{"report_id":"589068e6-2c1f-4ee9-b843-ca3f28418df8","version":6,"status":"done","tags":[],"date":"2026-02-05T14:00:32Z","url":{"schema":"https","addr":"claim-elsa.xyz/","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"172.67.193.125","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"claim-elsa.xyz/","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"title":"Elsa","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"claim-elsa.xyz/","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"172.67.193.125","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-12T14:00:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"app.heyelsa.ai","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"claim-elsa.xyz","ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-18","domain_rank":0,"first_seen":"2026-02-05T13:17:41.160501Z","last_seen":"2026-02-05T13:17:41.160501Z","alert_count":64,"request_count":32,"received_data":4792363,"sent_data":24801,"comment":"","tags":null,"fingerprints":[{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":11393,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2026-02-01T22:42:03.024935Z","alert_count":0,"request_count":8,"received_data":511249,"sent_data":6135,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"app.heyelsa.ai","ip":{"addr":"172.66.170.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":2290457,"first_seen":"2025-02-22T18:25:36.98757Z","last_seen":"2026-02-05T13:17:42.098526Z","alert_count":1,"request_count":1,"received_data":3971,"sent_data":449,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-28T11:56:48.081131Z","times_seen":787367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"30d0295a58731d9ae92fd491522dd18f","sha1":"04dfef014f3fc2f124ba53e754620fc9d4d48dc3","sha256":"26773936563b7710762ee4ad857f9a75e5d1a247f2a0d568fe664921148a7f30","sha512":"9e05b8b6ff13b93da78d743772f9ee14ddd9a327bdbfa5241aba8d421d5330d9cc69429f8091eb4762511f1c4c5bbe6e070f39033e70186bac10c0af1f2af78a","ssdeep":"3:N/BKL1Xn1aVn:eL14V","tlshash":"0d5504c0d4d430704410c400d35034755437341010d50401f05d5cd417300511054540","size":1337359,"data":"","first_seen":"2026-02-05T14:00:40.492878Z","last_seen":"2026-02-05T14:00:40.492878Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f6701e3032bfdb42bcf423a52a19c79c","sha1":"2a29713e9c2a04a06adce21beb7786aef740b9fc","sha256":"598d56baa0201608589617feb697e8cdf813a35129e75b1ec342b094e62ff4ad","sha512":"c57f5edd6547a32100bb7c0dee57e406ecdd8d08f0c08b87385a71e1a00c327820bc6186eb8aa14991c0b18846dd567675e1485351c543bd98d037b0be16645f","ssdeep":"96:RzTaIRap/CzCZUNlteJSZBAgm6aX/Peq0fBdGSwVjt3XYzueh8Oa5mZ:JaIRaAzCZUxeJmAgzaX3eNdmj9oyYacZ","tlshash":"9eb13cc7d7b540118ba627d98e27b370bf711ab30d62a0747951ed08e12bc83d23d899","size":5169,"data":"","first_seen":"2026-02-05T14:00:40.493694Z","last_seen":"2026-02-05T14:00:40.493694Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"602bd9077336b8d7f5f064320952a239","sha1":"498a7bdfd54ba30081d655edc5e3d3147f43c388","sha256":"e568942868699d5622e8894fc71b6539b62f0cd4f308f8a731798e34581f34e7","sha512":"a9691428cedb5c78f80a2bd160ac15c38f7583d34b1082898291b0afbcedeaf8a11e2bff5905fddfb65f9e6e3ec381f8922b199078927498105171055a95b3e7","ssdeep":"3:N/BKL1Xn29:eL1G9","tlshash":"905500c0a8a030b08820c800e3a038faa82b383020ee2c82f0be0ce82b3c00000a0b88","size":1337359,"data":"","first_seen":"2026-02-05T14:00:40.494674Z","last_seen":"2026-02-05T14:00:40.494674Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"20d64bac844c877fd284f398ff9b61ff","sha1":"b4dd39faf1688fa28cc5765b872e7d4f2fb08ca5","sha256":"d13d5c920365a6e711ae71e6819c0ef80d6a502f042aa6fd4c86429d188eb7e0","sha512":"18e111c3240d423d3091f3dedc72a45eee4aa22be97681675a3763666274871114a229960a31e059112fd205b1cf8eef36b5ff92a00d6eca286c3dcf30f4503a","ssdeep":"","tlshash":"1fd0a76729798930779d014f31b7e394266665a0ba219d0486d9dc2b6a21fd304a199c","size":236,"data":"","first_seen":"2026-02-05T14:00:40.495533Z","last_seen":"2026-02-05T14:00:40.495533Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"81d772506182dfb393e593c2fd18c7c7","sha1":"ca445e524c05a23bac767c2b634ecedecb7227cc","sha256":"9928d22c32512fcbaf715bfe923807c0317f3eb4630aac73c206d564fad52a2a","sha512":"49470b6edafa81918804bfcae736e3278f55f963ed2a723c71defc88280b4f0eea35abc5a1abb9712b25229e19f2d552fd26a4fb3f0a0fd76a0bbaef67929528","ssdeep":"3:N/BKL1Xn3sVn:eL1MVn","tlshash":"a05504c0545430f04410c400d75435755417343011d50401f05d0cd417340000050d40","size":1337359,"data":"","first_seen":"2026-02-05T14:00:40.49653Z","last_seen":"2026-02-05T14:00:40.49653Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-28T11:56:48.081131Z","times_seen":787367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"892706188ca90fb3b376c7e048a5b03a","sha1":"8b6c6d17951ad5df7b176694fc9e84b007ef1105","sha256":"a40549c6877353a2e356e8be6c6d3a9ff1766e6187c1aa33054fd16284884b96","sha512":"89b97e69d3e13340c0cf56b325e7f53ed3264674e11c00a79dda9fb6a3724fb7f2bd6fdbfbbd209d8a973ae3c171e8c1cffaff32e9ecd395d6a78e1698be6a0d","ssdeep":"","tlshash":"18b0125896899941c74019070c0f5cfaee345902489c97c0c220a15be0c4ff041eef35","size":101,"data":"","first_seen":"2025-10-22T18:40:01.499879Z","last_seen":"2026-04-03T11:40:49.880488Z","times_seen":139658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-28T11:56:48.081131Z","times_seen":787367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-28T11:56:48.081131Z","times_seen":787367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b13820fd58039925b96b12699951746c","sha1":"9b66210b2d31e69b098b4def236a8f20dbbb1a02","sha256":"5854748e2aeb03a67741eda488ac2d0b86682b57b3ad836781f1a52d32695a23","sha512":"2a776cd6bc851345d5987e621d58262b9d252be9b754951dab72889d6f3bffd5302dce3581708315c9db2277847b42872bdfc35df567d37046a27bbf3b352bbb","ssdeep":"768:CN2Juv0cqMJRzEFufPgrpRZtWaH+W6McWmmZmoJPrIzKbu1wH6RczsLcOcPIdBZ8:JuXJVXqftW9WBhDYh4/v","tlshash":"4b6393e46996d4d08e6120ded433e905e0384a63cdadf163ea3cddc1786df22898767b","size":68733,"data":"","first_seen":"2026-02-05T13:17:46.901296Z","last_seen":"2026-02-05T14:00:40.497724Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-28T11:56:48.081131Z","times_seen":787367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-28T11:56:48.081131Z","times_seen":787367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e28277ead881577595933dd48564d78f","sha1":"bd64cf5b5c650281c801c2e9a4aa20badb0ded08","sha256":"961f56a5a7e957195f8d8661b36125390458ba8c0c298d0059e5fdb53a00118e","sha512":"036a0c914697afda4bdd8156051b80885fe283ea148b071f0f814002a2a967ff528df406f70665a92fe7bd57fd9c271eacba736fd25bd0159e8cbabf297fe6d6","ssdeep":"3:N/BKL1Xn6GX:eL1KGX","tlshash":"235500e0a8a030f08820c800e3b038baa82f382022ea0c02f0ae0ce82b380802020b80","size":1337359,"data":"","first_seen":"2026-02-05T14:00:40.498381Z","last_seen":"2026-02-05T14:00:40.498381Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=9c92ee8ad9c27130","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8eb51fbdd36baa800d004eaaa2cbdb81","sha1":"cf2bc32f65176324a4d68c4056c53a7ac0893abb","sha256":"3bb4863d42ab2589236fc626e654dfcb9d969fbe6d9dec5e209af8bc39c28dc1","sha512":"b3e8b07382d4f12cf069eaaaab162af6fcb8a81c8a03f924944390a32922bb74187a12db2908ea9ab7d1541be9fdc6b90d8705c38773438ac9ed1c3620897777","ssdeep":"1536:Ui5FWYqDCqNPY+/NpHw6YUmGziv8Au6itmIPKzAASD8mxOugtEJkEOzyuxSwT5Zi:U8AJCq5Y+/3wtGiSAfmteUVuxSwTyNH","tlshash":"7cd3d8ceb9da7a5b03367470001b35ee52ae7c8460688d1df210d9f43cd4769b977ab8","size":130836,"data":"","first_seen":"2026-02-05T14:00:40.490385Z","last_seen":"2026-02-05T14:00:40.490385Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f278e1582a6b32d6a9a05328bba73b0f","sha1":"02780b645a044990e49787663d3dba06626b1e3d","sha256":"07317dc90130ec69ed8e07a8362168074f9067473354101f361449cff37110aa","sha512":"08463b63ba1654bf203117d8f0c0a2ce4b5d92914ffba7c8ac3d942ff1a812c86cc61d9e840e5f3422c2b22d1b71b1a06b9a6d40d4e4259b32fd8cd40cc8357f","ssdeep":"","tlshash":"55319948a43216904242e8f1c676abeeabe774080574446d349cbec7eff8447e521678","size":1529,"data":"","first_seen":"2025-08-01T04:16:24.221852Z","last_seen":"2026-07-28T12:25:07.871713Z","times_seen":3365,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-28T11:56:48.081131Z","times_seen":787367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d1f9eb152698d83139693f2e6b9c06c","sha1":"8c53ec6cec47012928f6f1612460064482ee2752","sha256":"87fdd6d6dacd3187905977898b08d409a0ecb2c53cde8caefe2cf32f47bfe65b","sha512":"804c9db177ccdb7d58a95e33c8244ef9b4756abf5706bfc896566e85f01e42188ec09295ef6a2087bcd4fa8ce1221924e38e034ad143f43c43ddc8b2484a153f","ssdeep":"","tlshash":"8bd097672974c830339c010f31b3d3a4222271a06a229e0086c8ec2b2b20fc300a2899","size":236,"data":"","first_seen":"2026-02-05T14:00:40.499639Z","last_seen":"2026-02-05T14:00:40.499639Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"892706188ca90fb3b376c7e048a5b03a","sha1":"8b6c6d17951ad5df7b176694fc9e84b007ef1105","sha256":"a40549c6877353a2e356e8be6c6d3a9ff1766e6187c1aa33054fd16284884b96","sha512":"89b97e69d3e13340c0cf56b325e7f53ed3264674e11c00a79dda9fb6a3724fb7f2bd6fdbfbbd209d8a973ae3c171e8c1cffaff32e9ecd395d6a78e1698be6a0d","ssdeep":"","tlshash":"18b0125896899941c74019070c0f5cfaee345902489c97c0c220a15be0c4ff041eef35","size":101,"data":"","first_seen":"2025-10-22T18:40:01.499879Z","last_seen":"2026-04-03T11:40:49.880488Z","times_seen":139658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-28T11:56:48.081131Z","times_seen":787367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-28T11:56:48.081131Z","times_seen":787367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"59a13eef9e5e0ec7844e58e8b47d54a0","sha1":"0fb2b2059a878b87f8524284d448dd46a4351953","sha256":"c890c150b008d069bfddb86ee2c2e3fe979515939053b4c53fd6853b68e4fe35","sha512":"7fcdb614d30b1141e9a1e134a98e2888007f786f866c24e6383106d3e003f094e72901aa295e7d3450fccf5a249b25b436401a5b9439205da6b0eec8d72cfc80","ssdeep":"","tlshash":"33f0beaf336126ca23ae6ad20796c01d1e72e4ab3002163c575a36ca0cb6f52521b07e","size":494,"data":"","first_seen":"2025-08-01T04:17:54.874483Z","last_seen":"2026-07-28T12:25:07.875637Z","times_seen":3156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a3a08bbf85e6480a8dcfb44ebeacf041","sha1":"300d44dde19b208186d0c0e299266f3725701a82","sha256":"3900c8d715800c2195998cf96f9bfe0a053a29faac32f25bad7b976df3fc53de","sha512":"d6614455dcc2e9579775fdd11805932ffcdf4e0d6a8b429734f64c1a8761357640fdd594c65ffa6aa46b86d86e3e2c5b313c7de77fe4f9feec8555756bcd8269","ssdeep":"3:N/BKL1Xn3g:eL1A","tlshash":"9c5504c054543070c510c400d7543c755417341015d50411f05d4cd437700001410d40","size":1337359,"data":"","first_seen":"2026-02-05T14:00:40.501072Z","last_seen":"2026-02-05T14:00:40.501072Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/d251aa49a8a3/api.js?onload=cAdz2\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a7db0e0bae22d940e720d06abf548f7","sha1":"e68beaeb9b7b3aa74a922a3df2d7294811b62e72","sha256":"1d8e9927430ea86701daa3074746758677a012f2ee4196ce60438b4a526ac10f","sha512":"d7106b476dc2ca5f6f5fcf79fe9e69d72d27b12decbac13cf20bbec28fd7c5e72a920802eea9b15e41803252471548290533da353eec5e66ce9211854bb72083","ssdeep":"768:/Cofu2DMaHL9VAQepxn2tSv+1odY+0rOF8msKULg49Tr7+CuAUyG13PE0okbsO10:Q2gaHL9VAQepFbZdYlrNRg4t","tlshash":"37332a583196387267dd80e4617b63437325793af94ccc909827d92636acecad233f7a","size":50453,"data":"","first_seen":"2026-01-15T11:24:19.542226Z","last_seen":"2026-02-12T13:18:09.210194Z","times_seen":38367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d803a43e8ceffcf91bb323a4cedbc238","sha1":"07d24bbacbfbe39ef960fef58efe4c0f07f18044","sha256":"1cd8fb3ce6f21e8e38fa98fdad08133a5faa79454e4869b96ba0362ddcc35795","sha512":"b8493f185b6589acb78d46fdb091afed492c54a1e696706788267e2f54b9ff69687c1de488922caad250faac97642ef2dd874c3cad68bcae6b8ad047d8bc89ab","ssdeep":"3:N/BKL1Xn4Xn:eL1q","tlshash":"d95504c0545030704410c404d1503cf55417141110d70401f45d0cd417304400410540","size":1337359,"data":"","first_seen":"2026-02-05T14:00:40.502018Z","last_seen":"2026-02-05T14:00:40.502018Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a151aaf2b05ec8bfdb8f677e3f5a2be2","sha1":"a146ef071375bced21638701d789224c6bb3c370","sha256":"47eec114a5bc2eb861bdff0439c2c3167f67fa89989a5252db5a76f6fe6ed93b","sha512":"b572b74962f1e3a487ab5c86505d8d81daa94be6506116e64e625f1560c31c9af3bd2ede5c323cb0d6fd8a1440c0ac6819680dfb44d337e288cf41fcc50de636","ssdeep":"","tlshash":"88d02ea82e96133823732120831f928037e48043a0e0f8023a1ce2c64fe1a1000bf5db","size":291,"data":"","first_seen":"2025-08-28T21:25:30.207116Z","last_seen":"2026-04-28T14:11:02.609584Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a3ecc3cc072948339cb6a05f236ed2b1","sha1":"78ef808bb4607ac4910ccba26bb5fed41f6c61f0","sha256":"4cfda384b11e851a5d256b1d02129a8d28448478ba31c8b3b796193a3f5f9584","sha512":"1890d2dbb3dcb04e1c75b10619a03d13bf4ef8b41ec4cf35f04f5ed38d63fef9e3ef