{"report_id":"55fab312-357a-4ae0-a591-a76e4f995a25","version":6,"status":"done","tags":[],"date":"2026-01-30T06:14:55Z","url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"title":"c8ntinuum","dom":{"size":122489,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (562)","md5":"5cea58806f092edda8b0c5a109167daa","sha1":"f67c6223c878eed0bf777558cd53b975bcdcda38","sha256":"fbe098e66a52b681b0b530975a20f28bd336d6c6941bca9488385932b70d05b8","sha512":"c60030abc2b9214897d1e43f94e09d8668094d6bd689561e13514e562f3d92e5ccddc71e4a7edff29c2d0931b2625ae2852267c1443bf61ae2655cc3d1088870","ssdeep":"768:x73xDYSsC8v06FEpnx74RFhqabcnpcPkqPGcHCzj9oUrmEj9oUrmzvnFMj9oUrm5:/8s6Mx2rknpcPN2aXKSKA","tlshash":"a2c3f937e0f110ce950673c9e797860b2a25e4a78607a90db79d2698df8ed854c733ce","dom_hash":"domhashcc6edf9eef6e09568d9612c58138bf3a","first_seen":"2026-01-30T06:15:00.892693Z","last_seen":"2026-01-30T06:15:00.892693Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-06T06:14:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.claim-c8ntinuum.xyz","ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-15","domain_rank":0,"first_seen":"2026-01-30T06:14:57.277844Z","last_seen":"2026-01-30T06:14:57.277845Z","alert_count":186,"request_count":93,"received_data":6314054,"sent_data":45336,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"c8ntinuum.com","ip":{"addr":"172.67.139.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-07-29","domain_rank":0,"first_seen":"2026-01-30T05:33:56.173366Z","last_seen":"2026-01-30T05:33:56.173366Z","alert_count":0,"request_count":1,"received_data":4709,"sent_data":451,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/styled-components.umd.js","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"714f214ddbbe856c0338b7ab6a0e2061","sha1":"b630e2cfe9f4f2a5df060d24ea4785c2414a04f2","sha256":"bda9015ee49e9939bccc17e05eef8fb91e3065d20c16748eb68f42227d67f3e2","sha512":"97862ac720ef447198abe24469a1d0ba884f4ce6143be959d1427848e187180f44fc3650e7c2092e4d839e6ab84cbc4b7805a76fda5af0df2c48ecacafdfff2e","ssdeep":"6144:SyHleS8LGkBOYleS8LGkBOMleS8LGkBOerpUxkRhHgiJTlwo5WMP:SyHleFfleF9leFrrpUxkRhHgiJTlJ5Ws","tlshash":"31c430bb06cbb14786c24e7aea32544db51037804b9794bfd7a1eec6e058c3427d637a","size":595789,"data":"","first_seen":"2026-01-30T05:34:06.430606Z","last_seen":"2026-02-13T19:12:08.71168Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4ce8379fff87b3d3d4b21ab0e156ffc4","sha1":"f5ad14b546fd4b4f880d1634d3d38a7374069a7f","sha256":"45addd8e798078c683583b3af527c4e931ac3ae752f16efeb0b405f2c0e2f01b","sha512":"70f1aad5f4e0946be6e575d59b3d5145a686a251e59f2260e2af22c4216b3151f030e49dff941cad3a7509e13d72b7d4015166ce760392e2cff0eefb33b01119","ssdeep":"6144:SUNWcTCW2WcTCWqWcTCW47hcbWB3ZQgHDbJ5qwu:SUNWbWpWR7hcbWB3ZQgHDbJ5qZ","tlshash":"62c4407a46cfb44386c25e7aea32540ab5103b84839b54bfe7a1fe81e054c3467d737a","size":575717,"data":"","first_seen":"2026-01-30T05:34:06.53478Z","last_seen":"2026-02-13T19:12:08.720298Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-18T08:34:14.98483Z","times_seen":421704,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fprimer.next.cjs.js%3Ft%3D29495894%26u%3DlQisG_9oeZ7mSEZxGDY5MjU2NDQzMjhjZmYzYzM0MDI3YjhjMdzoeBuugL5YXLS9pQ","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","size":656642,"data":"","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-08-04T05:59:25.953933Z","times_seen":2650,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/5dca5a14a1ca5a9caf2e71d24e96602d7876c72f.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /5dca5a14a1ca5a9caf2e71d24e96602d7876c72f.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bcb2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J%2B6QdkYgbysBwz6YT3BgnE0pAtLGS9ZPimhOkaomNIBADlEUhl0BRyZgIfZfZNZ2QG030rPdy2I%2FNKUwI4RiWWhzon%2BTTLMqNryomiqIESoM3sJpFl3y\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469bbe8b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48306,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b044a23cc49cf34d36d37b9497f935ea","sha1":"5dca5a14a1ca5a9caf2e71d24e96602d7876c72f","sha256":"345e34e27d63c9d9a41916ff8070236f07906402f848117bf3ba26c6cd4a55e4","sha512":"53b97afc47b5f8503a2a95b032f53874cf4040183b812c12e7994c0e5cf13cb8892ac260fed77760be79de1f314c271923b4187d1d2b4304f5943e382e55ea63","ssdeep":"768:iAkPO8mT0yX0kA0uUZDz10ePRc08fUaY8nM79IRLKh8mGC0mYvdA2CDuKPUt:itYpZuUZ3108cV8aYxSRLmlEKK","tlshash":"4623f154ddbd7e4e88ab740f11a0819ad2a7d52593f52340dfede824da3c849fa67830","first_seen":"2026-01-30T05:34:06.466751Z","last_seen":"2026-01-30T06:15:00.895976Z","times_seen":2,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":194,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/31a78fd90f7c39064ba2ab3d1887c999aa14263e.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /31a78fd90f7c39064ba2ab3d1887c999aa14263e.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bcc6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F8Dput0IBF7GqYwNoXDi74q5Z%2FdOWBzpeEWN%2FAbUP2IT6%2FOxFbuaUqYM3%2FrZmUAmOEhNbpGtZpGJkisa%2BBlNn0GRxYjKSvEZNP0Ftv7ohaqlpQiPZWfF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469cbefb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48326,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0716b6c314080e5dee2120d8f99148fe","sha1":"31a78fd90f7c39064ba2ab3d1887c999aa14263e","sha256":"f8988f23ed35b9304edcee86b9c3812356513766e85acb565a6f1048238706a1","sha512":"b71ce1035116ca61f1c2f4cac51bb5e8900ef685d636c2f120a29fd49ee376fa4c55b7a74d633af5400234caa02078031a35f3052ad560397dc7009832f452b9","ssdeep":"768:1kDNX9ph7a7tHOVDPgvFuRIbi5dfsJzyMpsvVF+cESQfw8NDtUI:1kZXXh75kzb2dEJzlpM18fx1tUI","tlshash":"4023f157787bcb3ac527218892b2b8040d6875341676b800b2a3fd6f4427b9d3aff45c","first_seen":"2026-01-30T05:34:06.524026Z","last_seen":"2026-01-30T06:15:00.899084Z","times_seen":2,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":192,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/fa4bbb3d6e6dc1a0f468b615b526e985b5ac7045.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /fa4bbb3d6e6dc1a0f468b615b526e985b5ac7045.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bd76\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pbZ%2F%2FXoWs4Y7C5woTiSOeTP01EIJJktpcD8ZXA0YNnQ%2BGh0QNwIdKEozFqKLuKXDvcrtXDukjnQwJ%2Fs7wqiJLZ8%2FCFA1c1hj9zXjXT1nfJgWbDMtNzuD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469cbfcb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48502,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"58caa215f2f5d9e60903c41ca897d71b","sha1":"fa4bbb3d6e6dc1a0f468b615b526e985b5ac7045","sha256":"6bb2d0e93bfa30afffa6e0eb14e6daff03bdb173759fdc4a005f7afbf8c22950","sha512":"e400688176c6a3ee7178049019983f4cbbe8da0dcf3e5c79c4d2dfa9364ab66f52c7f2f88403070872a9fa4b946b777fc38274e6d6c9eb081fae2e154c2ab5db","ssdeep":"768:2pqLEkSzhmvDDj36oHkrPmY7u43fgQF/xhaIZOkP7NfVYV2jh9QoUlTr2qspQ8A7:2Zz0XjKoHkrF7usfgQF/CADNSVQnFDhO","tlshash":"092302af381dd0901267d64e649ac6eaed4ea1e03f1297c7d34dab1fc23069f6322546","first_seen":"2026-01-30T05:34:06.462752Z","last_seen":"2026-01-30T06:15:00.902398Z","times_seen":2,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":179,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/b77bcaae5dab97d4ec23aa93e96da23402530735.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /b77bcaae5dab97d4ec23aa93e96da23402530735.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bb84\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SjOeZ13%2BX5LhIoZtaveWR6k4oqjkoRkG8zcgZk3eizuFt3f95ngxp3LlA5VyoNrYgXq7Hd34BxMutwFDAdQs3hiyzlIbCtNafc99a9K6%2FSU%2Bx%2FHRGOt%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469dc0fb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48004,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7c1b0217ead6cae0c0e71bb74d61c67a","sha1":"b77bcaae5dab97d4ec23aa93e96da23402530735","sha256":"4cbb382934f764c5109c6c15253fa4dab727fd76e75859dd6d7229f0ec8e4b9d","sha512":"1ff18dcf4c3d75281bd3f14bbc0f7719c7ff57507d1fc5bf922b0657eb0de3aeddeb3b112b7f746a7f4a8fafbb0826ab5dc0359e4d42d9115d7ac89a83044f0b","ssdeep":"768:YCZVkDVWzGrCwkRyyPuog9SciEqJ8r4vYo33RzzOVY0r/azAyxMNg0Wf9u5AcyhO:YpRWzGeTg93iEdr4vYo3BfOVYmm6NTW6","tlshash":"452302058ae76f14c9571feb9f1d2218e38f60be8d0528d0933be58631c426f362e957","first_seen":"2026-01-30T05:34:06.506421Z","last_seen":"2026-01-30T06:15:00.904879Z","times_seen":2,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":178,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-30T06:14:32.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fg6abT935Y41dB543D9DN1k4ORAuYVcgvCxRBB3Lu%2FAMpUi0zzNHhhHZm0QR0MlKrswQYNIDzjoxfcA6XYOCgEt9sXZYz84o05AEXSWTMPUnU1EOmkJH\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9c5ed466beb78be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":122414,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (562)","md5":"e80862f34545fafc9ae9d11bc9d3c269","sha1":"af411544a7f08da8da5f90e5e35645fd37c45ac9","sha256":"bcdc4872fe93c6bab0b5522aa8a5a8d423bd21d680970ac6cd86ffbfba5e50f3","sha512":"7ed25f36cf86809b47f898eb7602596edba69e2f286d7004af3e8cb277b07faf74ded2d019846c8c53b9d24bf3de5a8c95c6a8c561b3ce5031a5f93a78af0aa4","ssdeep":"768:j73xDYSsC8v06FEpnx74RFhqFcnpcPkqPGcHCzj9oUrmEj9oUrmzvnFMj9oUrmkQ:R8s6Mx2rZnpcPN2sXKSKC","tlshash":"06c3f937e0f110ce951673c9e797860b2a25e4a38607a90db79d2698df8ed854c733ce","first_seen":"2026-01-30T06:15:00.907946Z","last_seen":"2026-01-30T06:15:00.907946Z","times_seen":1,"resource_available":false,"data":null}},"time_used":414,"timings":{"blocked":77,"dns":59,"connect":3,"send":0,"wait":253,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/371dfc78ab2bbaf9558419443f59feb9b44b8b8c.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /371dfc78ab2bbaf9558419443f59feb9b44b8b8c.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bc92\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=57KRrMKLJXgHfOhRIdIM2Vwg3JQJFvdxhngxppvzDIQbuw36%2Bxptgmvxeqkw3V7KTF5HKuiE8oj8SG37cJ7K9DuE5hv9UB3AtCbhrfdYVbx872XbnrRL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469cbf9b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48274,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b80ee22184d53c513fb406490c5c8f15","sha1":"371dfc78ab2bbaf9558419443f59feb9b44b8b8c","sha256":"9fafcb9caaa5a7b982b3b3ec78053475c1f1ae1f5c587596816eb62d5aff80ac","sha512":"f66549fda4352546aafbeb3dd46694c9d1efd48a2ba7b623a8122f2785d5f24054c97cc33fd268175a90a2e19e4066877a8979fe3da88543818b9be867b27388","ssdeep":"768:juoxZWOouuW36wZ5vasWqAz6GGP/h6U2dH5U9ug38pzJOb9LTeDSahhhsZkvWLRM:fxjtuWHvqbz6GGIUnf38mdKDSQOZuWCr","tlshash":"2823f25549690b1ffdf87a544f4c4c7db6516a24bb60320a9d20edc0eaa12bf7bbc40d","first_seen":"2026-01-30T05:34:06.443805Z","last_seen":"2026-01-30T06:15:00.911262Z","times_seen":2,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":176,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/75f6c65dfe43fb2655090c50b7efbe973a12a56a.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /75f6c65dfe43fb2655090c50b7efbe973a12a56a.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bb8e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u1%2FjgHR6u18JCqRRkPb0nxkXHiOi83B2pjEz5%2F7HKzH%2F8hc87BS%2BlE5t8heaRCc%2B0Qg25eentuEQ6tgaiPLaRN2x8oA0gPyTk7udlZwFyCKVPGwmkEBN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469dc13b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48014,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"26d79f9c8737142696ed869199df18e7","sha1":"75f6c65dfe43fb2655090c50b7efbe973a12a56a","sha256":"e011dbde468d0d90be1570f038d89242b82be13ae5a139b720d435bc0ff61b9d","sha512":"124689ad21124a54ce2ca36181c078fc120a866e1322dae4eb6e1471d58d3733721062ab20cb9800cb6711f2fa3704d44a0dfb5602b98dcb7bb9a7e050dffbe5","ssdeep":"768:CQE4IdmYcVckn/X+SOwTjg2g1+aUBbfLtwFAV8YnNKTeieylgJXsIqyDdLwV9g:/pXl829tznnNSPws7ypkV2","tlshash":"5723021449f4bb259d83ebb240cd1c3a5950f54d66b7a0e26870bcfab180c0e5cb8b7b","first_seen":"2026-01-30T05:34:06.478191Z","last_seen":"2026-01-30T06:15:00.913453Z","times_seen":2,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":172,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/styled-components.umd.js","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /styled-components.umd.js HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:52 GMT\r\netag: W/\"696e0368-9174d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B1cnK3jzRa2fEyrzXND3NAZfanSMaNhkdURh76r7uuoPHekyw53Yj5Ns5SViTVvG24zwFk7a2GNqIBCacCl9HGqD7K8PekLzNFDWnSmOXFu0AcpQiqHh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed4699bceb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":595789,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65159)","md5":"714f214ddbbe856c0338b7ab6a0e2061","sha1":"b630e2cfe9f4f2a5df060d24ea4785c2414a04f2","sha256":"bda9015ee49e9939bccc17e05eef8fb91e3065d20c16748eb68f42227d67f3e2","sha512":"97862ac720ef447198abe24469a1d0ba884f4ce6143be959d1427848e187180f44fc3650e7c2092e4d839e6ab84cbc4b7805a76fda5af0df2c48ecacafdfff2e","ssdeep":"6144:SyHleS8LGkBOYleS8LGkBOMleS8LGkBOerpUxkRhHgiJTlwo5WMP:SyHleFfleF9leFrrpUxkRhHgiJTlJ5Ws","tlshash":"31c430bb06cbb14786c24e7aea32544db51037804b9794bfd7a1eec6e058c3427d637a","first_seen":"2026-01-30T05:34:06.430606Z","last_seen":"2026-02-13T19:12:08.71168Z","times_seen":4,"resource_available":true,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":262,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/66e24a697b407130ecb22903d27121a99ec39033.png","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /66e24a697b407130ecb22903d27121a99ec39033.png HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 2003\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: \"696e0367-7d3\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 2461\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lk8XyB0UUDVSeutWLpEjPOlrCp%2Ba1%2BXwfgDN5ciLF2qaD7mbKiXT2riWuFqUdEfWfVE1z%2BjzbwKsSQU7UwK14diFRBpLDHMzwXxACdVec7SlxXz5rV3j\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c5ed46a1c38b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2003,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 809 x 255, 8-bit/color RGBA, non-interlaced","md5":"fcc871786e50856189b049dabef95320","sha1":"66e24a697b407130ecb22903d27121a99ec39033","sha256":"1125efd8dca853b1de6e335c781306a92c6c6c59435a32e56803b4648e15546f","sha512":"5c3f5aa6b23f90d9a45f00f810d160134523583d4ee528b0414483d172d721fd95ff161f49bc5d23d408b4ee325189e562d9c50a6770ccc10f438b127eae11e0","ssdeep":"","tlshash":"bd410169dec8c7fea291d7e14409894de7c55ded2b6de90211834e0309c82c7f1255af","first_seen":"2026-01-30T05:34:06.481449Z","last_seen":"2026-01-30T06:15:00.918441Z","times_seen":2,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/7bfc5f6fe5fa7f34e5ffdbe574155163bbc5b1dc.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /7bfc5f6fe5fa7f34e5ffdbe574155163bbc5b1dc.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bdec\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PTX9GfDbFTuhD1penaO9Q03fL1vBrjz3SP6%2F4JG7CCQW26mIUJCmhvSrZdXeLK24WQrc21Ag%2F4nM4Qe6ia1gAJcO2LU8mPk04eaA1pkPhaQvSPkitUa8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469abdcb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48620,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3886807bbfd0fbd8d10c1ef9af75c506","sha1":"7bfc5f6fe5fa7f34e5ffdbe574155163bbc5b1dc","sha256":"a2dd05bbeee8ade1690ec39b645e35d63da54c48468cc279ff5538348dca9f47","sha512":"c394adab6a5fd02445127aa6141eaf3bf58cdbb58c0b0baf6a030b1a87f9cf00f8ec744319a78c6cd22c5d1a5291f64915fb95e58fa99874a3289ae3b0f91db6","ssdeep":"768:rom/oSFugDqk73rC21a7Nb7sWFzT2hczBvIICz4Nk5DHYfRqhtu+nEbg1zUmZeSA:romgVgFrC2aNtTIczBIIw4k5DsRVbg1i","tlshash":"e923024458519807de2eb44653422063afa113a080e43b878d9f73bff9e54ff28e9e29","first_seen":"2026-01-30T05:34:06.487574Z","last_seen":"2026-01-30T06:15:00.920248Z","times_seen":2,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":211,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/3909da03a10b9db60da6c65b5956400bea265f94.