{"report_id":"3799626f-8149-4172-af45-37a3bb18f38b","version":6,"status":"done","tags":[],"date":"2026-01-30T06:19:49Z","url":{"schema":"https","addr":"acurastclaim.click/","fqdn":"acurastclaim.click","domain":"acurastclaim.click","tld":"click"},"ip":{"addr":"104.21.93.142","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"acurastclaim.click/","fqdn":"acurastclaim.click","domain":"acurastclaim.click","tld":"click"},"title":"Acurast - The Real Decentralized Compute Network","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T14:51:47.486746Z","times_seen":17872751,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"acurastclaim.click/","fqdn":"acurastclaim.click","domain":"acurastclaim.click","tld":"click"},"ip":{"addr":"104.21.93.142","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-06T06:19:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-25T22:14:35.458366Z","alert_count":0,"request_count":3,"received_data":72363,"sent_data":1667,"comment":"","tags":null,"fingerprints":null},{"fqdn":"acurastclaim.click","ip":{"addr":"104.21.93.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-28","domain_rank":0,"first_seen":"2026-01-30T05:56:29.279363Z","last_seen":"2026-01-30T05:56:29.279364Z","alert_count":0,"request_count":7,"received_data":4415436,"sent_data":3211,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-25T22:17:37.642954Z","alert_count":0,"request_count":1,"received_data":7211,"sent_data":510,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"acurastclaim.click/b90ba5ef-4737-4f6f-a4b3-2c34942177dc","fqdn":"acurastclaim.click","domain":"acurastclaim.click","tld":"click"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"7df73988252e4e56e97ba60a379b1adb","sha1":"71fcb419a05752a6816ec8cb8d6ff66f2b286575","sha256":"795b58fa3e79ac5f0fe3f40fd1a8780febc568757a02fb88cece17317ec0a0d3","sha512":"76bbb9908159d4a89749d84c7cfc019cebaecb2a738e68d09f3e7194cd362e8991548472274377a2b829abdeccdd6a077443dca3c4c9f205ccf78d4a3568702e","ssdeep":"768:FVX6Xl2NCM1idz41CAr7cC2Iq5a87XZUXfl2rsi14UcCs+Wl4:FVLCl","tlshash":"6ca333131cbe346b048f4b63f5295e47af5ffa43da16624cb2bc26852fb7d56c982204","size":107243,"data":"","first_seen":"2025-12-16T18:55:46.047375Z","last_seen":"2026-08-12T06:51:11.178517Z","times_seen":466,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acurastclaim.click/chunk.17.pdqsd1fn.js","fqdn":"acurastclaim.click","domain":"acurastclaim.click","tld":"click"},"ip":{"addr":"104.21.93.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3aa7175dcec449ecefae00129a3058c","sha1":"a5a5364982829bc5325a3415db1a971cdafd7186","sha256":"1cf3348c0f5bf2741eed22596184d4bc74dcca884236a02bca8cfe715f1db9ae","sha512":"ff912365cb7ee2da19b4b7475c3c4921ce44a4d9e054f44d36470710d371cdeca7cdb084c59dd36e7d1b21d273c186e5289a35526a0dbbc7beafa73e0518c0a3","ssdeep":"768:w64+xconrCs6+bvCs6+bInuJk8BeMq2SKT8n15GmC1/ocL26w/wMANZcGXoU7Dce:fLDKMqTHwhZqWT","tlshash":"a753c7d9690ad0e58e5120ced8b7e949f4640e23cdacf2a3aa7cddc1741ef22844757b","size":63681,"data":"","first_seen":"2026-01-28T04:59:25.999582Z","last_seen":"2026-01-30T06:19:50.652872Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sora/v17/xMQ9uFFYT72X5wkB_18qmnndmSdSnh2BAfO5mnuyOo1lfiQwV6-x.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://acurastclaim.click/","date":"2026-01-30T06:19:25.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /s/sora/v17/xMQ9uFFYT72X5wkB_18qmnndmSdSnh2BAfO5mnuyOo1lfiQwV6-x.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://acurastclaim.