f4656099b96fc3e051b434c5326838eee9bd7d604356036c7772bc3aa52f0e2a0f6a1875ee1e86a0e493e524d73","ssdeep":"","tlshash":"63d022b51018ac86444c4879d73c30c220b368c1b6480088a7b0382434822a7ac053e9","first_seen":"2025-01-02T20:20:01.017529Z","last_seen":"2026-04-04T12:39:09.113729Z","times_seen":79,"resource_available":false,"data":null}},"time_used":1156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"pepe-claims.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pepe-claims.app/secureproxy?e=jscdn/getFile","fqdn":"pepe-claims.app","domain":"pepe-claims.app","tld":"app"},"ip":{"addr":"172.67.159.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pepe-claims.app/","date":"2026-04-04T12:38:41.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pepe-claims.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 07:42:55 GMT","end":"Fri, 03 Jul 2026 07:42:54 GMT"},"fingerprint":{"sha1":"70:F3:7B:63:E0:6D:93:B8:BE:4A:C1:11:46:86:B2:C4:4D:E2:D3:7E","sha256":"48:CA:2D:67:9F:AF:47:FD:4E:77:3D:C2:AD:71:F9:B3:38:28:DB:4D:DD:DA:E3:A8:7A:FA:41:E0:C7:0F:E7:15"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: pepe-claims.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pepe-claims.app/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://pepe-claims.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"gj7vh757pa76qdomu901\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 12:38:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8fXPhQwkdnbC3hCXhtzHwBlUWi9SWp%2FKqGQRY8qZLsTa2ArkaUnUj3yMVzjuMQTB1zeiNKsMq0W8xjZPZh8yKZa8km5l%2FyjJ79xBibd59dWS3HYw4ug%2Bon2Wva%2FPbDbkdxa6MdI%3D\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncf-ray: 9e705f200d895694-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3997282,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bf5c4119773c1e6c25fd8e7bc03df027","sha1":"5fc8e46b63443710dcdf1cb431f08c5496edcc1d","sha256":"90b061480e1090f269c74e1357ed79cb34db49bcb4c886fe76fe62f63e5a9f9a","sha512":"0b5bfb8f902313e4abd6db8232345a7017431bea6593c0168a18f2d9e148651d70b82c30e49ac1147fd619b7c0ef93091c63457fd842be254e0caba56cf611f7","ssdeep":"24576:GbsC2ZpZyGM5FqjCSu2A+CNqV5IEQpigNacXO6wfVeD7w:MR2rMmjCSuF0eEKiggUdf4","tlshash":"722512c6f0a3d4c23325d0b8e7e18999bacda09eedc257736404dd9535ed06983d8ed2","first_seen":"2026-04-04T12:39:09.114415Z","last_seen":"2026-04-04T12:39:09.114415Z","times_seen":1,"resource_available":false,"data":null}},"time_used":982,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":393,"receive":589,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"pepe-claims.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pepe-claims.app/1Ptgg87LROyAm3Kz-C8.woff2","fqdn":"pepe-claims.app","domain":"pepe-claims.app","tld":"app"},"ip":{"addr":"172.67.159.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pepe-claims.app/","date":"2026-04-04T12:38:41.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pepe-claims.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 07:42:55 GMT","end":"Fri, 03 Jul 2026 07:42:54 GMT"},"fingerprint":{"sha1":"70:F3:7B:63:E0:6D:93:B8:BE:4A:C1:11:46:86:B2:C4:4D:E2:D3:7E","sha256":"48:CA:2D:67:9F:AF:47:FD:4E:77:3D:C2:AD:71:F9:B3:38:28:DB:4D:DD:DA:E3:A8:7A:FA:41:E0:C7:0F:E7:15"}}},"request":{"raw":"GET /1Ptgg87LROyAm3Kz-C8.woff2 HTTP/1.1\r\nHost: pepe-claims.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pepe-claims.app/css.