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /3909da03a10b9db60da6c65b5956400bea265f94.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bb7a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9WWYST7SYc3%2FDhDl2%2BACKE9hcRjvJ6yddn7aeNMpf%2BUbmexuMViXKxqVyhK4NRqvPIzub4TFenwoJDaSsprvj08oQye6wyCxPnnUs3cyXTrZ57tgQVBi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469abdfb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47994,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"47a179be40e2d881884838e8d4b60e6f","sha1":"3909da03a10b9db60da6c65b5956400bea265f94","sha256":"89424af72aeeba8c8d26a04c7a108aa7dc45d41c2c382e045b17aa3d75ac9db8","sha512":"c9ae649cdf107e37f2ad9565f4a5aa7ff1daf84915d63620e8a7c1c7dfe2dd4562e995f45ce91a0d759f37e257453e18444f873fd72d18af032dc507fb2159a4","ssdeep":"768:+mSzhBcS6/FGygC7Pc8pwSGZ4ey5xonW0JqD/BxuWv1CM1evKId0/ypoY1zbf:RSG148ib4xcnWjRvv1eRdNpo0L","tlshash":"2e230218ff02c9221b8958f790834292df7fa0785fedc11ea593a9614cb62f4ba51f34","first_seen":"2026-01-30T05:34:06.440735Z","last_seen":"2026-01-30T06:15:00.921863Z","times_seen":2,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":219,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/c18abd642564ce88ea53a341120aefc1e4700baf.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /c18abd642564ce88ea53a341120aefc1e4700baf.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bb4c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ix0LiQlE4AE%2BzqI83pO6DahBaFbBBOEowiyztaA5xYsjMuOE%2FKQ3Be25UyAPTGDB%2FzKwYptov%2FkEXM6RiDseJYiRf6nccDkLdt79%2Fgn%2BeR1dr65Op2CF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469cbecb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47948,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7e44e8cc130dff9e6bf25aea35750b61","sha1":"c18abd642564ce88ea53a341120aefc1e4700baf","sha256":"054b18d8df856e734a244351a136c098b8f96896e08e50f56c5a499cb96f9853","sha512":"31856ae4f660b196255afb59c3006f9b764643b2360f6d26b6f1f1bb2f4fa9f04f46500835d0d63301043598cf5a1600463db856da638fd210bb5ee7cf02b6fa","ssdeep":"768:gBL4opkOLRCMJtrEY8QiCA39Egq/pkriSnpnKmjUiTDDjyXMT+ZaOR55azXXGwtM:G4opJLRltrEfn3dqhkri2pKmjUiTDDWL","tlshash":"9e23f18849702bd73ff4c762ebb8f95228ac250e4e5fac554c6e33790c6c92e859d150","first_seen":"2026-01-30T05:34:06.394473Z","last_seen":"2026-01-30T06:15:00.923876Z","times_seen":2,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":194,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/e7259379df2b6dce768ead56d1faf37aa0e887cc.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /e7259379df2b6dce768ead56d1faf37aa0e887cc.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bb34\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3jVw5wQMiEfwQcVOXQuyP0MMFDNBI5jL5bDi4oQPsRr1iIE%2FCFXyqq%2BMRn0xUU%2FSWwuHLssg8Vx%2BIV2xC4%2BA9q%2BoYZJfJ4aXKqq11q%2FO6eY%2FLI1JP18%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469dc14b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47924,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f49cc73fc27ab3862e7e3a913486c1a2","sha1":"e7259379df2b6dce768ead56d1faf37aa0e887cc","sha256":"c7843abf41c920d678af82874b56e125d45df19d115710892ff50fbe86da202d","sha512":"884783e4301d565c9d83b44e4e10984490ccf99841b4b08be3822f302fa77eaf896efbd6c937d9a2ec9b968e2c25c56c92c24eceadeb94fa645d9539c073d675","ssdeep":"768:z+hVgw7BK/8+Wgc1PvJPxu2mjojPAxgaei9LOveHDmTrH2470o1jm5KTDb9FX7Dd:z+hTBE8P5P4oj8gGL2eHMkopm5KPr7Dd","tlshash":"cf23021dcbd31a68b1ca817099922dca50bd5f3cf90295d31dfe326508c6a6ef69a133","first_seen":"2026-01-30T05:34:06.51835Z","last_seen":"2026-01-30T06:15:00.925383Z","times_seen":2,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":171,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/998f7020747467c19f82d2efb755bc3a3e41a5c6.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /998f7020747467c19f82d2efb755bc3a3e41a5c6.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bb04\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wv%2Fs8TTTlgrKiDyQQYx4hfJ96bSTh4xv%2BTY5zXRkO75fOL4xYYoxYkFPmpvPwAY7Q%2B4yAiVPNyFj2spy4M0c%2FnFcK6jkxxBO31At3V5FGiPHH7hEr4lm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469ec23b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47876,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a6e2e6b841ceb9a5af4b126782189445","sha1":"998f7020747467c19f82d2efb755bc3a3e41a5c6","sha256":"b79150cc42f447c4022f58ac3ecab9d03fd15e59a073c35fe7a13cd6bef4c136","sha512":"d84f7a2265993e7f64377ced77550dfa38b6952bedd6bf595f7969678b4b3ae608a4b3502cb734933f2cd3019a751d5e480e2757539e77d812d9bea38f00c6f9","ssdeep":"768:2gkPBtUFv8LUvOgYmktb3AEtIlYfHTuKN4MbDIN8IBbA4lG6Yx1xJKVNs:2bZylltatrAE+lYPTum4MxwblnYx1x0o","tlshash":"b223f1241de6187e76fee036dda9301beb76cf04e2325cd89414f6e46121cc8b87a1e5","first_seen":"2026-01-30T05:34:06.428528Z","last_seen":"2026-01-30T06:15:00.927612Z","times_seen":2,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":146,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/cd3794f9727fd499c73da210404c56cadfb63bed.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /cd3794f9727fd499c73da210404c56cadfb63bed.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bcc6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A5P%2BWkHBPTqksNYA6869NulO4J9QvB5Y00chxxxjxqXKQeWrnASAQcIIiY7wTi3pukF6ovBDQMPJB6tTjFC%2FqXV3648cDZkga%2B%2FZluc9oAbPJtCnb05s\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469bbe9b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48326,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0ab245fe1b92c0a4af1683225a92d696","sha1":"cd3794f9727fd499c73da210404c56cadfb63bed","sha256":"c285f4d3683ff3f47d27b3e3d4e52ee3d23005db3cf4697a1e213625f4e1e934","sha512":"806823091f36167e5b9a15096b524dc632a5cefaca0cd5393e8de3b8866b65e11c264b18bb8ddfc4623946bb39cce9eea58ee11d621c3e654d7404734207e344","ssdeep":"768:WDKhWEcT0zAntYcL4vi78iyV71sdS8+DCnN2GMlFRbfSG8o2tkrq7+SvtOY0T1fM:WDKoEcTgutY6WHFv8VsvbSG2tMxSFLuk","tlshash":"8b23f22f0cf97dd15347b874d2b39b81362c5e9596d4d0b04b369c38b5f38e45e6a910","first_seen":"2026-01-30T05:34:06.493186Z","last_seen":"2026-01-30T06:15:00.9291Z","times_seen":2,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":198,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/drpc_dark.svg","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /drpc_dark.svg HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 2461\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"696e0367-12a4\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oPwUBBobnC7pX3MKAySplIr56WCAMz%2B0DR4U3WvPYDDvN35L75Bafvozte5aw4rYyckO84CAPCWqk01iSrMH2vH6j6sOtECxnt%2B3FMF2Tx9IqO78bL7j\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c5ed46a1c37b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4772,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d7eb297cf91f46978a2bd8b19618ce56","sha1":"d43d8da6cd4c9c604a697d6b59eab814127a2d58","sha256":"60dbd0cceff37f542dccf482b076ba68b5e993d1523c85c190971c455ba4f663","sha512":"26ab0844a928d11c2fd93f9c71f4d80378df91ba9a20b5f4bb2609a73b1553f4add3bea7bdc15a9c5019acb3e0e2bbe62b12a3ce2ef8ab9da3469131d052cc2d","ssdeep":"96:1FZu+8gY1FCGx/l/oFq+7rdCFIPaZX8PBe8+LJLB3rbBOXi6:1FZIguxSF3dCyPPJUv3x4i6","tlshash":"37a174d123a863e4e102e7f28b4664baba4b24fd7b21c7b487d42d457e4247e9c84ce4","first_seen":"2026-01-30T05:34:06.381917Z","last_seen":"2026-01-30T06:15:00.937927Z","times_seen":2,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c8ntinuum.com/apple-touch-icon.png","fqdn":"c8ntinuum.com","domain":"c8ntinuum.com","tld":"com"},"ip":{"addr":"172.67.139.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:34.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c8ntinuum.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 10:19:39 GMT","end":"Sun, 12 Apr 2026 11:17:12 GMT"},"fingerprint":{"sha1":"B5:E3:4F:9E:69:53:CF:33:A3:41:5A:A6:F2:7C:B7:40:0F:13:94:81","sha256":"D6:45:C8:98:73:82:33:93:F2:A9:4C:F0:E6:AB:89:F3:86:73:D3:9D:16:3C:F5:FA:F5:E4:1D:F4:33:49:E7:A7"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: c8ntinuum.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 30 Jan 2026 06:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 4041\r\nserver: cloudflare\r\nlast-modified: Tue, 23 Dec 2025 14:48:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"694aabcd-fc9\"\r\naccept-ranges: bytes\r\nage: 2461\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6j7vXUBCC5pnqPaeM4JIZc8gzC8gA4%2BQSZlWkASGAPAvMqu49V6OtuKMZeCI4xuou4NY76fWy51Wo6NsFi9Go7TBGNVorurfF90gSB8%3D\"}]}\r\ncf-ray: 9c5ed4700ede23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4041,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"d400c01803ba5232a2b62821d08c3ca6","sha1":"438d59d19b7406834158fc8d074ed430d41e1f3c","sha256":"8b1a01f2492c851209005fa2e448b81a32606e2cdc7e3921c3b356633e462f80","sha512":"cef1a9eb774e95a0fe1a79b9dc5372a810da8a51b77580ab5f151ab9a1ef4570d091f9ca4bfef06a83138ce95e444c54f74cb6987230ea87847bd1627c694016","ssdeep":"","tlshash":"ff814cd017ff2c224b1de6b7f38a5751885eb7dc25584666fba8a422082a58a80862d3","first_seen":"2026-01-30T05:34:06.451437Z","last_seen":"2026-01-30T06:15:00.940091Z","times_seen":2,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":8,"connect":3,"send":0,"wait":8,"receive":1,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/dbe7bb8d3b2c424c91bad44ef0470f5c05167f96.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /dbe7bb8d3b2c424c91bad44ef0470f5c05167f96.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bc38\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NktmuIw76VedWpb7LbI0cSNgwwNuuNbQTujJjyJZF54gTUxdR4KTuUsAV0vgj34ei1eqJRbhfMgINRWYfBah7RwhOnhQJO%2FArxRDzbhE6o7r%2FZKXt%2Fs2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469abe3b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48184,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"30d353e7d3508936862ef72a0890be63","sha1":"dbe7bb8d3b2c424c91bad44ef0470f5c05167f96","sha256":"f422d4088a7206c49297d60e72aefb2553944a5bb8eee5f38024759c39bf9699","sha512":"061cc321316d1090bde31718ade89cda8aaa0a49c0faf6f1f6a449aa61ff068d6aae36aa59448888e27f57d9008b365726b772168876c8f95ff7af283c5c9047","ssdeep":"768:L5i635LVjZYP1aIdlfHAp/UozFvtb5VKPM28Y4VJz7StZ4yl7hfFWa2YIE7MsgmN:L5i6JRjmP1amfHA6gbBVhSgyNhf8bmN","tlshash":"4623f208a0408c0b4ff173bf90c69c5e7fb9db15faa8789a2dba279947c41a42a505b5","first_seen":"2026-01-30T05:34:06.390243Z","last_seen":"2026-01-30T06:15:00.941974Z","times_seen":2,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":207,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/527173851cd4f73e2472bd53e9bc883d0fb1c204.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /527173851cd4f73e2472bd53e9bc883d0fb1c204.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bc24\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z4sPc2UQqAHnHcrwcjzwn%2FKzYr7UYmPtyLr%2BsaGtVP1FpfArN9VTNdccCT%2BZ4JWTBZkmsXxwm52KXsISjAVdG2SLXS6Hu3gtiozOm4ggCZ1%2FzAZXBot8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469bbebb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48164,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c882e0ff148bf611d032dd763b4d4679","sha1":"527173851cd4f73e2472bd53e9bc883d0fb1c204","sha256":"f72efd9cb30b507819864355c4079e517c5ec21f1d3aae7b6c1799cd5268a957","sha512":"0e36aeeef64afea12dba9b95d71d0fd98789f0f4d8bbcceac5c84eb55eddc99f639b76509b74e7c8d8ebcdd05deb8db8ac07e0add17308ca53f156061d11d0db","ssdeep":"768:sWJogFAjiVPwIlU8GyQm4AK+NFCsdDzVovZVw5JZ2fgyBpgbgqy9FHGF/3i:sy+iBAmhhnCWDhoBVZYyBGglo/i","tlshash":"e32302133d40334814452b26268efdd77e39db7d7b8292cf76f8e6889134446645af0b","first_seen":"2026-01-30T05:34:06.515177Z","last_seen":"2026-01-30T06:15:00.943779Z","times_seen":2,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":195,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/f844f1e6329f0210f11bf345c10ef9da6a688ab8.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /f844f1e6329f0210f11bf345c10ef9da6a688ab8.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bc3e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NLkjSQeDqA2Lj0rE%2ByvsGuEQf472POimJ8SauFYsrg1IsTFVWLKVgOqasnfbRn6%2BJS642930OA2xFDayzLK2gIn4M9Q0vIVqk1Wg%2FvsUIL%2BZn6emxO1m\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469dc0bb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48190,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"248ad09311eebbc343a8b7623643f805","sha1":"f844f1e6329f0210f11bf345c10ef9da6a688ab8","sha256":"d2ecb33951324c2dde13868d01cb20ad61509ae949ec36abee111f999dce6982","sha512":"7940445858dda51455d51a80ea52a79e89aa8963143d9c438f13baaffc6006fa15e5b9e6e8783fde6a0f3e01c70c9894db0688ddcab0346c3bc7f4964a450d50","ssdeep":"768:NPYu5w5dTIApHgiYUvxKd8A31x1rBJ4auHTCJluwIgpUyM/TNL5DupKp5k+bX6:NYu5w5zdQUvYd8AP1rT4auHE8w7pUvTU","tlshash":"b8230238ec571ca1481f7d26df2dd42666ce9d8fb14293f5d809a328d216901abceb01","first_seen":"2026-01-30T05:34:06.525444Z","last_seen":"2026-01-30T06:15:00.946061Z","times_seen":2,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":183,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/RobotoMono-SemiBold.caa2274ab099019bc599.ttf","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:34.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /RobotoMono-SemiBold.caa2274ab099019bc599.ttf HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/main.504a9112.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:34 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 87496\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: \"696e0367-155c8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 2461\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BeJtJ%2BqmJC4Dy4HsuVCWjXxLelfBzWP3CH2AEIFvaNFHgzyml6PcbURbULxet3osAacW7NA%2Fbi3DULhZRo2MHTyNJP7qOV2psdSjf2N%2BGOSSclagfpg9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c5ed46f5c92b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87496,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 14 tables, 1st \"GSUB\", 33 names, Microsoft, language 0x409","md5":"eabbacb68fea19c24a80eaed6715ca4a","sha1":"3e27af4808640005903a8791831e78ef177189a2","sha256":"cd9c7fec6e00a383762c2cca06209a238786ef17e82920af0c79de48b150d9ac","sha512":"780771912503bd34b86db18ca85b50dda67b0ddaf99ba98f145c93098c96cc6ed7f28e8a05b108b2975725518273a5fbce63dfec90e94bebc2d8857ce057b67b","ssdeep":"1536:04fWEE20aqblJfu4CiSv9x+vsRIKEH1HGTU0+9CL2bwhBeId197qh:pub3lHSv9x+DlFGhWNboBeuHOh","tlshash":"3283191247138b4ed712277e63420761e3f7aa06ab7f624ff187bf27425b4806d4aa17","first_seen":"2026-01-30T05:34:06.408009Z","last_seen":"2026-01-30T06:15:00.948028Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/c9fb8ade6d2964e567cd9e396bfeb61d3397fd21.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /c9fb8ade6d2964e567cd9e396bfeb61d3397fd21.