{"report_id":"42015b01-1049-4e04-bb68-b202ad53c9c4","version":0,"status":"done","tags":[],"date":"2026-07-17T08:29:18Z","url":{"schema":"http","addr":"ansemclaim.live","fqdn":"ansemclaim.live","domain":"ansemclaim.live","tld":"live"},"ip":{"addr":"104.21.10.241","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ansemclaim.live/","fqdn":"ansemclaim.live","domain":"ansemclaim.live","tld":"live"},"title":"The Black Bull | $ANSEM","dom":{"size":263777,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (54883)","md5":"f4dfe2575f68064e7764e53bd57478cc","sha1":"ca946c7b7f2b0378833f5232d78318ffd83aca1e","sha256":"50651a3c90bd8a77bac24eb29d7d00136de5033d5af386e9695b6b2b232416fe","sha512":"3697f0413c83cf711fd7fa73c430fac461d6a0f833929a6428d389b11ff5bdefc7424bc078d3791f14acf9c1678a521c65c4424be7f0e9ca9c9edaf34f04fcdb","ssdeep":"3072:MT5jwiteQ+iEUozqAcBjuBBXRlAZVmqBrpd868c8uDl:MTWiteQ+iEUoWalAZVmqBrpd868c8A","tlshash":"e144c534e2905a3ea84342f5f394ba3c4249e356c41ba466f3ec53735bcadd2a93319c","dom_hash":"domhashfeaafd163414b7355012648966adf3b6","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ansemclaim.live","fqdn":"ansemclaim.live","domain":"ansemclaim.live","tld":"live"},"ip":{"addr":"104.21.10.241","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-21T08:29:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ansemclaim.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-12T22:22:25.184057Z","alert_count":0,"request_count":2,"received_data":21564,"sent_data":1027,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ansemclaim.live","ip":{"addr":"172.67.147.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-16T10:57:28.284274Z","last_seen":"2026-07-16T10:57:28.284274Z","alert_count":14,"request_count":14,"received_data":3098365,"sent_data":6610,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-12T22:19:35.511658Z","alert_count":0,"request_count":3,"received_data":184427,"sent_data":1725,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ansemclaim.live/","fqdn":"ansemclaim.live","domain":"ansemclaim.live","tld":"live"},"ip":{"addr":"172.67.147.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"af304c227e3b5b828e78a3a9c782bd33","sha1":"02db97fc140d1d2ca35df2815f5136cd46a12f8c","sha256":"fa25f86a98a44bee39aad0580dde6e8bccbc0c29bfaaa9c6f14e2a6384673b39","sha512":"31fe00d848e46a5041e141530b88599c86f20c8913f6c6e8cba931354d9d6e46bcd5aae6757f92353157e337f0fbf171484b62b1809c2a61130a0f2099100571","ssdeep":"6144:d+Frzet2WVKH7z4qF8ZyOBHU3eNDqwoYRZ9wBqGPw4KLWo36rtCCOx8PTjGKPHEo:d8e8WaX8fdU3bwoYCUx87iKPb","tlshash":"d125705112cc5a6f2f4083c738f5489a1e29749acccd087bb6d4d2c5de6af1db2af690","size":974515,"data":"","first_seen":"2026-07-12T18:49:06.899666Z","last_seen":"2026-07-18T10:38:03.309304Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ansemclaim.live/_nuxt/assets/index.js","fqdn":"ansemclaim.live","domain":"ansemclaim.live","tld":"live"},"ip":{"addr":"172.67.147.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"df04374663686eead38b85f1019e156b","sha1":"e762f75876c64911122e4a616335acd1629cef19","sha256":"d831fd6664829745fcebd2b22b441b2b5bd4bd081bc93d5b997a652ec6cc3be9","sha512":"9a1e6dc86ab4eb1d530eed7d795744d94a76a3efa6cd07b4c8dd9e3eaeceac3e2061f01d1e36dbeb1d7c4eb29c9a4db0e5c1eb93de45683cb0b206ccc03646bf","ssdeep":"6144:bORVStfnq1iGN0djJ05e8r02H3n5t7i9cI3+XKYPR6IhVXz8lhcAm73dCdoaxBaD:28q4GixyvumOPmeRQoqJhW/Ky5J+Ei","tlshash":"4e255f6312cc59af3e40afc728f11c351ce9749acc08087ba296d9c4dd66f69b76fa50","size":1010117,"data":"","first_seen":"2026-07-12T18:49:06.888305Z","last_seen":"2026-07-18T10:38:03.307205Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ansemclaim.live/index_1.html","fqdn":"ansemclaim.live","domain":"ansemclaim.live","tld":"live"},"ip":{"addr":"172.67.147.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"af304c227e3b5b828e78a3a9c782bd33","sha1":"02db97fc140d1d2ca35df2815f5136cd46a12f8c","sha256":"fa25f86a98a44bee39aad0580dde6e8bccbc0c29bfaaa9c6f14e2a6384673b39","sha512":"31fe00d848e46a5041e141530b88599c86f20c8913f6c6e8cba931354d9d6e46bcd5aae6757f92353157e337f0fbf171484b62b1809c2a61130a0f2099100571","ssdeep":"6144:d+Frzet2WVKH7z4qF8ZyOBHU3eNDqwoYRZ9wBqGPw4KLWo36rtCCOx8PTjGKPHEo:d8e8WaX8fdU3bwoYCUx87iKPb","tlshash":"d125705112cc5a6f2f4083c738f5489a1e29749acccd087bb6d4d2c5de6af1db2af690","size":974515,"data":"","first_seen":"2026-07-12T18:49:06.899666Z","last_seen":"2026-07-18T10:38:03.309304Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"1.16.23","filename":"https://ansemclaim.live/_nuxt/assets/index.js line 1 \u003e Function","line_number":3,"column_number":803503},{"level":"log","text":"1.16.23","filename":"https://ansemclaim.live/_nuxt/assets/index.js line 1 \u003e Function","line_number":3,"column_number":803503}]},"http":[{"url":{"schema":"https","addr":"ansemclaim.live/3283b0fc1cbf7009a06d46d927cf656aa602a04b.jpg","fqdn":"ansemclaim.live","domain":"ansemclaim.live","tld":"live"},"ip":{"addr":"172.67.147.