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 12:38:42 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 18796\r\nlast-modified: Sat, 04 Apr 2026 08:36:56 GMT\r\netag: \"69d0cda8-496c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ognAn%2FEjC817fRL%2BurAjvd4MoiAT22xCy0BKoezAOTUedFTtM8auGTEozhB30Qi8lKyw5kN32EFiXumv6roRkiSM9eE8eQHdK%2FgedBDzzXzkCAASoVOzzq06iq379gFCJ%2B4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e705f1f8d7d5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18796,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18796, version 1.0","md5":"a2675f0a46717d18588f16531f72674d","sha1":"adfe4d6f18d4522b73ef6853ea2084570855f87c","sha256":"f9ad420bf51c2930fc2a49d44209d202cb18acb2d8b82853a01023e69eab6885","sha512":"2c83c9471f0d491debe7339157a9c6bd58fb951cbaf299ff53f251971080e988454bf0d5c4e41fc2061f6efc7c45bc2ee24e58b44ace26dc5f9665505eccadf5","ssdeep":"384:Xd50HqpUvsDf5IRpibtHoRm3tL6sQpZNbib4qQbC6tN+S:XjuvsDOUBo24sQpZNeb4J+BS","tlshash":"a082d08027bb87c2c931db7e4131679d82e779747f5d6758a2988b292d94ac7c2fb002","first_seen":"2023-08-25T22:40:58Z","last_seen":"2026-04-04T12:39:09.115839Z","times_seen":1330,"resource_available":false,"data":null}},"time_used":1178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1147,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"pepe-claims.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pepe-claims.app/64f034b5c7045cc0cfa2d9c7_frame-decor-bottom.svg","fqdn":"pepe-claims.app","domain":"pepe-claims.app","tld":"app"},"ip":{"addr":"172.67.159.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pepe-claims.app/","date":"2026-04-04T12:38:41.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pepe-claims.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 07:42:55 GMT","end":"Fri, 03 Jul 2026 07:42:54 GMT"},"fingerprint":{"sha1":"70:F3:7B:63:E0:6D:93:B8:BE:4A:C1:11:46:86:B2:C4:4D:E2:D3:7E","sha256":"48:CA:2D:67:9F:AF:47:FD:4E:77:3D:C2:AD:71:F9:B3:38:28:DB:4D:DD:DA:E3:A8:7A:FA:41:E0:C7:0F:E7:15"}}},"request":{"raw":"GET /64f034b5c7045cc0cfa2d9c7_frame-decor-bottom.svg HTTP/1.1\r\nHost: pepe-claims.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pepe-claims.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 12:38:42 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 04 Apr 2026 08:36:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69d0cda8-2ad\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G%2BDRBvzN2fgTX7bi5xRukce1ry22uG%2Bi7mFi1flMtotR4RCKKev5LPY%2BlOXKpoX%2B49%2Bz0kgnkWTBodMzzErkG47b2ED%2FuDMKzLIHl7FU9%2FrwrKA0mx3shu44xuCZbEvkCEw%3D\"}]}\r\ncf-ray: 9e705f1fcd835694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":685,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1d64c6b57f933dd74cff95c190f64ae1","sha1":"8d4ba60052ccc4ecd5062b5124d8b8d9c79b738d","sha256":"7b4608204eff2694c641fb701809fd562424ed9de0b3605e87297025d3d980ae","sha512":"304417047ac79d9bef3642bbda1e9ccb0f7c146dcc5a8d7ae268f8da53955893996800175a52de80cbfdc9e6e6bcecec7542aea97105ecd287744b1edcdc1506","ssdeep":"","tlshash":"f6014ec063ace25efd1cb020de2a68651653f0f0d619c059f3802386322a50f2d31ae3","first_seen":"2025-01-02T20:20:01.016241Z","last_seen":"2026-04-04T12:39:09.116426Z","times_seen":79,"resource_available":false,"data":null}},"time_used":1113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"pepe-claims.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pepe-claims.app/memereumblur2.png","fqdn":"pepe-claims.app","domain":"pepe-claims.app","tld":"app"},"ip":{"addr":"172.67.159.