2afd3cd7bd75f99b2922180d3efc26d3319399ae50dbbfc5cdcd131fcd90","ssdeep":"","tlshash":"6c01689d7fec65a5137a75e009bb1a2d5f92fcc02d418544c62288d83d60c974c5f7b9","size":750,"data":"","first_seen":"2026-02-05T13:43:48.039506Z","last_seen":"2026-02-05T14:39:33.738955Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8b831eae484470b170c5b39edb07f002","sha1":"4c39335eb1be5110e6ca162d418e4643f1c12579","sha256":"337c0f387f62f5c429d08fd1e332dc613f461c3667d1220e6af237f033f51c70","sha512":"43808c65151558375a50b339a60dfe65e3df013b9f8806f8dc07a9a50d2b0262ca6b2b6c295cd0b87eb7151610b3ba245e0d68476e33c97c3fdbda510765551a","ssdeep":"3:N/BKL1Xn6Z:eL1KZ","tlshash":"9c5504c05cd030f04410c404d35434755417341410d70c01f05d4cd51f3c0040010740","size":1337359,"data":"","first_seen":"2026-02-05T14:00:40.50407Z","last_seen":"2026-02-05T14:00:40.50407Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-28T11:56:48.081131Z","times_seen":787367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ab3adec4595b15360ac7b86f62f360df","sha1":"af2c5700fb3a509b25e7f81429048945b9e26940","sha256":"5e58c6c53c1639ded71747682fe81ca59592aff75d0bf06d986440efa8bfec91","sha512":"7a90021785338d817f4864d2e226dc80f87a41516a08c5f3c5472fd5bef52ff990de560903812d1e95427dd8df83c1a093c7cc009e6e6cbb90a29ee23b9c1684","ssdeep":"3:N/BKL1Xn1s:eL1q","tlshash":"a95504d0d4d434704410c404d3503c755417341010d50401f05d4cd457300411011540","size":1337359,"data":"","first_seen":"2026-02-05T14:00:40.505083Z","last_seen":"2026-02-05T14:00:40.505083Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ff03fc8f0c3179fb4dcf4389f88a1c16","sha1":"05ff911d7ddf2d7c14b4316a87fd08f42c618f9f","sha256":"025229ec6bb50e915572750c5045d22c5fe16851fd077f1411f41b19aa1dfece","sha512":"4acb3551ec49556a2a64f4a47e480df29f611f67d0ef4b2474e90f7b86caed3dedb0b56eba12e577f1401d4d701c9a4f0898a06eee8f6d7dbe3b4b5283a854e8","ssdeep":"","tlshash":"4f60000000c000000000030cc00300003cc0003300fc0300c30c003000cf3cc0000000","size":14,"data":"","first_seen":"2024-12-12T23:50:40.182598Z","last_seen":"2026-05-01T12:56:58.912641Z","times_seen":262850,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"892706188ca90fb3b376c7e048a5b03a","sha1":"8b6c6d17951ad5df7b176694fc9e84b007ef1105","sha256":"a40549c6877353a2e356e8be6c6d3a9ff1766e6187c1aa33054fd16284884b96","sha512":"89b97e69d3e13340c0cf56b325e7f53ed3264674e11c00a79dda9fb6a3724fb7f2bd6fdbfbbd209d8a973ae3c171e8c1cffaff32e9ecd395d6a78e1698be6a0d","ssdeep":"","tlshash":"18b0125896899941c74019070c0f5cfaee345902489c97c0c220a15be0c4ff041eef35","size":101,"data":"","first_seen":"2025-10-22T18:40:01.499879Z","last_seen":"2026-04-03T11:40:49.880488Z","times_seen":139658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-28T11:56:48.081131Z","times_seen":787367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-28T11:56:48.081131Z","times_seen":787367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"892706188ca90fb3b376c7e048a5b03a","sha1":"8b6c6d17951ad5df7b176694fc9e84b007ef1105","sha256":"a40549c6877353a2e356e8be6c6d3a9ff1766e6187c1aa33054fd16284884b96","sha512":"89b97e69d3e13340c0cf56b325e7f53ed3264674e11c00a79dda9fb6a3724fb7f2bd6fdbfbbd209d8a973ae3c171e8c1cffaff32e9ecd395d6a78e1698be6a0d","ssdeep":"","tlshash":"18b0125896899941c74019070c0f5cfaee345902489c97c0c220a15be0c4ff041eef35","size":101,"data":"","first_seen":"2025-10-22T18:40:01.499879Z","last_seen":"2026-04-03T11:40:49.880488Z","times_seen":139658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-28T11:56:48.081131Z","times_seen":787367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"290f2693531b75e4376c03efb2e445ba","sha1":"b7d99187eb7703bdc3e0d91432b1e6108b57bca5","sha256":"b2464a6e184f8e48f9dd9b02483cf8f9a049eb5ddf47bc900d570fe387613ae6","sha512":"13b68e7b1f8f4e9278ab87f46f2f9d12a9c7a48351d18265afce4d59c501c11bc510195ba10aeaf6c5c17cfd996a9ce4c639c162752cf6ea4b026e5fd6875e4d","ssdeep":"","tlshash":"5fe0863935761574097b986fc74b934b7da2141b5001e8167d4c914b0fa4f1034e6599","size":350,"data":"","first_seen":"2025-03-07T16:16:50.325983Z","last_seen":"2026-06-02T08:58:23.969339Z","times_seen":218,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-28T11:56:48.081131Z","times_seen":787367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1e21743cd2ee2004cd56bfc5c29e3609","sha1":"bf516634ffbcfd3186b71dafc0ecdcc47894c439","sha256":"0e428980439e794b176e0ee3cd84e4878510b1d52c1efc1c00f4af9729a17029","sha512":"4264e5ce5b4f3acb24046582388132a5915398c9266c18c6349d75fb94bd74bac990dc6ebd12e1e118a3a24752a3e4badae2faabd69b9827d1f223a0750da4c2","ssdeep":"48:atoyTqSsM+c69M+c69M+c69M+c60778KK7NaaM//M+A:atlDNDNDNDl778KKw//M+A","tlshash":"25913f32165427da63ce8fd45a85751d01d2c89a383e60bdff3279eded3a683c031612","size":4506,"data":"","first_seen":"2025-08-01T04:16:24.215618Z","last_seen":"2026-07-28T12:25:07.873893Z","times_seen":3320,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c067c98f9d10de9187d65e2b8ead3821","sha1":"0450bad738682f35779e81edce6eb99d2a04a170","sha256":"a3033241fa908f77a0de9b5d0c56f55f522e0b3c5a4cb5828b7438f2603a829c","sha512":"a980842b5f1f168c74c6e595c878766369df57a1c9aec88f183209f3a627460df9795f7fa96da546b85309d7ed43670ed1ca9c92293d2745120353abe59ecda4","ssdeep":"3:N/BKL1Xn7G:eL1C","tlshash":"5b5500c0a8f030b08820c800e3a038baa82b382020ea0802f0ae0ce8ab380000230a80","size":1337359,"data":"","first_seen":"2026-02-05T14:00:40.507802Z","last_seen":"2026-02-05T14:00:40.507802Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"33ff6022e88df59f8dfc9eb546435e9c","sha1":"7f2ad96c0a1276fbc858c652a6e2d0b3c9d4d3e4","sha256":"a1c845cab782ea7dec04543ec72e0b354cb8e9aae23acc02ee02b1832e3acd9a","sha512":"99820974c649620d8dfd487054edee4863ca41025de5a87fcd6fddfafbecb53668799fdde6f7b809112fec178b18f28a9ff8e190d298aff5a29c6795ad639c25","ssdeep":"","tlshash":"0c600000c0303003000f3000f00000033cc000f0cccc3003030c00f000c000c0cc000c","size":14,"data":"","first_seen":"2024-12-12T23:50:40.556614Z","last_seen":"2026-05-01T12:56:58.96029Z","times_seen":264119,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2d0938d7c5b4bdb2f8a84aab090c13fc","sha1":"89937d1bb1cbd62f47f4b3e68d767cc801371f61","sha256":"6b017997eac7f7bc78f48fc120540692e0daced77aaa02aec154107d7dd773ae","sha512":"a25de6646a65ebcbf2408c0adad52142b0976e4b4eb4410a50920b1e8ac28c5b2eea9197dd7a06587cee35981906e411b6db60fe61073184669ce7fda28de6e4","ssdeep":"3:N/BKL1Xn2ln:eL1Gln","tlshash":"8c5500c0a8a030b08820c880e3a038baa82b382020ea080bf0be0ee82b308000020a88","size":1337359,"data":"","first_seen":"2026-02-05T14:00:40.509324Z","last_seen":"2026-02-05T14:00:40.509324Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e8567eb03995ecdab6f44270c3f26535","sha1":"6aca2ed546a4545256aa35b0d3323e09822a5a24","sha256":"0ba30aa14307d3c89d083d5f758421d296fadd9c049c30850630178075c37147","sha512":"60cefb5bbccdd71405a6b959b631017210a45c9a53e17366f3208efc0286a59edc5f973b4b489666042b0cd7f1e1575ea919256ae2f90cd6afa853594c3e3db2","ssdeep":"3:N/BKL1Xn3k:eL1E","tlshash":"875504d054d434704410c400d7543c755417345015d50401f05d0cd417310000410d40","size":1337359,"data":"","first_seen":"2026-02-05T14:00:40.510303Z","last_seen":"2026-02-05T14:00:40.510303Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"458441ffc0caa007a45c9843d327eb62","sha1":"df40913ca8e3ad70ae1fd9e3d38f5ab4845b9c9f","sha256":"7e9d8c4dc8c28dfdac5be911e16dabcecb494384605348d7ec398965178827a8","sha512":"ca3d95ab7def1462319879f65dc695cb6983ddb06019f8ff4aef65c472c3677bf44c4c40607ce7e2d00ba3f3a67a3ee47ecf70abd167f3ff3de941488eb8bf3b","ssdeep":"","tlshash":"0ed097672878c830738c010f31b7e394222225a0be219d0482d8dc2b2a21fd300a189c","size":236,"data":"","first_seen":"2026-02-05T14:00:40.511016Z","last_seen":"2026-02-05T14:00:40.511016Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-28T11:56:48.081131Z","times_seen":787367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-28T11:56:48.081131Z","times_seen":787367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f5b767c078c6813816231552aca1d562","sha1":"34f99579b527c24b3a5af82abb42079a0d3e1a51","sha256":"c17d50bae5a02a35e0ae5d0005c694495952f093629bb5193c668070161b0f7a","sha512":"7b4aed1d33c4891894a556505047a8f7afd72efc1c30c064b5a428fac50a5475e895f3937869de6d047128910d762069084c41d12fbacecffd43cd98e84b2e48","ssdeep":"","tlshash":"70c0125d7010696614ce687d4ccf088ebe368812a20809c999dcd4547bb1e6c42e484c","size":185,"data":"","first_seen":"2024-04-08T19:47:46Z","last_seen":"2026-07-26T12:04:30.589821Z","times_seen":713,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"421c61622c13cc458008f54d687e0480","sha1":"402a6ef628293d5bd9e6b3e2318b0282ac546833","sha256":"201a8eeac7353049c61c4cfdf444da033ec3f2891d3a6c5ec8010fe1cd1966cf","sha512":"93b8b863d6036af444708c0f13fd053240770a47bda52840d7862643b352892fba5d0e3129ef3afeee7a56f0552f57bd477f1dd955a1455faa42b8089864fd1e","ssdeep":"","tlshash":"3cb0124027a12001c313a074c86b8c0cf008074220a84414645977310f0042a457a6a8","size":87,"data":"","first_seen":"2025-06-09T11:32:26.849465Z","last_seen":"2026-04-30T20:40:24.525138Z","times_seen":4629,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"895f526ab37305311d1e998fa4d5a6e8","sha1":"06d0220830c81bf254c70552e908371c6dc1f18f","sha256":"90916b8b1fb2fbbd765a22eba866c30d8829f59aa2d7ee86869abd20207b2117","sha512":"6b087d2e2025f4d11073254448b124af8839ce24ff37eb45bf2fd1a2b66bee8fd4fdca2b4d23c08786d217dd71dbc660d1054b7876b37752dee3baaefdaeaa4e","ssdeep":"","tlshash":"2871bc3beb00173bdc8fa9fdced5b4c02e62497262496960691ce102a16cd7487bed88","size":3743,"data":"","first_seen":"2025-08-14T22:47:51.287187Z","last_seen":"2026-07-25T06:05:52.500573Z","times_seen":1370,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c7f45bffaf434cdb1ab3ad33a42a6f9a","sha1":"54294571ab6c09812497a4c8695868a2dfe1381a","sha256":"7bc1e0045d90c443128c1d6386c1250b5c301d833eda484d2f4fde75cdf99048","sha512":"9a8ae3c3f2cb7b6c210211f5fd737b29f9da6b1280d78a4f9f22ce80f911c93496fb599059c01e292ebe9e07c3f3dfb99092c33d7a527c7358e90f9c7f8070a5","ssdeep":"3:N/BKL1Xn1RU:eL14","tlshash":"5f5504c0d4d434704454c400d35034755417343010d50411f05d5cd417340510030541","size":1337359,"data":"","first_seen":"2026-02-05T14:00:40.51374Z","last_seen":"2026-02-05T14:00:40.51374Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/?__cf_chl_rt_tk=6mn5dDcBJdKHcibqSB41xQm_.ooPEFy9r4aDz6c0zJM-1770300003-1.0.1.1-CgH0AHdzefsv3AJ5hHaGXF4dNqTEB6tGNO213B2qFSU","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-28T11:56:48.081131Z","times_seen":787367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"892706188ca90fb3b376c7e048a5b03a","sha1":"8b6c6d17951ad5df7b176694fc9e84b007ef1105","sha256":"a40549c6877353a2e356e8be6c6d3a9ff1766e6187c1aa33054fd16284884b96","sha512":"89b97e69d3e13340c0cf56b325e7f53ed3264674e11c00a79dda9fb6a3724fb7f2bd6fdbfbbd209d8a973ae3c171e8c1cffaff32e9ecd395d6a78e1698be6a0d","ssdeep":"","tlshash":"18b0125896899941c74019070c0f5cfaee345902489c97c0c220a15be0c4ff041eef35","size":101,"data":"","first_seen":"2025-10-22T18:40:01.499879Z","last_seen":"2026-04-03T11:40:49.880488Z","times_seen":139658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-28T11:56:48.081131Z","times_seen":787367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5e592ad89b5a86d06d0571c42cedc293","sha1":"318a8a90cd8466e864f2e57e4c4ad13dddeeae7a","sha256":"a0906473674c0ee66309ebf8d8ca0a349c780823f6265933b2c42ef0d8ea1e5e","sha512":"3f0d1a2e2af16411876c4264c57b439a0c278e3c4d855c143edafe689151eab829d87d59e62e2f736296199c428682467e911c8a4acb9619099c3785c17ceb3e","ssdeep":"3:N/BKL1Xn26:eL1G6","tlshash":"d15500c0a8e030b08838c800e3a038baa82b382020ea0a02f0be0cec2bb00002020a88","size":1337359,"data":"","first_seen":"2026-02-05T14:00:40.515151Z","last_seen":"2026-02-05T14:00:40.515151Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d8125f01c51c8b380c850e9934ce6e54","sha1":"3b650ce373d3b0e0c8b4f041a32541dd5b0e0219","sha256":"1c10b035433b0850c6b648944fab22e26e7c4cbbe2a13617af3f7ed268ad560e","sha512":"9c9dcea14235b6955e2dbc86948a13691edf6d6f62ae49559ad8816fcb9b5764921c1065eb9555bced15807683a0e923e351513dafa62bd3926795ef33db983e","ssdeep":"384:d7GJi5jcVmPNAHrxdobpmWIbEWaPsGm4UGt8PTiiTX7R:dSg5ArHRbEWaxByhR","tlshash":"6fa2a5ceb8d5747bd33524b3046b34c662af7db57089be04c228f9ad793b3046826d56","size":22330,"data":"","first_seen":"2026-02-05T14:00:40.473257Z","last_seen":"2026-02-05T14:34:38.175519Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-28T11:56:48.081131Z","times_seen":787367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e0cf369936d39fd6b8473a9073d0b81a","sha1":"2d5004fec811985070080f4c01c79341821ac55b","sha256":"84cbf8bc253ba8ed7920cd3d2473fa1dd451864c6a7edaeadc743d31757df567","sha512":"a8aa21742e922e5c4fa91930fba322baa349db5ae6d1c732939790ee4f0df3b06c5cc45da1e1c2aa22a327e5710932ad396cffd12772db8f854d2cb3258a8e00","ssdeep":"3:N/BKL1Xn75:eL19","tlshash":"fa5504c1545031704410c410d35034755417343010dd0c01f05d0cd5373c0000010750","size":1337359,"data