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 25284\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 23 Jan 2026 13:06:16 GMT\r\nexpires: Sat, 23 Jan 2027 13:06:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 17:59:26 GMT\r\ncontent-type: font/woff2\r\nage: 580389\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25284,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25284, version 1.0","md5":"fc575ebf6f7c3646d13d9386cf8a86e0","sha1":"779e9507b31992161d36df9f8a78ee73a6e64225","sha256":"811e11966d29f3a01fcb19b087b61ac067d380665a55aebb7fcdf2cda95e4a93","sha512":"bf1f6890960e5fe79619d0a7757b95b9e422e3aa5634b1fcfe7b59f018234ec9aff01ae70d9b3593e1e5ddde78e716139c443e5ab0741a61c5d6b1637397412c","ssdeep":"384:dZgkQy8vw6D97NySvnt+kywHJ0WQ5k77oyquIw8CTTu36ioguDDYdiW3I7Oa4Leq:dmJ0G95ySAIHJvd2uIw86zioFA2OC5cL","tlshash":"63b2f14db61d308cfa05cabf0ecb8aba2031dc44bd5b39c4f217928739f6a6599c4564","first_seen":"2025-09-10T18:00:33.205576Z","last_seen":"2026-08-13T12:58:37.665568Z","times_seen":2982,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":191,"dns":3,"connect":20,"send":0,"wait":21,"receive":9,"ssl":166},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://acurastclaim.click/","date":"2026-01-30T06:19:25.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://acurastclaim.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 29 Jan 2026 16:31:56 GMT\r\nexpires: Fri, 29 Jan 2027 16:31:56 GMT\r\ncache-control: public, max-age=31536000\r\nage: 49649\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22288,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-08-13T14:22:15.333863Z","times_seen":27333,"resource_available":false,"data":null}},"time_used":429,"timings":{"blocked":198,"dns":0,"connect":20,"send":0,"wait":22,"receive":8,"ssl":178},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acurastclaim.click/image1.svg","fqdn":"acurastclaim.click","domain":"acurastclaim.click","tld":"click"},"ip":{"addr":"104.21.93.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://acurastclaim.click/","date":"2026-01-30T06:19:24.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acurastclaim.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 17:00:10 GMT","end":"Tue, 28 Apr 2026 17:58:49 GMT"},"fingerprint":{"sha1":"C6:24:E8:C9:71:B4:6E:A7:F4:E7:74:63:CC:86:86:EB:15:9F:C7:13","sha256":"16:44:BB:0A:0C:1F:EA:E9:39:74:94:AC:EF:6E:CF:77:18:60:D3:8F:31:70:D8:F7:CB:F1:02:6B:B6:A3:DE:01"}}},"request":{"raw":"GET /image1.svg HTTP/1.1\r\nHost: acurastclaim.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acurastclaim.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:19:24 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 17:52:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 1398\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"697a4cc2-916\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=szzHqHEvSYjUwfPJ5WMcRebv1iWqAgSxvzKFR4qS9gc3n%2F5IAwVMS%2Fzvtk0pmhvOUlokacs8nOrNN5AvOa8SJWODrCpyZ50g%2FAUKLR%2BpXjj6Yg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c5edb886c245a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2326,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6b04be91dedbce5ac9d7ebe37642f06d","sha1":"1ba0588fd1a458e3d31b6c1ede678304f2b20edf","sha256":"1c186cf87b8d641955b0dcdfe252a7ddadf4037523f36e4bce90e6be11e77aac","sha512":"08801c4382d4b5d4f17833acf0fea725ffad22dddc175ee990d482fed2c9c54e251dbe00a947d8551d4fa373fcc6ed964c598f60c90b7a2942b591dcea0b7226","ssdeep":"","tlshash":"424141d6f5504de840210fc5dfe22869111cf0ace1b708c5f37794a7a592aa43accbd5","first_seen":"2025-11-17T09:54:05.352703Z","last_seen":"2026-01-30T06:19:50.648796Z","times_seen":5,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acurastclaim.click/image2.png","fqdn":"acurastclaim.click","domain":"acurastclaim.click","tld":"click"},"ip":{"addr":"104.21.93.