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ansemclaim.live/","date":"2026-07-17T08:28:45.023Z","timestamp":1784276925023,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ansemclaim.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 16:14:02 GMT","end":"Tue, 13 Oct 2026 17:10:29 GMT"},"fingerprint":{"sha1":"84:88:5F:CC:FA:E7:96:DD:85:F3:04:18:D2:36:22:AB:64:5B:CB:1B","sha256":"D5:11:0D:03:11:57:D7:4E:73:BB:97:5E:98:ED:2F:36:5F:57:16:B9:A6:1C:5A:EF:79:8D:DE:C0:0A:5B:8D:38"}}},"request":{"raw":"GET /3283b0fc1cbf7009a06d46d927cf656aa602a04b.jpg HTTP/1.1\r\nHost: ansemclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 08:28:45 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Wed, 15 Jul 2026 20:56:32 GMT\r\netag: \"6a57f400-37f54\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 77513\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E5NppLZrwBq%2BFGkSFyFnJNqCqrDyKyy7lNhOXZLh0ALmdTjTOGTfjYpyNPve9IDN6f3%2FcyYN6qRvssq5JzXxp98yeM20BhO4rD0ESy39%2BW4NOrMP6yNa1IHnErIA9dTXQQ4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c7dffd685b32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 229204\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":229204,"size_decoded":229948,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x1024, components 3","md5":"738c7862aa0171bbcb5cd7c718e05a46","sha1":"3283b0fc1cbf7009a06d46d927cf656aa602a04b","sha256":"5339724dac12b3424388757d2d18544501b9bf13ddd18d750c62916a1d78ef21","sha512":"5dcdaae33d60115fb486426f7a00e3d26c2fe08179e14f282b3e9828cd4701873f90dc0650e5db8d58483397c802e6b7f11f0c4bd50392bd77fae2e04ad4e46a","ssdeep":"6144:3ucNr8q3L7Dh0Jb9A6CkJHzbLXBp+Pbyc94lh9u4sNQv:3ucV3PDwpHTF/L6byc9Oh046Qv","tlshash":"3f2413750f037e52b3b76b1dff9e9ce62766e54d8a40116280b1a301d0daa74fbd2863","first_seen":"2026-07-07T19:52:21.713852Z","last_seen":"2026-07-17T16:48:00.007737Z","times_seen":15,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ansemclaim.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ansemclaim.live/39d4f4252ec4501637df03f163c525d9e9ff2f5b.svg","fqdn":"ansemclaim.live","domain":"ansemclaim.live","tld":"live"},"ip":{"addr":"172.67.147.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ansemclaim.live/","date":"2026-07-17T08:28:45.048Z","timestamp":1784276925048,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ansemclaim.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 16:14:02 GMT","end":"Tue, 13 Oct 2026 17:10:29 GMT"},"fingerprint":{"sha1":"84:88:5F:CC:FA:E7:96:DD:85:F3:04:18:D2:36:22:AB:64:5B:CB:1B","sha256":"D5:11:0D:03:11:57:D7:4E:73:BB:97:5E:98:ED:2F:36:5F:57:16:B9:A6:1C:5A:EF:79:8D:DE:C0:0A:5B:8D:38"}}},"request":{"raw":"GET /39d4f4252ec4501637df03f163c525d9e9ff2f5b.svg HTTP/1.1\r\nHost: ansemclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ansemclaim.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 08:28:45 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a57f400-ff\"\r\npriority: u=4,i\r\nlast-modified: Wed, 15 Jul 2026 20:56:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AMHb5WE%2FUsJbMQZfNYQQcd23bDjJ%2BDMa%2FIUnqJkkMQa2YDiJwbFhEVLTHNKAj3Jo2ua6ePsrznDGVUHXd14YgLxK0b8w0pnMD4I7dIsJdFnw6ANxEZF5IeIAQYUdxqmIajw%3D\"}]}\r\nage: 77513\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a1c7dffd885e32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":255,"size_decoded":920,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0f7ab76732d9ef93b8398f46878de201","sha1":"39d4f4252ec4501637df03f163c525d9e9ff2f5b","sha256":"6aa1562b840baf5b873d52f0e98a51536b39a766195d8901bb8f38ed30f383c8","sha512":"c5f397ded32fcf44f155972e3a515da8f9890f79ccba7771688a42698f6d2bf2babfd85c1c8cdbad61b14742a4b945c2aaa6a01eb9354a700d8bbe14def48f32","ssdeep":"","tlshash":"8cd02ee2c1e45e4ee3084526f0dca91c742fe08013e908c490ea22d596a70a1ed112ba","first_seen":"2026-02-25T01:53:17.331815Z","last_seen":"2026-07-17T16:48:00.009386Z","times_seen":7,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ansemclaim.