":"","first_seen":"2026-02-05T14:00:40.516265Z","last_seen":"2026-02-05T14:00:40.516265Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/chartjs-4.3.0.min.js","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"36da7187a42e168d007751fafc74dd91","sha1":"3a06d8b36e649eaa6fa330aa905565dddea363d7","sha256":"e67fccd7f26f04cc3376d57b39db3672c9cc7f773ff04d545cde8e3af2e316bb","sha512":"53ff4a84e487c02a120b357e6a21a77113cbde85520525d8aa98c95a66016b467ec4e8c0a7e039cd96a2766165a1f24f731da3a3733a75d691035eea89fb9908","ssdeep":"768:ttiJuvYcMUp8wFEqO5b+Ziyxc6VpLEVbzX/O7Kbu1wH6Rczapcscns3rQ7nudti/:Iu5pjBW+Ziyxc6Vpk3vorun4ohP","tlshash":"b36386ea2546d0d58e2120ddc473e908e0684aa3cdadf153e67cdcca786df26884777b","size":72104,"data":"","first_seen":"2026-02-05T13:17:46.843044Z","last_seen":"2026-02-05T14:00:40.481616Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ca897fb253cc8807c5aafc947eb02fb6","sha1":"25137d68712ada7d3ad424c80bc0d688a696f7bb","sha256":"57f9c536daa79c4d770534dbafbe2e7b2b2aa48b9eb2617b4e670b8a78a4a4ce","sha512":"187200763128b83b777932b28834f8a21adf5824c5b9f8635249168aaefcc2451885b26da07411ccd56a52146f9b8cc2524647ebf2df4c1474f80d219d893f64","ssdeep":"","tlshash":"d96000030c00cc300033000c0003003f30f00c3003cc300c033003f003c030c0000030","size":16,"data":"","first_seen":"2024-12-12T23:50:40.144885Z","last_seen":"2026-05-01T12:56:59.005936Z","times_seen":261656,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1f0ad72a2e27300823d11767f25d7da0","sha1":"4ca3a0f1cde7515347f5f2f5330bcda646a5bb61","sha256":"f7d9e97b2badbeb3898b568c4c64473df79388d43c266f55255f3338d47ac097","sha512":"1b78449a6129053c9eaff4843ac4a519382e03a3bc9652c783408944334100f17604f543b633ffcf2c3a8afd5b5a3c026e671c8417f1fdba80144625639a0406","ssdeep":"","tlshash":"57119c763b2a6534dad9418b317ee7a93e3260617e029144c3acdc295918e8714afcbe","size":921,"data":"","first_seen":"2026-02-05T14:00:40.517565Z","last_seen":"2026-02-05T14:00:40.517565Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"53b1da09f3b3a9cacca318de3c15c4fa","sha1":"3a6cc5d695445e4d86d29fad8328205713a21960","sha256":"e723def11b603e40dcf621f8091477ca5691462aab44db7fa68c037f49f97cf2","sha512":"8e6e6cbaed39bdea7fedb7f15a89e3a5b2b960fb471307996b80af112861242c5f0ead4bd536bbb5860e897e06fe9b80b0331879d3eb9d55022e705f26ef53d4","ssdeep":"3:N/BKL1Xn73n:eL1b","tlshash":"095500c0aca030b08820ca00e3a838baa82b382020ea0c02f0ae0ce83b300003020e80","size":1337359,"data":"","first_seen":"2026-02-05T14:00:40.518463Z","last_seen":"2026-02-05T14:00:40.518463Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"cee23bfc51959537c7262b0e6eac382d","sha1":"7a3348fcda8a0b2b66ef190ba6037b48d8831163","sha256":"f5b90b236eb925f0140a37c325fcb8426335be7a08d397da53882c25f27f331f","sha512":"a3adf8482e39cb040426c850527df5890d51942e740bf60ddc8da664e6e5fea0986a31d18ee4e63721c74e8540a8ec3d33a13cdefaff00b30f428e2c212606d1","ssdeep":"3:N/BKL1Xn2Hn:eL1GHn","tlshash":"305504d0545030704410c400d35034775417341010d50501f07d0cd417714001010544","size":1337359,"data":"","first_seen":"2026-02-05T14:00:40.519471Z","last_seen":"2026-02-05T14:00:40.519471Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1c246785f5807419b9773900da2fee8f","sha1":"4ac92dcaf58ff8f7e2341981fd82fa9d38321c8b","sha256":"c6d903f7d63a26547424a59114d35ff8afd3a9a0decad0af7bfa0278e1338dca","sha512":"c9a71b9962c50a9fc64d22c23d762cb177e5988f5d569a1624ed8d033a38491f45a54099606ba1cb4118765013f1a9fa270ffd4f7160f4d6b300d41f37a88016","ssdeep":"3:N/BKL1Xn0Hdn:eL1E9n","tlshash":"d15504c054d430704410c400f75434755437341011d50403f05d0cd417300100110540","size":1337359,"data":"","first_seen":"2026-02-05T14:00:40.520463Z","last_seen":"2026-02-05T14:00:40.520463Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-28T11:56:48.081131Z","times_seen":787367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-28T11:56:48.081131Z","times_seen":787367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-28T11:56:48.081131Z","times_seen":787367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-28T11:56:48.081131Z","times_seen":787367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-28T11:56:48.081131Z","times_seen":787367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-28T11:56:48.081131Z","times_seen":787367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-28T11:56:48.081131Z","times_seen":787367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-28T11:56:48.081131Z","times_seen":787367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-28T11:56:48.081131Z","times_seen":787367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"649c7cd17f5531193d2a7c00fde5bd95","sha1":"658214d82c46c7c61d5df17bbf1693dbe63a5200","sha256":"acb96f4a9f5abddce38e2af923c9cf824e83c6397ecefff600a06ae71b0a5633","sha512":"78e7c8ce78407e8d4def31f7b2805850ddf8625dd543f10541ac6a30db5b9a605466cd6646a073ae845b331bbbbbdd11debfed7f8e02c94be01d657640f4cbf7","ssdeep":"384:PIVvkVof4LFC12/oMtmGiwRLhNKQZPt2xE9uCrOSIbLy0fcGN4N62:2sV/LA12h8Gv10EGiD","tlshash":"85a2b78a79d97537c77120b3002b35ca61ffbda92058ae15c128b6bcb93d30c6967f49","size":21726,"data":"","first_seen":"2026-02-05T13:38:05.964374Z","last_seen":"2026-02-05T14:28:00.716042Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"dbe51784d56a7bfd45832364eb8c0160","sha1":"cd3e2d14c494b94274b0c7e940403fb48b865a3e","sha256":"c4358459acb044755035da4e15e4651eba0e0d1b7aeb50a1f7079cfb56d0ccf1","sha512":"31cdec86be01a25efaf8172a6c72ce1d80f93737972bef0152e3b240e4119c3f317434b9f8f8890cc69a8ee0307abb86c0ec1a5bb8d4ec7f0e6d76509eaf7f3e","ssdeep":"3:N/BKL1Xn6P:eL1KP","tlshash":"de5504c054d430704410c400d35034755417341010d70c01f05d4cd41f740041011741","size":1337359,"data":"","first_seen":"2026-02-05T14:00:40.521677Z","last_seen":"2026-02-05T14:00:40.521677Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"48e8c6337bba8260373ba9a3a60e6dae","sha1":"bf4161d0688b025e4fbe2b07073d35aff1e3b2ac","sha256":"388f5d2e42cbe4bf62f29ccb26f335e7e8a5806d92092623d0f2e9f8da236860","sha512":"c447340d393e5eb5e660d59cd475271c9413894366a48aefea1e8cbdc39a10d60fc9dc1646cab34368d48bf743d22be569d9df4cd86a89ff424beb3500ab171d","ssdeep":"3:N/BKL1Xn0DVn:eL1EJn","tlshash":"ea5504c0545530704410c400d75034755437341451d50401f05d0cd557300101110540","size":1337359,"data":"","first_seen":"2026-02-05T14:00:40.522768Z","last_seen":"2026-02-05T14:00:40.522768Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-28T11:56:48.081131Z","times_seen":787367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c1584745161e09d6fd20d8786383a1bc","sha1":"5bff3767e04594f3096fe5fc6a5cc57281f6a319","sha256":"607af3d06d91be6b90d423dd6483fb2a41d7ad175c1c179b6c6bb7751b6d6ad4","sha512":"364810bc5407281edf30f967a8050881b05c258d4ef9cd7f96e308fffdc90787ec110eea634d084714ffd4bb70aba4a4c27f6ea2466c90514e5ffecfb8e691b1","ssdeep":"3:N/BKL1Xn68:eL1K8","tlshash":"0f5504d0545434f04410c400d3513c755457745010d50c01f05d0cd4173c1000070740","size":1337359,"data":"","first_seen":"2026-02-05T14:00:40.52381Z","last_seen":"2026-02-05T14:00:40.52381Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0e1ee9f442371606d9a13b41a0dbeaff","sha1":"a05c25c8ad9127fe7d45319ce13e8b4a485d2e01","sha256":"713285cbc0cb910dfd2e7a86c604d191a27789ae50964ab1c674507ff4a20c45","sha512":"1dbac9fa1e0b338e780a3600f1a3da140a6c83a961a1d0c6c80fe3dc5a9041c346c471d264a07ccc87457cdccc2a28b768d02283512ba9cee0fc2e2b7124e42d","ssdeep":"","tlshash":"0221fedeb2826488526794d742cd8dceb8e617a919008c20452ef299225c3e8fb6ad54","size":1177,"data":"","first_seen":"2025-08-01T04:16:24.218288Z","last_seen":"2026-07-28T12:25:07.871117Z","times_seen":3260,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3433c9d3e9b7e8e5b34ed72e309db572","sha1":"d53d7df082088749c1df6b08330ee9b9e4076932","sha256":"1d96fa9904e3743570bccd5be90e83fd91975299f374093cc6f723673d582dd1","sha512":"ffd0e047331871f21738643968b7eb7fa045ee0e45346a9ea986c4b8a3e745dd310542c6b2734f6d244408bba6548ec66f5cd7662c69485b5e59e3b9432cdff2","ssdeep":"","tlshash":"06f04245bd825a24d35670ddc41f978cc53690dd91491c4cbb64ece1de94c2cdfc6534","size":585,"data":"","first_seen":"2025-08-01T04:16:24.219641Z","last_seen":"2026-07-28T12:25:07.875059Z","times_seen":3405,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bbdf7b8b68fdd99a09c27c5572a03a3c","sha1":"bbe3b41b6134e92552795c70a0bc2bc4e3f669d7","sha256":"2b3045c45024efdbd37391b4b71a65f750133db0bc3f8170cac600fd3194aa3d","sha512":"fb48ccf550be2377dd6f2186fe8de875d4043d6964cf40d7052b450e77077688fd5d95a9feb074b433e33f949f3aeae3d2766433254c847de6056ce32e6531f9","ssdeep":"3072:fV1PHxc8REo3nvJnBFAbUs7YQwhHW2/PTr9w+S6+tTexJ8+KjHQnQ:HRbnvZBFU7YQihPn9w+18+EHEQ","tlshash":"5704f8ca3ade7b62436b64e6005b75ee329f28846098d91ce610ddf47c7036c6527fe8","size":187603,"data":"","first_seen":"2026-02-05T14:00:40.525642Z","last_seen":"2026-02-05T14:00:40.525642Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-28T11:56:48.081131Z","times_seen":787367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"892706188ca90fb3b376c7e048a5b03a","sha1":"8b6c6d17951ad5df7b176694fc9e84b007ef1105","sha256":"a40549c6877353a2e356e8be6c6d3a9ff1766e6187c1aa33054fd16284884b96","sha512":"89b97e69d3e13340c0cf56b325e7f53ed3264674e11c00a79dda9fb6a3724fb7f2bd6fdbfbbd209d8a973ae3c171e8c1cffaff32e9ecd395d6a78e1698be6a0d","ssdeep":"","tlshash":"18b0125896899941c74019070c0f5cfaee345902489c97c0c220a15be0c4ff041eef35","size":101,"data":"","first_seen":"2025-10-22T18:40:01.499879Z","last_seen":"2026-04-03T11:40:49.880488Z","times_seen":139658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"892706188ca90fb3b376c7e048a5b03a","sha1":"8b6c6d17951ad5df7b176694fc9e84b007ef1105","sha256":"a40549c6877353a2e356e8be6c6d3a9ff1766e6187c1aa33054fd16284884b96","sha512":"89b97e69d3e13340c0cf56b325e7f53ed3264674e11c00a79dda9fb6a3724fb7f2bd6fdbfbbd209d8a973ae3c171e8c1cffaff32e9ecd395d6a78e1698be6a0d","ssdeep":"","tlshash":"18b0125896899941c74019070c0f5cfaee345902489c97c0c220a15be0c4ff041eef35","size":101,"data":"","first_seen":"2025-10-22T18:40:01.499879Z","last_seen":"2026-04-03T11:40:49.880488Z","times_seen":139658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"675fb40fbe0c3c1e40301a19beabbb95","sha1":"ef404b070b8d6dc1176864cdfbfb9c8dc2c012af","sha256":"aff2cb537fc35648eb6a5f13fea27fd2a834d428d391cbebf5f12a28f06b2f01","sha512":"385e0629c5fd473bce780cd712cdf41042690877536bb3ccdb8cc1f7900446a51806d6645b124d4b5f2bb3dae5f1ce6b2f666b2469314437a3d1bdc88e756456","ssdeep":"3:N/BKL1Xnxt:eL1v","tlshash":"295504c054d430704435c501d35034755457341010d50401f05d4cd417304001410540","size":1337359,"data":"","first_seen":"2026-02-05T14:00:40.52693Z","last_seen":"2026-02-05T14:00:40.52693Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-28T11:56:48.081131Z","times_seen":787367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc6ee551f37be59bf2d2b6cfe01e364e","sha1":"996b066a18eb8f986f296afe2cdc3792704aacf5","sha256":"bf857f75f5f2c82f5df3ef3f1d90f3add847ab7f85f29bdfdae0875e108db95b","sha512":"68b1f196af0f91710cb78fef1541d2588d2c415a6add0965e2c373d90747b397e868d751407c46121da2cefe8b708ed3d3dd411cd21d10488ca87ca9262df39d","ssdeep":"384:414i+yBU4Iss6VsFbBC4bO3s7iErL6SV2X/j+rhmAexCLP76Gl0Lo6e4O:PYc6mFbvYkxIj+rhmDQAw","tlshash":"7992a48f38cab537d77554b3002b34da61eb7cea30549e148229f8fc687a74968a7d84","size":20747,"data":"","first_seen":"2026-02-05T13:52:58.124254Z","last_seen":"2026-02-05T14:00:40.478235Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f47389d2f1abd47dbebeef3e2d3ae8a7","sha1":"dde5aa75f9a647e73d3e2d3fdda68898f850f72d","sha256":"30893b81b3c71cdbd5cf34b54fb52f8eef50b27d8a3f2498a28d2b89bd987fda","sha512":"3524a8ed2b83fe9d62a0708424707959d6cc8e89a918407da7c46540b5982fea9230792acffc47517cf5d009231375b00d5ec2ff5689bfb74ea6a3c926653318","ssdeep":"","tlshash":"56b0028869e5a404e21975a5495fd144f12cc802148a0515658885515f114294167868","size":94,"data":"","first_seen":"2024-12-12T23:50:40.522517Z","last_seen":"2026-05-01T12:56:59.043697Z","times_seen":261167,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-28T11:56:48.081131Z","times_seen":787367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"362dca55ec5bb2e55f7eb01ffd3eb796","sha1":"d83483ef85c83310cc31fca587f32a73b4833f8d","sha256":"3a1b4091afe0179f26250129133ede1500328538a2d7168191dd918a45a2f342","sha512":"8b1ee13de451f3244593b642e88f3daaa8670667071da422d821cea01186213fb95daaeb5a65f05dc4dbf9213e87fa2bc5406d635110844d0cca57b73901c18f","ssdeep":"3:N/BKL1XnxS:eL14","tlshash":"765504d054d030704411d401d35034755457341010d50401f05d0cd417300001010540","size":1337359,"data":"","first_seen":"2026-02-05T14:00:40.528628Z","last_seen":"2026-02-05T14:00:40.528628Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8a5800f54b71ed44ef19b0fdfc6de4de","sha1":"e8fce1c2a8b6049e304228206ef447331781b505","sha256":"5b91f23cf916a097eea99b825d7af2b8a48d8b1a4879ac7faecdf8f7d4bbc666","sha512":"5e0db8509d88c7d1f7ecff4a91a7ff55ea9724725aa7b3878dfa43902a091614297ea887401070d4a2f411e