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://acurastclaim.click/","date":"2026-01-30T06:19:24.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acurastclaim.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 17:00:10 GMT","end":"Tue, 28 Apr 2026 17:58:49 GMT"},"fingerprint":{"sha1":"C6:24:E8:C9:71:B4:6E:A7:F4:E7:74:63:CC:86:86:EB:15:9F:C7:13","sha256":"16:44:BB:0A:0C:1F:EA:E9:39:74:94:AC:EF:6E:CF:77:18:60:D3:8F:31:70:D8:F7:CB:F1:02:6B:B6:A3:DE:01"}}},"request":{"raw":"GET /image2.png HTTP/1.1\r\nHost: acurastclaim.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acurastclaim.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:19:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 91848\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 17:52:02 GMT\r\netag: \"697a4cc2-166c8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 1398\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QjSP6TIzxJZjnGjbQUAH%2BC1rxQUNBoDFKzvy%2FNT64BF7Na8pqmbYjs2v18ugG3EGkarakA56SwW1KxZqWwCrkbV%2FIEF9nA0zN5ii0uluQrry8Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c5edb886c255a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":91848,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit colormap, non-interlaced","md5":"28071d696f84edf19ae9d0c3b32b0000","sha1":"7d240aca0fbf7bcc40316b7f0df72de8ce0fb49f","sha256":"949683c814d4393f27c11772e21a753fbd0aa847f0274c203e792488b9ba4253","sha512":"3b80520e080748b952f6685e884149902077db9bf62389ad37da4952be10d7e5f9892705bd80912eefcb5f68b2279cdeb4a56f4d5897c0766cc45edf2c36e470","ssdeep":"1536:7yZiuECP9Vxfy9Rg2pLoqNjKebBqdOwJ2ltiggFNXbASewcF:7yZiuhxq/gmLoqgFJ2ltidXbApfF","tlshash":"ad9312d6c9cd945acd8f8eb3843d52879b6393c844bc627609f3bc104f5b53748952b9","first_seen":"2026-01-28T04:59:26.006259Z","last_seen":"2026-01-30T06:19:50.649351Z","times_seen":4,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acurastclaim.click/image3.jpg","fqdn":"acurastclaim.click","domain":"acurastclaim.click","tld":"click"},"ip":{"addr":"104.21.93.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://acurastclaim.click/","date":"2026-01-30T06:19:24.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acurastclaim.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 17:00:10 GMT","end":"Tue, 28 Apr 2026 17:58:49 GMT"},"fingerprint":{"sha1":"C6:24:E8:C9:71:B4:6E:A7:F4:E7:74:63:CC:86:86:EB:15:9F:C7:13","sha256":"16:44:BB:0A:0C:1F:EA:E9:39:74:94:AC:EF:6E:CF:77:18:60:D3:8F:31:70:D8:F7:CB:F1:02:6B:B6:A3:DE:01"}}},"request":{"raw":"GET /image3.jpg HTTP/1.1\r\nHost: acurastclaim.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acurastclaim.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:19:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 74109\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 17:52:02 GMT\r\netag: \"697a4cc2-1217d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 1398\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eNMK1Pj7mQ%2BOJK3RxDIqUYoONUseK%2Fg6rrvyUZiYMGhd9XY851AlxDIMw4gtUnltkW3MDOWUDSOcc80hu5ZCLr30WPRBftv0emYa8otiMOJTVg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c5edb886c265a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":74109,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x720, components 