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ansemclaim.live/_nuxt/assets/index.js","fqdn":"ansemclaim.live","domain":"ansemclaim.live","tld":"live"},"ip":{"addr":"172.67.147.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ansemclaim.live/index_1.html","date":"2026-07-17T08:28:45.328Z","timestamp":1784276925328,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ansemclaim.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 16:14:02 GMT","end":"Tue, 13 Oct 2026 17:10:29 GMT"},"fingerprint":{"sha1":"84:88:5F:CC:FA:E7:96:DD:85:F3:04:18:D2:36:22:AB:64:5B:CB:1B","sha256":"D5:11:0D:03:11:57:D7:4E:73:BB:97:5E:98:ED:2F:36:5F:57:16:B9:A6:1C:5A:EF:79:8D:DE:C0:0A:5B:8D:38"}}},"request":{"raw":"GET /_nuxt/assets/index.js HTTP/1.1\r\nHost: ansemclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ansemclaim.live/index_1.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 08:28:48 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 12 Jul 2026 10:09:05 GMT\r\netag: W/\"6a5367c1-f6f29\"\r\naccess-control-allow-origin: *\r\ncache-control: no-store, no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kl5ymEE%2FKFuH%2FV0VthvDcoI%2FEsvi2VABoRefTqKLGuJtQRL812ZOu6OmxiBpCbDNqOWp4KsX%2Bq1SMNjfNfYrg1f6%2Fh%2BCNja4foFJh1Ga%2B%2Fugky5tfiTK2JTNFEJsjkZk2IA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c7dfff588432fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1011497,"size_decoded":244341,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (63260), with no line terminators","md5":"df04374663686eead38b85f1019e156b","sha1":"e762f75876c64911122e4a616335acd1629cef19","sha256":"d831fd6664829745fcebd2b22b441b2b5bd4bd081bc93d5b997a652ec6cc3be9","sha512":"9a1e6dc86ab4eb1d530eed7d795744d94a76a3efa6cd07b4c8dd9e3eaeceac3e2061f01d1e36dbeb1d7c4eb29c9a4db0e5c1eb93de45683cb0b206ccc03646bf","ssdeep":"6144:bORVStfnq1iGN0djJ05e8r02H3n5t7i9cI3+XKYPR6IhVXz8lhcAm73dCdoaxBaD:28q4GixyvumOPmeRQoqJhW/Ky5J+Ei","tlshash":"4e255f6312cc59af3e40afc728f11c351ce9749acc08087ba296d9c4dd66f69b76fa50","first_seen":"2026-07-12T18:49:06.888305Z","last_seen":"2026-07-18T10:38:03.307205Z","times_seen":62,"resource_available":true,"data":null}},"time_used":3630,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3345,"receive":285,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ansemclaim.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ansemclaim.live/api/config","fqdn":"ansemclaim.live","domain":"ansemclaim.live","tld":"live"},"ip":{"addr":"172.67.147.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ansemclaim.live/","date":"2026-07-17T08:28:46.886Z","timestamp":1784276926886,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ansemclaim.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 16:14:02 GMT","end":"Tue, 13 Oct 2026 17:10:29 GMT"},"fingerprint":{"sha1":"84:88:5F:CC:FA:E7:96:DD:85:F3:04:18:D2:36:22:AB:64:5B:CB:1B","sha256":"D5:11:0D:03:11:57:D7:4E:73:BB:97:5E:98:ED:2F:36:5F:57:16:B9:A6:1C:5A:EF:79:8D:DE:C0:0A:5B:8D:38"}}},"request":{"raw":"GET /api/config HTTP/1.1\r\nHost: ansemclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\ncontent-language: en-US,q=0.8;en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 08:28:47 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HSBf1oxCn%2FcbRDdKCXtpyooB2y8xjhYOiC%2FilZUnImRaMbhxsyZ2vnltPbx8NDz1M4Vz16S0YzV2yAFQzsMfQddkWhb0bXQLB3MDI2UnxCpdD%2Fbb7omVYffMcU29jAJ%2F8to%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1c7e009097532fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":215,"size_decoded":954,"mime_type":"text/plain; charset=utf-8","magic":"data","md5":"03ceb0a5cc98e46a353e2c7cee073fdc","sha1":"20103ca7d3c70dd4abadc5288fa156e89a0708af","sha256":"acee5d94208a3591e92dc55270e05b34e532e7f2054ba7f1fab4edacf0ef94df","sha512":"a7d7bac887da49600c7d4be4f5cbc3f88c4185875136090f301bcf0d58309565e329cf0534b72a0f21797ce59ea47f8f457f36677a734f8fefd5529087d17573","ssdeep":"","tlshash":"50e0e71f10f34938a489a8624011809eb13d2bce4c8dcd27f474bf01ec7b095e178c54","first_seen":"2026-07-17T08:29:23.852391Z","last_seen":"2026-07-17T08:29:23.852391Z","times_seen":1,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":371,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ansemclaim.