78d46d41ce8fd2a88cc07dbc336f02bb056a10649","ssdeep":"3:N/BKL1Xn13V:eL1v","tlshash":"dd5504c0d4d030f0c450c400d35034755417341010d50411f05d4cd417340410050541","size":1337359,"data":"","first_seen":"2026-02-05T14:00:40.529942Z","last_seen":"2026-02-05T14:00:40.529942Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"22c06946dac16704eb1a1b3c8c4d7464","sha1":"3610aa74b86fce12d15166716b72f9012ae2c11a","sha256":"e9b6edb58f0953ac16c233c78656ef15a80cd16bb4a614da4309cab47221afc0","sha512":"63d2feb23950f7adec6e716a86e1f8f4e1bdef1e139eab1dc433b84bcbaa73f8827e9b8f0ae0201d054e66f35243c30aa486904796a4ee3c0cc978cca27cfec5","ssdeep":"3:N/BKL1Xn0/:eL1E/","tlshash":"3a5504c45c503170c410c400d37434755437741010d50c01f05d0cd417300100150540","size":1337359,"data":"","first_seen":"2026-02-05T14:00:40.531057Z","last_seen":"2026-02-05T14:00:40.531057Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2380d391cf784bce2f77e0e16fa2268b","sha1":"2b88cb08e3d7f56772d46fe1a10d84774e8728d5","sha256":"e65fcff70fe965f3d1878fe515a7ebcd265dfe61b15461521450c882e8d081d7","sha512":"0f3264af3a045928be20d2ee1ef3af905571d07e3fc25eaeda22199baca89b8c9bff94d90d81124ff45b16c5e40df291c2f49d9464ba901d2d961f6fd1196f1f","ssdeep":"","tlshash":"e6411b1e00aa0aa31ba3054333ce846d0956c2cedcc73534d3b27f8134c67832a93bea","size":2254,"data":"","first_seen":"2025-08-01T04:17:54.882582Z","last_seen":"2026-07-28T12:25:07.877569Z","times_seen":3191,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-28T11:56:48.081131Z","times_seen":787367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-07-28T11:56:48.081131Z","times_seen":787367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8bf9095181df452cf7f3de62ce86bb90","sha1":"dbd9b07a49709d4b7e78a80164a5991e09ac3810","sha256":"130d523a41d9de89b3f0fd8a3db022a728d4ea21c6ee3fe2da6d21d632f3bc96","sha512":"a2f4341db4633e67d2f319684f3ff4b2d5826de9ceebefd6c932c24043fc5af4869f38119578624dfd9f1cfb0311a9c9811d72ae5250f7c452046d498db212b9","ssdeep":"3:N/BKL1Xnx6:eL1M","tlshash":"f35504d05c5130704411c400d350347d5457343010d50c05f15d0cd417340001010740","size":1337359,"data":"","first_seen":"2026-02-05T14:00:40.533842Z","last_seen":"2026-02-05T14:00:40.533842Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"892706188ca90fb3b376c7e048a5b03a","sha1":"8b6c6d17951ad5df7b176694fc9e84b007ef1105","sha256":"a40549c6877353a2e356e8be6c6d3a9ff1766e6187c1aa33054fd16284884b96","sha512":"89b97e69d3e13340c0cf56b325e7f53ed3264674e11c00a79dda9fb6a3724fb7f2bd6fdbfbbd209d8a973ae3c171e8c1cffaff32e9ecd395d6a78e1698be6a0d","ssdeep":"","tlshash":"18b0125896899941c74019070c0f5cfaee345902489c97c0c220a15be0c4ff041eef35","size":101,"data":"","first_seen":"2025-10-22T18:40:01.499879Z","last_seen":"2026-04-03T11:40:49.880488Z","times_seen":139658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8de04e3dc63af7585af0e827672eb149","sha1":"02ee5e4b4e73e430d629744c4b7a3e38c36ed06d","sha256":"123e2a4c9c65ad62ea2b0992b1f80073e18a341a810f9ba40d1c4cdc31f1e759","sha512":"a42fcbfd4fc45305b75c0093524abafcf73f7d10f3bbe8cf573f3ea87803f672ae7fd293a116e7c24aeb0ef9fb24b9ea32e48200a56243187d5b550407631184","ssdeep":"","tlshash":"a911cce0aa6c599781c2095034894b02b13cb020203d9fd0bf75f0ce7c7c7ec96d262a","size":1000,"data":"","first_seen":"2025-12-20T20:03:49.143914Z","last_seen":"2026-06-07T00:08:21.702938Z","times_seen":1701,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","size":39,"data":"","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-07-28T11:56:41.934585Z","times_seen":1033189,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"claim-elsa.xyz/index_1.html#origin=https%3A%2F%2Fapp.heyelsa.ai\u0026nonce=ch8gljgswio","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://claim-elsa.xyz/","date":"2026-02-05T14:00:10.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-elsa.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 07:47:44 GMT","end":"Sat, 18 Apr 2026 08:46:05 GMT"},"fingerprint":{"sha1":"2E:1B:51:31:16:44:BC:60:26:2A:3F:D2:5E:87:C1:5F:11:94:BB:B2","sha256":"96:FC:09:9C:A2:60:FA:0C:A1:97:35:68:41:D2:C8:CD:DD:A0:28:AE:BD:1C:53:0E:5F:15:91:9C:22:86:76:18"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: claim-elsa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-elsa.xyz/\r\nCookie: cf_clearance=WjsfHqPtXLvRUx4F22P3ulTm5Qjrohqszlsi_6RZwM8-1770300010-1.2.1.1-bWGNPf.HWbCgQ4NjdxFAdCRjrH32_iZ9PBk.ycl9Sm0h1uF8.pSsIRy4VghQH97s9j2vSBjPZc01geXy7yUzp7_xxpPRNGDzXVd.Uvib2h330yXxEoJ.ZuCXcysi0JgOU3azBmlAafaTV0yyySdZkg48mcJOoL5NzgcG0rPXK.jrU78iShc5q9K638zPucdMUx7EVNlEmaBzCMzfN.bAUsHivl0nQOJXNE8A86ZdQPY\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 14:00:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=c4Gt%2FPeL1c9PNWOMcnQJcr9BqKo%2BEYICuruBt6ynGfpDaGe5t0p6fYwrNOiTQKnlPLl5msHYGY%2B0Y8%2BsYLLQjgTiVj4GUC9YoOr6WnEEuVpPqjia0U1kui33xkl3f%2BNdvg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 18 Jan 2026 08:34:34 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 2575\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 9c92eebc5a5456b7-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1613\u0026min_rtt=823\u0026rtt_var=1080\u0026sent=238\u0026recv=57\u0026lost=0\u0026retrans=0\u0026sent_bytes=240100\u0026recv_bytes=20272\u0026delivery_rate=40350807\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=83834\u0026unsent_bytes=0\u0026cid=6ca2ff481225513c\u0026ts=7907\u0026inflight_dur=101\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4948,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (1554)","md5":"e379ae4581c020271744df2268309190","sha1":"c63ca19ebe93bde130d7441c520b03da7748040c","sha256":"8461deb24783e305449632bfaf31fde6076e2a40dc04f02abb33227881a8ec1f","sha512":"d98cc447ec1b9a293cbccc46b50a510e13ffa28ef8fd4610a08d533724985e444efaf72136726e3b63eb84f04bdda5516c1a6e36be44d24544a0c917c3666c31","ssdeep":"48:bY5yr1enY4bDE7Eyhf4vyVbyQrKrLrGaror4rMDr3rbr0GmbKRJnsmtXm3X1zOOa:vZM8RJn3t2ROFrp9mNnx/IJ","tlshash":"47a1a777b794402d4367c259a8e6fa20c925d11bd63e0c00b26c9b5e0fd2fa2d4fb52a","first_seen":"2026-02-05T14:00:40.466506Z","last_seen":"2026-02-05T14:00:40.466506Z","times_seen":1,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/css2-1.css","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-elsa.xyz/index_2.html#origin=https%3A%2F%2Fapp.heyelsa.ai\u0026nonce=6d1t0wr0lfl","date":"2026-02-05T14:00:11.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-elsa.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 07:47:44 GMT","end":"Sat, 18 Apr 2026 08:46:05 GMT"},"fingerprint":{"sha1":"2E:1B:51:31:16:44:BC:60:26:2A:3F:D2:5E:87:C1:5F:11:94:BB:B2","sha256":"96:FC:09:9C:A2:60:FA:0C:A1:97:35:68:41:D2:C8:CD:DD:A0:28:AE:BD:1C:53:0E:5F:15:91:9C:22:86:76:18"}}},"request":{"raw":"GET /css2-1.css HTTP/1.1\r\nHost: claim-elsa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-elsa.xyz/index-Di9PsSOD.css\r\nCookie: cf_clearance=rx.Hxb2CGf7WtUMl1dnaJy2j.h7FzyTjYfJRsS2kRIM-1770300011-1.2.1.1-8MX2dQRTrvKZhSoga9p1rxek.Oz.FqG37AicVuYGIBuDEdjFTK5hT8uru_4CPfSEWtvNtaXeeTLnspF2iZu8tm45VTj04scriP4_f.W0dt4R7C_lniHQPVX6tNymJDOo0ieKXXLnE.m9RCuMIGlM18YospOoRDBSOsO7ZYeTyBiiwyklLbvkEdtwSN9XC.H96rO9o1rvnFQQupgo2vnnePBaAudPbFznkbQ0oBFxgGvcgJvGjkgy_XGJso8uwbd3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 14:00:11 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=bVIUqNNfzPowSNraIybGFwkpWgmHddnG51wVApvWEoRDHNqrsmX%2B8IfuUWns91erdctZ7sux4Z%2Fru7RhfG3IaUvKdMb9L%2F7Kh5Vtka%2BPdGkrXCnZnimblnFs0LqCcXS7sw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9c92eebdfa6c56b7-OSL\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 18 Jan 2026 08:34:34 GMT\r\netag: W/\"238c-19bd03de10e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2574\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=2195\u0026min_rtt=823\u0026rtt_var=2176\u0026sent=339\u0026recv=90\u0026lost=0\u0026retrans=0\u0026sent_bytes=323597\u0026recv_bytes=39897\u0026delivery_rate=40350807\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=120257\u0026ss_exit_bw=40350807\u0026ss_exit_reason=2\u0026cwnd=70184\u0026unsent_bytes=0\u0026cid=6ca2ff481225513c\u0026ts=8166\u0026inflight_dur=156\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9100,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"2697aa3ac7b847513fe0243c985c479b","sha1":"bbce27c9f7e67d54286e634b280818db09a13de8","sha256":"95575391bb55a8a178fea41d43dd09b1fddd957c6e6d49e9be9263e57092f7d6","sha512":"fd990ca8107b081bac7485242188dca4ba0549d9406fd3a0861999143da2d61ab70a65a41901e922e1a69fb4f978a2a1831675104d95d344169cafac9567d12d","ssdeep":"192:9TNSbO34o5DMTOB0O3/v581Tro9O3iS5lWTEv+O3RB5Gp:NvWsk1i6a","tlshash":"8a127b91002b6400a7a70cc277ce3f3aaedd6044a049da782ffd0d8a6cdeda953a175d","first_seen":"2025-06-02T11:49:35.475344Z","last_seen":"2026-07-25T05:48:07.848632Z","times_seen":276,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-05T14:00:02.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-elsa.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 07:47:44 GMT","end":"Sat, 18 Apr 2026 08:46:05 GMT"},"fingerprint":{"sha1":"2E:1B:51:31:16:44:BC:60:26:2A:3F:D2:5E:87:C1:5F:11:94:BB:B2","sha256":"96:FC:09:9C:A2:60:FA:0C:A1:97:35:68:41:D2:C8:CD:DD:A0:28:AE:BD:1C:53:0E:5F:15:91:9C:22:86:76:18"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: claim-elsa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Thu, 05 Feb 2026 14:00:03 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ic6ftErzXc%2FQJkZDuv1niaFfVsXkkshszelGbNVD3WD%2BiZa9%2FmjWjLciMujj5NCNfdtJ7%2Bii2IfpQx0%2BqzEYBcjJ5iraxg3CvOCwwju2MzGCJ10RJbvMJ0s9e%2B%2BzWqdxbA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9c92ee8ad9c27130-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: chlray;desc=\"9c92ee8ad9c27130\", cfL4;desc=\"?proto=TCP\u0026rtt=605\u0026min_rtt=578\u0026rtt_var=108\u0026sent=7\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=3206\u0026recv_bytes=1125\u0026delivery_rate=6961538\u0026cwnd=253\u0026unsent_bytes=0\u0026cid=0bb1bcad0227bce0\u0026ts=43\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7171,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (7171), with no line terminators","md5":"c8e7df5cd4c31dc1014385fd67054442","sha1":"f73ca00365ec00083d551f622b698e7eabec6164","sha256":"f605e12e38ddbcf7786b36170334c0151dccbf6d5473dca070b015a2565ef80c","sha512":"19e657f2b1816c967b76680c64d51eacb172ff011c7826422c9287b6c62f98e43a2b64f12ceae47745eb0626ac1231398ebc02c4627ca4a56f1edbb566247b02","ssdeep":"192:PNadBSaIRaAzCZUxeJmAgzaX3eNdmj9oyYacw:0cCieJmAYGeHmj9Cw","tlshash":"fde16bd7a671502383765be64d37b370ba20a6614f12e074f992ee4cc1dec83817a998","first_seen":"2026-02-05T14:00:40.468835Z","last_seen":"2026-02-05T14:00:40.468835Z","times_seen":1,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":101,"dns":84,"connect":1,"send":0,"wait":26,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/favicon.ico","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-elsa.xyz/","date":"2026-02-05T14:00:03.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-elsa.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 07:47:44 GMT","end":"Sat, 18 Apr 2026 08:46:05 GMT"},"fingerprint":{"sha1":"2E:1B:51:31:16:44:BC:60:26:2A:3F:D2:5E:87:C1:5F:11:94:BB:B2","sha256":"96:FC:09:9C:A2:60:FA:0C:A1:97:35:68:41:D2:C8:CD:DD:A0:28:AE:BD:1C:53:0E:5F:15:91:9C:22:86:76:18"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: claim-elsa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-elsa.xyz/?__cf_chl_rt_tk=6mn5dDcBJdKHcibqSB41xQm_.ooPEFy9r4aDz6c0zJM-1770300003-1.0.1.1-CgH0AHdzefsv3AJ5hHaGXF4dNqTEB6tGNO213B2qFSU\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Thu, 05 Feb 2026 14:00:03 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'none'\r\nx-content-type-options: nosniff, nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=6,i=?0\r\nx-cast-cache: STALE\r\nage: 2576\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=akjpMsR77lcTCXmMqwvmCR%2FajGONC38jYKSA1i2y5eIcBo7KT%2FNEym6PCn0AoaMnVQuxjuKT5aDP9nUO8tF6rmVsuXFEhi7yaAJ%2Fhg%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c92ee8c381c56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":150,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"84241342d84ac29592a5d9516f8edf7f","sha1":"03c53980e18e17625f439c20e7d438f066202428","sha256":"6e21162bc64073fe9e3d3d6375ca24d04fed1912a5b7716aac0cb0f2d16fae7c","sha512":"7509483335c7a30365f7f403098491ac0b44fffcc68a5cdacb86ec191f02dbda5b16a20a09e924b6a29ac938578d43bacb9a50115db5c5668ea27fe1811bd530","ssdeep":"","tlshash":"34c08c9e140012010b2087042ac1326464973b992de685006a87e027ece8a1ad987288","first_seen":"2023-04-05T13:59:49Z","last_seen":"2026-07-28T11:56:23.810142Z","times_seen":8526,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1377451787:1770298327:j3AjEC2oM_S0egY0E9NpRHGiJs0F_bg4Aaf3ly8VSd0/9c92ee8e582f4e4c/1N29JYPPlx1uG4wpLMek6AOm.c980bf.OQGcR3HHmc8-1770300003-1.2.1.1-7mmaCOaDwmOBSakBu.urcGzLw9JrV4GsDwWuBFsrvW0qolC6nYYV0M7v693FrdeO","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-02-05T14:00:10.