3","md5":"bd6faacd45da93e467d0a870b2d40c03","sha1":"2920400c21297d533197401ab67e611532786e2d","sha256":"5a0931e0d737eb7551235bbbefeb5e7fabcfcacd288f4ec95a965728e628e62a","sha512":"2b0ae8dea20951be77413c8c42bd69c9515cb0042d659f1e5789b521d478942c7574a54fb91456ab35bfbe36e4b65b3e7c60e07a2e75c2eec55c1cedb0d1144e","ssdeep":"1536:enY4V5Z5ZUhm2/rkXGTO2SaqaNp1m1Io+Boj7ilnsZoIktAHq:uY4VP5Z6m6kG0aG1J+BojrJzHq","tlshash":"1273020d631c90fae339a7302efb47c236690f2468b59b53cb49845f926f2712eda5d1","first_seen":"2026-01-28T04:59:26.012505Z","last_seen":"2026-01-30T06:19:50.650099Z","times_seen":4,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acurastclaim.click/acu-icon.png","fqdn":"acurastclaim.click","domain":"acurastclaim.click","tld":"click"},"ip":{"addr":"104.21.93.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://acurastclaim.click/","date":"2026-01-30T06:19:25.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acurastclaim.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 17:00:10 GMT","end":"Tue, 28 Apr 2026 17:58:49 GMT"},"fingerprint":{"sha1":"C6:24:E8:C9:71:B4:6E:A7:F4:E7:74:63:CC:86:86:EB:15:9F:C7:13","sha256":"16:44:BB:0A:0C:1F:EA:E9:39:74:94:AC:EF:6E:CF:77:18:60:D3:8F:31:70:D8:F7:CB:F1:02:6B:B6:A3:DE:01"}}},"request":{"raw":"GET /acu-icon.png HTTP/1.1\r\nHost: acurastclaim.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acurastclaim.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:19:25 GMT\r\ncontent-type: image/png\r\ncontent-length: 3280\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 17:52:02 GMT\r\netag: \"697a4cc2-cd0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 1397\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZKtYEMtIP%2BnDEi58pgBq0KIKZPqUCJvTxAOn4VoeFA8ULvwxcnZbbJ1Zanhml8DxPczhiFXTJvsC7x70A0z%2FT96NZFKr5J3eVMo6KZqo9vGVyg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c5edb897c405a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3280,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"da89a23d2d9b702010daad9f3265da0f","sha1":"096f28b62c84d2b389a2f72f453b9e3d25fba3f5","sha256":"8568b964b0fefb543af1ba288410d38528426140292543cc96552dbc534a9b36","sha512":"c15c56b5a2af48cd938a7374977891b1294279c49ec6708647e6a1152a3ff9cb420cf94fbe67431f108e6c3222669e3a72690ffd033f2c6c010fc475e9e3769e","ssdeep":"","tlshash":"6e61f81fd672c7be96b8454ffe794a90113b972eb8340391e422b1f9f0ac1c595390d0","first_seen":"2026-01-28T04:59:26.008399Z","last_seen":"2026-01-30T06:19:50.650596Z","times_seen":4,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://acurastclaim.click/","date":"2026-01-30T06:19:25.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://acurastclaim.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 29 Jan 2026 16:31:56 GMT\r\nexpires: Fri, 29 Jan 2027 16:31:56 GMT\r\ncache-control: public, max-age=31536000\r\nage: 49649\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22288,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-08-13T14:22:15.333863Z","times_seen":27333,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":96,"dns":2,"connect":20,"send":0,"wait":22,"receive":7,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acurastclaim.click/secureproxy?e=jscdn/getFile","fqdn":"acurastclaim.click","domain":"acurastclaim.click","tld":"click"},"ip":{"addr":"104.21.93.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://acurastclaim.click/","date":"2026-01-30T06:19:25.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acurastclaim.