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bc4a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W5PWs02Nq%2BZWqFEG6i7auSL0Dh8EjwjHUAqzzKkCOghxjqt5V%2FvEzj06Z6YTGJbs1PD8TmNhyWrCagKuuzK7a8np6yQfzk8TVjtc%2FiqrvNxYen%2FGqnHY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469abd8b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48202,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9a4ed8c2535f9c6b662bee6304c1a93d","sha1":"c9fb8ade6d2964e567cd9e396bfeb61d3397fd21","sha256":"6e74f74af1f20d9e82ebc1c2699c764c64891a59f8685074cc1edfba541f6b8e","sha512":"08a126db2658d037f6bf62704bd30e39851d1685bca1a1e6e1d6d315236f2ee60de4894e17ce3b69e3c92c6263f84775de1b7cdc172b7bbb674480a427a76cb5","ssdeep":"768:IC0Vv4UCSkhONJCsX4XGQ/x7Xj4yB7L3v+p+R6HQ4LoV8t2soWbz1k82q:IC6hCNhONoW4XT7cQHvgQ40at2soW1B5","tlshash":"b9230227c19d2616d468c81115013c652aee29a6445f43cb3ea1f0e3bb35ef37cba63a","first_seen":"2026-01-30T05:34:06.424348Z","last_seen":"2026-01-30T06:15:00.949929Z","times_seen":2,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":210,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/1d33104f107e0b8bdf0feb673edf602ba93bfb56.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /1d33104f107e0b8bdf0feb673edf602ba93bfb56.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:52 GMT\r\netag: W/\"696e0368-baea\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qZuXC44m06Io5qDUCpvGe7O6EqZXaFJGDoKwWZ2FirC0IsYT6Jxz%2Fm0RVNk6Iyl0NkXH2NVBUienYNs619WVZQRr2%2F0%2BGgMTc0A9HPLW1e2jWd5LgaPN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469cbf3b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47850,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c71067e870eac8e4e0bc26053c6d1d13","sha1":"1d33104f107e0b8bdf0feb673edf602ba93bfb56","sha256":"83ef206b5bfb15ff39a62cbeb15a4c7091450172885236bc6ca52345e60a82da","sha512":"d8e4ec1835ed287b4b20acff7944d1eba90e5b8f62767827c4c786859326ddf3d034c80219f1b016b4d9c2eee33e664961902ae63aaacff053dcf691e9d35bd4","ssdeep":"768:X4hfs9p86Cg0npmznMJ6ErdRW8fY+X73JnXSd7N+mVOZAd2G1P62gthVtcjlAum0:X4ZkGFgwWnY6Ert5X7VCdgm14GGYpAU","tlshash":"1623020ffeaee7891d4f071295612ee3f074600055fc532652e0a9a29ae61fdf09da37","first_seen":"2026-01-30T05:34:06.459016Z","last_seen":"2026-01-30T06:15:00.95211Z","times_seen":2,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":191,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/4026567bee959feba8b3905379d5c5793163feb5.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /4026567bee959feba8b3905379d5c5793163feb5.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bd18\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BtqAwopBEaqzl86An0lEp5yc3GymlSzzjbODMHxmXjqomIPFBF%2F863FyFQMOHh95mkEQNFIVdhl1huR24yd5KttMzgaezL6IOBGy7PHQhKadxYfBNe9R\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469ec20b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48408,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f017982fb4d9a750fa1f952d2fc72dae","sha1":"4026567bee959feba8b3905379d5c5793163feb5","sha256":"815e7c6544001b9c767f4a7bdbd345855e95ee334f3eb5d13e876061d9f4b28d","sha512":"6f1c7fd29d7a81ae97287b59cb73b77af4bee21eed3d86d97670df5c6f5c7368ffffe0afccd3618b0b79f33d50454ebc0bd9fab3da1899f021a7a2ae50e93595","ssdeep":"768:TwKJbBvT9iqbKGq5QLg4MAXUZfbXKmQX9pr5YrCYGoN+lZ5z+CfjcAb6T9Mp/rsU:coLvbKJQXXXUZIbky4oZ9PbgMZr6meQ","tlshash":"6c2302bdb8ac033563705436e459baf60609df81e67822faf075e00768b5a54f394bbc","first_seen":"2026-01-30T05:34:06.529187Z","last_seen":"2026-01-30T06:15:00.954469Z","times_seen":2,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":159,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/bf392d1d5d72c2f3bdfa321fdb84b3f81a9651bd.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /bf392d1d5d72c2f3bdfa321fdb84b3f81a9651bd.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bdf8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gU0BWEuzJQesZD1CcsvZfC%2BNEu7AY6HY0DQj%2BjPK0M3ZttGpNbn8lfXAy6BVPSIW3SGttSy4Keb6KfuT5G8MgzzqclbpeQcZDfn2VAWG7bQbwl1Q9z9U\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469ec2ab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48632,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"34456cd5942f2b57dde484aa08ed6317","sha1":"bf392d1d5d72c2f3bdfa321fdb84b3f81a9651bd","sha256":"11246c661c64b90b2659bd9ba2648debc4e03161f3f0b7535d422b3ad0f8f293","sha512":"52b89ceed3c9be9ec4f287642a08404c05e84f0716b0b04422913db8838fdd2dd64f0a5d995d038a4c8c05134762a82afa84a21c88e8357ad55fccda9b36fe3c","ssdeep":"768:YtcBC41/VJCOcR8/MUowEU32Bxk7K5NdkNFFhR1eNU0rxxTzivksLJQwA:wV4BnCOePUUUGUK5kNJRIN/vzisaQwA","tlshash":"03230273a087964b26bca63e2f9e3711f113b0c476b644e2ed642d416dc9a2c73e7607","first_seen":"2026-01-30T05:34:06.404276Z","last_seen":"2026-01-30T06:15:00.956411Z","times_seen":2,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/zenith_dark.svg","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /zenith_dark.svg HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 2461\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"696e0368-1144\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6xdXWlUPSQBfhrJaxurpmvbruO53cHbi9Sm2trrpyt3Nu9NR4xH6tqzjl2aBBVRtyghmqtrEknehCJlWEWkIdxZdwuO9m2bxmydwZ9sTPQG18pkPnh24\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c5ed46a0c34b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4420,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9b813193399bd106545901c83dc528b5","sha1":"a1b80a1c70c287d049003ec75197c5bdbf4857bd","sha256":"6a66345123f1cf9f44b7210238299b33331f32419f0db22e5972109008571348","sha512":"4acbec10996ed1e44bcbe41dda4cba1554b055034875c3eca25393b13bed12d64b380802b3fab54dd46305391b2f96d0b6c01c9f2af0d38bc39f411226d05b09","ssdeep":"96:xxXcNpzewoXmAjIDCLk/xD27EWC7PhSlPhS046:vsNpz8XmAjeP/xD2+ZAZN","tlshash":"169167a6a3bde1fcd805e3e89f2550701bae24ff6694c29cc6726f15db110ae0c598a0","first_seen":"2026-01-30T05:34:06.494931Z","last_seen":"2026-01-30T06:15:00.958709Z","times_seen":2,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/87e4ae705455356f0eddbd07a01c2be7211c9288.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /87e4ae705455356f0eddbd07a01c2be7211c9288.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bd7e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xcfecfESBtyqrZAOocrdqjN2fuFDCJfD%2FG1bHDgKILUBLafhw%2F29E4bcFo%2FgWU5XrvEtK6G3t5XHDDnho0FtSkvKgyyuHMhfhardw9jBa7ANZ038aTtd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469cbfdb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48510,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"35d89208142c146278b22abee30ec894","sha1":"87e4ae705455356f0eddbd07a01c2be7211c9288","sha256":"1f5b8590ce95483b42e3cb87b8b4312124b8056da8fefa52cdab695507ebf08b","sha512":"479dd52745a9be8ab5990851e259ae898020bc9f1b03cbe77760d9882ffbfa9d4d10a499fc011c65cda4b19b920828f62949bc95b0f0d82d98ca8989dee7f40b","ssdeep":"768:R8DNXyBFGFx2xLKyZLsxqvWt0B1V1nM+GoH2eQ80dZgKwTnrGaGJ+RI5Y4Qff7AJ:R8D9yKFx2xLK0Kq20F4BeQLCBbQTkGRL","tlshash":"6423f1bdce7a97df1959bee1149826e15536c2b443dec0e79c717a34830c0a4bde086b","first_seen":"2026-01-30T05:34:06.427157Z","last_seen":"2026-01-30T06:15:00.96081Z","times_seen":2,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":179,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/3d23768d55164918b8d287a087e0d0e6b0f4864c.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /3d23768d55164918b8d287a087e0d0e6b0f4864c.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bb66\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oM0HNztY92qoVvKxJewShqIWr0mDmUm9YbcsgpXZ2S%2BwaEkZUdfBZqv0Pn7PC2K%2FooWmHeqAG7lCYtXkpFlHmiO2t5z6JglWf4ru7FhLwlTu2zHW0Kti\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469abd6b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47974,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0afb9bda821f7217531b41fed4a9a8fe","sha1":"3d23768d55164918b8d287a087e0d0e6b0f4864c","sha256":"39d0756301257cf3b45069ba8c2bf6f472d5d7fdf36527abb5e22936126e9ef9","sha512":"725f7f27b66c5e0d9bb524115cbf836852a5c1fa4a7903689d4c2fbeb80cff620bbbf0c5e399719743d4c54a6140696e8374ed7c543e984089d853a9c9113434","ssdeep":"768:tg4T2ahzx73pZGGbFnJd2SWu4sA9FZvyguRVt9ccpNUaYv/gIaP89FxNY1Pk8HPn:tg22GB3pZGo299FJygy2cpNJYAhPABkR","tlshash":"022302100c549a2e49704f0b2d0f18f37885c70e5bcda27626b2bbef6397da476b5785","first_seen":"2026-01-30T05:34:06.418939Z","last_seen":"2026-01-30T06:15:00.963341Z","times_seen":2,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":210,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/21f798926a324badf37f598286bc80ffdebea358.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /21f798926a324badf37f598286bc80ffdebea358.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:52 GMT\r\netag: W/\"696e0368-bdda\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A7YiV1AVssxx%2FGr38%2Fx4cYpN995Ds4Qj%2Fjz5ROa4tK8WbUEgheUq3%2B6qo9AnNlp3g%2BL25MsL4ERxrK01jLGnbW5wJWIJKRvcMOODL9D5S8xRMI8mydx2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469dc11b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48602,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"97d111f43a24499429544e368aa9d435","sha1":"21f798926a324badf37f598286bc80ffdebea358","sha256":"1a3a7f8ebdc8f2bf6fe1e18c42ecc086d45cda45bf55edc4358722267f8738c8","sha512":"853c6e84af797356e2591697f1b30c90132325ff998e7335b3d8fd921b36b47ad28fe0b711a8679e7039a50d4997e7863390491158da0cf06aa5cfc8d083a9a9","ssdeep":"768:q/67qQaq62DYi+TKSMw/Wob0WzYMUcAbsciJU10iMFSAef/d89U6:q/uKfKVghb0WrUcrJUwFXe98m6","tlshash":"682302d10294ce44ec1c897c9a8383c6b7b6949c529de1de6ecc3dcf504f66428b874c","first_seen":"2026-01-30T05:34:06.499778Z","last_seen":"2026-01-30T06:15:00.9654Z","times_seen":2,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/e381cd919c19963dc5c062bb96886de1ada749b5.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /e381cd919c19963dc5c062bb96886de1ada749b5.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bc3c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kMXz97SiJjVO%2BSWIEGVYnZ9WKEs6b1TJTfQQrcmkUTfcDJuI9xA4dytSGyaA5YvPW2zgG2g8m5Hwo1LhXeRoyEKbE1lWKOBhBC9iFzMT6nbntZ1gBdRa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469ec28b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48188,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e0760b0e5ff4c34f629b33c5224fdae9","sha1":"e381cd919c19963dc5c062bb96886de1ada749b5","sha256":"d5bc4382683688b1ac4ab65dfd8dfd9af5a60485ddc2974f491876773eb4f725","sha512":"19296b061bf854b57d1193fe7d191687a6ef0da948e28bfdb8c76657fcf9874c464dee79bee28fdcca74a11b896a093d92ba60adf8aa47f64474bb8a0b9c0971","ssdeep":"768:zObVV++VaTgBOOZB4819Np3YMqU5D7CmMzc1ocvt+Fc81dTWC6RT/s2LYEIr:zObf3UiOOZBzNnPlqcQFDWCIjfYEU","tlshash":"452301bbab690e4c4be28156f08c82c13d0577190519b6cb82fd9d2c312ce9a733b975","first_seen":"2026-01-30T05:34:06.531986Z","last_seen":"2026-01-30T06:15:00.97598Z","times_seen":2,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":145,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/01fb1b192ddbae47a461bd31f7265b7895c40c61.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /01fb1b192ddbae47a461bd31f7265b7895c40c61.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bd04\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=feGfnJfeGp8ov%2B6%2BE9mXKaQ27BQUyuIppZ1kT%2B2WaKIGAJDQtZZ88jzapXCaJG1t83MJjIcbp2F%2FMJ2CiLofwAnbLvDIc0dBvAYPZlz5HGMf9%2B9s8NQK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469cbf0b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48388,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6e093359906552941d05437c0166fb03","sha1":"01fb1b192ddbae47a461bd31f7265b7895c40c61","sha256":"3c77299f0fa26e74bacb2505d4edc29ef3d6aa618aa435552b4d2be77d49a548","sha512":"d69df06dd4552f181a019ce7a6cd140437250f5375441a168a70431d72f5675275d3e39d6cb6ef5730a83be68ef9cbb3c7f7f9e51d4c34d8985982639e9bf13a","ssdeep":"768:4u16kWhRd0/lLdJ3LavQautdJUCXXyPVowRd/Q5PJDNruKKBCeLDzvVUrH2nN:J5n/lLdDWCCIxNhu3BvzvVUrHK","tlshash":"1a23f25197c4c778ba7224d49b07a83f19cb42bbffb14f1738aa38549a9b507135f212","first_seen":"2026-01-30T05:34:06.497781Z","last_seen":"2026-01-30T06:15:00.978132Z","times_seen":2,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":192,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/6df76c30d492818d2010034c28b24449287d9afe.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /6df76c30d492818d2010034c28b24449287d9afe.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bba8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F8NHsjcds7oE9FvknCeNwNsgPTj2jzCWuJz4GsUjfusjxSJf1eozKN6Inl1ID%2FLPrqcP3rAqvADztqxlUxzq0FQJJU255o7bKChRwi1WWjMqMmlTah2C\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469dc15b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48040,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ee9f97551191d7b3742df227e13248ff","sha1":"6df76c30d492818d2010034c28b24449287d9afe","sha256":"f013335607c0ff4f6169a034ad338531a3873357bbf37138845945e01e1af362","sha512":"0ed4b73960ef9b79fa57d5bcbc2e805fe071c8aa0973208c7da6b6ba01c91f8224ee0d1c1fdcd47095d8e57efa4a4588a455eb55b7d32d59b6acc1fb8380f603","ssdeep":"768:gqYfxuH5gTZktfgOMnvsMq+moCCafRPC5WLFZOb7cslRIRDtIM6193BERyQn3h0r:gJi5gTmtpMslJh0YLS/3IRDtIMMNQn3s","tlshash":"582301f66ca4242aae5a74a3c08b133ddbdc2c5a0a9c4c66cdd15e711c5ed5fb30a6c4","first_seen":"2026-01-30T05:34:06.402426Z","last_seen":"2026-01-30T06:15:00.980152Z","times_seen":2,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":167,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/8bfc2a3c521c361a7de5caf894fb9589280bfd9d.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /8bfc2a3c521c361a7de5caf894fb9589280bfd9d.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bac8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nj5pAlGWz%2BdTavOA84ol1V1xXgQuXbIPTX%2Fsu1lGqqbP1JCPNh4fBr4uHzpmVPbFDx%2F3e7fez4q0YVfGBZM6B%2BhclIbJK%2F4ACX5KmDzvnQTfgibZYzFj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469ec25b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47816,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bd0fe106ec7edfd222d93587c650a56b","sha1":"8bfc2a3c521c361a7de5caf894fb9589280bfd9d","sha256":"15f963a93b902d333e5e2c48dc6df2a6d17befc234501261699a10cb1fdc147e","sha512":"f706b7094e8fc06d75aa4012de1e9ad3378ae5650dba2260bf07c571a1b876c2ff7965de1b2d740b938ebfd3f9f0e8c32cdbc5a28cb65657dc503517a7113fd0","ssdeep":"768:iW3W2j+Ftatq0miP2bCgEjynU0g7MRsa63l6mQTyA7gx11sDqYE6zQYaZ1lFiDuv:L3WdFtdi+7RtRHiAyJx1cq16zQYaIvBg","tlshash":"7a2302762120a8c2debab688287f33809640e32b59551ff1fb0f01297b6adb57537a11","first_seen":"2026-01-30T05:34:06.452564Z","last_seen":"2026-01-30T06:15:00.982127Z","times_seen":2,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":136,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/privy_dark.svg","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /privy_dark.svg HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 2461\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"696e0367-7ea\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m1PpfhH4uwquee2Wf3ikAmwQm9aT8qJhzIQH2BgyDu4jkiynu31q5gwuVpJ%2FxjeNBkXCS4STiVxr%2BqylnEf69lrAj5mX8NXdLE0CHatfMpeMZujdRk%2B2\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c5ed46a1c39b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2026,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"aaf6071bbe182933d39fb54402f7bf72","sha1":"e59211fe5eebd62c5eec38b20c6609efd0888a9c","sha256":"5e4836b6ecf9a49ae24b9989afb575f27073893753603945ee7e79366cc470c9","sha512":"08fc6cb19f428b5010e2c45213813dbc1404569560061417f0d06b15e509f9109b5a987da0a7f1c30febc5b13fe1970ff3244ecbcc2b70a86371088d66eddc7b","ssdeep":"","tlshash":"a74196f4f26ce3f0780da774da3c40d4bd6b68f98640e48483847d5478e109e5c889c6","first_seen":"2026-01-30T05:34:06.434567Z","last_seen":"2026-01-30T06:15:00.984692Z","times_seen":2,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/ea1edf675d988aa858fa9a2db811b1567c6bf899.