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1377451787:1770298327:j3AjEC2oM_S0egY0E9NpRHGiJs0F_bg4Aaf3ly8VSd0/9c92ee8e582f4e4c/1N29JYPPlx1uG4wpLMek6AOm.c980bf.OQGcR3HHmc8-1770300003-1.2.1.1-7mmaCOaDwmOBSakBu.urcGzLw9JrV4GsDwWuBFsrvW0qolC6nYYV0M7v693FrdeO HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\ncf-chl: 1N29JYPPlx1uG4wpLMek6AOm.c980bf.OQGcR3HHmc8-1770300003-1.2.1.1-7mmaCOaDwmOBSakBu.urcGzLw9JrV4GsDwWuBFsrvW0qolC6nYYV0M7v693FrdeO\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 48290\r\nOrigin: https://challenges.cloudflare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5020,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (5020), with no line terminators","md5":"3021c58a80929e28c5da03513d2cb7cb","sha1":"08c4c112f0b5fbc86fc9e4730095af5f57a15909","sha256":"b0564326eb4151b05362fef4fe4a7eff246a869a3215d0d94896f89fa17f3ec6","sha512":"6e06ad0280ebe81523d5a3a5444716b6a984dd65acef00c96e276f22c5b38f534c94f7a358e125d4a58dc6148428abf7ceebb88e5df3e409c49ae95544b4a926","ssdeep":"96:YnYjpNb3nyxUIx4JN4dYXWCKaphoSNV3e6MyW17FkOgFcfdGj77a4G:rpNb6xGmDyNZeTyU7FJf477RG","tlshash":"73a18d6150f58f4891f9cfa44fee925803b69aca40e3d942a807336a892f28a20b150e","first_seen":"2026-02-05T14:00:40.471056Z","last_seen":"2026-02-05T14:00:40.471056Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/cdn-cgi/challenge-platform/h/b/jsd/oneshot/d251aa49a8a3/0.06437466857555997:1770298327:TJRd2fYeK_8rG-MKdrV5YhvoLSZS8RAof-nCgDb83go/9c92eebaca3a56b7","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://claim-elsa.xyz/","date":"2026-02-05T14:00:11.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-elsa.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 07:47:44 GMT","end":"Sat, 18 Apr 2026 08:46:05 GMT"},"fingerprint":{"sha1":"2E:1B:51:31:16:44:BC:60:26:2A:3F:D2:5E:87:C1:5F:11:94:BB:B2","sha256":"96:FC:09:9C:A2:60:FA:0C:A1:97:35:68:41:D2:C8:CD:DD:A0:28:AE:BD:1C:53:0E:5F:15:91:9C:22:86:76:18"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/oneshot/d251aa49a8a3/0.06437466857555997:1770298327:TJRd2fYeK_8rG-MKdrV5YhvoLSZS8RAof-nCgDb83go/9c92eebaca3a56b7 HTTP/1.1\r\nHost: claim-elsa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12141\r\nOrigin: https://claim-elsa.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-elsa.xyz/\r\nCookie: cf_clearance=WjsfHqPtXLvRUx4F22P3ulTm5Qjrohqszlsi_6RZwM8-1770300010-1.2.1.1-bWGNPf.HWbCgQ4NjdxFAdCRjrH32_iZ9PBk.ycl9Sm0h1uF8.pSsIRy4VghQH97s9j2vSBjPZc01geXy7yUzp7_xxpPRNGDzXVd.Uvib2h330yXxEoJ.ZuCXcysi0JgOU3azBmlAafaTV0yyySdZkg48mcJOoL5NzgcG0rPXK.jrU78iShc5q9K638zPucdMUx7EVNlEmaBzCMzfN.bAUsHivl0nQOJXNE8A86ZdQPY\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12141,"data":"63ujbmUTEpZqqoDZpZHYYatoaAUDETfYUZouA5qUHpkLRDjcAaqYrmo5okXjZ60qo2j+pqoDxRstCBqYEg4TqYoeLLomjUr5wuDU2pbGDtcZUndAUxQnf6aQMFoont1H8jtDUfFcC2DoanDX9nbIoduKdpugu+3I-jEWYTYtEv+vY0+7Y0fopnuKCB3OZooVOc7a4QVU1qL$kPjor9YoHjEkN9DoXiLprkor5Py3i-jG085girjoqqYo5j67pFpbnAAoBw4bOMkm9oohOEMjomoo9G0YemUhYjU91hSEtOAbYrjokqvj1cvaSk8o$T8UhoEm4EwQvzDooAGYaZwjgZT9ZM9Eo5hGoZ$ebEoU+ADZ6jkA1EohfDRw3AOt8JrLJrphD1wwsJBcwq25j9aGTwwXODoUprXUow+kVLi9zowuLFG3A1wJUoqeL$e39npNnq4G-HnEsVDjZmYNokZ+eyOFG7IhSOfob+W3YQSghTBxg8JC-WPHBkgkVPmr-QaT2CYo7phOHStE2aqxHwooPmruTMEv7Uq03u6ebt3hPZ9QoZMzs0pKHmT1D+8ZGsXgZ9j2QQ00BxNvkIv5VIWoUA9qh2QPsxCU0Lt4Gt1z3J1DKLBKzoQmrZ5usxhq1DYtS$9Z6bsOiYPiyfshELcvWdXgj6zjC0PYB5nWI3N6fOixx+Z3ZI6hnVsGIuZYcCiOdNc6bW9agJ2jU7fE0mqNSpekoFfIw35VacVs9zqX5ameVoHVyvH1ERkv9zTScfciO8bj7Z3wfoZ90+EomZEmSYIZ0S7q05jjAJcJIPUjcD2m9c37REi4$jmBYOtCZDt0SNmrXmofAtPao+vaZAOUTgTCUz67vjPZfv0KcDpkmcYZoKSAIU6wwdt6cApQqdjN7UcYotjbpYjEouhkReu5Uj67Y0jjKqSako37YqYA0v8+vjtaoyk-wuftF5MWCMom8nhLfyvjdufCZbKUAULf1ZwwDbY7gLZHnZ+qJKPj3AESAJvEpx1CUQxY0rPLz7Ih6KQDdxLXQk6CZNYkUQwSY4ZA9YvPmkPMPYt6p2r8nSmU8r-0rDTuP7BxiHGU7DGunDGZqwfi2qgrcApwfTLcgsjhLaOPkM+Kj4raYczZYo0NYjPjczktY1EFZDhY7EmEADCTMKp6AA0kpfzD3AYxZ3fpSAcXOYAn83pYpSahu0oi6jvpnRKF2nOQxpZgAOZ3ao3uKP2vmnZNsPqZNNZFCoNYnzufnz3GIEk2Ep9gSn1vm-jZ2KbbYmpWJOjWsjvjwOZq2dZ3DUSW0uZ+psRYREwqVTaocXPS3DZ3dqwH0wfTuhaDgeMoTGGhUEpPujB-n$cDgdYVxLCt4o3gyP5VVTouptjoThPyPjqJnb34qpwDUbdLDehFWYXTjhPHG$wDjc$cEEA9XoipIuYCE$FjZZKhyF6Dch9m$cp90d8yRTrFJDsx3AuvQxjjpKcDcji5dPgXwmmXJx9c$J7kpVJIhd+XbhGEvSHVisf-GpBko+h1S-vKy$Jf+HyuvtyzmbIdzDVrfWF6K-2o5F8ICUuAh+Ipo$IvjAahZohCvzFsyRy7sGQ5TktwwOxThJgUaEYocxzuo1UuEK+Dc2moY3dj+jyAq6JSjK7e$MvmpHT4ooxQjYteSaa$buSf+oZMDUfTYSj0E0oLdCV1EVnDQZKU$q2cXsBLO94f8YtgBjUEDeuaNboVTN5w2wqn-oAjDaFopTuPCvtoVz7ydBpAHjcoPH9bMg3gs4jCp3t9uYb0oQMYKk3AV1p2UncHJ3eLFmRhAmpu3Lfq7TmcEBrjkwzuuGDEmQwjnmBwnA0uQPcVVsLeOa$ZuUjeQnnj5XQn3jSkX5BUDkW8f2+5WMXt+neuIQktEoCaoYI4qVn75k6jY$3NhExHud3VwMpq375KZw9SDU4EoAS1OkSzQTjwnTrG5kIUMEshphLkeZoUZ$kTrH8C2nqE55pwzPcyLRS7Ph9P8f9oTjSzLTqrS1o5jRSkkqXpHpet-So5E+qEShUut$6ruYHAPfPYVYoWkwbuchIQMvSkmqzzNFj2faw8NOYh62ER1dpwTr$bAAmnawcJk9IQ5oa1vCYetNoQkOU9tz1eKT0EpxSm2kMvj3vgxt5PYY6xmE5H50L9NeYoHroSbhpGooJZMNL9DPCeYLKAjVtJ0XUk4E+021GxzEjwJkyXDG1QMjEigWJau5Z6PQchMSKhpYN8X4OOqnQBEfdj+3eud+T6VMXO$CzW$$ZsHLr4StBES2gWqAPOoaOzNmchAacLoLhztQdu$FBt1FUs-TL6DQonky4DTKAnMYLOCOYe0GDoyWmS+LmUMnpGGDU6+QuYpjGo17JHGbokJhDt+ZTTL3LWQCJpXEhAYohaPpi+UCeh1vsuT92gYEAHpeZ062vP8PiXnv1HaCS+tFoexYrUmob3NvHvjww5q7jWT9WSrVPcfY0bTjqcqtzFIKV6etN66bawkmoH1JtUTKA5w2oPNRPHkjjq3M8dTjETO+vkV0yM84Fx76kME+ecYEMPWqZ8Jqeokp4rdMEwdBjDszh0oCauZ+vOs0KE8rOC7po779NnxZBAytijoLRVuK0EV3J4eBbD3R+ewWoLPuouVYX4kcnoLmfQTu0iKNwCX-4LxVJEo+iY1GhatgduBDbKoKJYXWHptkTp5QTZ2dZjA4toTXn++emz3mT5Tm2HM+r9m9aRiAV9rQTAUHAEwQBobPLwjpJsLNJWDYBJD7PHsijZSXuDhS00Co3Lu9Y7+oYsZk$zBTbKd9jhC71vEEgmV0t++T7iJpWPRv00T40vQ6r0ZArDrAuZoYhxwxsE3MqnhNeYocihwAduJ2prE+VqYZxywH0Lg-LXnIMK7Cx6huL7jc1qJTLBJuD3o2vEXZD83PbAyKn$-Yz2QW9BK$pEbqcvrL6Yy2owwA5QOqFmmUI5fhJh21ZhonyMANcYZ0ThvwKRVkhPG-NQHM$Pqf3QTYw+2hAUtXcYAgRpM6DUo8hZEoA8o6KbGcC9k25bGoReUgP8O45ren1P6VQ0J5p1GoFxtnuvWXjUGI2pRepSRazLpOmcv$Ag4Tr8fDGz8otkUnxipw7FZJxk1mr2bhhwRzNP4zwIrxGohtn0SMMzf9$KV8dowd3JVhdacIV2kp4xM2X+wJIHQuYePhHX7StazvJnSaoAPvU3NVaXnJdWCOgjDGbq-nD96n2B1Xn$wfwIGsA1k6aEkAfCeM6ziTJO9dENikZ-FZex$fYm9YUMBnpNqkQvMziEEVum09jQE3uVTeJesAQ6OIaO9IQmeyguNJ7DbXOq$UE5RXTVefWo48viYT3G--YkEgjxTrGNk-89Dfu7+YCo5HPA0-Sn17bHB1PcoJ8yCULKyNvn0fYK13DpoxjuYaRxxP$E64oDLjNvxtoKRTtw-jaX1e9ILCbk4KnmkIxgzum4b$peOj6K8kupnhOo2wLgnqP$Y9bkvj2w2$Qo0qGVihbDGCKeTIRayhAgOka3nez4BLKppjNofuDejLE$EaNCyYGCvT0A2ACacaOUNksCRuDaYUBnA4yCYzMh+hpLfAYzNT5mRYWq7C3KYaRYbAZIrLQzImfEnUjIzu0j0o5cfWVgbhkuLVpV2EMoVhfm29QnJ9KAIoGqDYHjfuwgHpOg4VKhqjdo8pjL5Uf$pecaeUFULq3UJg6U7oTUTemmA4wIctQYWX3AcLrCgtRzN$aghCMpEu5gzmDnzcpkoLOqLg9DMW1wSfLgnuoXRoXLBePIGp6Iecf$HWcn7kKcpV8$tmbpTuL9qKAg+knI095tO4fgkUohOtNUmKIoKtzuKeIkpDLvKgfgrvR4K7NV0whYGpRo9ou7$Xmv$eIabD5tHt8WituobELfEmna3V+uPvA9PtHna32A6apLHE1VbAh437dK49ZqQq5obI1gwW5I9XJhmzQm3h3ALIMepIz43uZozCGpaCugpkqfrh67f$yYEjscCUeCxoVCRgQwk$s9V7QYICwSaajWMTiEOjsIenTTh9jC3urqY4BeKAUjpkohmUDIeLjg8SdXREDuRCBez$9YAfi78I9joSL4p45toLYLY4AgpIbptAsoqjcpR4Ag4V5wrLMp774VsXLu77IkSghKoNk4Uk$K3juUHwDULqdc+LjNuNIoNoNKR7-c3u7vfj3foh8EdCFo8E5E1p2CwNBLIvXjiAAqoCOeofVTRosobAbksEoh-h43cntU1D7WDenaaIRoCIQwA43VnSySpk3f-joULujgHEc34L9o3cUjjzojbESAE4jMq48qNXvgOoJe-AyTMpOgIk8EsAOoceb7AzQNGSn43MD7-XhMKNna1YRoxo9MP4HhutoNW$GT7aiAnLU42A74FAwgbpjpFNDo9Tkj6K8MV$st3XzINSDnwOQnLgkVRoXgQhyYVELuW4wMWXnYGcBInn1MKWhSES9Y8AcLnLsOwhia4theKvaXrCgc1ghM8gPaomQX1AA4hhAj8M3Nj+$ULuu7fUquJC9jeSOEiA9oHIzWNYkUBU9ao+WvCgAUj++u2o$32w2vo+ZIQIx+nLivbM3SPT+MDc$K6MLcEOSfvp9jN$3VUzMj0wSfeeREStxv+q6znzWOn+6gz+c74XWe6KZV2cg7yYTGPoHogjINhXZSqKAcDzZpDSft4qQzDIRLDn-vhGpAGTDtiLwtgqGTzOUhuo3f+oypJGjUCV0oQITGjcNkp7xoTOaSNkvIb9$pnXOIrTKKsGkU-vhMampuWToe77OC-LWMwX+UhXKMBeYaTuxn1oZnCg+LEc1YsAEAvjGgQeIhbV0IijLtdMpcRnvGZzohqCRW8cKK+$JPbeGmHn-I-GgXcY6a4oqgzE$GzuFgzSkmvjU7yt3uMKcLzWOtakBeiGWW6NfW9DUudjRosakjhUVWLqA4jx5W3fEAVT4apLj7pk9YMoV+AcmOjW9quY3KZVrqzMA9VCjS79Co4Pz4e$7SrKHA9YnkkL9o1vaWA4$YxYZo5+kL2PghuLQCpYd+DSQYxIVNLPhXzGk7o+Ik8Mja$P5Si+QYXwDYkSsGGTAI0qaPs6mz-oiC86Wq9X7W7h-vH6XzVzAP8OSxfuWqu7A3IIgjp63VDAReTP4kZCzNALyvNkqfUYXVQ+3EuTNk76fG2SHnQPIaXpQX-WuLD6FneYHnfjTLQ42WQ9Io7I$pHG59VxnvQr5t4MIrMEdAuXigDOjNGxGT3VChWq8+7+3VwPa7O9LgU4qj9jXOG6Y7DIoUnePoAjDApA8x9Y+wexyxSfveZ$SfOS+T3KUN3+Be9Y$vZ+6vXpQoz7hX7O4XBeYAYauaIoYtMM9IfMD7Ojn709ZV0TbALxHEZwHqOOExMe0V4hQSDv-vA4ik1T-e9v9YWWja+$OtX6z946p49SK+eCZCDYpPxo2aUAc9wMnq9+7Nb$DmYK-+EP6t$phPuW5TpViIcjpV0rJkNP0wUpjvMEmzkNOgGgVKo9$MYgKP+YZz$9Un34-rpYJfRf1SKSuhkuTUGowWxT2z9j6KpvheFgXvUtbNoUHp7rRAtvJNOWXS7+jNJCpu0NV4zWZsP9neZCBggh9xfMohrBhpKAyTFxSx6Z1wqfEBN+LgnSkj+EjLyG3fWTaXdA9LBT+$HATXeLJI3KN7+$svbTygdv4SMpRrLtvjehn0IqGomt2PZCqOxop6-hz4oVeqVSCLTco+VgzSuS3KRYRYHAmeWqOgZB9peEwpXjoQE9r9j+3u+SwuBe4V5xqj3h2zbk77YaUuzknDe0vsuouBZw1gq0fjVTbpiX6tpYtAzat45t00sAkujVxrAS5m3K8M87dYYODZc6arMEIkIB66uMB6t60626mXNBIYgjUjKe+G1cfMu0pEPUOPfx142IRWs$$g8W5W9MoGPMYGncVTDKA4EckctmSC4VY6s$77gMxOz4D2IjtjUG9N1c4LsoTSZ+Ik+uIxo+NLkKOoMzuA8tnsXpWqOtzE-XOtgBq0UM9Y-aI9X$5M4vbpOg5B+$htRwItxjSTQMBUMo0U-AeWgEEjDqFTjPaLieb03M5NvB+ec3Hw22xeRjYco+ot2uMsFn5ottor-X2BpkiI6+7+2sShCa4qdC3AV0-um7fGYCHpa7XCIZL0P2kj62w2DOe6ojwBOj-GT+56t6AriCT+RG+$HBdBMphbA4ivghZ+EcnDjbrCvjKZNoXsKTtNrNSNQ+xP1bBBnadbZ+ZVGZNrFGX$mTnT2QX$DmsgyLgjA4ZVSBxauICJNXcJfrtaVGGBF4sG+VRYA4VVqXKXYju2XP0w$Lk$6MBQCgHpyCvVwUgNb6IgDvmzQAbAbUu0NYyw0Na9vNVBpkNQQYAP+98GiB3MNvvBz0OBJ6SNrOQY7az4hN1a0$bvA2QWmWC2xM92oj+uK9IX0M3MzGYZI6r8HUsgr7JryVtCuKMp8sUVGzYjS0Oj1rEUM6YjuYe9BemNGo2g-GV93uJWGcyL0o$9ywxZ5wZA1PCaiASrCsTu$0c8bA5XDBBSSBBbXrOQ0oZjdMx8BX-YDYHnquf6iWyjkrf8ghJtLQQGBIcjr2CZcZ8qgZ6KYeJh1CEML9MjTAOjFxOg8ZghgB0ZcRUVFQke16kziCDrq5MBOTfOQr3VH6ojEMGccnFXEWEm-n97u4FBordGxoQXS8mt3fK9-ncStVrXPsmJB2j+SMAt-GNIZW98ERKeJWSjOghhIoDm2TqAv0-UshSNsNF7taJhu0WX91DTiOEMbD4aJYnCGNqu77QbB0QEIRPRC5aK7PNkL2H72qxrH0QQePUGAVfVWQW0TXNUz5N0MemB6Nzr4caXKei6T8-+G+84+EFAuIqj9sHQpYZh5VhpeYPOx4z4IGEefbp2uxJfeQOYMj2H6SMEcNZztO2Ik+u4A3iJT+UcvcfJcs05V+TNxOyh4xLXpX6Wc8u2+uzMmjcIS1DPkLLgL2ohFbJ9rRzWvpUAHpnbG+$B1AEkvBoBjVwPCemGo+oPm1jbd4o$iWIQhUHAgTpYiXtnfGz03GN$8MvjFZGqkc-n$zNJAv43BPpVNUjbZ+GruYj0uLd07eAjjgxRh8gveY6RBsqh0q4ViJo4ZXh+OQxtoJamQANR9drkAMatGkvBJefjxZW6nVGb$ub5y55T7dM1MdryfEtaPJbA0ErBXjfGTu0nan3i+gCB3ypYsxXjgt5eRNu+x09IA3SBmytcNO-emhnQgWCtLuKeUg1wTaezwJiu$zokquosTgR+bDAfQ1PPgbMxhYA4-MzqmNTjhNJcT96KqfdjXjrp-n9sQ5v8a1H4C1YLPPKmI1UXC$2iOo5tj$HLK0m0cLX0FAtRmPbAyCYOORomW$GOQM-v8MQJOg2-GsIeLuSLRQLQe$wQA8uXJQ3KFkjXX$C+jd+LxUp4-v762-y-riuoW6-YhJ11RIy11kO+f$zHNtqf5t3FfWiNVUX79Yykid0bmss676hM-aKinhqy+k61$2Xj0vutSPpkmrRnxUpNuYk-1AIW+vs5BeWFjStwYaPweOjgUm0acbIU9jaso0n+UhXHwsw3Uch5odZW$Ucjm1Z4b02T8AnykKSc1UD1xtaUK4uCQJjutpUHPcww6hSe+4m2BpPnro3mNpjAM1UeV8bYGERLJ3QsjKCAS3hYZtuPYrjTVC0SLeRt03Q9CABhbJAItaorjIpUBnXX3D63qoCAuDbI0oUH+2o+kCYMqawZiYrWXpkZ5uhqOYACVqvSYH+wnaMotncnWp1uEyS5DBUAKvvcDZwY$v8u4owt9bvLa8U2DNAWwnjvcOotzfikoYcxwfV$UuWSuwuYe0EaXoutn6Qw6zam5EstTTYGUw+Em50jDtA9BVZZUSZC7uKBeuwuLSyMSEEtDSpkuAuuJsNmhSYXfHx+MQGO$tSa+$wzZV5ojatVom6UjbBtDZupYuweugCWa8UGo+YpoEp6h5ZDCt2zd-9c+ha8NSmTSwJZpSib0otoTxagja+hwfpouWZUmVqhwZWBAz0NQYrquW55EiuNAqipncXaNECnTYJuYa5ptILktxSwnp7U5AcS6j1A74SK+ga8oauojk5NQtSoBSqftL6$wwp4owArnnuFYjwdwwntDvQHP$dfYWVLK1uXu4QhmdW5$wST4uIoiEdg0BoN9s$W8ukbt+f0yfac83YGE+WfryunLwnwpwDkHBmtAucCoLdEmjP33TLuwdk6vkQSIveAZNuRZbvIUzWburfoF1NjkmMTFCTTah6DA1U0pmdpwCub3$ps1nAuJeEoc4wqDTKBnEecra080jLveLLqNqnN+P3TUHpuqiOeEaMUbvM1wnwEb7O5ZvoD8wnduhtjgmbUDut6EWhWUemoACLU3Ta6Z+cm9neyCOEnhdbno+jJcaY-pbqtkwAoXD3pMpbQ5CYTTCDVSmLS25TAk$IDI-nE+7YRtif33ZjSCct50oRUVtHohEELEKYhtJY1++8jcaBZCtkY$irjEhOt0baabopcGZU33DvtYu2fq4pyYmmQo+huKrJv+8P04orDVTCEUs5rfDXRwSqg9d5Z0Uaf43Oqkk5Ho4wUniLof8RZbA+06jVT+K0EUa+RpAe4o8pCOZD0PZBzinhUjLpu2xfvvEjTjwAogmXp5u-JuwdIpo1qUuW9P+3+315ENAw4wArr6UcI5honaj8UAU9udaQSzSGTuwbP+XfM76mRhMpoE+FZEUqodouAw4SvOhBZuq1LuLDw2XNDnD3KbS6UnDtUU2ohcd2E7ccmuA1L4nZTju+3GDoBuijwkkowcuOLZwNkhkvJ4R0qs0gPqoMbEUDSGpahJhBPekXG5koCgJ9uAwKasbDoZItOae51XVUbqBerMvmkGtGXZDjg7jPFUKELoXfWDOrd+G3ZzAaMFf2ecXU$cAuLELEju-EeYmD1AG8UWLoGiA+hZLk0ooohC$oqj4UrjEHGgj6YKoJvxWTvd8vjuh6toiEM8jMvNmySK3qj2u5DeqYIEBANcHXYTtz+HuDYXo1YBaP-M20$NDvb+jAQG2qSbU4AdBiC27M8UmjrQd3SuUzwWv6Kmjdw03StUQs2Cvj2DS1mDEskWSPrTTa+hR+ZEwzc5op+BHE3FTct+owKe$dqfnjeDuYwLBEoJjNmoAbLrs1ISpZbkkY7hwLCO1Tjm0Rjy6PWo-7SUz7ToHpwLQCdakiQBLQdvthscqfpqct-AawpBCJ+2f6gYudX6Vdh1dQEpufnwaE+850j5utmvZe9ct5zoFuikoeYLSy+hoM72z7Xu1ySnnjmMKuCeTew0ZVvVkSyWDw+wA$9oQoRY+5U5jNwIETENo+qQUy5tojgohzYYuVuZUZUOvDAwfa$cqEx62YGoC3uK+hkjNdNtz+YpeEWfmvh7GTcXdToanrU3ktq4bG2oLV-DahMqjWv8cAOnAXoiptkaMZwaJpqoBnwXcdZq0$vZubqOWoqoentpYo5q7Tk3oDE7LHMrpTcLVL0epoRUqjoAZ3+-8aTRuUAZ6S5pcXC7LORAs4g30UkBu4SnTmfZ-+QeYAzOi4kcg-P2Gho$ojTJcgs5RY9XC7uLhqT5u8nrXIWxTFruGEgSBXLjqTb4gy6zE$ToX8TGq8NaJ1TvLqOTtXgw0Tm3qQ93kPFuidqtFuggbqnAU562neUsDxj+4g6GnELEFhBnoI8meL+rXZOZz+4HJCi15BNq$KycHJCe2FfYXOqCITfU5n7oRubY8Kn-SBnF2toquo4YAooPMvWp+L8IPJAd5FXrgkq69Wof5nAbiXPKycT7UYJIDRupjEcERSnZ-nT+pTyc-5ui7r2duTWhyERuww2Xu+ZouiGFSfPo7V+hATWb1hDLW3POSdH8aPwOm5MMoQALRh8S2OEUwabqAUHjPkNr2XSy$+tgmkfLmb2DjUBtkinBjmbhTrDG4QZhwodY6ExEfZtvttEXbL+uVdKmuNAa-XQ+PfGeoDJ8n$vU3N$QUWVbPtv2$DcEt7gDZFewbH+RqM9dDrcEHSD3bmy7L1bfCT7oGmE07DwVoCZXYG7e59BY9QN2Sd+Pm6duF6