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ansemclaim.live/","date":"2026-07-17T08:28:47.234Z","timestamp":1784276927234,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ansemclaim.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 01:48:42 GMT\r\nexpires: Fri, 16 Jul 2027 01:48:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 110405\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-18T15:17:15.094915Z","times_seen":238614,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":20,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ansemclaim.live/index_1.html","date":"2026-07-17T08:28:49.799Z","timestamp":1784276929799,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ansemclaim.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 17 Jul 2026 08:28:49 GMT\r\ndate: Fri, 17 Jul 2026 08:28:49 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":1427,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-07-18T15:09:00.391989Z","times_seen":34425,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ansemclaim.live/api/is-banned","fqdn":"ansemclaim.live","domain":"ansemclaim.live","tld":"live"},"ip":{"addr":"172.67.147.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ansemclaim.live/index_1.html","date":"2026-07-17T08:28:49.844Z","timestamp":1784276929844,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ansemclaim.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 16:14:02 GMT","end":"Tue, 13 Oct 2026 17:10:29 GMT"},"fingerprint":{"sha1":"84:88:5F:CC:FA:E7:96:DD:85:F3:04:18:D2:36:22:AB:64:5B:CB:1B","sha256":"D5:11:0D:03:11:57:D7:4E:73:BB:97:5E:98:ED:2F:36:5F:57:16:B9:A6:1C:5A:EF:79:8D:DE:C0:0A:5B:8D:38"}}},"request":{"raw":"GET /api/is-banned HTTP/1.1\r\nHost: ansemclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ansemclaim.live/index_1.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 08:28:50 GMT\r\ncontent-type: text/plain;charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncache-control: private, max-age=300\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CKmgGurz9eu1n7tlGXHgu%2F0v2C7i73%2BqAybjlLkTVz1PLQjXbwiTvj8XNt7uSxp7Zpq5gte2drRpnk2JsLrxVnlXZqMC6hZMA653aC1wrTkhxIuHsqImF7pvZ8cwMLzAjrM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c7e01b8c0e32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":758,"mime_type":"text/plain; charset=utf-8","magic":"very short file (no magic)","md5":"cfcd208495d565ef66e7dff9f98764da","sha1":"b6589fc6ab0dc82cf12099d1c2d40ab994e8410c","sha256":"5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9","sha512":"31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000000","first_seen":"2023-03-07T01:37:31Z","last_seen":"2026-07-18T14:55:11.858512Z","times_seen":117617,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ansemclaim.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ansemclaim.live/api/config","fqdn":"ansemclaim.live","domain":"ansemclaim.live","tld":"live"},"ip":{"addr":"172.67.147.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ansemclaim.live/index_1.html","date":"2026-07-17T08:28:49.845Z","timestamp":1784276929845,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ansemclaim.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 16:14:02 GMT","end":"Tue, 13 Oct 2026 17:10:29 GMT"},"fingerprint":{"sha1":"84:88:5F:CC:FA:E7:96:DD:85:F3:04:18:D2:36:22:AB:64:5B:CB:1B","sha256":"D5:11:0D:03:11:57:D7:4E:73:BB:97:5E:98:ED:2F:36:5F:57:16:B9:A6:1C:5A:EF:79:8D:DE:C0:0A:5B:8D:38"}}},"request":{"raw":"GET /api/config HTTP/1.1\r\nHost: ansemclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ansemclaim.live/index_1.html\r\ncontent-language: en-US,q=0.8;en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 08:28:50 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3LNl%2BS1IPlTmQfRcK3vYOy49SK1iTsCdphGBjJ3lc%2F6%2BIDjSktvLzc74c9iYUDx3lv4OpM2TU7p9NYDnphbuaK1KZ4XmzkV0p5bwVuuM6guxmn2MuSlajLCXnUD8yVcL9ss%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1c7e01b8c1032fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":215,"size_decoded":952,"mime_type":"text/plain; charset=utf-8","magic":"data","md5":"03ceb0a5cc98e46a353e2c7cee073fdc","sha1":"20103ca7d3c70dd4abadc5288fa156e89a0708af","sha256":"acee5d94208a3591e92dc55270e05b34e532e7f2054ba7f1fab4edacf0ef94df","sha512":"a7d7bac887da49600c7d4be4f5cbc3f88c4185875136090f301bcf0d58309565e329cf0534b72a0f21797ce59ea47f8f457f36677a734f8fefd5529087d17573","ssdeep":"","tlshash":"50e0e71f10f34938a489a8624011809eb13d2bce4c8dcd27f474bf01ec7b095e178c54","first_seen":"2026-07-17T08:29:23.852391Z","last_seen":"2026-07-17T08:29:23.852391Z","times_seen":1,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ansemclaim.