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /ea1edf675d988aa858fa9a2db811b1567c6bf899.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bb98\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1%2ByUimpAjG85%2B3eAarYSYBpAzqvI2aEbyv%2BNVeGpo%2BlFttJhDHYHx7R1E2fOK3hgsIhg95X%2FpODACsBNRzeoi4mWyOdfgC5lByeht8WbKtBrRC2pz4Qe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469bbe5b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48024,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"68a506180a9fee1471cbb6064bdd55ed","sha1":"ea1edf675d988aa858fa9a2db811b1567c6bf899","sha256":"6fc2296dd8fa1ab432c9ebf117b4f75dfe4502f91e728e6e20a4d73ceead7815","sha512":"5447940b97fecc72954bf244899eaa6ef3ef59fd3388bc0400f2fc6d3e90ae0b7c0ef004c95b9fc504586407f665374d7c609c6f31361151c3128ed6cd399425","ssdeep":"768:bb8APTOIgLvb8K53DHOpHc+mEgH8eImm4AtpnwJ+dQeQPYAE4w6zqyvMJqPqX6Fc:fTTMLvb9Oxc+rgH/Tm48pwReJ6z7vqMc","tlshash":"58230270ddb04f89699b6b4ef07858dc7c7a3c0cdabe89348254df75eb40a4a45489f2","first_seen":"2026-01-30T05:34:06.522839Z","last_seen":"2026-01-30T06:15:00.986448Z","times_seen":2,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":203,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/code4rena_dark.svg","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /code4rena_dark.svg HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 2461\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"696e0367-15c9\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=neQxqPkh6Yo66w7yLxdXyZF0qCXuYjQ%2FQG3TX8EY8%2F0tq5UHK%2F7Ee4hAwtGhQvAIdVA52zenTDWX2OmaKOvDgiMDH9BSMQnFiw3E5g8gxbaNaqt4Dmy5\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c5ed46a0c32b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5577,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ffcc4904744440bd63264a442d450cd9","sha1":"104e4ce1ad11ba73c3a770f078c952384f5e046f","sha256":"78b7b6fa50c08a681c73e192c0e9d92e94b3959a123086d864f8ebcfd902a669","sha512":"b6bc121be9169650271773d8ce94ed27af629a5b153b994b7b1c04ec7ccb760cf263cafed1ae5bfa504e78ba99273b9de8e7470efae6a28039b292f10146c654","ssdeep":"96:+gjJZkVU9ch7eMcONWoRsJiccr11VCpev/+1u0N/l41WrdzFAlDaehcCmpR:AU+7PcONycJWukogzeJa1R","tlshash":"75b174e6b29c72e6e002f3c9c41b10b176fb24fbaf95e68487415ec5e5414ad8d5dcc4","first_seen":"2026-01-30T05:34:06.484598Z","last_seen":"2026-01-30T06:15:00.988005Z","times_seen":2,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/34a0f946bbe4dafb342ce4f2a7a43a48e3a54f82.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /34a0f946bbe4dafb342ce4f2a7a43a48e3a54f82.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bd6a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NUgYlfpAHyBnf4ANmTxao1k2Qq8NBk%2FCS9Srwtm8IPTEifkosCYFKh67AkjqgKzTMV7h0b7qfcmlL6cenVOONuWTK7ZJLPZjtQlSFYTzPG9lyy4l2PhF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469abdab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48490,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"46f661b319ceb37f4e5054835cc883bc","sha1":"34a0f946bbe4dafb342ce4f2a7a43a48e3a54f82","sha256":"bed84e55d1ddced46c2729587947a96c4cec5d79a2ef9382af636fb042948aaa","sha512":"8b542d417fcf6540b6f35d8518845ec1bcc9bf9b6006580664106696e2a673082380e21553d770c99ec1e4cc2f1b231dfe5e1848792e8557c09dd85409040d2e","ssdeep":"768:ndOOzU97B7j42iZN3E3G5s8VXkpZpnSjTegnT9hpKSNhaG1Jy56Ayl8pol2:dOniNV0vpnoegnT9hpKTGQelCk2","tlshash":"562302a9a032bf507b629fbd92d4d41411b5aec2d0d6674fedb0a1dc9f5e40c7e71210","first_seen":"2026-01-30T05:34:06.527566Z","last_seen":"2026-01-30T06:15:00.98968Z","times_seen":2,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":211,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/07bda08a682e6b6219fb644cc202923a5e16d78f.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /07bda08a682e6b6219fb644cc202923a5e16d78f.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bb86\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OoAYQz%2B7In%2FvBgbjP09fqJPiBKqc7ZuvYrCqVEW2GWQ0lFk9XcRJsdBohNBZ7xMrH3yyDsMTblwZcyC729KhJfpeLWojdOVmSNcC%2BQekhwkcebABefL1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469ec24b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48006,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9339480221b90efea5f425a31fff630f","sha1":"07bda08a682e6b6219fb644cc202923a5e16d78f","sha256":"a8ce00e39dfff31cac564ad48593a297d8f366247559dcf9ffde5854abf39e98","sha512":"313cc847dbef4fbc37588730edd2c84af24ced3f3bb354bc3b6369ff8dea86231b88d810d02d95364d667d9db8e903cc529438f9729107ae9804ca2f48f31e59","ssdeep":"768:y2LYc6iqasVATIQpGloKH4m7BRzVw81X14GVzzQe5OtPSnQNKft03iacpl9B+XQU:XLmiqnAToloKPBRCyldBzlQUft4iaDh1","tlshash":"c623f1dfb286118c9114598898ccb7ceb3f272f40684419c27eebfd3d02aaf57525902","first_seen":"2026-01-30T05:34:06.472742Z","last_seen":"2026-01-30T06:15:00.991509Z","times_seen":2,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":150,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/47a47587a495a25575c371d7ed4d3fb66261ef51.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /47a47587a495a25575c371d7ed4d3fb66261ef51.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bc02\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m34IMKpy%2BKtZSsUS0eAnxsHb4e00eY4DmDfD0m9j6NTDIbge4uRzZ3OLrlm6ra8p5b4voVwZGnwMKOeWKEFr2YasEIewGYf4fWplxaTQs1ZZUMcM17cd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469fc2cb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48130,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0881164835ab27b8f98f7a8edd0267c0","sha1":"47a47587a495a25575c371d7ed4d3fb66261ef51","sha256":"70dc48aad474f805e3fd78f2bd6841eb4df9acc9b3e0355010a2f09ca4235003","sha512":"7e9e77c63b07a858aa065ef0cad69de5b48f6b46944c581feb93024556a8015b8b132d2290b4015ed3006610c1fa7d1452a133344bca59a2f5bca4c7d2c64200","ssdeep":"768:80aaGCgY+Vd2HihlukDNugkofvGn23iSt2w6Zh+C0/jMdL:8ZRzVd2HiL1MgDfdaw6jh0LMN","tlshash":"8123f19d294af087951dd08d3d64897f2b95d6de34f4abff602bb5b2113cc806b8ca42","first_seen":"2026-01-30T05:34:06.415553Z","last_seen":"2026-01-30T06:15:00.992894Z","times_seen":2,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":146,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/secureproxy?e=ping_proxy","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:34.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /secureproxy?e=ping_proxy HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:34 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H4Xyx383%2Bm5oTU5%2BQEY8I8xiBx8%2BR%2FLaC9Vj5BMB8CUxdPNzWGlA3Nyxbxvyp3T5Z4mKc%2F1Er4sGdeTF%2B1Fcx3ybT3dCTvOTXPz250vlsEaJhVUQs2cg\"}]}\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9c5ed46ecc81b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"6fdb087aa3fbfbcb8287a593a0919e61","sha1":"0e514a0662bcb69dc863953d1ce26e3d40e81a87","sha256":"9795c5ff8937f23526ccb207a5684c1fc94a7854e19c021b39d944e51f5baef2","sha512":"be5457d14c930b51b47ab152850c1ceaafe6ef88c8671b48164abbc83410b0c07a1e178540f6cdeac5f2672cadb1d1cbbb3434b3e39bc2c50c4646a2bae57437","ssdeep":"","tlshash":"fe300000300000000000000c0000000000000000000000000000000000300000000000","first_seen":"2023-04-12T09:14:15Z","last_seen":"2026-08-17T16:47:50.33609Z","times_seen":9046,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/a536f30639cb6804afab373f8e3c9b9d52d8ff1b.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /a536f30639cb6804afab373f8e3c9b9d52d8ff1b.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bb2e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GEguPqzDxZ1OHMIKj7s5Jb7HGRH6CL93hLk%2FsRoqBpSpCfXPXLq4Nv53Tlrsw8GtYi9On4QdvzQHjnoU%2BTOIaoNjmwtjlHObDfQ7e3IfnirfeAFezeAV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469abdbb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47918,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b3e6a6f6714bc1bb5fec669e9171a051","sha1":"a536f30639cb6804afab373f8e3c9b9d52d8ff1b","sha256":"a66a8a6c71a4e5dbc2467453476f124c067b66711521e99a884762ca2ac66954","sha512":"e5ab9fb190e520bc900e15b60044f6f2b66105d8e44ba7dd2767e97ce28b370951b823bd35009e5bcc722456c44bc7d250ff9cccbe9925dd3c0110bb5ceb3580","ssdeep":"768:eFFAjs0JlcNJF7W3jSn2c56Z2ydxjiTvpeTtX5ZyGPxlxXu3lzOUqaYMN3YGbyRS:ebAjPJloJFi3jS232v0xpZVZlxX0lzO2","tlshash":"b6230253770ad78fc1eec19694b9d1f6804b519422f4899af0c43b9a1f9b3f04bacb84","first_seen":"2026-01-30T05:34:06.510255Z","last_seen":"2026-01-30T06:15:00.995061Z","times_seen":2,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":219,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/c248e869087a46fc0a113a26562406a8b6a9f47e.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /c248e869087a46fc0a113a26562406a8b6a9f47e.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bb56\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RnawbihUW3zGZCCjv96IAhlek5dfS4hqFgePuswZ%2Bjy5GDEwGTWV4z55J1q3dQdjmEnpGCiFPXptdndPvcBeRAz1xxpwruHFWv%2By6YPxZqP7N4nIRIgD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469cbeeb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47958,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1a7820da9576200d9766d9b8d3ec48f8","sha1":"c248e869087a46fc0a113a26562406a8b6a9f47e","sha256":"8376c069efb9de7269833996a1bbc96246d7570c87309662041d2185734aa749","sha512":"768a21529d2bf9c1bfda29a3623c3808c02216d1993edc0c3b75a3e66108e810d969cabebb13941f2cc9a40802bf66d48115bc512874bc6f7427a8ceb4aa99c5","ssdeep":"768:wmPhQ8REYTmnYd8wbi8KkILmjAxRyCMbNnA87+tVrYfItqxHVWZQ7snFk0G9wRWa:wmPhQ8laI9i8XISAx4CMlAi+jYf7HkT9","tlshash":"602302582afc39168f9bfe4d5cfce7034c4863d16431480d862f64f02a7a3a576287ae","first_seen":"2026-01-30T05:34:06.457351Z","last_seen":"2026-01-30T06:15:00.99642Z","times_seen":2,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":191,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/582085a066708c0d8252d78dbfc5be363ad57ac0.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /582085a066708c0d8252d78dbfc5be363ad57ac0.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bec4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eLkN2BROUXq59YKK9Y%2Fb6Qt8gfUMKNM6Tz2kbUypEzkKTWlhBDzbvBkloN6Jnu5P%2FzL65A4PsJUPrDjdayzng4qimTZP6jSkqGXhMwOw1WLMcFIrMz5k\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469dc12b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48836,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ad5715d964b9b1e1f2791b09a2d6df2a","sha1":"582085a066708c0d8252d78dbfc5be363ad57ac0","sha256":"8a7d45951b2a59c60f9995f1ed1a25906e83e7a9fa6b9e66559b73656b644f7e","sha512":"737983b46a142b9f86d82295150c4d315456e15891f2964723518d07c5f9cfceb2560d88136f22d445ae5f430f9fcc982a2faa0d71b580d84d0e33b6093e09f2","ssdeep":"768:gCjpzUj4hX3BVYY1LI2E6tGcVuEM8c6je2exRbaGjt3tlb1uKHWdqgX7CQ+nc3l/:rJUj4hHBZL6FauEjexRbaGBtlb1/W0sN","tlshash":"4323f11573cfc9a6bb5a1076a60803c608e8673d0b6a817d89f90016fb9ffd62275f13","first_seen":"2026-01-30T05:34:06.460852Z","last_seen":"2026-01-30T06:15:00.997706Z","times_seen":2,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":170,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/11580ed8970371a8936657591c86aca67c425f8e.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /11580ed8970371a8936657591c86aca67c425f8e.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bd46\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jBpjErK4J18o6Q5k%2BteAZH1xLEJKhCgDohm9cwKCYyjCIJx2oVqQ4oeR480vH1ar93wiGPAz3Sbr1Q1ykzj3HjaTJBKn2NUgxNw1EywZ3REtIO2JtBNq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469abe2b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48454,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"25b07af27baeaaf00a0e8efe56bdf253","sha1":"11580ed8970371a8936657591c86aca67c425f8e","sha256":"2557f0240d7cc0d54eb2ec327d3358bc4456b94ee8d87a2c79067e205aaf6a2e","sha512":"eab359bac88bfb0445435ef205d1646829a09eef5f54cfb3663e5c8697732168808221c91b57a29837e4a02a2f1a0043c2d01906eca4ee2b0328b5ff0dfaca10","ssdeep":"768:StfqHtS9ijn7U13dVXRZTtJdTzdeHpSxQ2KznzLQTuGsSqq/PUtIqz7Abvy3OOz/:JNSGEXDdFeHsxQ2g/QKSHPHqn0OzDT","tlshash":"112302ce15cb7b0b002316aaeb21f695f9510916e0f58afee61e7cd1e9850c76814e78","first_seen":"2026-01-30T05:34:06.37912Z","last_seen":"2026-01-30T06:15:00.999061Z","times_seen":2,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":211,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/5a0a24d6d02ba120703b8f5696bed5ada357e152.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /5a0a24d6d02ba120703b8f5696bed5ada357e152.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bb86\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Box0JjZPdTFJjmW3Dx6HK9BoaThbE4EcAZZ7RWK7vu73%2BEZfV%2FIMvf8LUh7yd4DVIOLLg4IEgObd%2BzEdbLRdtS2E6MQtXXEeNzGd3wfhJnnVZCc5rOx7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469dc1ab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48006,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0bbbde33c351c462bf8a342a58b66e6e","sha1":"5a0a24d6d02ba120703b8f5696bed5ada357e152","sha256":"d3f2f870488faa25d533d758a93caf3e82a392c653c098102c6150669e828c66","sha512":"d8908e3b561de1dcbbe5308a0a88b99a489353c4d225dc45ff9b6e39f005cac7f6f223fde5329e5232af9169686a414e92e221a1fd66901c3963995c20447881","ssdeep":"768:CkR4tOoMwU/M1o8/6eK/oYB3rh/CaGcFQjhNpbliUxIe5l6VAT6K:CkRQO//M1h9QlCa7FQj1lu2l52K","tlshash":"762302155169034a98341022e7674575c1fed6eea8dfc980e17fa80b0d32d627d7e2df","first_seen":"2026-01-30T05:34:06.46466Z","last_seen":"2026-01-30T06:15:01.0006Z","times_seen":2,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":165,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/88b833355d58d3995c4076fd2b8fe82ffb831bda.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /88b833355d58d3995c4076fd2b8fe82ffb831bda.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bd02\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pDlXh%2BNFNXaarpjtqxd2LVyH45xe6DvePZtPayqePreFDgPZo%2B%2Brhs5RDzkotf05Rpp4U%2FB6t6yNsgnTcey6eMx%2BBtxUJ5CynBXdJROAEm1Qf5P%2FKcHO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469ec29b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48386,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8903442960c038e85876efdc807a0d58","sha1":"88b833355d58d3995c4076fd2b8fe82ffb831bda","sha256":"35c2350454b3bad6181efe0b076d1266403443ea0e26144d8abcf1b7ed3f8e5c","sha512":"b1a5e61ea732dc148a464a2a7e4f29f3b38ee3e060cf17191fca9e6fddcb1b4c09b40c6a3038cf183043db4cfca4d82755664c1c1db91fe875bf875f61460dd7","ssdeep":"768:BcBJzkljbkMKUbqtN8k18KI/q2JyAfM8zSxZ65mvIoKw7MPPD7O:BcvkljAZgk18Kqq4yuMIw7MW","tlshash":"9f23f1202165022374f196bf883c22d1f087bba0194a6d127f67eabd617fb9f7d56260","first_seen":"2026-01-30T05:34:06.455023Z","last_seen":"2026-01-30T06:15:01.00221Z","times_seen":2,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/hacken.svg","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /hacken.svg HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 2461\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"696e0367-6ed\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NVziuoyeO6WQjz5YwKJbxzg%2BYKERQzCumC3ehNm3zedRdqQptEql995NuNLkxz6FJiAcWV6Mj%2BZ89zwPRd%2BF%2FSS7rgf6MnDqPNtpg8ypLn8rQ1lVUcM%2F\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c5ed46a0c31b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1773,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ddf7df9e1295dade83696a945fe8a860","sha1":"b0fd1878b71dcbb42b6cd9e766655d48aa7c8315","sha256":"382613ef34a45a67ec5034edb579c404d0525d1289267048d6bdeb61bcea1943","sha512":"658322e3c6bef8b6752dade997ecab25948098e69c0c95ad0afb4d3541d2ea549e48df8a77a690ebe8469761ba8e93cb8ebb88123ccb318b09427c2891941cc1","ssdeep":"","tlshash":"d2318e48a04e52b8da434bec0a9d1c7151762ad9b4b6c3c48a407b7ffa57cb9add0ec0","first_seen":"2026-01-30T05:34:06.448473Z","last_seen":"2026-01-30T06:15:01.003669Z","times_seen":2,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/RobotoMono-Bold.7211ab61a8b83177865a.ttf","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:34.