KjSboGkkOn81haZm2Sv-Yh7MorWoObSM$AtAayZse70cuJ9ZUByoVL$oPO0oWRcSjLuEhaGkOoOc8+5GSr8zLZS78Fx2GLTZnLZcNgfVhfq7yD7KrQ6zJStebL+9UBeJLr8G4vUMgU6xuzJqtFEHenaSMHprCPrhMG8TOMDRoaPnwGOhKKAaLr21wUEjOjQX6O+2nPA0nRWa95YfgHhNYL6KycLE6AZObETpKh7mwUILOPxWxEf+k+5cLGDRuOoku5Zb8G4YDPeEnhw4d13uVbNFzVjkYfVE$T2tBnTDo50Stk3cTREIXBYrUYwJcI9hxz81dgH5THMuKcbd52q0jM6frh7Fq5+Qm4Y9jcL-e8ruptTbitchIXfdegtChjYuT7OCsbwj-o9uMAzPBya9CauKcRnTwBh9I+TYguquBFqm+a5pb1tsnECg0v+C8UiMIVifcEr+GaJAO1mNWDWNKL7hwaMVnnaechMBksqtVIeYK2xQcmXUoD5AZtjUQG0d+md-xMqEhHfxjxpqmCHbSzZUVRuMo648VqsecJPOiqKTbaqfoU2pOkWxOgpwyGP2BPLTIcLefbPhGwOPo6AwCV$bKJcueWx6BCrKtPVcPnVN4u1mbH+XmxMTXrg4VxCa2WO6WyPTyd-JsJIzAX4rYcqmPSVUxqkmB-40EPZVLjIX4Pgdc8mbVNOMpaxCD511qSfvNXRG8h9SYd2BP9WRrTQw-AXSrx2oU+c3rxC12X+rWXIT9frL-bBPQK3co64-PyXGobKjs8hJxfbVbPfEVs8hroH0JWxfEVBWUVjHIhu6yOcULUrjLZm36XEtsLqiYPSVq+pVmx8j96k$JExrWftgurGCnht3yZCrMYqRCnWOa7$JVZuPJCqhnxJEnB8Vf3C6B9+4OdtH9YawCJv+9$J0QnZwCZJMPnm1WJvNnHnWe6Km2iivVLH5Vgqm0P98hfzPWbt7qVyvB+1HCqY7pUay0PWbFLaTb+VTqQYNJ0YkLVxzk77PLJY4gbo6ea27kjNA4gbf+ga278UNq4thw6Je32EUiq4UbA69VISCMipoMhG7R$iXo+VsYK0jrTaANkWNhHJJqGpCnfo$rJCrbNO+eObYqidLNWXDaX1W8hVXzq7B6nXAMC9Jk4$J0GYXIQvWihxn77GkW$JYPf$H5JZG9Xxbu7rGH68Kr$XONP4c4CnoPG1CsND7EWzRb$rNXN6LG9gaqP2oR3JPQu+3jQZJ7T4RQUX67vKbhTdecjpYVUUeUcna411oSq4ZJtRjrunnw49puYUnANYC3wLV0PIP87c4TD+tk4EdYgoUFasNVcOPZkK3gUhhUsfnwCJr42ztbBaJIyk0CjqqifumpnxAQg41hOGTe5TU2uUonooodYf$6uuVSfoo+NdjALQD+YGWEyobM8RTzuh+FEuSPuemC3Uf0L0Sj+zSjd8bT5Nx$SIuXDWk9efoowEA-qhCU7ZAS8jCAHXhuZ1bejY92tgV5v+awJmwYsAhuWN5hGCSBAn9eqHbVAoNt6jEoZ1YooNFoB3ooSYE$NBRo6fexCQUCoaoWwYyHDboZwNvB8YTHk0iP4W$rBO9XjYuoOyDjcB$oZHYoa3cBO9IU5RfCEU$cB$qaowjwBoW$sB5cysE05uofRtYEoBow1VQzT$Nw3A-koqUvyYousa9AyBIHAoZAunXDCdLA+uGWU1rdj-QZrCQo$oqB+uMuMbifU$UFG93CiYA5JyBopo+nSiHKic0ej3xxoCjpyNDZjv6jUUTT5rbfwWEMYOf++Z-1B3eu7srnPK-O+sQSj+YnDb58voAtN2WmWq-LkLp1Jvo2N3TIT93GVmx7nAQWG5g3EWoa7Gsy1SwcoH6oD$kDccAYpY574XUEBDIV$0qUpZet2j0IjEgA16EEYLBEo+po1qwmGjiB0fkohjUjZyjpuspRZbPoTjL0nAfhU1W6bdwLm7sDSwKjkSuevoJYsA8VbfoDZfa4sCoYXMAZ57Ct$ZbVqVEYWAUCj7tkVJWE06D5Sjoo7+dVAS0$0rMg6rcWwv4P+LB$cIjcFr7x-$EBhcVzw0awUgubjooH2L6oo"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-out-s: pZFnZ5beaYrkd0WHidFQ9Q==$bR7s6lAnDjAJmUe0b1iM0A==\r\nset-cookie: cf_clearance=rx.Hxb2CGf7WtUMl1dnaJy2j.h7FzyTjYfJRsS2kRIM-1770300011-1.2.1.1-8MX2dQRTrvKZhSoga9p1rxek.Oz.FqG37AicVuYGIBuDEdjFTK5hT8uru_4CPfSEWtvNtaXeeTLnspF2iZu8tm45VTj04scriP4_f.W0dt4R7C_lniHQPVX6tNymJDOo0ieKXXLnE.m9RCuMIGlM18YospOoRDBSOsO7ZYeTyBiiwyklLbvkEdtwSN9XC.H96rO9o1rvnFQQupgo2vnnePBaAudPbFznkbQ0oBFxgGvcgJvGjkgy_XGJso8uwbd3; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=claim-elsa.xyz; Expires=Fri, 05 Feb 2027 14:00:11 GMT\r\ntiming-allow-origin: https://claim-elsa.xyz\r\ndate: Thu, 05 Feb 2026 14:00:11 GMT\r\ncontent-length: 0\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9c92eebdda6956b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T11:56:19.668403Z","times_seen":17578971,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/cdn-cgi/challenge-platform/h/b/scripts/jsd/d251aa49a8a3/main.js?","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-elsa.xyz/index_2.html#origin=https%3A%2F%2Fapp.heyelsa.ai\u0026nonce=6d1t0wr0lfl","date":"2026-02-05T14:00:11.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-elsa.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 07:47:44 GMT","end":"Sat, 18 Apr 2026 08:46:05 GMT"},"fingerprint":{"sha1":"2E:1B:51:31:16:44:BC:60:26:2A:3F:D2:5E:87:C1:5F:11:94:BB:B2","sha256":"96:FC:09:9C:A2:60:FA:0C:A1:97:35:68:41:D2:C8:CD:DD:A0:28:AE:BD:1C:53:0E:5F:15:91:9C:22:86:76:18"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/d251aa49a8a3/main.js? HTTP/1.1\r\nHost: claim-elsa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=rx.Hxb2CGf7WtUMl1dnaJy2j.h7FzyTjYfJRsS2kRIM-1770300011-1.2.1.1-8MX2dQRTrvKZhSoga9p1rxek.Oz.FqG37AicVuYGIBuDEdjFTK5hT8uru_4CPfSEWtvNtaXeeTLnspF2iZu8tm45VTj04scriP4_f.W0dt4R7C_lniHQPVX6tNymJDOo0ieKXXLnE.m9RCuMIGlM18YospOoRDBSOsO7ZYeTyBiiwyklLbvkEdtwSN9XC.H96rO9o1rvnFQQupgo2vnnePBaAudPbFznkbQ0oBFxgGvcgJvGjkgy_XGJso8uwbd3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ndate: Thu, 05 Feb 2026 14:00:11 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9c92eebe5a7156b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22330,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (22330), with no line terminators","md5":"d8125f01c51c8b380c850e9934ce6e54","sha1":"3b650ce373d3b0e0c8b4f041a32541dd5b0e0219","sha256":"1c10b035433b0850c6b648944fab22e26e7c4cbbe2a13617af3f7ed268ad560e","sha512":"9c9dcea14235b6955e2dbc86948a13691edf6d6f62ae49559ad8816fcb9b5764921c1065eb9555bced15807683a0e923e351513dafa62bd3926795ef33db983e","ssdeep":"384:d7GJi5jcVmPNAHrxdobpmWIbEWaPsGm4UGt8PTiiTX7R:dSg5ArHRbEWaxByhR","tlshash":"6fa2a5ceb8d5747bd33524b3046b34c662af7db57089be04c228f9ad793b3046826d56","first_seen":"2026-02-05T14:00:40.473257Z","last_seen":"2026-02-05T14:34:38.175519Z","times_seen":2,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1377451787:1770298327:j3AjEC2oM_S0egY0E9NpRHGiJs0F_bg4Aaf3ly8VSd0/9c92ee8e582f4e4c/1N29JYPPlx1uG4wpLMek6AOm.c980bf.OQGcR3HHmc8-1770300003-1.2.1.1-7mmaCOaDwmOBSakBu.urcGzLw9JrV4GsDwWuBFsrvW0qolC6nYYV0M7v693FrdeO","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-02-05T14:00:05.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1377451787:1770298327:j3AjEC2oM_S0egY0E9NpRHGiJs0F_bg4Aaf3ly8VSd0/9c92ee8e582f4e4c/1N29JYPPlx1uG4wpLMek6AOm.c980bf.OQGcR3HHmc8-1770300003-1.2.1.1-7mmaCOaDwmOBSakBu.urcGzLw9JrV4GsDwWuBFsrvW0qolC6nYYV0M7v693FrdeO HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\ncf-chl: 1N29JYPPlx1uG4wpLMek6AOm.c980bf.OQGcR3HHmc8-1770300003-1.2.1.1-7mmaCOaDwmOBSakBu.urcGzLw9JrV4GsDwWuBFsrvW0qolC6nYYV0M7v693FrdeO\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 37804\r\nOrigin: https://challenges.cloudflare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37804,"data":"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"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 14:00:05 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: RHmYyG4AgiNeeBsSCQ3IfqPiFOxwgR8W0+L/IdZjjEA=$sGc4+K08qtS7PhMDwnQzuA==\r\ntiming-allow-origin: https://challenges.cloudflare.com\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9c92ee9a5a414e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29992,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (29992), with no line terminators","md5":"3e8c274e4c3f3a97cdb48c496114ac3a","sha1":"add0caab115aef933621b88f4c2c45b67b2a051b","sha256":"2972dec36fcfa51d169cae0db735c719430dd2dd5d26530a9a880e85d6aad95b","sha512":"6889c2923eed8221694aab6442158a8a52968d111bdc61370d045f4d12370172c51071a9e95624ddab656ecdc96172e60f6c845cd5bd1348c02d8458f3482de6","ssdeep":"768:69g6NBiRxUx/DsduP+cnXtwY/zcug9eAMk0yxMSFzNs7GZSV:6qS8c9wY/Qui7M5yxMsZK82","tlshash":"a5d2e16d39283d6581b5c22171bc6e396cacb8950810bc625bce453f0ad6fbfcd68876","first_seen":"2026-02-05T14:00:40.47427Z","last_seen":"2026-02-05T14:00:40.47427Z","times_seen":1,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":54,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/b7a30beb6bb37fc9.css","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-elsa.xyz/","date":"2026-02-05T14:00:10.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-elsa.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 07:47:44 GMT","end":"Sat, 18 Apr 2026 08:46:05 GMT"},"fingerprint":{"sha1":"2E:1B:51:31:16:44:BC:60:26:2A:3F:D2:5E:87:C1:5F:11:94:BB:B2","sha256":"96:FC:09:9C:A2:60:FA:0C:A1:97:35:68:41:D2:C8:CD:DD:A0:28:AE:BD:1C:53:0E:5F:15:91:9C:22:86:76:18"}}},"request":{"raw":"GET /b7a30beb6bb37fc9.css HTTP/1.1\r\nHost: claim-elsa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-elsa.xyz/\r\nCookie: cf_clearance=WjsfHqPtXLvRUx4F22P3ulTm5Qjrohqszlsi_6RZwM8-1770300010-1.2.1.1-bWGNPf.HWbCgQ4NjdxFAdCRjrH32_iZ9PBk.ycl9Sm0h1uF8.pSsIRy4VghQH97s9j2vSBjPZc01geXy7yUzp7_xxpPRNGDzXVd.Uvib2h330yXxEoJ.ZuCXcysi0JgOU3azBmlAafaTV0yyySdZkg48mcJOoL5NzgcG0rPXK.jrU78iShc5q9K638zPucdMUx7EVNlEmaBzCMzfN.bAUsHivl0nQOJXNE8A86ZdQPY\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 14:00:10 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=F%2FTMFS2LS8iBtBNGEP7i44ZZ24Yqy1qpEftVud3yjxQNZ86ED52PGBttlpUUFFvthknDQ8umEIlUxHD1TKcsfVkQ2ANAzzwhZe96r911%2FMvIp%2BHTNFWQwGsOYCVfDiQMeQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9c92eebb5a4456b7-OSL\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 18 Jan 2026 08:34:34 GMT\r\netag: W/\"c271-19bd03de10c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2575\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=2660\u0026min_rtt=847\u0026rtt_var=3160\u0026sent=119\u0026recv=46\u0026lost=0\u0026retrans=0\u0026sent_bytes=110064\u0026recv_bytes=18218\u0026delivery_rate=14533073\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=53393\u0026unsent_bytes=0\u0026cid=6ca2ff481225513c\u0026ts=7744\u0026inflight_dur=92\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":49777,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (39367)","md5":"eea78879c5a8bcad76d1cc3e4be56647","sha1":"a95481acbfc18ae12163792e85ad77f55a3d2de5","sha256":"87cc239b77a6db800af89ca3c9924c8dc20d6c476b38b6c8732244579ca165e0","sha512":"fc379ae785a36e1c29d183611b95cf30fe3c76aafa50ef6235d73bb2d468fb74d524d9d4830351b9105f21d1fa060e8abfe9bda67c79c7ede53b9b3e1e47682a","ssdeep":"768:iDAwHXQN+Si4ZTpP/WHRrMgxsyMq3v/r1:idHCZT9/uxsQfh","tlshash":"b523d61d6a36993eaf3380f591c86b99720cb491ee7519a5b1c212125bc31bf2ff631c","first_seen":"2026-02-05T13:17:46.841057Z","last_seen":"2026-02-05T14:00:40.475145Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/elsa_black_circle_logo.svg","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-elsa.xyz/","date":"2026-02-05T14:00:11.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-elsa.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 07:47:44 GMT","end":"Sat, 18 Apr 2026 08:46:05 GMT"},"fingerprint":{"sha1":"2E:1B:51:31:16:44:BC:60:26:2A:3F:D2:5E:87:C1:5F:11:94:BB:B2","sha256":"96:FC:09:9C:A2:60:FA:0C:A1:97:35:68:41:D2:C8:CD:DD:A0:28:AE:BD:1C:53:0E:5F:15:91:9C:22:86:76:18"}}},"request":{"raw":"GET /elsa_black_circle_logo.svg HTTP/1.1\r\nHost: claim-elsa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-elsa.xyz/\r\nCookie: cf_clearance=WjsfHqPtXLvRUx4F22P3ulTm5Qjrohqszlsi_6RZwM8-1770300010-1.2.1.1-bWGNPf.HWbCgQ4NjdxFAdCRjrH32_iZ9PBk.ycl9Sm0h1uF8.pSsIRy4VghQH97s9j2vSBjPZc01geXy7yUzp7_xxpPRNGDzXVd.Uvib2h330yXxEoJ.ZuCXcysi0JgOU3azBmlAafaTV0yyySdZkg48mcJOoL5NzgcG0rPXK.jrU78iShc5q9K638zPucdMUx7EVNlEmaBzCMzfN.bAUsHivl0nQOJXNE8A86ZdQPY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 14:00:11 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=pq7IAvUTrQeMtO86EGdB2A0o57cb63XARpBtkbqWdfgRjkQyAIPTSgEZZmx2GW4OGWb2EXrgZHm3qrga9ZCtKLxckIm45O1%2F79nbAznB8kQybUE%2F3NGK4vAa3Z%2Fi4SbGDA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 18 Jan 2026 08:34:34 GMT\r\netag: W/\"1f8f-19bd03de101\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 2575\r\ncf-cache-status: HIT\r\ncf-ray: 9c92eebcca5956b7-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1468\u0026min_rtt=823\u0026rtt_var=671\u0026sent=275\u0026recv=62\u0026lost=0\u0026retrans=0\u0026sent_bytes=276824\u0026recv_bytes=21443\u0026delivery_rate=40350807\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=120257\u0026unsent_bytes=0\u0026cid=6ca2ff481225513c\u0026ts=7976\u0026inflight_dur=107\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":8079,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"44728965b8c110e933b789f0da345d2d","sha1":"5f216da7d8c5c0bf2c369dca79639db231d2ded5","sha256":"8c7f19a9366f5285fe5fee4aefe9a98d9ee91fb3f5ef4cd2d1c9a6742aba7ceb","sha512":"4647f37e7bb8e5c4e07c4cbf77c49c5be8372759f70411e6fd4452d40d728e085475149e99a20266f6020f0026d5209b7ab0c8e8f63a59e0e555bc01fa79083b","ssdeep":"192:vaoPsBKXi/MTJds3e4FiCLUBortdRNxLvtpdebhHaEu:vLnXQsuUWjvkbw","tlshash":"adf1939023fed3f8f004b2fe562ad4a57e4630dde269c664c7967c58f98316c2d849e0","first_seen":"2025-06-07T22:25:37.576966Z","last_seen":"2026-02-05T23:33:28.878604Z","times_seen":6,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/index-Wrr9eaTD.css","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-elsa.xyz/index_1.html#origin=https%3A%2F%2Fapp.heyelsa.ai\u0026nonce=ch8gljgswio","date":"2026-02-05T14:00:11.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-elsa.