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ansemclaim.live/","fqdn":"ansemclaim.live","domain":"ansemclaim.live","tld":"live"},"ip":{"addr":"172.67.147.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-17T08:28:44.417Z","timestamp":1784276924417,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ansemclaim.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 16:14:02 GMT","end":"Tue, 13 Oct 2026 17:10:29 GMT"},"fingerprint":{"sha1":"84:88:5F:CC:FA:E7:96:DD:85:F3:04:18:D2:36:22:AB:64:5B:CB:1B","sha256":"D5:11:0D:03:11:57:D7:4E:73:BB:97:5E:98:ED:2F:36:5F:57:16:B9:A6:1C:5A:EF:79:8D:DE:C0:0A:5B:8D:38"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ansemclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 08:28:44 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HDaiq%2B7%2FfQvttHj%2BFiBByw6jvLUT8%2B7E39KhGvOm8XKdT675zz1%2F9mDZx7CvlcoaFtSFqlFS4NgnqJVJmp%2FOcMvz%2F9Sfst7NqFzd9vv5cPUtW9bzCEq5NkpguL2UPWxwClY%3D\"}]}\r\npriority: u=0,i\r\nlast-modified: Wed, 15 Jul 2026 20:56:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a1c7dffa080b32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}],"data":{"size":247874,"size_decoded":32072,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (54883)","md5":"bc39a83180353d8e3714d13b714a943c","sha1":"dd44deed7e7e24422683d910e4e128f3d96d2dbb","sha256":"8ee7702a20775bed4aae759610bb05ce9a073f4425d54e749c56289e5c105661","sha512":"828cf632a86ee4bb3ba5e3db16a532b4cc50b2d2b27450ec0bb74ba73471d4b3a22e8b3027e67d4b8db2a04f49776ea91b8749b700cd9305ce684f25ae985381","ssdeep":"3072:IP5jwiteQ+iEUXnBDO0BX4lAZVmqBrpd868c8OWA:IPWiteQ+iEUelAZVmqBrpd868c8I","tlshash":"1734e634e2941a3ea85343f4f354bb3c4249d396d40ba466f3ed53775bcad82a92329c","first_seen":"2026-07-13T07:14:25.482494Z","last_seen":"2026-07-17T08:29:23.855059Z","times_seen":4,"resource_available":true,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":51,"connect":16,"send":0,"wait":302,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ansemclaim.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ansemclaim.live/_nuxt/assets/index.js","fqdn":"ansemclaim.live","domain":"ansemclaim.live","tld":"live"},"ip":{"addr":"172.67.147.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ansemclaim.live/","date":"2026-07-17T08:28:45.014Z","timestamp":1784276925014,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ansemclaim.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 16:14:02 GMT","end":"Tue, 13 Oct 2026 17:10:29 GMT"},"fingerprint":{"sha1":"84:88:5F:CC:FA:E7:96:DD:85:F3:04:18:D2:36:22:AB:64:5B:CB:1B","sha256":"D5:11:0D:03:11:57:D7:4E:73:BB:97:5E:98:ED:2F:36:5F:57:16:B9:A6:1C:5A:EF:79:8D:DE:C0:0A:5B:8D:38"}}},"request":{"raw":"GET /_nuxt/assets/index.js HTTP/1.1\r\nHost: ansemclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 08:28:45 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 12 Jul 2026 10:09:05 GMT\r\netag: W/\"6a5367c1-f6f29\"\r\naccess-control-allow-origin: *\r\ncache-control: no-store, no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gfj7jRma9zDVhYNXjIebcP0TtXmA9Zgjctt2%2FKteRXkcmh5WOfLEyro2dqNLQ968M2A%2FfX7QWr7XGBpEcClzXQMVXK8axv6XXJf9vvQ5vSYWgWa2dE78lcGiWjv2QxFn1jg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c7dffd585732fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1011497,"size_decoded":244329,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (63260), with no line terminators","md5":"df04374663686eead38b85f1019e156b","sha1":"e762f75876c64911122e4a616335acd1629cef19","sha256":"d831fd6664829745fcebd2b22b441b2b5bd4bd081bc93d5b997a652ec6cc3be9","sha512":"9a1e6dc86ab4eb1d530eed7d795744d94a76a3efa6cd07b4c8dd9e3eaeceac3e2061f01d1e36dbeb1d7c4eb29c9a4db0e5c1eb93de45683cb0b206ccc03646bf","ssdeep":"6144:bORVStfnq1iGN0djJ05e8r02H3n5t7i9cI3+XKYPR6IhVXz8lhcAm73dCdoaxBaD:28q4GixyvumOPmeRQoqJhW/Ky5J+Ei","tlshash":"4e255f6312cc59af3e40afc728f11c351ce9749acc08087ba296d9c4dd66f69b76fa50","first_seen":"2026-07-12T18:49:06.888305Z","last_seen":"2026-07-18T10:38:03.307205Z","times_seen":62,"resource_available":true,"data":null}},"time_used":662,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":348,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ansemclaim.