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pepe-claims.app/","date":"2026-04-04T12:38:41.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pepe-claims.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 07:42:55 GMT","end":"Fri, 03 Jul 2026 07:42:54 GMT"},"fingerprint":{"sha1":"70:F3:7B:63:E0:6D:93:B8:BE:4A:C1:11:46:86:B2:C4:4D:E2:D3:7E","sha256":"48:CA:2D:67:9F:AF:47:FD:4E:77:3D:C2:AD:71:F9:B3:38:28:DB:4D:DD:DA:E3:A8:7A:FA:41:E0:C7:0F:E7:15"}}},"request":{"raw":"GET /memereumblur2.png HTTP/1.1\r\nHost: pepe-claims.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pepe-claims.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 12:38:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 194575\r\nlast-modified: Sat, 04 Apr 2026 08:36:56 GMT\r\netag: \"69d0cda8-2f80f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s7MB5qeMaoSS1sr%2B6dm4a4pDIk0qGLwJBp9utwmKDWikM6aAI%2F900tfZWH5JMo6UE6Z%2F9xsreK%2BA4C4HpqdeO4kyl9eBk%2FjRyyaAdsuhdLYiEnPtKaxVXbOMBnMRmDRKP2E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e705f1fdd865694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":194575,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 952 x 966, 8-bit/color RGBA, non-interlaced","md5":"3f000c4e1cd89f9cc4186f8763a939fa","sha1":"4cd03d8194d1df3a2c9cebba612d8fbbc872659c","sha256":"d219a0147728f6ec62b7f7a4f2247cb0b875b9d6eacd5f19af628b22202c9801","sha512":"6b0a56d1f00fa0078ce282ebce6c8641e0e1714d74477aad03d7267787c3d473d21cb88f066b28ce354ba6af102cab61175313de0279f4de01f822d465aa22e5","ssdeep":"3072:2vGPNtcpc5s1wgr/Juiw8g6bVXj8kX3zDVHCjQsBtTimEb+yLOAC5ZLd5mG6LRCd:2vWfT5e8ic6Fj/HzDV6QMTiJb+kC5ZRR","tlshash":"c1141299090ba0f2c5671274d54af7e2bbb41c9ae0cef55ae125dc5621f4a81dcc20ef","first_seen":"2026-04-04T12:39:09.117041Z","last_seen":"2026-04-04T12:39:09.117041Z","times_seen":1,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":120,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"pepe-claims.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pepe-claims.app/6583d1f9ffbdb96932f040f9_Rocks-bg2.webp","fqdn":"pepe-claims.app","domain":"pepe-claims.app","tld":"app"},"ip":{"addr":"172.67.159.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pepe-claims.app/","date":"2026-04-04T12:38:41.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pepe-claims.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 07:42:55 GMT","end":"Fri, 03 Jul 2026 07:42:54 GMT"},"fingerprint":{"sha1":"70:F3:7B:63:E0:6D:93:B8:BE:4A:C1:11:46:86:B2:C4:4D:E2:D3:7E","sha256":"48:CA:2D:67:9F:AF:47:FD:4E:77:3D:C2:AD:71:F9:B3:38:28:DB:4D:DD:DA:E3:A8:7A:FA:41:E0:C7:0F:E7:15"}}},"request":{"raw":"GET /6583d1f9ffbdb96932f040f9_Rocks-bg2.webp HTTP/1.1\r\nHost: pepe-claims.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pepe-claims.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 12:38:42 GMT\r\ncontent-type: image/webp\r\ncontent-length: 68464\r\nlast-modified: Sat, 04 Apr 2026 08:36:56 GMT\r\netag: \"69d0cda8-10b70\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WR0Y84SO%2FTA1OuzR8iZGU0DJ6AGKCaHKVarWv2OcpeFAltnFKE18PXpOOpndAE1rPdzctSa1KjWnzDbH85DxR6dTKXnduMluw9w7yoc8%2FffDQEInumZw2CB%2B8uCBRb3gx7I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e705f1fdd845694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68464,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"66815d7df2d60b235d14ed73341118db","sha1":"539e7c8cbe5f53605c9682c44f495d11d7cb3431","sha256":"a0c3fa0d72cc320acb43b31de257c7fb221905841ecb4542bf6a82c310037f06","sha512":"0e435a5a6310fdc9958546a291d8bbba7f4e662df8d69b6a3068c9b06d6943fccd2d2458db884e370d79368f03f7890464e841444bdc32965ee38712eea65cb0","ssdeep":"1536:X7PkC0NfAd+x+AIjBHMy9LfPgPIMfTn/M1pY9t+MVLTNi:rPV0NXkAIZMy9DgPfTE1pY9TVLTI","tlshash":"2063021fb3225bdb7dae1c8cb686bc2dc013d7da383db086ee91a27871c09196c9555c","first_seen":"2025-01-02T20:20:01.023335Z","last_seen":"2026-04-04T12:39:09.118395Z","times_seen":79,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"pepe-claims.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pepe-claims.app/658416e7f215534455eb05b0_fav.png","fqdn":"pepe-claims.app","domain":"pepe-claims.app","tld":"app"},"ip":{"addr":"172.67.159.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pepe-claims.app/","date":"2026-04-04T12:38:42.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pepe-claims.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 07:42:55 GMT","end":"Fri, 03 Jul 2026 07:42:54 GMT"},"fingerprint":{"sha1":"70:F3:7B:63:E0:6D:93:B8:BE:4A:C1:11:46:86:B2:C4:4D:E2:D3:7E","sha256":"48:CA:2D:67:9F:AF:47:FD:4E:77:3D:C2:AD:71:F9:B3:38:28:DB:4D:DD:DA:E3:A8:7A:FA:41:E0:C7:0F:E7:15"}}},"request":{"raw":"GET /658416e7f215534455eb05b0_fav.png HTTP/1.1\r\nHost: pepe-claims.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pepe-claims.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 12:38:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 306163\r\nlast-modified: Sat, 04 Apr 2026 08:36:56 GMT\r\netag: \"69d0cda8-4abf3\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bp5hPpQ99JfLHniekpTPLl%2FyHU%2FghCpwkdfdyGv4GmO4dmbAaCpWsvDjQjj1hMiUroSa4sg3dtwByCeizyqwsfHoOYDpdlZLohiWSWjUoaAwE1I%2BOymVUEcCnrWo%2B3mrJno%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9e705f25ddb45694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":306163,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 952 x 966, 8-bit/color RGBA, non-interlaced","md5":"915a03babed81bd7dba8d112b22b2730","sha1":"2757c6b16a9645d14cc34d0815a3fbc591293e6e","sha256":"3f908fbafd64619413d7fe08bf2f91d8a03c800a8c7b69e709782ff6fdf26fd0","sha512":"6c32fa8b4f63a2e6c68c4f3641b4a669ae475d26ca67fc7012111e29b9f27d365357a3160fd089486449419cf6c906e746fa45d553ab1c5d31c5a1dce66b2d1f","ssdeep":"6144:3Qof7YoCEdb04vIaDQ+Lz0ND02pbsX4oYzbyne/EYKSGV2013w7kI:AjEdJJshbsKye/EYKSB013w7kI","tlshash":"4254236e3c0ae825f8aea073543c4eff3910616794d049d8006f9d2cabdf56ad61eb17","first_seen":"2026-04-04T12:39:09.109679Z","last_seen":"2026-04-04T12:39:09.109679Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1254,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1130,"receive":124,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"pepe-claims.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pepe-claims.app/js/utilwidget-5.1.9.min.js","fqdn":"pepe-claims.app","domain":"pepe-claims.app","tld":"app"},"ip":{"addr":"172.67.159.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pepe-claims.app/","date":"2026-04-04T12:38:40.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pepe-claims.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 07:42:55 GMT","end":"Fri, 03 Jul 2026 07:42:54 GMT"},"fingerprint":{"sha1":"70:F3:7B:63:E0:6D:93:B8:BE:4A:C1:11:46:86:B2:C4:4D:E2:D3:7E","sha256":"48:CA:2D:67:9F:AF:47:FD:4E:77:3D:C2:AD:71:F9:B3:38:28:DB:4D:DD:DA:E3:A8:7A:FA:41:E0:C7:0F:E7:15"}}},"request":{"raw":"GET /js/utilwidget-5.1.9.min.js HTTP/1.1\r\nHost: pepe-claims.