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 07:47:44 GMT","end":"Sat, 18 Apr 2026 08:46:05 GMT"},"fingerprint":{"sha1":"2E:1B:51:31:16:44:BC:60:26:2A:3F:D2:5E:87:C1:5F:11:94:BB:B2","sha256":"96:FC:09:9C:A2:60:FA:0C:A1:97:35:68:41:D2:C8:CD:DD:A0:28:AE:BD:1C:53:0E:5F:15:91:9C:22:86:76:18"}}},"request":{"raw":"GET /index-Wrr9eaTD.css HTTP/1.1\r\nHost: claim-elsa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-elsa.xyz/index_1.html\r\nCookie: cf_clearance=WjsfHqPtXLvRUx4F22P3ulTm5Qjrohqszlsi_6RZwM8-1770300010-1.2.1.1-bWGNPf.HWbCgQ4NjdxFAdCRjrH32_iZ9PBk.ycl9Sm0h1uF8.pSsIRy4VghQH97s9j2vSBjPZc01geXy7yUzp7_xxpPRNGDzXVd.Uvib2h330yXxEoJ.ZuCXcysi0JgOU3azBmlAafaTV0yyySdZkg48mcJOoL5NzgcG0rPXK.jrU78iShc5q9K638zPucdMUx7EVNlEmaBzCMzfN.bAUsHivl0nQOJXNE8A86ZdQPY\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 14:00:11 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=zIpLz6USXjLzRiKp8HyKyxS3Zt%2BuiK8ZhCh%2FZMBny4fsyr7jBN3auO1nyYQ%2Flg87n6l0Ey4ppyHyTL3vFFd7fYA0aJTWWEtHR3oMmHN3QhNFaL1adSleZK%2BSpBqVorZkLQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9c92eebd0a5d56b7-OSL\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 18 Jan 2026 08:34:34 GMT\r\netag: W/\"b2c3-19bd03de112\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2574\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1263\u0026min_rtt=823\u0026rtt_var=298\u0026sent=316\u0026recv=76\u0026lost=0\u0026retrans=0\u0026sent_bytes=309355\u0026recv_bytes=26042\u0026delivery_rate=40350807\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=120257\u0026unsent_bytes=0\u0026cid=6ca2ff481225513c\u0026ts=8029\u0026inflight_dur=126\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45763,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (45762)","md5":"fed4cbeda1859c09c45e71fea1a8c4b5","sha1":"1b82f8543de2788020e349380eae5c5746bda1b7","sha256":"d2767c7b6c3e01997aeed9400b3cdc08345153a47bb4be34e0d0246f906dd729","sha512":"8d5196424d4936c106ab33406385a0e150e694bb159c094d0919c07e9bcc1dd1044fc09f7ea21451225bbdbc64b021e3358a33f49d8894f95f8e0d6284c02c70","ssdeep":"768:2w22MQY3O/Tggk+FUZNow1LGNgAHNjzb1ZFTjQ+w38oMkLboznU6vT:2w227Y3gTggk+FRw1LGNgAHNjzb1ZFT5","tlshash":"942345beb750513eac33cc9d929caebe391e7c83da2b57faf956e15015c66f10962000","first_seen":"2026-02-05T13:17:46.833071Z","last_seen":"2026-02-05T14:00:40.476436Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/RedirectLoader-CWM7mZoP.css","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-elsa.xyz/index_1.html#origin=https%3A%2F%2Fapp.heyelsa.ai\u0026nonce=ch8gljgswio","date":"2026-02-05T14:00:11.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-elsa.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 07:47:44 GMT","end":"Sat, 18 Apr 2026 08:46:05 GMT"},"fingerprint":{"sha1":"2E:1B:51:31:16:44:BC:60:26:2A:3F:D2:5E:87:C1:5F:11:94:BB:B2","sha256":"96:FC:09:9C:A2:60:FA:0C:A1:97:35:68:41:D2:C8:CD:DD:A0:28:AE:BD:1C:53:0E:5F:15:91:9C:22:86:76:18"}}},"request":{"raw":"GET /RedirectLoader-CWM7mZoP.css HTTP/1.1\r\nHost: claim-elsa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-elsa.xyz/index_1.html\r\nCookie: cf_clearance=WjsfHqPtXLvRUx4F22P3ulTm5Qjrohqszlsi_6RZwM8-1770300010-1.2.1.1-bWGNPf.HWbCgQ4NjdxFAdCRjrH32_iZ9PBk.ycl9Sm0h1uF8.pSsIRy4VghQH97s9j2vSBjPZc01geXy7yUzp7_xxpPRNGDzXVd.Uvib2h330yXxEoJ.ZuCXcysi0JgOU3azBmlAafaTV0yyySdZkg48mcJOoL5NzgcG0rPXK.jrU78iShc5q9K638zPucdMUx7EVNlEmaBzCMzfN.bAUsHivl0nQOJXNE8A86ZdQPY\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 14:00:11 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2BjLXAW2zeBNjzYoI%2BjZADmXpF94MridppJB%2BOsayFBBQ6qNFL1VnmQETbL5Xewwp2PN2ncKpk9RW7Hh3gDtIa2xgQZ27kDtQzMZre5w9KBPjOtsUgb%2Bz60PCS8OsdqmOkg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9c92eebd1a6156b7-OSL\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 18 Jan 2026 08:34:34 GMT\r\netag: W/\"4f7-19bd03de114\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2575\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1327\u0026min_rtt=823\u0026rtt_var=501\u0026sent=301\u0026recv=73\u0026lost=0\u0026retrans=0\u0026sent_bytes=293216\u0026recv_bytes=25909\u0026delivery_rate=40350807\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=120257\u0026unsent_bytes=0\u0026cid=6ca2ff481225513c\u0026ts=8022\u0026inflight_dur=123\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1271,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1270)","md5":"199b8c7f865871581c0acef6d46c2405","sha1":"c7803bdef681efa117987690475268b47f012a4f","sha256":"f5a9d4245fffddff6dcdaedc81818ed1d5d6dd3bc9fee5bac8443df9baa5e232","sha512":"5ed5ccbafedd28baed868062d6823c98fffa083d83e290e2ee3f3e38aa5a7d044c2ca4be6619e39790bbb4491e8cccaad3dc8f646028c74bdde47ccaeb11431a","ssdeep":"","tlshash":"772150248198e13efc22fad0e38c159c142cfc5b8a32692a5524e8ee5ed06f8127d374","first_seen":"2025-05-31T12:15:21.793288Z","last_seen":"2026-06-12T15:40:45.837876Z","times_seen":23,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/Modal-DYQIx-HI-1.css","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-elsa.xyz/index_2.html#origin=https%3A%2F%2Fapp.heyelsa.ai\u0026nonce=6d1t0wr0lfl","date":"2026-02-05T14:00:11.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-elsa.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 07:47:44 GMT","end":"Sat, 18 Apr 2026 08:46:05 GMT"},"fingerprint":{"sha1":"2E:1B:51:31:16:44:BC:60:26:2A:3F:D2:5E:87:C1:5F:11:94:BB:B2","sha256":"96:FC:09:9C:A2:60:FA:0C:A1:97:35:68:41:D2:C8:CD:DD:A0:28:AE:BD:1C:53:0E:5F:15:91:9C:22:86:76:18"}}},"request":{"raw":"GET /Modal-DYQIx-HI-1.css HTTP/1.1\r\nHost: claim-elsa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-elsa.xyz/index_2.html\r\nCookie: cf_clearance=WjsfHqPtXLvRUx4F22P3ulTm5Qjrohqszlsi_6RZwM8-1770300010-1.2.1.1-bWGNPf.HWbCgQ4NjdxFAdCRjrH32_iZ9PBk.ycl9Sm0h1uF8.pSsIRy4VghQH97s9j2vSBjPZc01geXy7yUzp7_xxpPRNGDzXVd.Uvib2h330yXxEoJ.ZuCXcysi0JgOU3azBmlAafaTV0yyySdZkg48mcJOoL5NzgcG0rPXK.jrU78iShc5q9K638zPucdMUx7EVNlEmaBzCMzfN.bAUsHivl0nQOJXNE8A86ZdQPY\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 14:00:11 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=CJ37PWAtpNREbOUwAaf10WXRxpZLRfPe%2BK4EAGsPprwuJxsPUzhaQmtRLx1Xzv%2B7N0O5H71j4yU%2FrSZaCc8kDYxgS8gbftWGMRukOMyP3Zf5lM5XKGVWDo9b%2Bbc4oOCtMQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9c92eebd2a6456b7-OSL\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 18 Jan 2026 08:34:34 GMT\r\netag: W/\"7aa-19bd03de10a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2574\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1232\u0026min_rtt=823\u0026rtt_var=285\u0026sent=327\u0026recv=77\u0026lost=0\u0026retrans=0\u0026sent_bytes=321363\u0026recv_bytes=26086\u0026delivery_rate=40350807\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=120257\u0026ss_exit_bw=40350807\u0026ss_exit_reason=2\u0026cwnd=70184\u0026unsent_bytes=0\u0026cid=6ca2ff481225513c\u0026ts=8037\u0026inflight_dur=128\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1962,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1961)","md5":"58c0f1424a1d38247b7afd2537157275","sha1":"e81aa13f0f7d862961cc9b91cafc3341e16ff07f","sha256":"1404a7f9adced7fd80256b65c8463e0aba4c5fd510341f97c4d226bdbecc0faf","sha512":"0b6866e8ef062c900582967183b7f6ccbb1b39db8eab5b1c8c0f653e2104b349a62f39c07a5c84d44649825cb3ce76f5e5f4ab45948bc8c9e411163f5df46803","ssdeep":"","tlshash":"72416795796c0a35cfa6a193e6c4871db46cb9b7eb0a33f80ec6400d0fcf697089019c","first_seen":"2025-11-28T06:08:24.132422Z","last_seen":"2026-06-12T15:40:45.753179Z","times_seen":19,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/cdn-cgi/challenge-platform/h/b/scripts/jsd/d251aa49a8a3/main.js?","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-elsa.xyz/index_1.html#origin=https%3A%2F%2Fapp.heyelsa.ai\u0026nonce=ch8gljgswio","date":"2026-02-05T14:00:11.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-elsa.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 07:47:44 GMT","end":"Sat, 18 Apr 2026 08:46:05 GMT"},"fingerprint":{"sha1":"2E:1B:51:31:16:44:BC:60:26:2A:3F:D2:5E:87:C1:5F:11:94:BB:B2","sha256":"96:FC:09:9C:A2:60:FA:0C:A1:97:35:68:41:D2:C8:CD:DD:A0:28:AE:BD:1C:53:0E:5F:15:91:9C:22:86:76:18"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/d251aa49a8a3/main.js? HTTP/1.1\r\nHost: claim-elsa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=rx.Hxb2CGf7WtUMl1dnaJy2j.h7FzyTjYfJRsS2kRIM-1770300011-1.2.1.1-8MX2dQRTrvKZhSoga9p1rxek.Oz.FqG37AicVuYGIBuDEdjFTK5hT8uru_4CPfSEWtvNtaXeeTLnspF2iZu8tm45VTj04scriP4_f.W0dt4R7C_lniHQPVX6tNymJDOo0ieKXXLnE.m9RCuMIGlM18YospOoRDBSOsO7ZYeTyBiiwyklLbvkEdtwSN9XC.H96rO9o1rvnFQQupgo2vnnePBaAudPbFznkbQ0oBFxgGvcgJvGjkgy_XGJso8uwbd3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ndate: Thu, 05 Feb 2026 14:00:11 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9c92eebe6a7256b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20747,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (20747), with no line terminators","md5":"bc6ee551f37be59bf2d2b6cfe01e364e","sha1":"996b066a18eb8f986f296afe2cdc3792704aacf5","sha256":"bf857f75f5f2c82f5df3ef3f1d90f3add847ab7f85f29bdfdae0875e108db95b","sha512":"68b1f196af0f91710cb78fef1541d2588d2c415a6add0965e2c373d90747b397e868d751407c46121da2cefe8b708ed3d3dd411cd21d10488ca87ca9262df39d","ssdeep":"384:414i+yBU4Iss6VsFbBC4bO3s7iErL6SV2X/j+rhmAexCLP76Gl0Lo6e4O:PYc6mFbvYkxIj+rhmDQAw","tlshash":"7992a48f38cab537d77554b3002b34da61eb7cea30549e148229f8fc687a74968a7d84","first_seen":"2026-02-05T13:52:58.124254Z","last_seen":"2026-02-05T14:00:40.478235Z","times_seen":2,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/cdn-cgi/challenge-platform/h/b/jsd/oneshot/d251aa49a8a3/0.06437466857555997:1770298327:TJRd2fYeK_8rG-MKdrV5YhvoLSZS8RAof-nCgDb83go/9c92eebc5a5556b7","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://claim-elsa.xyz/index_2.html#origin=https%3A%2F%2Fapp.heyelsa.ai\u0026nonce=6d1t0wr0lfl","date":"2026-02-05T14:00:11.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-elsa.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 07:47:44 GMT","end":"Sat, 18 Apr 2026 08:46:05 GMT"},"fingerprint":{"sha1":"2E:1B:51:31:16:44:BC:60:26:2A:3F:D2:5E:87:C1:5F:11:94:BB:B2","sha256":"96:FC:09:9C:A2:60:FA:0C:A1:97:35:68:41:D2:C8:CD:DD:A0:28:AE:BD:1C:53:0E:5F:15:91:9C:22:86:76:18"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/oneshot/d251aa49a8a3/0.06437466857555997:1770298327:TJRd2fYeK_8rG-MKdrV5YhvoLSZS8RAof-nCgDb83go/9c92eebc5a5556b7 HTTP/1.1\r\nHost: claim-elsa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12230\r\nOrigin: https://claim-elsa.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-elsa.xyz/index_2.html\r\nCookie: cf_clearance=rx.Hxb2CGf7WtUMl1dnaJy2j.h7FzyTjYfJRsS2kRIM-1770300011-1.2.1.1-8MX2dQRTrvKZhSoga9p1rxek.Oz.FqG37AicVuYGIBuDEdjFTK5hT8uru_4CPfSEWtvNtaXeeTLnspF2iZu8tm45VTj04scriP4_f.W0dt4R7C_lniHQPVX6tNymJDOo0ieKXXLnE.m9RCuMIGlM18YospOoRDBSOsO7ZYeTyBiiwyklLbvkEdtwSN9XC.H96rO9o1rvnFQQupgo2vnnePBaAudPbFznkbQ0oBFxgGvcgJvGjkgy_XGJso8uwbd3\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12230,"data":"63ujbmUTEpZqqoDZpZHYYatoaAUDETfYUZouA5qUHpkLRDjcAaqYrmo5okXjZ60qo2j+pqoDxRstCBqYEg4TqYoeLLomjUr5wuDU2pbGDtcZUndAUxQnf6aQMFoont1H8jtDUfFcC2DoanDX9nbIoduKdpugu+3I-jEWYTYtEv+vY0+7Y0fopnuKCB3OZooVOc7a4QVU1qL$kPjor9YoHjEkN9DoXiLprkor5Py3i-jG085girjoqqYo5j67pFpbnAAoBw4bOMkm9oohOEMjomoo9G0YemUhYjU91hSEtOAbYrjokqvj1cvaSk8o$T8UhoEm4EwQvzDooAGYaZwjgZT9ZM9Eo5hGoZ$ebEoU+ADZ6jkA1EohfDRw3AOt8JrLJrphD1wwsJBcwq25j9aGTwwXODoUprXUow+kVLi9zowuLFG3A1wJUoqeL$e39npNnq4G-HnEsVDjZmYNokZ+eyOFG7IhSOfob+W3YQSghTBxg8JC-WPHBkgkVPmr-QaT2CYo7phOHStE2aqxHwooPmruTMEv7Uq03u6ebt3hPZ9QoZMzs0pKHmT1D+8ZGsXgZ9j2QQ00BxNvkIv5VIWoUA9qh2QPsxCU0Lt4Gt1z3J1DKLBKzoQmrZ5usxhq1DYtS$9Z6bsOiYPiyfshELcvWdXgj6zjC0PYB5nWI3N6fOixx+Z3ZI6hnVsGIuZYcCiOdNc6bW9agJ2jU7fE0mqNSpekoFfIw35VacVs9zqX5ameVoHVyvH1ERkv9zTScfciO8bj7Z3wfoZ90+EomZEmSYIZ0S7q05jjAJcJIPUjcD2m9c37REi4$jmBYOtCZDt0SNmrXmofAtPao+vaZAOUTgTCUz67vjPZfv0KcDpkmcYZoKSAIU6wwdt6cApQqdjN7UcYotjbpYjEouhkReu5Uj67Y0jjKqSako37YqYA0v8+vjtaoyk-wuftF5MWCMom8nhLfyvjdufCZbKUAULf1ZwwDbY7gLZHnZ+qJKPj3AESAJvEpx1CUQxY0rPLz7Ih6KQDdxLXQk6CZNYkUQwSY4ZA9YvPmkPMPYt6p2r8nSmU8r-0rDTuP7BxiHGU7DGunDGZqwfi2qgrcApwfTLcgsjhLaOPkM+Kj4raYczZYo0NYjPjczktY1EFZDhY7EmEADCTMKp6AA0kpfzD3AYxZ3fpSAcXOYAn83pYpSahu0oi6jvpnRKF2nOQxpZgAOZ3ao3uKP2vmnZNsPqZNNZFCoNYnzufnz3GIEk2Ep9gSn1vm-jZ2KbbYmpWJOjWsjvjwOZq2dZ3DUSW0uZ+psRYREwqVTaocXPS3DZ3dqwH0wfTuhaDgeMoTGGhUEpPujB-n$cDgdYVxLCt4o3gyP5VVTouptjoThPyPjqJnb34qpwDUbdLDehFWYXTjhPHG$wDjc$cEEA9XoipIuYCE$FjZZKhyF6Dch9m$cp90d8yRTrFJDsx3AuvQxjjpKcDcji5dPgXwmmXJx9c$J7kpVJIhd+XbhGEvSHVisf-GpBko+h1S-vKy$Jf+HyuvtyzmbIdzDVrfWF6K-2o5F8ICUuAh+Ipo$IvjAahZohCvzFsyRy7sGQ5TktwwOxThJgUaEYocxzuo1UuEK+Dc2moY3dj+jyAq6JSjK7e$MvmpHT4ooxQjYteSaa$buSf+oZMDUfTYSj0E0oLdCV1EVnDQZKU$q2cXsBLO94f8YtgBjUEDeuaNboVTN5w2wqn-oAjDaFopTuPCvtoVz7ydBpAHjcoPH9bMg3gs4jCp3t9uYb0oQMYKk3AV1p2UncHJ3eLFmRhAmpu3Lfq7TmcEBrjkwzuuGDEmQwjnmBwnA0uQPcVVsLeOa$ZuUjeQnnj5XQn3jSkX5BUDkW8f2+5WMXt+neuIQktEoCaoYI4qVn75k6jY$3NhExHud3VwMpq375KZw9SDU4EoAS1OkSzQTjwnTrG5kIUMEshphLkeZoUZ$kTrH8C2nqE55pwzPcyLRS7Ph9P8f9oTjSzLTqrS1o5jRSkkqXpHpet-So5E+qEShUut$6ruYHAPfPYVYoWkwbuchIQMvSkmqzzNFj2faw8NOYh62ER1dpwTr$bAAmnawcJk9IQ5oa1vCYetNoQkOU9tz1eKT0EpxSm2kMvj3vgxt5PYY6xmE5H50L9NeYoHroSbhpGooJZMNL9DPCeYLKAjVtJ0XUk4E+021GxzEjwJkyXDG1QMjEigWJau5Z6PQchMSKhpYN8X4OOqnQBEfdj+3eud+T6VMXO$CzW$$ZsHLr4StBES2gWqAPOoaOzNmchAacLoLhztQdu$FBt1FUs-TL6DQonky4DTKAnMYLOCOYe0GDoyWmS+LmUMnpGGDU