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ansemclaim.live/2e40c013a825483167c5e320555b8fe70f397287.jpg","fqdn":"ansemclaim.live","domain":"ansemclaim.live","tld":"live"},"ip":{"addr":"172.67.147.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ansemclaim.live/","date":"2026-07-17T08:28:45.020Z","timestamp":1784276925020,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ansemclaim.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 16:14:02 GMT","end":"Tue, 13 Oct 2026 17:10:29 GMT"},"fingerprint":{"sha1":"84:88:5F:CC:FA:E7:96:DD:85:F3:04:18:D2:36:22:AB:64:5B:CB:1B","sha256":"D5:11:0D:03:11:57:D7:4E:73:BB:97:5E:98:ED:2F:36:5F:57:16:B9:A6:1C:5A:EF:79:8D:DE:C0:0A:5B:8D:38"}}},"request":{"raw":"GET /2e40c013a825483167c5e320555b8fe70f397287.jpg HTTP/1.1\r\nHost: ansemclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 08:28:45 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Wed, 15 Jul 2026 20:56:32 GMT\r\netag: \"6a57f400-3dc6c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 77513\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tnbsg6XAIOD3RzDsi97KOmoQkPcU5DJW0WhdePQbEzhcy87%2FXp1rWx6ZtJHFVuT4cXyAwgUltcPMGHbhAz%2Fb%2FoCq9Bea9IwRjOZ3pRtPD6JTMoU8fTkr85fdJyvYJrGT0lg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c7dffd685a32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 253036\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":253036,"size_decoded":253780,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 216x216, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 1206x1217, components 3","md5":"e41b8ee833ae545b048870cedd424c6e","sha1":"2e40c013a825483167c5e320555b8fe70f397287","sha256":"39f5621415125312550fca80765eae55a77e26ccdcbd54934acc01e835398908","sha512":"c9a344940986ace6c9d3319d4c096f25ef13e0305340cc887365fa1b061a824c8b6fae4cd8aa8bc7342b4edcbd749003326602bf88554f667dce16e340d3a0f4","ssdeep":"6144:lQsSRIrn97jmJP8HbwEgqp1CqDVr9Lydt4Ht9zTL:lQsrn1m6HbbzUiVhLy3CfL","tlshash":"7f34f175fbc3db49470b2a2c007e7c7b2b49a6d965e54a8312675c2b8940f7acad303c","first_seen":"2026-06-18T12:28:19.823005Z","last_seen":"2026-07-17T16:48:00.002559Z","times_seen":16,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ansemclaim.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ansemclaim.live/index_1.html","fqdn":"ansemclaim.live","domain":"ansemclaim.live","tld":"live"},"ip":{"addr":"172.67.147.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ansemclaim.live/","date":"2026-07-17T08:28:45.028Z","timestamp":1784276925028,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ansemclaim.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 16:14:02 GMT","end":"Tue, 13 Oct 2026 17:10:29 GMT"},"fingerprint":{"sha1":"84:88:5F:CC:FA:E7:96:DD:85:F3:04:18:D2:36:22:AB:64:5B:CB:1B","sha256":"D5:11:0D:03:11:57:D7:4E:73:BB:97:5E:98:ED:2F:36:5F:57:16:B9:A6:1C:5A:EF:79:8D:DE:C0:0A:5B:8D:38"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: ansemclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 08:28:45 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: zstd\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 15 Jul 2026 20:56:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KjUCo%2BQZ82bXRE6myvngW%2Fi3z5B2%2BYmIaVfWMk4V6KHN3dx7B3osNxOthSaoQHJJso2oYYBHizEnhjYpsZGRF9flkHy57LzsRkvUf8hUhWr2z71iOfQmxDwaiZdhOqPWkqo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a1c7dffd785c32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]}],"data":{"size":214,"size_decoded":803,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"a098d2ec18de767277a0c9454cc5f789","sha1":"b55037d2d4c02fca0f61274cfbbd7a425ef34b41","sha256":"671f0be6c670910c91e9edeb624a4391106ab823e7ea1ff025459f15af8ec159","sha512":"c963cc410baeb64d9aae573845c26c446c47611bc26acbfb13773690c8351e4c73713e326efd12d5ba0a45baeaa965bddb2994bae90ce4318fb76ba73bc585df","ssdeep":"","tlshash":"3ad02322dc58844a16203dd5cf51b4c9c442fd1c7c118c0c6468b554d9dd256c805598","first_seen":"2026-07-13T07:14:25.486665Z","last_seen":"2026-07-17T08:29:23.859158Z","times_seen":4,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ansemclaim.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ansemclaim.live/55c110c97c36d49afe3249db4cc390f9bd98ae66.png","fqdn":"ansemclaim.live","domain":"ansemclaim.live","tld":"live"},"ip":{"addr":"172.67.147.