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pepe-claims.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 12:38:41 GMT\r\ncontent-type: application/javascript\r\npriority: u=2,i=?0\r\nlast-modified: Sat, 04 Apr 2026 08:36:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69d0cda8-3a25b\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cTGiG1aQnw26HgxP%2FU%2B5cExyBwgEu4hO8iy6c9quy5RSBiPW8YOrBEIybabJ9YjNuJt%2F%2BFdjKXK1d5FuhbMszvYkv4DdEkbvV8%2Fi071iTnnDmLJQw6x%2B9ERG0zipyFBr3zM%3D\"}]}\r\ncf-ray: 9e705f168d465694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":238171,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (49922), with no line terminators","md5":"6fefeb106e288c5d1f97caa29519e92b","sha1":"7d8993c8ec774317fbbfb6ba79a437cfb642b857","sha256":"6f767a7470d0b7d5a877d6630ce98d0c1c2dffe0256cef6b0fcec68e1afd4480","sha512":"cb244fe7d372dd7cf2d8b217defc8a3a5d0ad80f26856fcdcd421c233cf178a2ec728bd41cb6d8e7214222be550ec73536d25008647fd5ba3a2aa559fdbc82e7","ssdeep":"1536:fwT3GYTag1AxIFVENGmQ7i1ayI7W+Q0O665ZoBCVcXmhzg46AKj:fwTWYTag1A2FdDGgO5Zo4VcXmumY","tlshash":"cb34ebe4db77b2dd8a51318ec072f845e6d84963cdacb493a92dddc32519f2e808713a","first_seen":"2026-03-27T20:31:08.103823Z","last_seen":"2026-04-04T12:39:09.119008Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1131,"receive":115,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"pepe-claims.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pepe-claims.app/booster-farcana.webflow.8976fbee8.css","fqdn":"pepe-claims.app","domain":"pepe-claims.app","tld":"app"},"ip":{"addr":"172.67.159.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pepe-claims.app/","date":"2026-04-04T12:38:40.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pepe-claims.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 07:42:55 GMT","end":"Fri, 03 Jul 2026 07:42:54 GMT"},"fingerprint":{"sha1":"70:F3:7B:63:E0:6D:93:B8:BE:4A:C1:11:46:86:B2:C4:4D:E2:D3:7E","sha256":"48:CA:2D:67:9F:AF:47:FD:4E:77:3D:C2:AD:71:F9:B3:38:28:DB:4D:DD:DA:E3:A8:7A:FA:41:E0:C7:0F:E7:15"}}},"request":{"raw":"GET /booster-farcana.webflow.8976fbee8.css HTTP/1.1\r\nHost: pepe-claims.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pepe-claims.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 12:38:40 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Sat, 04 Apr 2026 08:36:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69d0cda8-206e2\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7hqpHjiJgnHmUdyoiUaF1DkG8il9LBsIdSQSif6kqE%2FzAs8hXU5uSq9szw4S1SFc%2B6enFLHsqdB1if5g9JhI6IV3J4cJTdx%2FFQ%2FHLaNpLpKLApuIqjVnyi935Rw0asaz0mo%3D\"}]}\r\ncf-ray: 9e705f169d475694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":132834,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"71f74f9dc5e727a7554b68431508b321","sha1":"660abe5b441f3340e2d4446126257515d393fc12","sha256":"2b0934da2656061ff482c15471aa05cca7ae6a7b27f18c079177c8d815bed41b","sha512":"a2581b7ad6bbed96353be14f55d54a9aecf3500c602fd034679c646137e93f6425f1f7860ec02fdbe49e13fd48d34b014e614a32ba296171cd56f91439b4d7db","ssdeep":"1536:oSsDq44UYcDoT/fi1wKlwh10VELn4NA4Up14pNV:744UYcDor+ELn4Op1qNV","tlshash":"a9d354446ab52208b85fd0ac6de69b14633d8083da0fdd6e7ae1205cdf8d2c52973bdd","first_seen":"2025-08-20T12:42:25.788411Z","last_seen":"2026-04-04T12:39:09.120342Z","times_seen":77,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"pepe-claims.