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 17:00:10 GMT","end":"Tue, 28 Apr 2026 17:58:49 GMT"},"fingerprint":{"sha1":"C6:24:E8:C9:71:B4:6E:A7:F4:E7:74:63:CC:86:86:EB:15:9F:C7:13","sha256":"16:44:BB:0A:0C:1F:EA:E9:39:74:94:AC:EF:6E:CF:77:18:60:D3:8F:31:70:D8:F7:CB:F1:02:6B:B6:A3:DE:01"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: acurastclaim.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://acurastclaim.click/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://acurastclaim.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"wx2ko9b8kt4xx3iyv0yd\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:19:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qf1v%2FmBDAfh59PbGrJibFzHrLrm%2BrWxdmglCjSMl1PpRbOy3UVtlgx7kwXesQ4NTHcn%2BahHq1bkVF1%2FQVYqR25W71KvZE0o1Llylih0W3tG19g%3D%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: 9c5edb89ac435a0f-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4157985,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"509a6e7a004b7dcb29ebccdfe6424856","sha1":"09b16992040e874a5b5238271ecee606826ea2d7","sha256":"8287821957512424b71983c2853353c691e505101ae9936b24a09b445d82d0d4","sha512":"be9215937c30b0be20486f71e5d7881d7edfdef1bbd6e61cbc92bee151ef95a71d09154cbfe1acfc99af010cd2da7e2f8f4d06c616391a9ed28bfaa8a541e413","ssdeep":"24576:7TfSCXfoZCk34a9LLJuEVacUC4xAW+lY77GRYpJan:7TaPZxoa9PQEuxAXYvGRYvan","tlshash":"052512d5b4a1f0d367799c34e4f95e7859ea806ffbc64a367540f8c020aa22582dcfb1","first_seen":"2026-01-30T05:56:33.524114Z","last_seen":"2026-01-30T06:19:50.65136Z","times_seen":2,"resource_available":false,"data":null}},"time_used":747,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":458,"receive":289,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acurastclaim.click/","fqdn":"acurastclaim.click","domain":"acurastclaim.click","tld":"click"},"ip":{"addr":"104.21.93.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-30T06:19:24.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acurastclaim.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 17:00:10 GMT","end":"Tue, 28 Apr 2026 17:58:49 GMT"},"fingerprint":{"sha1":"C6:24:E8:C9:71:B4:6E:A7:F4:E7:74:63:CC:86:86:EB:15:9F:C7:13","sha256":"16:44:BB:0A:0C:1F:EA:E9:39:74:94:AC:EF:6E:CF:77:18:60:D3:8F:31:70:D8:F7:CB:F1:02:6B:B6:A3:DE:01"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: acurastclaim.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 30 Jan 2026 06:19:24 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 17:52:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fm%2BzCSQydivf525XoJmXJzgj9IBXUqd%2BPJsVXbW%2F1Ol7gmzqyMa%2FGdn2Vo7LRHgGXPxT8Jt5jCkIvhKblFX1Cmkgc22%2F7dqK6dI7KHfZ0aI%3D\"}]}\r\nage: 1398\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9c5edb878a71b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"ad2c083879b1255b4cadc7d7a0f5a9cc","sha1":"d0bd72292e995af7675d934726ca37d7cecfb61d","sha256":"a321664fde9a1b23c5cfcc7646ef4ce08db5afa3289ead3b456c8e8719126406","sha512":"9506c7e1ee77c8d9bce1ed4c7b8e171a591a56c8263abb0a4a8b480a72602472853a9bcf6a1f5ce4290958a9255ab0c3fcc90339661d20cfe4048a8dcea61434","ssdeep":"192:t1kg8O2ycHXZR+h1pau+MaRl6Msd5L2lRFfwk/Xup6J5HXfkaJJ5nVwIbMFL8GV1:M13eet/3LtXwIbrW","tlshash":"1862539b92f312617827e1b56beb574677b0d003c009cd2d3fcd624c8f8a6d9ea52389","first_seen":"2026-01-28T04:59:25.997316Z","last_seen":"2026-01-30T06:19:50.652026Z","times_seen":4,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":68,"dns":54,"connect":1,"send":0,"wait":10,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"acurastclaim.click/chunk.17.pdqsd1fn.js","fqdn":"acurastclaim.click","domain":"acurastclaim.click","tld":"click"},"ip":{"addr":"104.21.93.