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ansemclaim.live/","date":"2026-07-17T08:28:46.278Z","timestamp":1784276926278,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ansemclaim.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 16:14:02 GMT","end":"Tue, 13 Oct 2026 17:10:29 GMT"},"fingerprint":{"sha1":"84:88:5F:CC:FA:E7:96:DD:85:F3:04:18:D2:36:22:AB:64:5B:CB:1B","sha256":"D5:11:0D:03:11:57:D7:4E:73:BB:97:5E:98:ED:2F:36:5F:57:16:B9:A6:1C:5A:EF:79:8D:DE:C0:0A:5B:8D:38"}}},"request":{"raw":"GET /55c110c97c36d49afe3249db4cc390f9bd98ae66.png HTTP/1.1\r\nHost: ansemclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 08:28:46 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=6,i=?0\r\nlast-modified: Wed, 15 Jul 2026 20:56:32 GMT\r\netag: \"6a57f400-51930\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 77513\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nE3Gf%2BvcmWBbxdWSZcVQjtqHC%2B5oiORjZ%2FCaF8odV8%2BUxeFzr6xycbdLRYsI3f8b1giZIPGVKzALcWLLCMadQPaKWMNoO6doORfj9Z%2FNnGyp8yPtVWkmuII7qJRfI%2BU3G7s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c7e005491432fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 334128\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":334128,"size_decoded":334880,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"224d90934c32d9c3b39b8b66ae2675f8","sha1":"55c110c97c36d49afe3249db4cc390f9bd98ae66","sha256":"ee8f50a77d1d148957e2944024cd99e221743668982d3474ce53c94222114d7d","sha512":"5ba3e025d9be382bdbc296d5767a01dbbf0f95fef1d56916c2a21db420606b5f811e905a1f90e42e2fd300f70454014fa03c368b3a481693e8c4b9aa964f731c","ssdeep":"6144:SXdew7HB49W94K0PTdgExkqTiu5h0EvA+23jL6Jg4Im1Ew9:KX7HGw94/xBP0F+2zLEdx","tlshash":"7f64239aff8a20e4c5d6ea3c93c24391d411574673222eca7211e31bfa1e9195623ffd","first_seen":"2026-06-18T12:28:19.81207Z","last_seen":"2026-07-17T16:47:59.991296Z","times_seen":16,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ansemclaim.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ansemclaim.live/api/visit","fqdn":"ansemclaim.live","domain":"ansemclaim.live","tld":"live"},"ip":{"addr":"172.67.147.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ansemclaim.live/","date":"2026-07-17T08:28:50.000Z","timestamp":1784276930000,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ansemclaim.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 16:14:02 GMT","end":"Tue, 13 Oct 2026 17:10:29 GMT"},"fingerprint":{"sha1":"84:88:5F:CC:FA:E7:96:DD:85:F3:04:18:D2:36:22:AB:64:5B:CB:1B","sha256":"D5:11:0D:03:11:57:D7:4E:73:BB:97:5E:98:ED:2F:36:5F:57:16:B9:A6:1C:5A:EF:79:8D:DE:C0:0A:5B:8D:38"}}},"request":{"raw":"POST /api/visit HTTP/1.1\r\nHost: ansemclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ansemclaim.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 08:28:50 GMT\r\ncontent-type: text/plain;charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9zogjCuefUmau7KzySpRycEtxtSuzycBCZbHCxr%2F3WuDxGb8xqictWqGY2PpWGe3PFAr%2BF04t7rrnHcUOGEiJ77dz5lXV7YkoZjF9rt%2FHfmv%2BMTS%2BXb48cB8RQjxca78kXw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c7e01c8c3d32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":728,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-07-18T15:17:15.12225Z","times_seen":439103,"resource_available":true,"data":null}},"time_used":286,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ansemclaim.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ansemclaim.live/","date":"2026-07-17T08:28:46.867Z","timestamp":1784276926867,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 17 Jul 2026 08:28:46 GMT\r\ndate: Fri, 17 Jul 2026 08:28:46 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":1447,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-07-18T15:09:00.391989Z","times_seen":34425,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":32,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ansemclaim.live/","date":"2026-07-17T08:28:47.231Z","timestamp":1784276927231,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ansemclaim.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 01:48:42 GMT\r\nexpires: Fri, 16 Jul 2027 01:48:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 110405\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-18T15:17:15.094915Z","times_seen":238614,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":3,"connect":30,"send":0,"wait":17,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ansemclaim.live/","date":"2026-07-17T08:28:47.459Z","timestamp":1784276927459,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://ansemclaim.