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pepe-claims.app/css.css","fqdn":"pepe-claims.app","domain":"pepe-claims.app","tld":"app"},"ip":{"addr":"172.67.159.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pepe-claims.app/","date":"2026-04-04T12:38:40.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pepe-claims.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 07:42:55 GMT","end":"Fri, 03 Jul 2026 07:42:54 GMT"},"fingerprint":{"sha1":"70:F3:7B:63:E0:6D:93:B8:BE:4A:C1:11:46:86:B2:C4:4D:E2:D3:7E","sha256":"48:CA:2D:67:9F:AF:47:FD:4E:77:3D:C2:AD:71:F9:B3:38:28:DB:4D:DD:DA:E3:A8:7A:FA:41:E0:C7:0F:E7:15"}}},"request":{"raw":"GET /css.css HTTP/1.1\r\nHost: pepe-claims.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pepe-claims.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 12:38:41 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Sat, 04 Apr 2026 08:36:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69d0cda8-1c4d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RTeEaEJ4Gp3HM6VoKF9sx%2BAlMDN4rEc9ef3SqxEv0LmlJi%2BtEEk1RQmyiuwDy43liVQ9XY0cd8bvWYrnU9zWmhR4n96eNVKfFsebtb11Z2jnLhhUKD%2FFEMyV%2Bv0yZ1eyL8Q%3D\"}]}\r\ncf-ray: 9e705f169d495694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7245,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"1eca8d31e96eb96d9759e4180f525665","sha1":"2accd85bdfc7cf93b9006ae7604ed983f0848015","sha256":"d4e43a612e9e0f73fd96f09aff38ccf3649f0e549404dd670efe0bca1abef946","sha512":"82c2594d4aed954427a9dd097d8782d4e2cac5c20a393ba153e60d67f1611d4f2611bd186b7f1aad866a27a52f85817acae2cac453ff30c51f87502ea1709fd6","ssdeep":"192:cg3Ipj72y7C2pF22E2rv2AW2lJ2io2Xz2sV:cDpJ","tlshash":"30e14640082b6504e3976cd56bce7e31da0eb15460559d30bffe1498bcabd7e23a2b4e","first_seen":"2025-01-02T20:20:01.003241Z","last_seen":"2026-04-04T12:39:09.122085Z","times_seen":79,"resource_available":false,"data":null}},"time_used":1129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1128,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"pepe-claims.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pepe-claims.app/111.png","fqdn":"pepe-claims.app","domain":"pepe-claims.app","tld":"app"},"ip":{"addr":"172.67.159.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pepe-claims.app/","date":"2026-04-04T12:38:41.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pepe-claims.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 07:42:55 GMT","end":"Fri, 03 Jul 2026 07:42:54 GMT"},"fingerprint":{"sha1":"70:F3:7B:63:E0:6D:93:B8:BE:4A:C1:11:46:86:B2:C4:4D:E2:D3:7E","sha256":"48:CA:2D:67:9F:AF:47:FD:4E:77:3D:C2:AD:71:F9:B3:38:28:DB:4D:DD:DA:E3:A8:7A:FA:41:E0:C7:0F:E7:15"}}},"request":{"raw":"GET /111.png HTTP/1.1\r\nHost: pepe-claims.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pepe-claims.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 12:38:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 306163\r\nlast-modified: Sat, 04 Apr 2026 08:36:56 GMT\r\netag: \"69d0cda8-4abf3\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=McJZEqH5ar3%2Fx8Jv%2FVw429%2FZM1xlQpSSUtvqSkoIrszh6AUDpxVYJJIMlsdOZZT46mBu45yISFhTuWNa7CE1fCAJJPOzBkXzJ4ajCEh3WcMQTkstjuDSKPBOM2eE5Zr3HHI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e705f1fcd805694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":306163,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 952 x 966, 8-bit/color