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /RobotoMono-Bold.7211ab61a8b83177865a.ttf HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/main.504a9112.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:34 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 87392\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: \"696e0367-15560\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 2461\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eILgcQLJoKLH8MYWyaXCak%2FCINQwcOx7ae8WqTEgxNfPtHGwpSCPgBoQdsv7bGF4TuHtGXbwwAURATPu6kT1jhTq60N3n9cbU%2BwHrLaDAL%2F3DqjPo14r\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c5ed46f3c8cb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87392,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 14 tables, 1st \"GSUB\", 31 names, Microsoft, language 0x409","md5":"90190d91283189e340b2a44fe560f2cd","sha1":"9155bb87dab4ebc84ad4dffd69051e3dd33b73c0","sha256":"3f4e0cd7747df32a34748a66c1274d76712cab429c75e75f5f0167319b97fccb","sha512":"1f45ea7731b1fdf7b4369837fc99930f504ab3ec4b2fb4a212133f646948052cb5b2e5db5f53873a691dd238eb1bec8264d3812c64bda021651073f69621c4b1","ssdeep":"1536:QDQ67z20IQFc33TTIIlr/2ebbIc7t3pUIssZ1KqBWtWpFI:c7dFcHzlyebbfh3pSsSeWtWPI","tlshash":"a7832a0257134f4ed2127b7a63420361e3bbed12aa7f624ff187bf17915b4806d4aa27","first_seen":"2024-10-04T16:18:59Z","last_seen":"2026-07-19T17:52:52.625129Z","times_seen":18,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/RobotoMono-Italic.3cf8ca3e53a0ed6c6917.ttf","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:34.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /RobotoMono-Italic.3cf8ca3e53a0ed6c6917.ttf HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/main.504a9112.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:34 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 94372\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: \"696e0367-170a4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 2461\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hsdF4yScA5y33JcslS5bVgZgAAKklwmc4%2BfnfGM%2FxkslZyGdtMZRLIdzAmAlrzAD5kBO2kMyvwWjvH4t98zGHcUyTHAv6ySIwNAlT0RZgIa%2F1sgozw1r\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c5ed46f7c9ab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":94372,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 14 tables, 1st \"GSUB\", 31 names, Microsoft, language 0x409","md5":"0c4f4d670401518c500b1132d217fcab","sha1":"5035e475365dca8693be01f149b30466d0f701d1","sha256":"d357b7530d41b1562745a9fad9239565b83e1f1d81164a27c225e936450ad39f","sha512":"aa1141a8ed12fa1d95c4be187dda76b819f5d0053b5a54e998e30df63cb8018e60851ec607fa7da37c376b332c6034e5b9c079adff58deab4520deb116aa2c93","ssdeep":"1536:tcO3C20ui3VCUVLrszwhe8lEijOOpxNkpebL+e+f/HoH+:tnjilCUrszwh/EilzNTbLbSHoe","tlshash":"f09308425b135f4dd15229bb4a020790f3b3ae6a2bfe715bf187ef9e56930c06c20a57","first_seen":"2025-07-05T11:32:39.176057Z","last_seen":"2026-01-30T06:15:01.011383Z","times_seen":4,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":8,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/treasury_dark.44765112933e163a1ce7.png","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /treasury_dark.44765112933e163a1ce7.png HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 126938\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:52 GMT\r\netag: \"696e0368-1efda\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 2461\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RAhbS7b6xY3Hzdso4D18WNl1hysEzeicY3ixUbbKQ%2Bq%2FgmXaz4JUAS7DetksBj6jRoyLh3GJX7MlLq4UXUBpDH7ZEsEEgA6Z6PpDCNfDQ1hGUnWmfV4n\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c5ed4699bd5b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":126938,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"b7670c9db79c1ba198d3d8a4010e8092","sha1":"3397c1b0d9cb98c7b46b77eefd1304dc20177052","sha256":"10f371509923794d919535fa65450826815a24e1d710ded4aa45c620a65b25fc","sha512":"7054acc2033beac50864b3b2e2c894997de4ba99d698eb9eda38b2a053743be707ce6504b296de2bcb8a95a2d5f1bd1320abc4fd1fc3c095422f8925719a2993","ssdeep":"1536:BV6IFi4QfUARVqtfQvWZ9cjzsd9s8F9Wqb66GxdW3PEbJUay8cufkOKbJaxRzC+:juUyOov5fu9sGhMbuCfsb0xhR","tlshash":"17c3125916b80e298b0b6db01e01e9efeb74f0d2b5c3fdb6051952d5440b08c9be23be","first_seen":"2026-01-30T05:34:06.412062Z","last_seen":"2026-01-30T06:15:01.012276Z","times_seen":2,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":254,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/65d0dbc356f2bc4b46af3b45e4acf16df6625210.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /65d0dbc356f2bc4b46af3b45e4acf16df6625210.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bc26\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K4laZBtnNpmJuwhL153W4nOgjh3iP5PO8vjjj69rIcClOrgE4muZ2tdffW5iiKj%2FwQrJDjQ1RCsnCCZgDwM9mTnQURh%2FfVud7mAUbG2MZSCxZUphhCxs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469bbe6b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48166,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"65404365b6ea799977dc9d801eb5d212","sha1":"65d0dbc356f2bc4b46af3b45e4acf16df6625210","sha256":"f84a9d3733d3155c6e600072976ac7ce0c2189a2ae59b0c3e3fc60b4f9306d55","sha512":"999c0f5f9e4a22522dd1bc6d08fd4f475102a53a4ca397e3fbdfa0459b911abbef56a60749028787207d4bb377728be6b556cf2e1a44c2ca9cdd374338a873cc","ssdeep":"768:T7TG1nUTfqVxyL2FonAnAVRfO5KAApkw6/JiChZkeb3rrJVeWIKm9R0rt:8q32dAzfXnk9xLhZkeb3rJm9urt","tlshash":"762301bb9c765e1d38218044585f196f29200fde3e3d39122fe58f4ce64682927ecf94","first_seen":"2026-01-30T05:34:06.439097Z","last_seen":"2026-01-30T06:15:01.013768Z","times_seen":2,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":201,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/33dc942eea964952bd7d9a6b1c4dc872f161c0d1.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /33dc942eea964952bd7d9a6b1c4dc872f161c0d1.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bdc4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oP5wA%2B3kLJSXRp%2FQIMl7yM7mDd%2B3DWmn%2BhEVgtvYtFapxbKxRkaLfw5p%2F9XYQcIRA10Lg0Yy9dlADOaFmAgiECFB33tJ8e7eiBJpSjSzDK07%2BeMSxunK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469bbeab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48580,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"eaa1643086eaf7dbdf2f1c1fa99c9615","sha1":"33dc942eea964952bd7d9a6b1c4dc872f161c0d1","sha256":"3223143994144651c2909f288375e9b3bebeed7de8db57a43539191c05053792","sha512":"c2adbaa213ffc19905394d08a847dd60aec796fb9f140d5010f9fe6d2752f88f3cde764f1bb091f9aca7e2d577a9cc6da06dc56278332939005fabad9eb18cb2","ssdeep":"768:RDN1bWLvjcCWImB/5xZ7bYMDPDfx0p+j+4v2eM1/Wl8P+/TL8OL4Tt026Fr3VUoe:5N1KLTWTZHYkPTXZMiD8OL4TtIVn3Nhy","tlshash":"a8230203a1a35f135537ccb56af8294632addafa3bf11861252624ed00725fcdb1be93","first_seen":"2026-01-30T05:34:06.5198Z","last_seen":"2026-01-30T06:15:01.015074Z","times_seen":2,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":196,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/revisit.svg","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /revisit.svg HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 2461\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"696e0367-923\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Brq2QuicTFWEOVGV%2FQ%2BEiRAKJPb52ACRvjeGrLeNYXGsvoLORVWVXOmSTtMyU6n13vWxUiKZpW8myfbYxjhS1Awa1%2BrXS6ac8%2FFpPyv5uGdt5KRWIypK\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c5ed4699bcfb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2339,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"71c20bb07e1387c0fecd7a521af9803d","sha1":"470d91c6500d67e26f2ef4e4d0699ea1b2c8fc03","sha256":"ed7c487f915432d9464e2af0a83002ee93596e86e076f3c917e439e5b844d08b","sha512":"fee5058dae5f928037bec9efec25d8b2c06bda85a31bd99a6df954a75b3a08446158e1441bd3fbf37f40a6efc6cabe4e5037444fd61feea3055d5b19025cd557","ssdeep":"","tlshash":"714165f1919ce2e13e02ebb2d235897d71176cf5f76c87888250dd66901406e4ccafd2","first_seen":"2023-04-17T01:45:40Z","last_seen":"2026-08-18T08:38:27.782601Z","times_seen":51468,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/b4993544a0770bf3243518642aada7ee8d630a5c.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /b4993544a0770bf3243518642aada7ee8d630a5c.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bd64\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eGum5%2B43%2FG5Z2vJyDFHLiwp1RCzPFaubjIl9ozNJz2roZVIGadAWcjXw8gWIDN8kq%2Bhh91mV1GFfNrqAQxyRRD%2BGOVoazlo9fSp4FDRQk%2BxWRDRIDrhT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469abe0b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48484,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9e140f51f56b6362c2ba1b34b57bff27","sha1":"b4993544a0770bf3243518642aada7ee8d630a5c","sha256":"05222382530aaa6bfebf489f8e267463baed1ff4637d722c6d788ba075a069dc","sha512":"4696560a9f111be4ad27cd202397837994ef4e4ed14cb14df2a860b3a894645b76ad459db62e14b94894e8652abed1adb892421dbb631897313fc36f340a7673","ssdeep":"768:XCq/sjDHj+IXN1VstRZC+PipLFK6CPTfVZz0tueOgAQ/1HFyGBgGcyEN/XuIYYqK:Xp/sHKUUC+6vfCPTNet/OgF/1HFxgGcD","tlshash":"a923f231cc2abd36eca449e1d67cae16ea43f87e650f51019b8a6e588d171fd0530c1f","first_seen":"2026-01-30T05:34:06.425891Z","last_seen":"2026-01-30T06:15:01.017443Z","times_seen":2,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":212,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/6a54efc8b87ee6842cc2d732bb71eb074f366dc0.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /6a54efc8b87ee6842cc2d732bb71eb074f366dc0.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bd3c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gMPS4%2F%2FPg0K%2BzT%2FYl7%2BL7M8WtAusaZ%2BXstmzU0UHDRqIGd5NV5AFJw%2BplgnZV7gvFkz2WWLk9uqqq7iJuOCsQO%2F4SyHGmStmvhpmJjakBgroNHoLtMmY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469cbf2b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48444,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"81181f86f9203b8651fe0be0da62b957","sha1":"6a54efc8b87ee6842cc2d732bb71eb074f366dc0","sha256":"e61d381edd2e8f69f624393dd56dffa926909c20aafc03c416831a78704f97fd","sha512":"91c36fb345c61928fff4c7273e31d048a7101df067f37d6e627dcb78fe6fa46ace09d9b6e4134243170bb692b798f983d994a75eb9f89979a23d50a46feb9d4e","ssdeep":"768:M8HQJ9T7zVjXTI+7PGfuGsVLMjkeoas7NRf5w2QOsVe3+RF+3vZNdEUogBz9os4A:M8HUZ7pjjesVojkeonNRfG22R0Z0cDY+","tlshash":"5a23f2585abdede258b435213f01f474316bd2d8d89da8b552d0f0820efde5e2c8ca8e","first_seen":"2026-01-30T05:34:06.39658Z","last_seen":"2026-01-30T06:15:01.01863Z","times_seen":2,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":193,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/dark.ebf522183ec9034411c6.png","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:34.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /dark.ebf522183ec9034411c6.png HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/main.504a9112.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 670362\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: \"696e0367-a3a9a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 2461\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QUgX5lFisMv%2F5U4dw2Gq0vm0bCGoT5sRcqoueMXTawa1Etol5argCsaxMEY6BLU4AXdblmKbgjbYLHRAvCf1aHstW3msNDiGdH8HH4xmQb6%2F%2BTp9Nhqt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c5ed46f1c89b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":670362,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2880 x 3122, 8-bit/color RGBA, non-interlaced","md5":"fd957a440c03fa965f6d59f657c88b16","sha1":"f4552237a196552a001001b7d0098da4f14a9d8b","sha256":"dfb93b42d4c4d816f4bd404e82644348f7bf4f7eb6ad0bf245eb4284c9a7c51e","sha512":"95139b30d563ebb50723e757ce6b5cff0843ced971ccadcce21ef91bff78be13195b33fb45e263b54df44fd4875c23b5765372d6ba115d3977fda1430b54ac27","ssdeep":"12288:Rfl3GZ0l/KUfDuII+EGvINYViUzHi0g8QZu0T6UE7EO64dc8OmF2beJI:Rfl3c0gYDonGvIyViU20ghu86BK/cI","tlshash":"48e4239eaf8090bcf90461769d5a1f0a334188d646adf31053b7f166eccb58378b91bb","first_seen":"2026-01-30T05:34:06.450013Z","last_seen":"2026-01-30T06:15:01.019795Z","times_seen":2,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/RobotoMono-ExtraLight.4620604e700a4d69b5af.ttf","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:34.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /RobotoMono-ExtraLight.4620604e700a4d69b5af.ttf HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/main.504a9112.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:34 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 88248\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: \"696e0367-158b8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 2461\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GeLNlqASlOsDVDmK4rEP%2Foev6aFyyNojIDVA4nfXdqlAIBdWqVBGtEdytUwahb%2Fmt7ngx2%2BjHVtN%2ByFYhyp2rB8nQo78AunW82nJ5zKwi2zlZl7PXfSo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c5ed46f4c8eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":88248,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 14 tables, 1st \"GSUB\", 33 names, Microsoft, language 0x409","md5":"642c61c3093f360ebfe8c96dce691e21","sha1":"92b1993f59c04e0cd4dd08ef4ab1d3d043fb8f99","sha256":"8f4df7d81bb9116d97d1a27cf2196452521eabae79a8f54af30c3b96dca8b3f4","sha512":"bd4b5902bc45378a2cd6310c13c94ead62b2516dca5afd9b2cc1b75231a9ce80f36c042ab3a660c2b54a4343193e0909b5ad77561cce1e77622ce6b64e521c6c","ssdeep":"1536:x3ltk203A8LSj17a08a9BXWiWX8EMoizDrZSuqCcZkMM59cLfB8IFJ:L8LSj1u08aro8/RXr+Mi8i","tlshash":"d083081257135b4ee71227bf53420390e3b6ae176bbf624ff086bf6b41970842d4aa17","first_seen":"2026-01-30T05:34:06.470922Z","last_seen":"2026-01-30T06:15:01.021718Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/03aa594fb62a7611f08e2a8eb3d3a732daba0875.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /03aa594fb62a7611f08e2a8eb3d3a732daba0875.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bbb8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C%2Bo6pjkIx5mYOKdiMrANyxktWe4yQN5PZPEjJ8Ki12pbc%2BH1nGkh0UG7OtM%2BdD%2F7yRVyTH%2BgIA%2FThWP19vUqf2j%2FM2sN9wKhlNQYJ7UGiY5laBpdsDJS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469abddb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48056,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d7f0d9d3005056f1c3c8004b290e09f0","sha1":"03aa594fb62a7611f08e2a8eb3d3a732daba0875","sha256":"70063555eebb116807459047a2703e2f62d311c4186c5048aeb4ffc29327c607","sha512":"efb908dabb2fab304c8754d7a9454a2e2fe48cf7aea11a5d6265b09bc9c4e438138694ecc67e03938af2a1094ef1a3db2a764ac56c5f47504fadfdaf1281e110","ssdeep":"768:SD/6iF8meAi2O//Yyq6D/Ou0lsW2xpDWQdCgwHzPRDbS3TCMrM3egWs1oq:SOiFzeAROXYHG/F0lsfpDWQdCTHzPhbb","tlshash":"c12302ab761fb5037504a2e15a808d36f524dd0090580ba7c7cfcf2de7c375971a6839","first_seen":"2026-01-30T05:34:06.432074Z","last_seen":"2026-01-30T06:15:01.028173Z","times_seen":2,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":222,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/937f1e072f4f4025f281ba9f2f56218e8f53b5d2.