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 84924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Jul 2026 12:24:54 GMT\r\nexpires: Mon, 12 Jul 2027 12:24:54 GMT\r\ncache-control: public, max-age=31536000\r\nage: 417833\r\nlast-modified: Tue, 09 Sep 2025 18:33:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":84924,"size_decoded":85737,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 84924, version 1.0","md5":"f5b588b5cfef2173838149769c8a0269","sha1":"5312086a01f8e8299094ddee5819b9727a19cae2","sha256":"b8811a6cd6f7e0707dfc9e9e6f1daf5f6f450b51e887e163945a9ade91c2720f","sha512":"05d5271c633bbe102775c0b6df9c5e110dae3a2517061714bb5c26ec66a00f8e1b62961135ec96962e7ccaf3942d8e32bd86f42558cbac8ee16ff6c333117886","ssdeep":"1536:PABWz4rSN/GzH27xN5UR1OnX+uyRsd1osLZBi/JGyQI01xDj+C:PAG4rCGa7L5UR1OnX+fGd/VB03QI+xP","tlshash":"378302b4ae71b3968f1c7fe46396273c2a7bdf41053950aeae44e16787f00dba148784","first_seen":"2025-05-29T19:39:57.235915Z","last_seen":"2026-07-18T15:15:13.715715Z","times_seen":18666,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ansemclaim.live/api/is-banned","fqdn":"ansemclaim.live","domain":"ansemclaim.live","tld":"live"},"ip":{"addr":"172.67.147.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ansemclaim.live/","date":"2026-07-17T08:28:46.883Z","timestamp":1784276926883,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ansemclaim.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 16:14:02 GMT","end":"Tue, 13 Oct 2026 17:10:29 GMT"},"fingerprint":{"sha1":"84:88:5F:CC:FA:E7:96:DD:85:F3:04:18:D2:36:22:AB:64:5B:CB:1B","sha256":"D5:11:0D:03:11:57:D7:4E:73:BB:97:5E:98:ED:2F:36:5F:57:16:B9:A6:1C:5A:EF:79:8D:DE:C0:0A:5B:8D:38"}}},"request":{"raw":"GET /api/is-banned HTTP/1.1\r\nHost: ansemclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 08:28:47 GMT\r\ncontent-type: text/plain;charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncache-control: private, max-age=300\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=08VjCwtMuLaefVfvjW7yNj6C6ZCKBPoxXTlTrJEjhum%2FbtM2W8LMIARv7f58xCcJ6AqdECoAq1tSM8A%2BXDwrSq39WaVdnApwCfN8ghQRXN4VHvpCtDcQMpWP%2BOwPD4OrXXE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c7e009097332fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":760,"mime_type":"text/plain; charset=utf-8","magic":"very short file (no magic)","md5":"cfcd208495d565ef66e7dff9f98764da","sha1":"b6589fc6ab0dc82cf12099d1c2d40ab994e8410c","sha256":"5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9","sha512":"31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000000","first_seen":"2023-03-07T01:37:31Z","last_seen":"2026-07-18T14:55:11.858512Z","times_seen":117617,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ansemclaim.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ansemclaim.live/api/visit","fqdn":"ansemclaim.live","domain":"ansemclaim.live","tld":"live"},"ip":{"addr":"172.67.147.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ansemclaim.live/index_1.html","date":"2026-07-17T08:28:49.955Z","timestamp":1784276929955,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ansemclaim.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 16:14:02 GMT","end":"Tue, 13 Oct 2026 17:10:29 GMT"},"fingerprint":{"sha1":"84:88:5F:CC:FA:E7:96:DD:85:F3:04:18:D2:36:22:AB:64:5B:CB:1B","sha256":"D5:11:0D:03:11:57:D7:4E:73:BB:97:5E:98:ED:2F:36:5F:57:16:B9:A6:1C:5A:EF:79:8D:DE:C0:0A:5B:8D:38"}}},"request":{"raw":"POST /api/visit HTTP/1.1\r\nHost: ansemclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ansemclaim.live/index_1.html\r\nOrigin: https://ansemclaim.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 08:28:50 GMT\r\ncontent-type: text/plain;charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gAMFomzfRuNLBzg1rKFC80YPD13Db8nnqSHhSHIDOyDhfCT53Lyk6Pschhm42ZOXkdYvHB8i2Q%2BGS5c%2Bq4ew%2Boy4Ap9gFcqnNxevHZBM5srC%2F9POHddnUC7v9namKA47e0Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c7e01c3c3032fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":726,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-07-18T15:17:15.12225Z","times_seen":439103,"resource_available":true,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":323,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"ansemclaim.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}