RGBA, non-interlaced","md5":"915a03babed81bd7dba8d112b22b2730","sha1":"2757c6b16a9645d14cc34d0815a3fbc591293e6e","sha256":"3f908fbafd64619413d7fe08bf2f91d8a03c800a8c7b69e709782ff6fdf26fd0","sha512":"6c32fa8b4f63a2e6c68c4f3641b4a669ae475d26ca67fc7012111e29b9f27d365357a3160fd089486449419cf6c906e746fa45d553ab1c5d31c5a1dce66b2d1f","ssdeep":"6144:3Qof7YoCEdb04vIaDQ+Lz0ND02pbsX4oYzbyne/EYKSGV2013w7kI:AjEdJJshbsKye/EYKSB013w7kI","tlshash":"4254236e3c0ae825f8aea073543c4eff3910616794d049d8006f9d2cabdf56ad61eb17","first_seen":"2026-04-04T12:39:09.109679Z","last_seen":"2026-04-04T12:39:09.109679Z","times_seen":1,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":133,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"pepe-claims.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pepe-claims.app/64f036b8fe04e0a54d8534bd_frame-decor-top.svg","fqdn":"pepe-claims.app","domain":"pepe-claims.app","tld":"app"},"ip":{"addr":"172.67.159.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://pepe-claims.app/","date":"2026-04-04T12:38:41.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pepe-claims.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 07:42:55 GMT","end":"Fri, 03 Jul 2026 07:42:54 GMT"},"fingerprint":{"sha1":"70:F3:7B:63:E0:6D:93:B8:BE:4A:C1:11:46:86:B2:C4:4D:E2:D3:7E","sha256":"48:CA:2D:67:9F:AF:47:FD:4E:77:3D:C2:AD:71:F9:B3:38:28:DB:4D:DD:DA:E3:A8:7A:FA:41:E0:C7:0F:E7:15"}}},"request":{"raw":"GET /64f036b8fe04e0a54d8534bd_frame-decor-top.svg HTTP/1.1\r\nHost: pepe-claims.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pepe-claims.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 12:38:41 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 04 Apr 2026 08:36:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69d0cda8-293\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NAvfe9bNq5du3PVQngv8XgocWUGsouEvsrqDLYNjn77ouiZDMHpxDqYrbo79pvVx2Fsvo4HjNHBdwKQ1ddMs0G3j3sr%2BUdekJpbh3HMzdgdHLA9FKQNEmL73tCaq2N5gdVk%3D\"}]}\r\ncf-ray: 9e705f1fcd815694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":659,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7db9567d7c735c895df4d693a1ea96b0","sha1":"c33f9dca44ad64edd4c3560bb33450c57d650392","sha256":"8fbe624b4d0034ed90718be42b78cd97ecc31f96e0284fd3020ae0d24ebf6678","sha512":"c8279241428ff64628254fe26671b7d99d3c9f0273abae473986ecc4c00da82eb8a22f825defd1cba45fff69e03f3ca49ebe3d3ae6c797957746e0427ea55987","ssdeep":"","tlshash":"bb0123ef10bc411ceb083b501f19602495f26980052ccd17f3902a2e95456477e253cb","first_seen":"2025-01-02T20:20:01.018836Z","last_seen":"2026-04-04T12:39:09.122695Z","times_seen":79,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"pepe-claims.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pepe-claims.app/","fqdn":"pepe-claims.app","domain":"pepe-claims.app","tld":"app"},"ip":{"addr":"172.67.159.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-04T12:38:38.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pepe-claims.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 07:42:55 GMT","end":"Fri, 03 Jul 2026 07:42:54 GMT"},"fingerprint":{"sha1":"70:F3:7B:63:E0:6D:93:B8:BE:4A:C1:11:46:86:B2:C4:4D:E2:D3:7E","sha256":"48:CA:2D:67:9F:AF:47:FD:4E:77:3D:C2:AD:71:F9:B3:38:28:DB:4D:DD:DA:E3:A8:7A:FA:41:E0:C7:0F:E7:15"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: pepe-claims.