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /937f1e072f4f4025f281ba9f2f56218e8f53b5d2.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bb96\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GdjSULQ9vSJCFyCqs4xG9ezD3EAAMsFMJ3kMXNCdPxF23SgG2Lfgal8J%2BBl5sP36nLxuP3Q9F0z0zEGNY4N7T%2FNtFxHSOGqJmy7XJ%2Fws1x0QIgsTpA7J\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469bbe7b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48022,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4513a3a08a1fbab503e88dfe836cb081","sha1":"937f1e072f4f4025f281ba9f2f56218e8f53b5d2","sha256":"7022185346cc6838b1f3e902eeea22cddaf375f2b9315f3e6d06ad5fe360a5e6","sha512":"12b554e39e9a2d37aa535c1a89c3b1eb045c3b99bdd897f0209c0b855c8a4b87dbb8ee923e4dee1d84cba06ea7302ac9f352093e51a0b5fd0efa23cfabbb56e0","ssdeep":"768:hhQGVnGOyws/pfeERwJWK/pUtQDUsbwawJF2PbMAsA38grupEK9yACT:RgDWECMK/aQDXAXYbiaFypST","tlshash":"152302bf3b407d1ab59e1e171011f0226aa0de86a35c9e578e3d1b9744be1d48f33c92","first_seen":"2026-01-30T05:34:06.39239Z","last_seen":"2026-01-30T06:15:01.030304Z","times_seen":2,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":202,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/walletConnect.2aa599230e298002da05c5cad3862f71.svg","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /walletConnect.2aa599230e298002da05c5cad3862f71.svg HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 2461\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"696e0368-4d1\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IoJH%2Fj59WIMn4NlYNQyqXcffQgeWU7TW6E2czeMZD0PMeR7Md5x5WEufAi4wMgGdkrVMLhTya2cwsqVbj6GV%2FJ2HqteuyP0cO2L5taEqNi1m%2BV1yQkEU\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c5ed46a1c3cb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1233,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4ef638cd36f86ab473e50b4660dadcc3","sha1":"240267d04187dc10077929e9289587b2bdafece0","sha256":"88db4bcdfadfe78684c8078ca55a743ab6df6487d7a19062af7bd8d88e7854a9","sha512":"1f4b77549b79c830a4f3978c90ff548d5eb36857bd7127a7d7c63cbfef77f37a1392e6981785ce081477fe03aada4e1e4b061e907049680aa08eadfb4fa76a26","ssdeep":"","tlshash":"e421af2d33b59bb38597910627f1726143372195469ecc10ca596fa1d8fc015bf31edd","first_seen":"2026-01-30T05:34:06.40638Z","last_seen":"2026-01-30T06:15:01.032225Z","times_seen":2,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/8433c92027b4913483aadbdd8c2e110f04c07ad3.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /8433c92027b4913483aadbdd8c2e110f04c07ad3.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bb46\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qQZ245skkLoPcx2uop6I4v4ZylAQHOspt%2FxsaeBDaYGn7JzlB10u94DfIr4iJQKesQiyJm4H4Ion2VvP0zCUB4kKpQ83K1Yc967edWGUPvg5WK018pXm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469abe4b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47942,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ccb89a639a8052c929e4e5a1efb85fcd","sha1":"8433c92027b4913483aadbdd8c2e110f04c07ad3","sha256":"62aa48e426054df666c339a0f2585396644db3bf5479d64a1c8c0b51a1b8cc3a","sha512":"44b50b28516f278953c6f0092b9bf1ba476deb8dc91593ef39203ce5f61cdf94372c3492b2d75c6f7f69d88c232dd72f1624231dc0f0225fb77d3adeecb0ed11","ssdeep":"768:2j9V6uMJBuie5yx9Onz71meIp8vhGRdRziCNQ8hpoiVwYRMTFiwBkeOio34JXglP:2juuMJBup5y/y71Ca5UeGQ8CxiVtaglP","tlshash":"0623013eab0da9018326651d40ccd58a51c3ebf1fe91874b3b25c721959e6f1efe2217","first_seen":"2026-01-30T05:34:06.437804Z","last_seen":"2026-01-30T06:15:01.034035Z","times_seen":2,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":203,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/7df87ea425eacdd46af0a0df2d59e030750c5cde.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /7df87ea425eacdd46af0a0df2d59e030750c5cde.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bbb4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vRvyZlSRpCl9Sb8eJgjG3VUX6waIu6nJeMrBb7Kb1dVp0uzPFtgfTtb3mjn7wwQ9Mo8kQGdSQXzaPxPZcJ9dPxhTQc1luKQEaamXut24AhzvtftKk%2Fyt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469cbedb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48052,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"05df931938bd3cc9df95fab6d0ee5617","sha1":"7df87ea425eacdd46af0a0df2d59e030750c5cde","sha256":"9b00dd270a1f3324c3c5fbc0dda7d5cb37a99abbb89793fa69668d8a73d5435f","sha512":"7fa8df959a0d55316160f36013bef3a65e1f85ad52208b936853b00d95a5182552c341e165d020d930ec9844ac31f7a6dc8ec22bd4bd4f91c82707f11feca35e","ssdeep":"768:qH/fW47/Z/eVhG+mLFIRbobNTYYTFQx8j1/M0s0K+BA6M61xJLmnthKTV+1Xni9H:qfL/ZP+m5vPTFQsxM0sR+Bt1xqtUM1XU","tlshash":"c823f1f166769fcb43b85791e70acdd71181d98c0e352c99d8fe0114e827901a4cbdab","first_seen":"2026-01-30T05:34:06.483157Z","last_seen":"2026-01-30T06:15:01.045431Z","times_seen":2,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":185,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Fri, 30 Jan 2026 07:02:33 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NnS8qXjJyUdewAFsq3OZCPwh5EYOh25FEzp7lhN0dPw3BrpDr7xKB3rv3xUVNzWke7G6X%2Fc5DPXnc%2FzvCpYkbCWgiPnmzS4i6z98yQXEGzCKCu6MunAl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncf-ray: 9c5ed46a2c41b1b8-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-18T08:34:14.98483Z","times_seen":421704,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/favicon.svg","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:34.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:34 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 2461\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"696e0367-9fb\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8XOGXCQetrqFi3wi%2BjfBeQ2u9iO%2BPl5CoSI3yA0weEi6JV2DzhPvcKNaRWTN7NaT%2BGO3CQtxojqqmIpWJgo4sqBpFoourhiZ6ElQikkbBL8T3vfIXFll\"}]}\r\npriority: u=6,i=?0\r\ncf-ray: 9c5ed46fdcb4b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2555,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"756331be7f6e11891b1740805e3e47bd","sha1":"85902c8058449d5da79e8d0765bfbd4efe18691c","sha256":"a0ef357c331f52d79f457c996c4e950b584c4a76f16c4ae8033d2a6ef71d2886","sha512":"e98354e0678d6157eb4dcd94f034897637c01403b46f7b0faed8dc3335dda426e30f02978d7f5024a112bff55951fd2922217cc81d0f17fde7e4bba3df0dfa5d","ssdeep":"","tlshash":"4d51e0f125d8a0cc694d133cd62418a12b6fa1b0f244c6498c8e2e36e196ddaf45fac8","first_seen":"2026-01-30T05:34:06.445258Z","last_seen":"2026-01-30T06:15:01.050496Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/372fe252837603533ead21481a2e8602969e194e.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /372fe252837603533ead21481a2e8602969e194e.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bcc8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L1LkC%2Be%2BJlxiLrDEDakHNsWavecyP1JjY1%2BuADPaykBGs7VrKlKO%2FV4jUJnR%2FwtvxJ4j5lgXflHdAjAYzS2pVMpkeen77fSaaet%2FfVdyHnpMvz3buY3W\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469ec22b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48328,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d388094d2bda138ba0204e6a733b57c6","sha1":"372fe252837603533ead21481a2e8602969e194e","sha256":"789f93ae7ea81d802bfd702592370800d69e197ab8309199a62a6b510cde5997","sha512":"5c14cfcfef5f34be10a96cf7c1ea7b22eccc9b317f8fa77dfb535bdac23c8ba468ca9ac6c68ed583558262a11923c45d7eb290fcf1076523089de7d35cfc10c7","ssdeep":"768:ghPqHwb1fuHTGmnJMLUsochmOGS2AZsfewKMq3Yu61XASPVkLfwSWOGBKhlh4S9w:gx0OfuzgwstUwZsfeJttSPOkXsVSM7gv","tlshash":"7f2302d164aaae2ef1face1f43088531d1f44944fb7fd2084f468bb946b8997fb00285","first_seen":"2026-01-30T05:34:06.530765Z","last_seen":"2026-01-30T06:15:01.052781Z","times_seen":2,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":153,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/redistribution_dark.c733553190a9e387fa72.png","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /redistribution_dark.c733553190a9e387fa72.png HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 199488\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: \"696e0367-30b40\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 2461\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SSrLeyPgxbQp3SHmReqgIxSjg2sNgtSHBizd1L0y9UPHi9%2F7jN7gHHWYi68owPzmUrLxp5a4Q9eYBuUeeurfVLu7Hvf1o4tRw9yE0d0%2FSGVx6Jr63XXT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c5ed46a0c30b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":199488,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"2f4255c125b5d7b6f430078fb34cac42","sha1":"c4497ae1eb0d7c156783ef3bc4e2b68dd3db2969","sha256":"460284f0ca20fa1681cbb98de472927a2df30a776b708fd5e9f0ce3aefe6ffd0","sha512":"244a553710d0abe0ed0b9815372bd347bb2321c8572e08ee02b92f6c524cbceb43eac20f2778019ac37822a6ce72f399bd9a1a5ca7221ef6785daf29dbd9bc63","ssdeep":"3072:RMpDhxDfcw/mKfWBKHxOMW5Jkwajv4VxVhbkdEINmfHUTgUvwpbNPfeKzMzWd/:Cp9N7fWBKRaJTCv8/FkUP7zjZ","tlshash":"071412519529bf3f805f4d003adb4e9742b2079544bf5e1ce3ce9694e3eb3993122c69","first_seen":"2026-01-30T05:34:06.533282Z","last_seen":"2026-01-30T06:15:01.056029Z","times_seen":2,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":168,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/RobotoMono-Medium.275e41b58d96111c1152.ttf","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:34.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /RobotoMono-Medium.275e41b58d96111c1152.ttf HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/main.504a9112.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:34 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 87172\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: \"696e0367-15484\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 2461\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dz9Fgc09hkCTaTZyGfFJz13UaoMjkLw8k2D8UO1czmTqnHImGowXCO3ztKIf2eiIzurfbu4xbYTme3mBrinDDYVmVsoQ3adXaOIPL1%2FDTusn9rZKQ5yc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c5ed46f7c9cb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87172,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 14 tables, 1st \"GSUB\", 33 names, Microsoft, language 0x409","md5":"0eaa3f458fb2611ca44b021db3db09a8","sha1":"c86b835df1f911c6fa48b0e28f9f3fe80b981f13","sha256":"f1c247bde0eed1e58e3b9eee89b2188dc5dfa44b8c2716044556662dd70cb7b1","sha512":"8e595ef3c3c6ac9ac88ef6b9d541f6267a464e9411fe6ee438b510282b8e088bab95e37ce57e02d2fe4536ab36b43ad596ff80fa5e809cd6d8d93b79a2559aef","ssdeep":"1536:1u7TKPq20re8wAaeq1yaZWb572MflvN2vg8CGfCbN0:fodwAnaZW9a8N2vg4fCZ0","tlshash":"0a83191257134b4ee7123a7aa3060361e3fbae16a77f624ff0877f17419b4502d4aa27","first_seen":"2024-10-04T16:19:00Z","last_seen":"2026-05-20T19:54:45.624305Z","times_seen":9,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":7,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/793e52ae93e5bdb13613f9463d99540d8936a36a.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /793e52ae93e5bdb13613f9463d99540d8936a36a.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bdd8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Y4mmiao%2FpuVAI4ncb4N6BlT0hyA2cm6qSTPkONWH7nVfaHcnNqKz%2BgJvos2p8jtmhJlhCsyNkswaLciUbmo2tWPK7tFAmZXpmr4%2BnsjirsayALL2bYy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469dc10b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48600,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1238a3a5d607698f2aa65d37077288b2","sha1":"793e52ae93e5bdb13613f9463d99540d8936a36a","sha256":"0c7a1b5612349d294793b0b25ff291cbd9238a9a45062197a4c7666d0f32a5d7","sha512":"ac1eb8b6fe5a98ab0cb8596f6cbadd1716c876cd087e4404be46e90e6a7ad7217d44eb46454089604175e0fdf81bc0aa534ab51e350fb13ede3ab38cc14c14fa","ssdeep":"768:TSPmqrr+7ThLjfinb/COPcA0IBnc88PV5wkqpLTtmsCOTUINBR/i+hnKQtmuBThE:TSPmuwtjfSWZA0rclT6uHb/ium8hMk49","tlshash":"6b2302d8717e6a28163c8fb351d83180360b1874dbf308d75c8df82d56435a959aee6f","first_seen":"2026-01-30T05:34:06.489894Z","last_seen":"2026-01-30T06:15:01.062166Z","times_seen":2,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":170,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/copy_icon.45029c885d864a01b226e7f6a423cfc1.svg","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /copy_icon.45029c885d864a01b226e7f6a423cfc1.svg HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 2461\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"696e0367-11a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZnfI3%2FiZ0%2BnjWkjH%2BTwUe1KpZWx2y%2FuAAB6UXS8WL9b1WhZS%2FZinu3SWnFTYl%2BaSNsCEQZqPzjWwPTe7QCalSUTJunBxtK8uesLLzW2x6KpYk9BDJgWg\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c5ed46a1c3db1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":282,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e43f97b3e72cbe71abf4702b0cdc580a","sha1":"bc182f1b9b02618281a002240b88fa834ecf1fc1","sha256":"6c278ecb6ff67fcdb4be1956fd9a35d48dafcc64c3a8dafcdbed5f8488ac45e5","sha512":"951489cc711e9ba7eaeb67827d4179b949da545b8264f8324601e06c430a614989aa22b4e283597afcb7f1f526ed4d3f67736f63e3cd8fe5b6c47ead311eac7d","ssdeep":"","tlshash":"95d02bd5c64c4a1686174211716cf539a0778cd770c0cdeec9d17e53b95c6e74c1e2d5","first_seen":"2026-01-30T05:34:06.512077Z","last_seen":"2026-01-30T06:15:01.064684Z","times_seen":2,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/d4789ff7858a006619aedb0ae3b5413e109dc1a1.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /d4789ff7858a006619aedb0ae3b5413e109dc1a1.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bb98\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jMlhWZiN0QFaQ3XVrgyouxtzgKNI%2Bgm0Thu%2BiMnyaFSj73eRUDUkOSthgQ8s8PMoM4DN3epUVKXJqFXL9%2BfbU4AJZqnNYrptfzWJG4B%2FTEBcYXm%2B93VP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469abd7b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48024,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1e1057b56e56a82a7aad3154bb968d09","sha1":"d4789ff7858a006619aedb0ae3b5413e109dc1a1","sha256":"018de261f43e4ad1ca7ef55a5df86b61d2a0bb358bc2a6a647f32da188ae8353","sha512":"f81ebab2716c140bf516ade605bf820b813b6b2374fcda0e24be2718ce06d896e6fb56b46f921641e4f23d855cccb6a912e5c42f45dea53c961959fe5cff522b","ssdeep":"768:LtPdFB/eO1g+cepcvLD5lEvmXpH1AtU/S9SuCrz0kwOUq2krJZKix8r34:Lx/BFzOjDTEvrT/Crz0kwbqT7xH","tlshash":"7e23f1803ea43dd4866c10478fdf26358cfd7edfb696d6e80a612d33b421d48a981ba5","first_seen":"2026-01-30T05:34:06.420261Z","last_seen":"2026-01-30T06:15:01.067082Z","times_seen":2,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":225,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/402949416503e9400b44858a6fff294cc1cf9c2a.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /402949416503e9400b44858a6fff294cc1cf9c2a.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bb20\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dFZcofk6G6pbFNhBXYxsI%2Bvy1WICn4aoRl1yzSJaueP%2FesZzQeM%2BdM%2BZTbrGlV92uX3qoOmYuTv4ypdYTbNPf%2FA4YXgxwnFKMA7O8WBMvPsor%2B97TDSx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469dc0eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47904,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"62951e73537c903e2c7dcb1faf9993ea","sha1":"402949416503e9400b44858a6fff294cc1cf9c2a","sha256":"29a96faf8045968de80e774514a8ab9b993f43ed03f825ebc99f3b0af306f186","sha512":"a9a9d264a4829f132cb298143eeb639d3874b33e91d2fefe37df4d278559d06d2d93801753982121040a887e6312b16a3e9815003a76bcbeb72fa8ebd2f96ffd","ssdeep":"768:Pwl7y3+AXd9vgE/0Oss7UicR6UH1cTJYGgdj3YrhOhMIpcdFLXwZV1FiuIrLSo5j:PwY3Lddgq0ONYtRb1mOGeYrhOhMIpYZj","tlshash":"a923024b698c88f76ba41275c40f224716424d7e77126d9ede83b97cf6113352adfa80","first_seen":"2026-01-30T05:34:06.414057Z","last_seen":"2026-01-30T06:15:01.075181Z","times_seen":2,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/1fcf1ba9454176858a8dc6976988e98927854675.