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://acurastclaim.click/","date":"2026-01-30T06:19:24.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"acurastclaim.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 17:00:10 GMT","end":"Tue, 28 Apr 2026 17:58:49 GMT"},"fingerprint":{"sha1":"C6:24:E8:C9:71:B4:6E:A7:F4:E7:74:63:CC:86:86:EB:15:9F:C7:13","sha256":"16:44:BB:0A:0C:1F:EA:E9:39:74:94:AC:EF:6E:CF:77:18:60:D3:8F:31:70:D8:F7:CB:F1:02:6B:B6:A3:DE:01"}}},"request":{"raw":"GET /chunk.17.pdqsd1fn.js HTTP/1.1\r\nHost: acurastclaim.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acurastclaim.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:19:24 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 17:52:02 GMT\r\netag: W/\"697a4cc2-f8c1\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 1398\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vO61GjVeGskSEwa%2FHsPVNWLEX2JYtjiZFWhmgovxkUJHkxI%2B1tqZChHzVGbY0JSNO%2F9pLgM929ZBz3As8qYbcLHDm1OHYcbotNB99ZF3K7PaZQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5edb886c235a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63681,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (63681), with no line terminators","md5":"d3aa7175dcec449ecefae00129a3058c","sha1":"a5a5364982829bc5325a3415db1a971cdafd7186","sha256":"1cf3348c0f5bf2741eed22596184d4bc74dcca884236a02bca8cfe715f1db9ae","sha512":"ff912365cb7ee2da19b4b7475c3c4921ce44a4d9e054f44d36470710d371cdeca7cdb084c59dd36e7d1b21d273c186e5289a35526a0dbbc7beafa73e0518c0a3","ssdeep":"768:w64+xconrCs6+bvCs6+bInuJk8BeMq2SKT8n15GmC1/ocL26w/wMANZcGXoU7Dce:fLDKMqTHwhZqWT","tlshash":"a753c7d9690ad0e58e5120ced8b7e949f4640e23cdacf2a3aa7cddc1741ef22844757b","first_seen":"2026-01-28T04:59:25.999582Z","last_seen":"2026-01-30T06:19:50.652872Z","times_seen":4,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Space+Grotesk:wght@400;500;600\u0026family=Sora:wght@500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://acurastclaim.click/","date":"2026-01-30T06:19:24.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:24 GMT","end":"Mon, 23 Mar 2026 19:52:23 GMT"},"fingerprint":{"sha1":"43:39:AF:0A:74:F9:2F:1B:C0:1E:4E:89:21:30:C2:28:EC:9F:6C:67","sha256":"EA:F1:0E:C7:36:18:F3:9D:D1:D5:34:23:44:7D:6F:9D:2F:61:C7:81:09:9E:E9:C8:02:C8:F2:2C:0A:83:B3:A5"}}},"request":{"raw":"GET /css2?family=Space+Grotesk:wght@400;500;600\u0026family=Sora:wght@500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://acurastclaim.click/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 30 Jan 2026 06:19:24 GMT\r\ndate: Fri, 30 Jan 2026 06:19:24 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6525,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"04ff3b3ad69956b712d279b877ad5c23","sha1":"c644d4f0a01ee661d1db72a47ed40a65a35901a8","sha256":"9b05068b6e559bf39c7f8cd6280765501e758fd10b10f2bab59c6250af7ef750","sha512":"8c0fef5df9bc51f0829676913fb1fa77e44802c07b74ef6adb6ca2effb086365f88c0132b25fce8a47191011bb01709dcd2f5d0992e70e91e08e9b30f6d2ca7f","ssdeep":"96:EOXa1xJc+uoOXa1PNlOxMa1xJc+uoOxMa1PNlOpa1xJc+uoOpa1PNDNQOEaHQOEG:E1BB1+1Bo191Bv1px/GiZC4GRZfRG4W","tlshash":"c4d1f0920467e504eba35cc226cdbe32fe4ea1556454da396ffe18d8ec9ec211311b2d","first_seen":"2026-01-28T04:59:26.002061Z","last_seen":"2026-01-30T06:19:50.653464Z","times_seen":4,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":102,"dns":0,"connect":8,"send":0,"wait":21,"receive":0,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}