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 12:38:40 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sat, 04 Apr 2026 08:36:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iKBGFhV8p%2FYtyrh1lhgCUIuUrZWL1KRlJcoMyk1yofIWE7X068ESIrHJfol6j583Yaob3%2FliugzyYp3qpr%2F7Jp%2FC7iDAK%2BRdwbEf%2BQvR6GYzBwGugdwi55fQ8p8Goib3Nww%3D\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9e705f0ddb535690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Webflow","description":"Webflow is Software-as-a-Service (SaaS) for website building and hosting.","website":"https://webflow.com","common_platform_enumeration":"","icon":"webflow.svg","categories":["Page builders","CMS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}],"data":{"size":10144,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1691)","md5":"8ef2400f4d961351782ed6b810a0dc25","sha1":"123f7454894349ca9211ffb35581996174489ffe","sha256":"aa64fd56e4adad22936879ddab5c5c38edd4f317265ff67136e05c7fafe2bd04","sha512":"bbdd411a1726db9c2ec2ef56e1fa56a0361f7751d9ba2d6cfa8efa4cb8d4fbe105864f5858072e720187853fbd835304273396fd196eca8dfe7e22293847042c","ssdeep":"192:zfMX1yLmZ7+5rJMV7vWA7O0To4y8HHoh5J:zfqyO7k+740To4y8HHoh5J","tlshash":"ba22a40e61f452db11238084a7f0b60c458f6183b9261edbb3ec1ac2cf8afd89d56b5d","first_seen":"2026-03-13T02:55:25.867173Z","last_seen":"2026-04-04T12:39:09.123954Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1282,"timings":{"blocked":40,"dns":23,"connect":1,"send":0,"wait":1202,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"pepe-claims.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pepe-claims.app/65754e3b30d4d1e471a297bb_btn-bg.svg","fqdn":"pepe-claims.app","domain":"pepe-claims.app","tld":"app"},"ip":{"addr":"172.67.159.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pepe-claims.app/","date":"2026-04-04T12:38:41.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pepe-claims.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Apr 2026 07:42:55 GMT","end":"Fri, 03 Jul 2026 07:42:54 GMT"},"fingerprint":{"sha1":"70:F3:7B:63:E0:6D:93:B8:BE:4A:C1:11:46:86:B2:C4:4D:E2:D3:7E","sha256":"48:CA:2D:67:9F:AF:47:FD:4E:77:3D:C2:AD:71:F9:B3:38:28:DB:4D:DD:DA:E3:A8:7A:FA:41:E0:C7:0F:E7:15"}}},"request":{"raw":"GET /65754e3b30d4d1e471a297bb_btn-bg.svg HTTP/1.1\r\nHost: pepe-claims.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pepe-claims.app/booster-farcana.webflow.8976fbee8.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 12:38:41 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 04 Apr 2026 08:36:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69d0cda8-232\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RM4%2BOdGIpgxE89%2Fixh9VaZKb9F6cfpigyGRhaCQu2zhTzQogk5oWnzXIMPdnYdQrca0iCQBDd%2B9fTKkrLzHCERQey5jjYGyAwekLFdLcD%2B5Qo5yrtMPNo17wDACslgwHpwk%3D\"}]}\r\ncf-ray: 9e705f1f8d7b5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":562,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a58714172f34818f0cf25b4766f97ded","sha1":"a56afe343a24841e3b06fac7bdd371d7cbb6ed3e","sha256":"4d3db083940c2fe4272f1564e4d9099d9545217c421343a29ccae657312483ed","sha512":"17fe637d8747f1deae6ae116770bb2c4204dc183cc72fb74294d693a85bb0988472c13c0625cd4bd28b5bdd31028b76a1e79ec99ecb1aa749bd42a82730aaa1b","ssdeep":"","tlshash":"78f08b959e240bf6c8c4a3d0a95404f9106a20a251c600f9c7d27a96f4684f6ef166cc","first_seen":"2025-01-02T20:20:01.012271Z","last_seen":"2026-04-04T12:39:09.125549Z","times_seen":79,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"pepe-claims.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}