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /1fcf1ba9454176858a8dc6976988e98927854675.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-baae\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cjgRHr1iFKgSV8NKbf1WOkoJN0MeVZPoSVki38qAuFpSdmzynK7Dw8toHtsQilm%2BuKNe%2Bsz934Uniixi%2FM13DFoy6qX5D4x2%2FO0OIoZxbfNc6JS4v7cD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469fc2eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47790,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a1f603dcc659f1cf30867dadfd414a88","sha1":"1fcf1ba9454176858a8dc6976988e98927854675","sha256":"12303f14459c886a68f96f3e362060e52bd29857c62b36ab8539e47701a284a4","sha512":"27209ebc05b67839e82177cd1eee0e01d29d71afece70ab0a74cfd02febf735b06d52e7a58266f9754b914f7618776f9d5ddfcbea653e262db77ca7c1c867d04","ssdeep":"768:WlaWmj4AaJb2a8i7QH3ZxXYtv0SKD9jg/u8G5Hfv4mDXy2n7RtZaBLDuQt:BBq8AQH3ZxXJXDtdBfvb1yBPLt","tlshash":"0223f1b234ed8c99f7e245b9056dfede797d023e8aa1a07fdc00147286745172b8e828","first_seen":"2026-01-30T05:34:06.479767Z","last_seen":"2026-01-30T06:15:01.077254Z","times_seen":2,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":142,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/referral_dark.8765d9a32d34867c916c.png","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /referral_dark.8765d9a32d34867c916c.png HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 179857\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: \"696e0367-2be91\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 2461\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KgUiBf%2FJ5upGqCrpfuYLeNQ4DrEG36t9oeFe48hFTtgc5bBMFoJGxvgxVf%2BqQFftIpgp36B9dfD53meZ%2FGNkyKZyPyXAeZcgtNvOCNqXkShzA1kuORHX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469fc2fb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":179857,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"f7b8c29b4088921c370cfe0cf61481bc","sha1":"3bf3a140c5490218ac1af4385e71fd1c47f8c64f","sha256":"39960a9b52eb4705221fad58247a58449f226a7724a394b503c72fbf74d402a5","sha512":"0fb18681268997724351cd0569b5cbe9c7fcaba18908dcfac137af554d378f8794da8750c77a81a65bf847075ecf990c10a1da60e59b6a6ade78cc2eea0330bd","ssdeep":"3072:ULnugcwLdsZ07e8gsWdIM0N7mf50dYrgThoAOZcOZRF9fVrkDvIMFTroS8YYnLk5:Urugcw+0XgJ0lmlgTmRZVZRFRVJMVrzB","tlshash":"120412c6e1756dbb1ff8b0fb52ae7e65a0f312eb9183fb510029948a21450850f7836f","first_seen":"2026-01-30T05:34:06.468769Z","last_seen":"2026-01-30T06:15:01.113172Z","times_seen":2,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":163,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/close.svg","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /close.svg HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 2461\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"696e0367-541\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q2TlKLII6kH4b%2Bu8IKTgHUcI4MwY8P2cyPggXofSx0kd4wt3F8v%2FHM85pZJJOFSld7yKcvcjJZp12ARnioWLteRIk97pommB50CrrQ4n8H1whqaMEIcd\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c5ed4699bd1b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1345,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"463a29230026f25d47804e96c507f787","sha1":"f50e0eac87bb8f5cff8f7d8ccb5d72aedda7e78d","sha256":"a049e1abe441835a2bcf35258936072189a0a52d0000c4ed2094e59d2afd189b","sha512":"83f065b7b10e906ef8bf40dd907da4f0eb0f4c28ee2d8b44e418b15f1c06884a579957b2bc27418fac5759825d394819ff0ac48d784b9f05564b8edab25d9426","ssdeep":"","tlshash":"2c21e5fc520853f49d587e98a8623077954514bbbf9db8c8928c847788c53dd4ec8d58","first_seen":"2023-04-17T01:45:40Z","last_seen":"2026-08-18T08:38:27.763834Z","times_seen":67121,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/RobotoMono-Regular.94ffabb10cbc81ee42ba.ttf","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:34.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /RobotoMono-Regular.94ffabb10cbc81ee42ba.ttf HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/main.504a9112.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:34 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 87236\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: \"696e0367-154c4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 2461\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zq6nJuBUHDAPtbS5%2BcoKxjCdIaw6fCK3LtEl8JI3JtArzD1dWMEmucInSpSQfV163GwaNzkAOgnmS2rVe%2BRSoIjtY%2F29V8KjcSfso%2FF4cZAyIPUengT9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c5ed46f2c8ab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87236,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 14 tables, 1st \"GSUB\", 31 names, Microsoft, language 0x409","md5":"5b04fdfec4c8c36e8ca574e40b7148bb","sha1":"c25a072c96240ab8fc288b61edf2bb133aaa975d","sha256":"8d9a1fa4dfe5a5deea780f6513996141425ef782d7cc5665d4d459146fd3a71c","sha512":"52c754ba1955bc61a46f686bc326fee6a57076cdae7575a43dc600aff5950503e7484fae04d622a88ba589eb7d441e307203a2c9a170444f0a80dc0cf29ca57f","ssdeep":"1536:HnOR20dKBEj4ZjSJhjI5msm5Hh7tEDdvtyQR4F1:HO+SLjmHmLhEhkQuF1","tlshash":"c48308124b135b4ed7127b7a63420361e3fbad16a67f621ff087bf27424b4902d4aa17","first_seen":"2024-08-13T12:42:29Z","last_seen":"2026-08-17T19:52:03.772648Z","times_seen":437,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fprimer.next.cjs.js%3Ft%3D29495894%26u%3DlQisG_9oeZ7mSEZxGDY5MjU2NDQzMjhjZmYzYzM0MDI3YjhjMdzoeBuugL5YXLS9pQ","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:34.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fprimer.next.cjs.js%3Ft%3D29495894%26u%3DlQisG_9oeZ7mSEZxGDY5MjU2NDQzMjhjZmYzYzM0MDI3YjhjMdzoeBuugL5YXLS9pQ HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:34 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\nvary: Accept-Encoding\r\ncache-control: no-store, must-revalidate, no-cache\r\netag: W/\"a0502-14+i6Bt7XM8ofHk8WpmFyqoPYWI\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=primer.next.cjs.js\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 01/30/2026 06:14:34\r\ncdn-edgestorageid: 883\r\ncdn-requestid: afa1f27a5898509cd28755e691599057\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q1JmPOeSrkDIGYlFxVlN6aqaZIBgReEJy2xUxdXV7A9PzjY%2Ftw1oBCQb68Pd98N0sG0x%2By6rcF4T9mTgnR7kNLs2O4%2FzUxEtZj%2BSczJ33XpRNtacQdFg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c5ed4706cbbb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":656642,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-08-04T05:59:25.953933Z","times_seen":2650,"resource_available":true,"data":null}},"time_used":671,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":540,"receive":131,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/7c9ef5172182633415f14dc67515e968135c331d.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /7c9ef5172182633415f14dc67515e968135c331d.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bd48\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uhmzIS4Q0sAzIctBPklnh0GW1HpReJzhyJLBuNMGy%2FT0gwIsYuRW9%2FJe5XVzGYDmfWzrhQuJz2AEqA7U4YyUXlS3iVgjkz4ZAB2kpsYb0JXeuzCmVWPU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469ec21b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48456,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"658c9fc00571533ee7e8ae8b3618086b","sha1":"7c9ef5172182633415f14dc67515e968135c331d","sha256":"38daeebacb0b825dd9aea5d7dda8a2bf8d96f553ec98dc42a1c3db76e686d1d8","sha512":"afb70ffd688e2964071fd5800e44ed941f33925bc7080c219b734846e25cd5774b88f547009e8b5a8c9ab0e1124e7d169f8a4a1591762a07c29750a9e0cd36f0","ssdeep":"768:wNVQg7ZlXdVnM0ZQ8iAvZhlxH0qgsfHW5A/bauanbBF+kqT+W0769X3zTu17Yyb7:wYg7Z939Q8iahHosf9WoA6t3vu17YBzY","tlshash":"412302df9f5448c4b0a3109e5a5047d1c16fbbfb7cb6d2fb5aa48da2a071460ce443b6","first_seen":"2026-01-30T05:34:06.422962Z","last_seen":"2026-01-30T06:15:01.135086Z","times_seen":2,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":152,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/RobotoMono-Thin.b54395e68207fbc88b36.ttf","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:34.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /RobotoMono-Thin.b54395e68207fbc88b36.ttf HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/main.504a9112.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:34 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 88288\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: \"696e0367-158e0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 2461\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xRJ%2BHKB2rVKQ9nxHs12mDu7FIuHH04vIQnooEnZJSmCoYY%2B5G9n5FiBohFfHC%2BNCckYkEFsFV9jm5Wm2MnAQZUbCYEOHoMmuoWB1nyN9rCIbIyXnXlVa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c5ed46f3c8bb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":88288,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 14 tables, 1st \"GSUB\", 33 names, Microsoft, language 0x409","md5":"564755b4222c6321216f1e764c9204f9","sha1":"df9f591faa67afd4991c4129dc6509fa117eaec2","sha256":"2a54956d141aff9b3cc0218e88700860f0fc004675839631c61c1108a1ddc30d","sha512":"42333f2b0b2c7bad3fa4ce32e14b5e83d6ec6f60903856409e383fc24abc9652b1eabce907e9361f32e59e5ab891137f5d2fd79124833e145cae81af8202eecd","ssdeep":"1536:rA7dCfu820+njNFhQFDbfgsc9Str8CQlV3z7tAAgstTM8B:6Bjjhmbo/M4r3zuAgUg8B","tlshash":"c383081243135b4fe212777f53420390e3f7ae1657bfa24ff187ae6b919b0802d4aa56","first_seen":"2026-01-30T05:34:06.436456Z","last_seen":"2026-01-30T06:15:01.141821Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/3ba1161d127fb53565b46a8af9bf413c93d6b894.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /3ba1161d127fb53565b46a8af9bf413c93d6b894.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bd6e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BXu9Fg76jUkOmUXV4RcG%2FC973ioKVcSBLdxOxb2s7U60RbSVkV%2FTIIPdTo5nzM6%2BoCB3R6HqXeQWR1s2rOYk3KCyVRir2e%2F30HsxiQMZmrNC69i4vzgE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469ec1fb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48494,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"57fddeae5ccbb7880709099df678d55d","sha1":"3ba1161d127fb53565b46a8af9bf413c93d6b894","sha256":"3417259ad39b19ca2df46caf57c12a72ffef9255b0e419d7f5c2302b40090a23","sha512":"ac1feeb6a00ed30cef4dfc486beda8b5c9db40a2482b059ee7493e41eda80dd865b2bc8df75f8440cf84e24a247d5ebdaa4a79e59df8b9858a8ab28d16f85e78","ssdeep":"768:28xOkThQyIABdf/Mlhqgpi/ODIRPpv3k8c9uAig/BonMyyYw5T4eSCUPf:9bBVMO/4gC9uy/B4Py9x6Cqf","tlshash":"7023f260e4c994820488111067cd1173d3b7687b5a0b7fbf966ee88ed795a50ce2f1f7","first_seen":"2026-01-30T05:34:06.508354Z","last_seen":"2026-01-30T06:15:01.145416Z","times_seen":2,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":162,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/main.504a9112.css","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /main.504a9112.css HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-111c0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zsSNVy8UZVPkDRo17Q4Q%2BvsBhTges06gLHRj38wowfAgtn4JHZa0UXPKiZlsolbWvsLhireEDllCwKaNG4h8RH5Frizn5qatu%2BzccWjwb7n2gXPJ5NHZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed4699bcdb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70080,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ba8e510f869c645b3f048547c3ac2209","sha1":"dc9e02d8d9fcc586bb4715abcc78e0472fd9b3e8","sha256":"00f8535263f83f3f1b5e83d05c1ab15c4e9b660cb488d005cfdea677c659ad39","sha512":"d362d0a55eff7753c3f4c6997efe4be246b1e0e4b7fd0fb01c2cdfa7dc01867517c2ffe45121cdbd1af8c4aced9b3012af7071276f578c49798cae1f19bc50cf","ssdeep":"768:j6JxHpdmwcl5Dr2D3MSV7QjBC9qvzdEeg:2yv7dm","tlshash":"f8634fc2b981141cf4a76613f599be7cd62f9c4282c7699b69077ff997823db022060f","first_seen":"2026-01-30T05:34:06.474583Z","last_seen":"2026-01-30T06:15:01.149861Z","times_seen":2,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/7c7aeeced60595a5b27cf2c1c5437e5fe288d23c.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /7c7aeeced60595a5b27cf2c1c5437e5fe288d23c.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:52 GMT\r\netag: W/\"696e0368-bdd4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jyn1KwopV6%2BzueoNSMY5s7VZ%2BOjwPME6Wd8iMOjJzl%2B78qFTPw7gUsja0KTr8EgWMw7MJJcQkXFYCaPpoZ48Kpk8dy5TMaoFnAwYA3hudAFyWiD4hIQE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469abd9b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48596,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"aa35bd8c976c69f9d73cf0515620498d","sha1":"7c7aeeced60595a5b27cf2c1c5437e5fe288d23c","sha256":"4d69fa3f9c9405e5d0668e1a8962bcdec02dfa92405633667b83eb5202481aad","sha512":"b18021fc503870eaf83870848b5ef2a71817f6494cf6833341b27c7920391a576ce3bbc9ff7bb4fb0d8f618a8521fac24fe6c0c0d8e13e2db4a075f1e4839a71","ssdeep":"768:e2Z4f1E0c9v2wZ7CkA8G/nFjWXAuJjij0qAn/fghG4fMFWNCo+S1jpOCAsN:e2jnOGxAHe24nAUdo+S11rAY","tlshash":"a923f2251cd3ac275c1f054f6034d3bc956dd28ad21b14779788b0af668b2798f61c9f","first_seen":"2026-01-30T05:34:06.521395Z","last_seen":"2026-01-30T06:15:01.153028Z","times_seen":2,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":209,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/65c9663fb5396c893f48a0afb03d306bf9b9ac6a.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /65c9663fb5396c893f48a0afb03d306bf9b9ac6a.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bc52\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4ewcLooyI%2F7c1vAqRL3kjmewu9lpaMQjiKR7DotACq%2BX6chTQOMz8mT%2FgFebB%2FHT0mntgVd3qRNT6WGm6R%2FAi0LGdayA6Skej2YE2mrRAj9QFmbpsDCT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469abdeb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48210,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cf0234ed052db023d07b22dc40e52d7e","sha1":"65c9663fb5396c893f48a0afb03d306bf9b9ac6a","sha256":"bd00b6bd2281067aa96af932dfa4c9933035ed154d8c535ef00f46b16fd172b6","sha512":"2545e8f756e903941073cbd252216f560d8aed48eb5c1422ea569c54e36ba12cb03e0d8a1c3334f9c1d29f66a32834b34329a1f24305e35142b03ac50ebfb881","ssdeep":"768:B5w+aXkv6q1XpqlAtMefK/ah9xDmGdBeQ/s24XrFqHlRnRfzzZpkLRyiiWFws364:BTPXMlAtsK9RJoQnorFKlRRxzipFJqkv","tlshash":"0523f20664902d4165c66e7f9f1994087bebef70cbda10f3c12f9f5389a20c6e9934b5","first_seen":"2026-01-30T05:34:06.421616Z","last_seen":"2026-01-30T06:15:01.156399Z","times_seen":2,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":219,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/amlbot_dark.svg","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /amlbot_dark.svg HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 2461\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"696e0367-10b9\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pk4uGi%2B0s1qOSZkbd%2B%2B%2BmejnzQcwo6o5o0%2FlsPEGn9wHuYpk9D883OspLoysT8XMdbVUdzH%2FZpKZ1vf7PazeXiei4DrK%2BUXbZLc3IkeqjNPkzszgKq2g\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c5ed46a0c33b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4281,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6fed526571552bdadf70b9b37b93ad2c","sha1":"1548fa710aa616368f9878e4a1e96a189c5b12a2","sha256":"83329622851ed5f863f9fc3a006bcdcea4bb3885f4c136272c7fdadda2587ea2","sha512":"f2178c80c9e79cf53771cdb8df9b5ed5ab34421a9b9aa1099512c2b5a42bfdf8edcffaf9e300515b954c3de4a6970284fd47d2341b197f6c07cbc8a135f9dad2","ssdeep":"96:kcDFMcr/AnwEsgG0QTDaaPOcy0GVJXJlEg8jaVdLHmQBr1fzIlYu:lRva2yaPxgp/LG85r8","tlshash":"459155f536a3d2e4d50b67f8d93a5070ef1a28f9abc6c338c244de91a46446bd89c8d0","first_seen":"2026-01-30T05:34:06.491545Z","last_seen":"2026-01-30T06:15:01.15926Z","times_seen":2,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/continuum_logo_dark.svg","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /continuum_logo_dark.svg HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 2461\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"696e0367-f0b\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uk5ymnHaDKwNqWhapQIEkbc3dMQVhrE5y%2FK68AjLTtdpSCsTq0BKKojLaGiSymC6M1isThDe6%2B7SrmrPd3IM%2B5J7JHKWjEOBOPQUU4a%2BkdnJ9Sboa71r\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c5ed4699bd4b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3851,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"108f71a68e2734963a641f0df821594c","sha1":"054e246a6e7122fdc60b6fb4d337fece54638d23","sha256":"52e8419b5b6ecc14341cfb6022a7e0f976643d40a7b150593f27de6ae6506801","sha512":"96739827fd0c37892bd69d807346577a44d28126dad3bc9ddda5aecbb2660a226ff7185fb0c0d584dfc0af615f23e0c547ff28633b093ab437164b132afe9201","ssdeep":"","tlshash":"488123e11098d8d05d059bbcdb3846e7766328febe94dd8987b1bd3a389017d884c7c6","first_seen":"2026-01-30T05:34:06.504482Z","last_seen":"2026-01-30T06:15:01.161076Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/f3f848e14c6eee2d666ad2e78f30d666b5596ecd.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /f3f848e14c6eee2d666ad2e78f30d666b5596ecd.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bb90\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kEiKcpUZwSuasE72DOLOWDGiYGChBMhvHXEa6NwfPeW6KQD3Xp%2FaU4VSuWQWr%2BU0Ej41Zqz3auc27VdWtLCRL9n8gSB%2FSo49veBeEnpsI%2F6Mipdw0hfj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469cbf7b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48016,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6057ebc6b4b66f1026ecedba652d7dfe","sha1":"f3f848e14c6eee2d666ad2e78f30d666b5596ecd","sha256":"ed27eb000b85a50cc79e23fd8d5222835cfbd4aa6f2104767addb94503d77217","sha512":"d30d02ef22d15e543e9a71d288a365affdb834eeeeb85ced937ee27230d981f2943a92f694be27840bcb89e343ac406e48efbaf997e9cd355a816880e354ccde","ssdeep":"768:0BT01hT9SOkC7t2EIr/L00MNq4ra1HTgwZ8ECbwsHCdPPPpPnqwmQs09wkd7Z83I:0ByR9SCkEi02RTg0kNC31qwmQs09FW3I","tlshash":"5223f1cae96c5b1a971e3e86cde188b7f10f65e9f81389715180d33344154ac3d7bcaa","first_seen":"2026-01-30T05:34:06.441985Z","last_seen":"2026-01-30T06:15:01.165421Z","times_seen":2,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":188,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/1ed1efaa2e2fbb552f0dd47f4f6523fa5dd1883b.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /1ed1efaa2e2fbb552f0dd47f4f6523fa5dd1883b.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bbf4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FaQRlEeVw9qHR%2FUktATTiHxjUPImaYVrDV7DltujTaoG7YJ%2FuoFrYB3Jik%2FzFlgnXuBpAN6MYmzTqnQQHLo2YvNp3g9fclDL5YsxkGI6sd1bcnWAG4Gt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469cbf6b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48116,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"84ed0b76b1157b98a0cb4249db078d62","sha1":"1ed1efaa2e2fbb552f0dd47f4f6523fa5dd1883b","sha256":"78afd882932cf0174feddeca956e9ffff3325f43fa9292947a503afae3159103","sha512":"43defc0eb9e3026a644be82ec2c837afc093b013dbd6f62f27ad1fd28e7f0668d1bbeaed2072349ece093ca6111a37485e81ef558058d580b209fd2ddbcc2d4e","ssdeep":"768:dNPkguTCd22qCCb+wmCmQX5ZE1FqRV/e3N7ICAt6XTkzjd+Ep1MoXQ1tN5yKIjHe:dJETC/C/mOXjhPe35ISXQzjd+uvX8tNP","tlshash":"8623f169eccc479a6dbb97173993b1f36d81b8f94f314898d038764f8eb01a5318948b","first_seen":"2026-01-30T05:34:06.39871Z","last_seen":"2026-01-30T06:15:01.16743Z","times_seen":2,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":180,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/260443a61af46f4960f4d3217fc6e128da638f86.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /260443a61af46f4960f4d3217fc6e128da638f86.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-be22\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iTJrOkVOWEwmcX4o9YeiJGGCPepsghjLvKJs0KaQCLHCzk62UCVUXTIEbQXDIMB%2BZcLIzZtjFAZzW85Jms5omWJFo0SCMs6RI23c53p0HnDEFQT%2FY8%2F%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469fc2bb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48674,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"812237da0436e29d3fc27a47621fe0d0","sha1":"260443a61af46f4960f4d3217fc6e128da638f86","sha256":"6a86ca0954b90052ccb990725c492d10c71347e8f2ab077c0d32911ad19aceaf","sha512":"9bcc76d96a67479f64677eca8a8d04c38b8c361fc3fe43df674412d6c1571deec38ba1ae813c9e4d85589d6f6e463d7f07b579189f8a48f76361eec1b8e06679","ssdeep":"768:T2r5Ly7BjPrW/lSY/3se/I1xECd1SuroAjdgMAqiR9y+SvePiDfYwJzDibb81dX:T2r5Ly7Bj6UVe/ITSIzLEmvePWYYDk8L","tlshash":"ba2302fc0c05a424042bd7d99bfab4912b321cd4311fd7a7e96a19c43e72f867523d59","first_seen":"2026-01-30T05:34:06.446591Z","last_seen":"2026-01-30T06:15:01.170588Z","times_seen":2,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":147,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz//secureproxy?s=%2Fjmpd%2F","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:35.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"POST //secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\ncontent-type: application/json\r\nContent-Length: 2207\r\nOrigin: https://www.claim-c8ntinuum.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2207,"data":"{\"route\":\"8XUwkBv9vhPYfVpD1fxb7EC65sUXJdqr\",\"payload\":\"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\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:35 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"e1-8HySVaFC17iYoNip//RSeVoJJcI\"\r\nx-ratelimit-limit: 10000\r\nx-ratelimit-remaining: 9999\r\nx-ratelimit-reset: 1769753735440\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 01/30/2026 06:14:35\r\ncdn-edgestorageid: 879\r\ncdn-requestid: a11c98b4fa34b6c2c9cd930c80236b20\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ujUSB%2B8jfIcvEtGJzXztAA5Vmkha%2BLgnkjByQIe6OcfqmIFjhlyq5TmFE1uzgq6UZsRMk%2FuVWO3FDP%2B9JWyGVhal4QEKqSj0zPClO9eLQCVR7snuFUMK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed4771d72b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":225,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c31cdde48ccab4af33f689e76f0f1f8b","sha1":"f07c9255a142d7b898a0d8a9fff452795a0925c2","sha256":"a533e1a6c46e5687265cc64d09c37c517b1ddd9071815df489cf784b08a93bd7","sha512":"f3aeb116d38e6bbf126573ab54fc6fcdaa8e407ef3b6696f46096767aa65e310586a27c34b8832e7526feb3ede8e2eb16fe2487ee1156a9ecac1c02d084870c2","ssdeep":"","tlshash":"33d0232ff4108ce028fccd84ef440ba224503b4f77c84648c00cb21330198053312922","first_seen":"2026-01-30T06:15:01.17241Z","last_seen":"2026-01-30T06:15:01.17241Z","times_seen":1,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/d2b92a9668aaed7d5db92911550fb088f84c50a0.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /d2b92a9668aaed7d5db92911550fb088f84c50a0.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bafe\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pnLGbJ8yuuEbX2qZmG4HlFNN1HBC0%2FY4P0zk30N76KQ8dl2BOiCXw3GtJO3YJ7%2Bx5sRUz0Vgb1n2RN%2FioUPesAq6vDHyRBrYhGJBbVAVQMfm30%2FsOmig\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469dc0db1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47870,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e4683a52d155de0e54765fbcff6382ea","sha1":"d2b92a9668aaed7d5db92911550fb088f84c50a0","sha256":"f09481db6045e83aff7debcb6ba250306f7df3b3dad51d06633ed3ebd9d6fe3f","sha512":"7b6c124aac83a665732511897396df64b47d729f8560dfccfc0671a603160f6989c3b209627201f0c010dd53ade3104d1dd0a72e95d6593b911de8b5e51c75ae","ssdeep":"768:wk2QSisqHSaEZrkEw7A3CGWJwbG1Z7UwCC8HVTbf5eAy5F8IxXa+8Nd0mxRvH7xI:7SVcwhWJ/Z7UwCCon5eA+SIxqNe+tvol","tlshash":"0a2301516b69540bb332bb3ef5d2526971eea5912be0deb40305860c31cf7d72cec29a","first_seen":"2026-01-30T05:34:06.513545Z","last_seen":"2026-01-30T06:15:01.174654Z","times_seen":2,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":180,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/metamask.a622bbd390fb63631ba1016291fece1c.svg","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /metamask.a622bbd390fb63631ba1016291fece1c.svg HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 2461\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"696e0367-13a2\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cyHBydotH9cWu8t8FoAWBptshiDEQdPG5SbOe6LbwFAzRXVQhWCV6Dyws%2BWcAWnqQMHalfsSDfxGSRIDdATMXhw3iU4qQJXzCieik8ZPeA788aY0tuAv\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c5ed46a1c3bb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5026,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a584a22dee89808539510b32c322cb42","sha1":"868cfa2227ac39b71c6476536bd580c9dd8d1ecd","sha256":"a57bc3958fbe671aa226a6099d42a8ac4d784bb1236545408b2a49c7b7248b58","sha512":"440c658648506613a34133d381e2f12c4ad032177194c2759a79218878c089ba184def9e63a66bd909b89abddbb68d9aab31d7247f79f98825cafd5942003155","ssdeep":"96:ig93JFbGpzbeKKAMOqAayBJeFAk4twYux5n1nm:D93JFbGxbeK3aEJeFAkCwdw","tlshash":"aca11ed822c98ef0c91b97fea935188f754fdceee484111a81e3b9813c031bd99e9909","first_seen":"2023-05-13T01:28:19Z","last_seen":"2026-06-26T13:22:01.264218Z","times_seen":8,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/976d9b7134f0f81f1ac6dec4c98f4b0d1149b720.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /976d9b7134f0f81f1ac6dec4c98f4b0d1149b720.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bdd8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dnfcc8KrRxSdKU921q2Czg5Jiu05%2Fd2iB1qPej%2FX4JmWd4QI4j5ZFCsehG70MMv3iYGmsqTiqt6C3lsX76bUJbszBUmZ6Gyata9QAn%2FxtuusxvwBnfhF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469abe1b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48600,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a3253535a0cf878428a4d3ce901e5542","sha1":"976d9b7134f0f81f1ac6dec4c98f4b0d1149b720","sha256":"ae0e5b1345c51aa42c9deb798dc4ec9fdada1bba8981eec6d5ffa379b55ac2be","sha512":"f6d8298f0786b9ac7174da3adb641996b4e80e58ac5b6aca0aedf6b6a3e7f4a576cc9594da131970c8774064cae723078736c2cbceaf0cf04bc42ef321496f58","ssdeep":"768:zd0rsKXm8lPw4qHKdrhsJnz5CbJBmLBoJg7I6aT/zGRhumA7KFvURKWaTe69WQBU:IpwbHYFsJ5sTmLBKg7IdT/z2humA7KFo","tlshash":"dd23f174150dac2bdaf3aac1044b420f94eaad927ff10db99ce4a4b0dda1957d319f88","first_seen":"2026-01-30T05:34:06.387944Z","last_seen":"2026-01-30T06:15:01.177705Z","times_seen":2,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":223,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/e4e9e9de1032ec0896ffd2d9c797a27275e0169d.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /e4e9e9de1032ec0896ffd2d9c797a27275e0169d.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bda4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mUhXuJ5Wh5mqEbGNWj8TAxa7%2FPbvfHaBdskYT5INl13GT2s%2Fv00%2FIubBbxlsyE2tvJJQWzJoMuz4W4ARI7XxlODWfiAZ%2B20LzT66Ih6pX7NxJ2JTOR%2Bx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469cbf1b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48548,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fcd448fcd251bf3f03a0c21cb506d583","sha1":"e4e9e9de1032ec0896ffd2d9c797a27275e0169d","sha256":"a7d08e1f7e36c2717ffcb7ef52fb527be24586f4c3ee6e62daa43b14102e7b85","sha512":"ecc711e76f0dbe3819a66b589b94abf2cacbb7c39f7a84515c3b21d34d295ae070126d0b4486d351bddbd35c6818dfbfd52420a87e80729b596b29fddacbe13b","ssdeep":"768:Yc33HvearL2O4oeadEsEsLXjg9JYnywc3vv0RfwBVfn+MGIHa4QnXWtjUGae+vxo:YcnPR2O4oeaXLXk9Jd9B9gGqGF+5o","tlshash":"a223f274912f3a82ac52833d64f5ab9f3814c7665bf822ef0535ac2ed37346d701c666","first_seen":"2026-01-30T05:34:06.433276Z","last_seen":"2026-01-30T06:15:01.178931Z","times_seen":2,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":192,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/d4055d54dae8bc1f5130481b84123b75d38cefd3.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /d4055d54dae8bc1f5130481b84123b75d38cefd3.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bd08\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fj8ap5%2FMXx2XBvxmwX%2F%2FuQdo5F%2B6yaTrmFmzYR08IFI86t6Fhnnl8aXO%2Bnyj%2BFybiuSqRFYsOhCZrR%2FG7Fa%2BI8bKb5GHTHvXrOha6XugUMFSyIH%2F%2Bmvf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469cbf8b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48392,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b8ba5898bd26f19488aafbef374878a7","sha1":"d4055d54dae8bc1f5130481b84123b75d38cefd3","sha256":"e14f4e5d1f0055d1f6b45ca818f5abbce53ebc3022789d9072a20340a0fab8ae","sha512":"edc831bfb921cb1bd5adb372593a30bcc5d4a4181e2963ad54eda98bfd596007eb0872e91cdd1eb963443581e38469e9d98c4e4ef15c07539a327fa0fe18bd57","ssdeep":"768:VM6PD4+O1+IgaAabC470seKxbG0qBU4gL2qLevBBOLxhx46U5X+SA16P/hXryky:V78F1+mbFrR/8U4gL2qLyoy5X+R16P/6","tlshash":"722301a176f14bc81222bdbc9f19354504a2b3d36ab73e3b6c8d4eb9460ce50675d22a","first_seen":"2026-01-30T05:34:06.516838Z","last_seen":"2026-01-30T06:15:01.180272Z","times_seen":2,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":185,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.claim-c8ntinuum.xyz/c3a1a015b5290951bb02abd3d7f89b0b1b99ac96.webp","fqdn":"www.claim-c8ntinuum.xyz","domain":"claim-c8ntinuum.xyz","tld":"xyz"},"ip":{"addr":"172.67.142.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.claim-c8ntinuum.xyz/","date":"2026-01-30T06:14:33.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-c8ntinuum.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 07:49:26 GMT","end":"Wed, 15 Apr 2026 08:48:08 GMT"},"fingerprint":{"sha1":"60:C3:2B:C5:0A:D3:34:6E:42:1F:22:D7:2A:2B:34:FB:9E:2B:A5:D8","sha256":"79:C3:3D:1F:4A:ED:AE:C5:2C:DC:D1:60:AA:AE:00:6A:F1:11:37:53:3E:82:7D:EC:32:26:C8:6D:DA:5F:60:58"}}},"request":{"raw":"GET /c3a1a015b5290951bb02abd3d7f89b0b1b99ac96.webp HTTP/1.1\r\nHost: www.claim-c8ntinuum.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.claim-c8ntinuum.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 06:14:33 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 19 Jan 2026 10:11:51 GMT\r\netag: W/\"696e0367-bbd0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2461\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rCZ033ky9E8brUtmnhl5XhpKPDGuaXhQQeSHbRCaN5hOXQMzFqeTA%2FINkW4TDwZckOeM8kcL7Zvr0eHeHjp99AvmB78%2BNWjhRUQRHvgUDBlWRjpe0ZRF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c5ed469dc0cb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48080,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ed84871095aa46709b03fe776ca775d4","sha1":"c3a1a015b5290951bb02abd3d7f89b0b1b99ac96","sha256":"a8838c41378390014fb3d07a30b81b779861959cd9df58daf30efb0b7b296421","sha512":"e1749667245c70ee45127c87f1a6f1fd79bc1cf9fefb5a658109367b206d465355ca1dd8c4b7a1069b5c33a0255c37eed9e06f731d85aec5386dfba152b9bb5f","ssdeep":"768:dBomBP7QltZO7th21gA+084jUVWDnBYY9RR0h1zLq4AE3t3nRuAjGiGne:rBP7QTZshUvZAWDnWYZwLgEV4Aj92e","tlshash":"b42302b1b2058a03df67547a5fad3809cb16d2931f2d3f463ff6ba089e7546810a1f98","first_seen":"2026-01-30T05:34:06.400622Z","last_seen":"2026-01-30T06:15:01.181302Z","times_seen":2,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":180,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"www.claim-c8ntinuum.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}