6+QuYpjGo17JHGbokJhDt+ZTTL3LWQCJpXEhAYohaPpi+UCeh1vsuT92gYEAHpeZ062vP8PiXnv1HaCS+tFoexYrUmob3NvHvjww5q7jWT9WSrVPcfY0bTjqcqtzFIKV6etN66bawkmoH1JtUTKA5w2oPNRPHkjjq3M8dTjETO+vkV0yM84Fx76kME+ecYEMPWqZ8Jqeokp4rdMEwdBjDszh0oCauZ+vOs0KE8rOC7po779NnxZBAytijoLRVuK0EV3J4eBbD3R+ewWoLPuouVYX4kcnoLmfQTu0iKNwCX-4LxVJEo+iY1GhatgduBDbKoKJYXWHptkTp5QTZ2dZjA4toTXn++emz3mT5Tm2HM+r9m9aRiAV9rQTAUHAEwQBobPLwjpJsLNJWDYBJD7PHsijZSXuDhS00Co3Lu9Y7+oYsZk$zBTbKd9jhC71vEEgmV0t++T7iJpWPRv00T40vQ6r0ZArDrAuZoYhxwxsE3MqnhNeYocihwAduJ2prE+VqYZxywH0Lg-LXnIMK7Cx6huL7jc1qJTLBJuD3o2vEXZD83PbAyKn$-Yz2QW9BK$pEbqcvrL6Yy2owwA5QOqFmmUI5fhJh21ZhonyMANcYZ0ThvwKRVkhPG-NQHM$Pqf3QTYw+2hAUtXcYAgRpM6DUo8hZEoA8o6KbGcC9k25bGoReUgP8O45ren1P6VQ0J5p1GoFxtnuvWXjUGI2pRepSRazLpOmcv$Ag4Tr8fDGz8otkUnxipw7FZJxk1mr2bhhwRzNP4zwIrxGohtn0SMMzf9$KV8dowd3JVhdacIV2kp4xM2X+wJIHQuYePhHX7StazvJnSaoAPvU3NVaXnJdWCOgjDGbq-nD96n2B1Xn$wfwIGsA1k6aEkAfCeM6ziTJO9dENikZ-FZex$fYm9YUMBnpNqkQvMziEEVum09jQE3uVTeJesAQ6OIaO9IQmeyguNJ7DbXOq$UE5RXTVefWo48viYT3G--YkEgjxTrGNk-89Dfu7+YCo5HPA0-Sn17bHB1PcoJ8yCULKyNvn0fYK13DpoxjuYaRxxP$E64oDLjNvxtoKRTtw-jaX1e9ILCbk4KnmkIxgzum4b$peOj6K8kupnhOo2wLgnqP$Y9bkvj2w2$Qo0qGVihbDGCKeTIRayhAgOka3nez4BLKppjNofuDejLE$EaNCyYGCvT0A2ACacaOUNksCRuDaYUBnA4yCYzMh+hpLfAYzNT5mRYWq7C3KYaRYbAZIrLQzImfEnUjIzu0j0o5cfWVgbhkuLVpV2EMoVhfm29QnJ9KAIoGqDYHjfuwgHpOg4VKhqjdo8pjL5Uf$pecaeUFULq3UJg6U7oTUTemmA4wIctQYWX3AcLrCgtRzN$aghCMpEu5gzmDnzcpkoLOqLg9DMW1wSfLgnuoXRoXLBePIGp6Iecf$HWcn7kKcpV8$tmbpTuL9qKAg+knI095tO4fgkUohOtNUmKIoKtzuKeIkpDLvKgfgrvR4K7NV0whYGpRo9ou7$Xmv$eIabD5tHt8WituobELfEmna3V+uPvA9PtHna32A6apLHE1VbAh437dK49ZqQq5obI1gwW5I9XJhmzQm3h3ALIMepIz43uZozCGpaCugpkqfrh67f$yYEjscCUeCxoVCRgQwk$s9V7QYICwSaajWMTiEOjsIenTTh9jC3urqY4BeKAUjpkohmUDIeLjg8SdXREDuRCBez$9YAfi78I9joSL4p45toLYLY4AgpIbptAsoqjcpR4Ag4V5wrLMp774VsXLu77IkSghKoNk4Uk$K3juUHwDULqdc+LjNuNIoNoNKR7-c3u7vfj3foh8EdCFo8E5E1p2CwNBLIvXjiAAqoCOeofVTRosobAbksEoh-h43cntU1D7WDenaaIRoCIQwA43VnSySpk3f-joULujgHEc34L9o3cUjjzojbESAE4jMq48qNXvgOoJe-AyTMpOgIk8EsAOoceb7AzQNGSn43MD7-XhMKNna1YRoxo9MP4HhutoNW$GT7aiAnLU42A74FAwgbpjpFNDo9Tkj6K8MV$st3XzINSDnwOQnLgkVRoXgQhyYVELuW4wMWXnYGcBInn1MKWhSES9Y8AcLnLsOwhia4theKvaXrCgc1ghM8gPaomQX1AA4hhAj8M3Nj+$ULuu7fUquJC9jeSOEiA9oHIzWNYkUBU9ao+WvCgAUj++u2o$32w2vo+ZIQIx+nLivbM3SPT+MDc$K6MLcEOSfvp9jN$3VUzMj0wSfeeREStxv+q6znzWOn+6gz+c74XWe6KZV2cg7yYTGPoHogjINhXZSqKAcDzZpDSft4qQzDIRLDn-vhGpAGTDtiLwtgqGTzOUhuo3f+oypJGjUCV0oQITGjcNkp7xoTOaSNkvIb9$pnXOIrTKKsGkU-vhMampuWToe77OC-LWMwX+UhXKMBeYaTuxn1oZnCg+LEc1YsAEAvjGgQeIhbV0IijLtdMpcRnvGZzohqCRW8cKK+$JPbeGmHn-I-GgXcY6a4oqgzE$GzuFgzSkmvjU7yt3uMKcLzWOtakBeiGWW6NfW9DUudjRosakjhUVWLqA4jx5W3fEAVT4apLj7pk9YMoV+AcmOjW9quY3KZVrqzMA9VCjS79Co4Pz4e$7SrKHA9YnkkL9o1vaWA4$YxYZo5+kL2PghuLQCpYd+DSQYxIVNLPhXzGk7o+Ik8Mja$P5Si+QYXwDYkSsGGTAI0qaPs6mz-oiC86Wq9X7W7h-vH6XzVzAP8OSxfuWqu7A3IIgjp63VDAReTP4kZCzNALyvNkqfUYXVQ+3EuTNk76fG2SHnQPIaXpQX-WuLD6FneYHnfjTLQ42WQ9Io7I$pHG59VxnvQr5t4MIrMEdAuXigDOjNGxGT3VChWq8+7+3VwPa7O9LgU4qj9jXOG6Y7DIoUnePoAjDApA8x9Y+wexyxSfveZ$SfOS+T3KUN3+Be9Y$vZ+6vXpQoz7hX7O4XBeYAYauaIoYtMM9IfMD7Ojn709ZV0TbALxHEZwHqOOExMe0V4hQSDv-vA4ik1T-e9v9YWWja+$OtX6z946p49SK+eCZCDYpPxo2aUAc9wMnq9+7Nb$DmYK-+EP6t$phPuW5TpViIcjpV0rJkNP0wUpjvMEmzkNOgGgVKo9$MYgKP+YZz$9Un34-rpYJfRf1SKSuhkuTUGowWxT2z9j6KpvheFgXvUtbNoUHp7rRAtvJNOWXS7+jNJCpu0NV4zWZsP9neZCBggh9xfMohrBhpKAyTFxSx6Z1wqfEBN+LgnSkj+EjLyG3fWTaXdA9LBT+$HATXeLJI3KN7+$svbTygdv4SMpRrLtvjehn0IqGomt2PZCqOxop6-hz4oVeqVSCLTco+VgzSuS3KRYRYHAmeWqOgZB9peEwpXjoQE9r9j+3u+SwuBe4V5xqj3h2zbk77YaUuzknDe0vsuouBZw1gq0fjVTbpiX6tpYtAzat45t00sAkujVxrAS5m3K8M87dYYODZc6arMEIkIB66uMB6t60626mXNBIYgjUjKe+G1cfMu0pEPUOPfx142IRWs$$g8W5W9MoGPMYGncVTDKA4EckctmSC4VY6s$77gMxOz4D2IjtjUG9N1c4LsoTSZ+Ik+uIxo+NLkKOoMzuA8tnsXpWqOtzE-XOtgBq0UM9Y-aI9X$5M4vbpOg5B+$htRwItxjSTQMBUMo0U-AeWgEEjDqFTjPaLieb03M5NvB+ec3Hw22xeRjYco+ot2uMsFn5ottor-X2BpkiI6+7+2sShCa4qdC3AV0-um7fGYCHpa7XCIZL0P2kj62w2DOe6ojwBOj-GT+56t6AriCT+RG+$HBdBMphbA4ivghZ+EcnDjbrCvjKZNoXsKTtNrNSNQ+xP1bBBnadbZ+ZVGZNrFGX$mTnT2QX$DmsgyLgjA4ZVSBxauICJNXcJfrtaVGGBF4sG+VRYA4VVqXKXYju2XP0w$Lk$6MBQCgHpyCvVwUgNb6IgDvmzQAbAbUu0NYyw0Na9vNVBpkNQQYAP+98GiB3MNvvBz0OBJ6SNrOQY7az4hN1a0$bvA2QWmWC2xM92oj+uK9IX0M3MzGYZI6r8HUsgr7JryVtCuKMp8sUVGzYjS0Oj1rEUM6YjuYe9BemNGo2g-GV93uJWGcyL0o$9ywxZ5wZA1PCaiASrCsTu$0c8bA5XDBBSSBBbXrOQ0oZjdMx8BX-YDYHnquf6iWyjkrf8ghJtLQQGBIcjr2CZcZ8qgZ6KYeJh1CEML9MjTAOjFxOg8ZghgB0ZcRUVFQke16kziCDrq5MBOTfOQr3VH6ojEMGccnFXEWEm-n97u4FBordGxoQXS8mt3fK9-ncStVrXPsmJB2j+SMAt-GNIZW98ERKeJWSjOghhIoDm2TqAv0-UshSNsNF7taJhu0WX91DTiOEMbD4aJYnCGNqu77QbB0QEIRPRC5aK7PNkL2H72qxrH0QQePUGAVfVWQW0TXNUz5N0MemB6Nzr4caXKei6T8-+G+84+EFAuIqj9sHQpYZh5VhpeYPOx4z4IGEefbp2uxJfeQOYMj2H6SMEcNZztO2Ik+u4A3iJT+UcvcfJcs05V+TNxOyh4xLXpX6Wc8u2+uzMmjcIS1DPkLLgL2ohFbJ9rRzWvpUAHpnbG+$B1AEkvBoBjVwPCemGo+oPm1jbd4o$iWIQhUHAgTpYiXtnfGz03GN$8MvjFZGqkc-n$zNJAv43BPpVNUjbZ+GruYj0uLd07eAjjgxRh8gveY6RBsqh0q4ViJo4ZXh+OQxtoJamQANR9drkAMatGkvBJefjxZW6nVGb$ub5y55T7dM1MdryfEtaPJbA0ErBXjfGTu0nan3i+gCB3ypYsxXjgt5eRNu+x09IA3SBmytcNO-emhnQgWCtLuKeUg1wTaezwJiu$zokquosTgR+bDAfQ1PPgbMxhYA4-MzqmNTjhNJcT96KqfdjXjrp-n9sQ5v8a1H4C1YLPPKmI1UXC$2iOo5tj$HLK0m0cLX0FAtRmPbAyCYOORomW$GOQM-v8MQJOg2-GsIeLuSLRQLQe$wQA8uXJQ3KFkjXX$C+jd+LxUp4-v762-y-riuoW6-YhJ11RIy11kO+f$zHNtqf5t3FfWiNVUX79Yykid0bmss676hM-aKinhqy+k61$2Xj0vutSPpkmrRnxUpNuYk-1AIW+vs5BeWFjStwYaPweOjgUm0acbIU9jaso0n+UhXHwsw3Uch5odZW$Ucjm1Z4b02T8AnykKSc1UD1xtaUK4uCQJjutpUHPcww6hSe+4m2BpPnro3mNpjAM1UeV8bYGERLJ3QsjKCAS3hYZtuPYrjTVC0SLeRt03Q9CABhbJAItaorjIpUBnXX3D63qoCAuDbI0oUH+2o+kCYMqawZiYrWXpkZ5uhqOYACVqvSYH+wnaMotncnWp1uEyS5DBUAKvvcDZwY$v8u4owt9bvLa8U2DNAWwnjvcOotzfikoYcxwfV$UuWSuwuYe0EaXoutn6Qw6zam5EstTTYGUw+Em50jDtA9BVZZUSZC7uKBeuwuLSyMSEEtDSpkuAuuJsNmhSYXfHx+MQGO$tSa+$wzZV5ojatVom6UjbBtDZupYuweugCWa8UGo+YpoEp6h5ZDCt2zd-9c+ha8NSmTSwJZpSib0otoTxagja+hwfpouWZUmVqhwZWBAz0NQYrquW55EiuNAqipncXaNECnTYJuYa5ptILktxSwnp7U5AcS6j1A74SK+ga8oauojk5NQtSoBSqftL6$wwp4owArnnuFYjwdwwntDvQHP$dfYWVLK1uXu4QhmdW5$wST4uIoiEdg0BoN9s$W8ukbt+f0yfac83YGE+WfryunLwnwpwDkHBmtAucCoLdEmjP33TLuwdk6vkQSIveAZNuRZbvIUzWburfoF1NjkmMTFCTTah6DA1U0pmdpwCub3$ps1nAuJeEoc4wqDTKBnEecra080jLveLLqNqnN+P3TUHpuqiOeEaMUbvM1wnwEb7O5ZvoD8wnduhtjgmbUDut6EWhWUemoACLU3Ta6Z+cm9neyCOEnhdbno+jJcaY-pbqtkwAoXD3pMpbQ5CYTTCDVSmLS25TAk$IDI-nE+7YRtif33ZjSCct50oRUVtHohEELEKYhtJY1++8jcaBZCtkY$irjEhOt0baabopcGZU33DvtYu2fq4pyYmmQo+huKrJv+8P04orDVTCEUs5rfDXRwSqg9d5Z0Uaf43Oqkk5Ho4wUniLof8RZbA+06jVT+K0EUa+RpAe4o8pCOZD0PZBzinhUjLpu2xfvvEjTjwAogmXp5u-JuwdIpo1qUuW9P+3+315ENAw4wArr6UcI5honaj8UAU9udaQSzSGTuwbP+XfM76mRhMpoE+FZEUqodouAw4SvOhBZuq1LuLDw2XNDnD3KbS6UnDtUU2ohcd2E7ccmuA1L4nZTju+3GDoBuijwkkowcuOLZwNkhkvJ4R0qs0gPqoMbEUDSGpahJhBPekXG5koCgJ9uAwKasbDoZItOae51XVUbqBerMvmkGtGXZDjg7jPFUKELoXfWDOrd+G3ZzAaMFf2ecXU$cAuLELEju-EeYmD1AG8UWLoGiA+hZLk0ooohC$oqj4UrjEHGgj6YKoJvxWTvd8vjuh6toiEM8jMvNmySK3qj2u5DeqYIEBANcHXYTtz+HuDYXo1YBaP-M20$NDvb+jAQG2qSbU4AdBiC27M8UmjrQd3SuUzwWv6Kmjdw03StUQs2Cvj2DS1mDEskWSPrTTa+hR+ZEwzc5op+BHE3FTct+owKe$dqfnjeDuYwLBEoJjNmoAbLrs1ISpZbkkY7hwLCO1Tjm0Rjy6PWo-7SUz7ToHpwLQCdakiQBLQdvthscqfpqct-AawpBCJ+2f6gYudX6Vdh1dQEpufnwaE+850j5utmvZe9ct5zoFuikoeYLSy+hoM72z7Xu1ySnnjmMKuCeTew0ZVvVkSyWDw+wA$9oQoRY+5U5jNwIETENo+qQUy5tojgohzYYuVuZUZUOvDAwfa$cqEx62YGoC3uK+hkjNdNtz+YpeEWfmvh7GTcXdToanrU3ktq4bG2oLV-DahMqjWv8cAOnAXoiptkaMZwaJpqoBnwXcdZq0$vZubqOWoqoentpYo5q7Tk3oDE7LHMrpTcLVL0epoRUqjoAZ3+-8aTRuUAZ6S5pcXC7LORAs4g30UkBu4SnTmfZ-+QeYAzOi4kcg-P2Gho$ojTJcgs5RY9XC7uLhqT5u8nrXIWxTFruGEgSBXLjqTb4gy6zE$ToX8TGq8NaJ1TvLqOTtXgw0Tm3qQ93kPFuidqtFuggbqnAU562neUsDxj+4g6GnELEFhBnoI8meL+rXZOZz+4HJCi15BNq$KycHJCe2FfYXOqCITfU5n7oRubY8Kn-SBnF2toquo4YAooPMvWp+L8IPJAd5FXrgkq69Wof5nAbiXPKycT7UYJIDRupjEcERSnZ-nT+pTyc-5ui7r2duTWhyERuww2Xu+ZouiGFSfPo7V+hATWb1hDLW3POSdH8aPwOm5MMoQALRh8S2OEUwabqAUHjPkNr2XSy$+tgmkfLmb2DjUBtkinBjmbhTrDG4QZhwodY6ExEfZtvttEXbL+uVdKmuNAa-XQ+PfGeoDJ8n$vU3N$QUWVbPtv2$DcEt7gDZFewbH+RqM9dDrcEHSD3bmy7L1bfCT7oGmE07DwVoCZXYG7e59BY9QN2Sd+Pm6duF6KjSboGkkOn81haZm2Sv-Yh7MorWoObSM$AtAayZse70cuJ9ZUByoVL$oPO0oWRcSjLuEhaGkOoOc8+5GSr8zLZS78Fx2GLTZnLZcNgfVhfq7yD7KrQ6zJStebL+9UBeJLr8G4vUMgU6xuzJqtFEHenaSMHprCPrhMG8TOMDRoaPnwGOhKKAaLr21wUEjOjQX6O+2nPA0nRWa95YfgHhNYL6KycLE6AZObETpKh7mwUILOPxWxEf+k+5cLGDRuOoku5Zb8G4YDPeEnhw4d13uVbNFzVjkYfVE$T2tBnTDo50Stk3cTREIXBYrUYwJcI9hxz81dgH5THMuKcbd52q0jM6frh7Fq5+Qm4Y9jcL-e8ruptTbitchIXfdegtChjYuT7OCsbwj-o9uMAzPBya9CauKcRnTwBh9I+TYguquBFqm+a5pb1tsnECg0v+C8UiMIVifcEr+GaJAO1mNWDWNKL7hwaMVnnaechMBksqtVIeYK2xQcmXUoD5AZtjUQG0d+md-xMqEhHfxjxpqmCHbSzZUVRuMo648VqsecJPOiqKTbaqfoU2pOkWxOgpwyGP2BPLTIcLefbPhGwOPo6AwCV$bKJcueWx6BCrKtPVcPnVN4u1mbH+XmxMTXrg4VxCa2WO6WyPTyd-JsJIzAX4rYcqmPSVUxqkmB-40EPZVLjIX4Pgdc8mbVNOMpaxCD511qSfvNXRG8h9SYd2BP9WRrTQw-AXSrx2oU+c3rxC12X+rWXIT9frL-bBPQK3co64-PyXGobKjs8hJxfbVbPfEVs8hroH0JWxfEVBWUVjHIhu6yOcULUrjLZm36XEtsLqiYPSVq+pVmx8j96k$JExrWftgurGCnht3yZCrMYqRCnWOa7$JVZuPJCqhnxJEnB8Vf3C6B9+4OdtH9YawCJv+9$J0QnZwCZJMPnm1WJvNnHnWe6Km2iivVLH5Vgqm0P98hfzPWbt7qVyvB+1HCqY7pUay0PWbFLaTb+VTqQYNJ0YkLVxzk77PLJY4gbo6ea27kjNA4gbf+ga278UNq4thw6Je32EUiq4UbA69VISCMipoMhG7R$iXo+VsYK0jrTaANkWNhHJJqGpCnfo$rJCrbNO+eObYqidLNWXDaX1W8hVXzq7B6nXAMC9Jk4$J0GYXIQvWihxn77GkW$JYPf$H5JZG9Xxbu7rGH68Kr$XONP4c4CnoPG1CsND7EWzRb$rNXN6LG9gaqP2oR3JPQu+3jQZJ7T4RQUX67vKbhTdecjpYVUUeUcna411oSq4ZJtRjrunnw49puYUnANYC3wLV0PIP87c4TD+tk4EdYgoUFasNVcOPZkK3gUhhUsfnwCJr42ztbBaJIyk0CjqqifumpnxAQg41hOGTe5TU2uUonooodYf$6uuVSfoo+NdjALQD+YGWEyobM8RTzuh+FEuSPuemC3Uf0L0Sj+zSjd8bT5Nx$SIuXDWk9efoowEA-qhCU7ZAS8jCAHXhuZ1bejY92tgV5v+awJmwYsAhuWN5hGCSBAn9eqHbVAoNt6jEoZ1YooNFoB3ooSYE$NBRo6fexCQUCoaoWwYyHDboZwNvB8YTHk0iP4W$rBO9XjYuoOyDjcB$oZHYoa3cBO9IU5RfCEU$cB$qaowjwBoW$sB5cysE05uofRtYEoBow1VQzT$Nw3A-koqUvyYousa9AyBIHAoZAunXDCdLA+uGWU1rdj-QZrCQo$oqB+uMuMbifU$UFG93CiYA5JyBopo+nSiHKic0ej3xxoCjpyNDZjv6jUUTT5rbfwWEMYOf++Z-1B3eu7srnPK-O+sQSj+YnDb58voAtN2WmWq-LkLp1Jvo2N3TIT93GVmx7nAQWG5g3EWoa7Gsy1SwcoH6oD$kDccAYpY574XUEBDIV$0qUpZet2j0IjEgA16EEYLBEo+po1qwmGjiB0fkohjUjZyjpuspRZbPoTjL0nAfhU1W6bdwLm7sDSwKjkSuevoJYsA8VbfoDZfa4sCoYXMAZ57Ct$ZbVqVEYWAUCj7tkVJWE06D5Sjoo7+dVAS0$0rMg6rcWwv4P+LB$cIjcFr7x-$EBhcmjvzt7ZEtovKkdjKQNpooUgEYAuooEnkoTL5fg+Evt0ZPJ+TDEuvvX5vt1oooaQJtzDCtzqwfajUjowo1AtoUvu-zDYnDAjb7UTooEIovfoo"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-out-s: huh1u7wU5lIKYBs+5WrSYA==$mKyg0tR1YSfjvU07dpo/Bg==\r\nset-cookie: cf_clearance=9IaYK8vJLWNGM5XtVNHqDqYgK6LRUiGFQP29slj5PlE-1770300011-1.2.1.1-3Pmjkul04pPi8HNBm9PMIL.GDF.A1MiI7_6G1s2Bj1sYtbMgyTsz32ySqi3vgoadeQfX_GVUa2rio_acru92ph6N6td3SqVSGXAXY3n0IrIMxpjgTmaVmE6cSnrvKQReNkAlyb23ZHgUMAMlN6Qw0bgWex_fm7HDdnnzieboFXd3ZtImNlzxZJTX15FllwV0CSYemLR6L_quaswfClMLNUaOSbjd5kAmtggFAwHMHuqJGe6OtoVDf2IDfwuCqeic; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=claim-elsa.xyz; Expires=Fri, 05 Feb 2027 14:00:11 GMT\r\ntiming-allow-origin: https://claim-elsa.xyz\r\ndate: Thu, 05 Feb 2026 14:00:11 GMT\r\ncontent-length: 0\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9c92eebf1a7c56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T11:56:19.668403Z","times_seen":17578971,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/cdn-cgi/challenge-platform/h/b/flow/ov1/1078875661:1770298327:Jwd7WiE8tBtPqdApX1sJEFLADyNQdXPGboY9nc8EwYg/9c92ee8ad9c27130/54Kcmg3bVA9e6YoOtU31rJszn_HoFfhqZLklCu61YWw-1770300003-1.2.1.1-Xc7oJXMRpAju1FxpYoehptyjjhb4b1cKPayH_fwYVijSQXYHQ3CGt9IAYFpPpYYZ","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://claim-elsa.xyz/","date":"2026-02-05T14:00:03.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-elsa.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 07:47:44 GMT","end":"Sat, 18 Apr 2026 08:46:05 GMT"},"fingerprint":{"sha1":"2E:1B:51:31:16:44:BC:60:26:2A:3F:D2:5E:87:C1:5F:11:94:BB:B2","sha256":"96:FC:09:9C:A2:60:FA:0C:A1:97:35:68:41:D2:C8:CD:DD:A0:28:AE:BD:1C:53:0E:5F:15:91:9C:22:86:76:18"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1078875661:1770298327:Jwd7WiE8tBtPqdApX1sJEFLADyNQdXPGboY9nc8EwYg/9c92ee8ad9c27130/54Kcmg3bVA9e6YoOtU31rJszn_HoFfhqZLklCu61YWw-1770300003-1.2.1.1-Xc7oJXMRpAju1FxpYoehptyjjhb4b1cKPayH_fwYVijSQXYHQ3CGt9IAYFpPpYYZ HTTP/1.1\r\nHost: claim-elsa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-elsa.xyz/\r\ncf-chl: 54Kcmg3bVA9e6YoOtU31rJszn_HoFfhqZLklCu61YWw-1770300003-1.2.1.1-Xc7oJXMRpAju1FxpYoehptyjjhb4b1cKPayH_fwYVijSQXYHQ3CGt9IAYFpPpYYZ\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2007\r\nOrigin: https://claim-elsa.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2007,"data":"1DkwulP1etmOrey2MhFNmKIrLxTVrNvrJRI+q7IDYY8BS41ew79X6vhsaUMfbTWNZcanrKrlSh3K4yGfwbvBhY8dqpUZHdJfpQOhFtP0Im+GSI$vy4Z6Na+RI-94Ch4IrWni8Lkv0NoQKLnN2Pluff2+7dXAcwpi58Q9iM1ZflmlWp9wFNdNFP2Afqj9sUCy$ym9r5hhtFvsw2OCGF4HqMMX3-dGOKYC375yoZQRKmRDz0NiCU+voWX196R3uZmRQwsFVeUIld0LYLRFRKHCxyhhmbsIXh5UfqJhuKVQKxGak$1BMCDDGvFXh7CMBFFY$jF-MXPGeTUqADmNUT47h-$klBu$P6Q+zVnGeqyIUMXALm6F0jbCQDsTZOGh7fo2bal-TcsuamsoVmOO-h9sj8mzwEfSBjTu42tjq1ZER6CpMEJcj2m0cdhckldGj81GA5y5a12fQ6n2I4-aK7$M8YXDi3ZDqCSzXeSP2UK12YOQyYFhsDHTSs6pGqSr68tZUMF2HPNPeq$7$FE+x7TEUJEf7suQapcX9NUzipuLQzz6riy8bOdMawJ7isKS0x+0-ZIIUyXbfaUkhpk2JUJMkNeiGD++ot8AYnOybzJtN7PR9sYlOwX+WBZplzNeuWOzRiYV2D$8LcP-G8nJotPNFcdi4lktS7R1AQeh+6jvhr-EQF209xtWM0n8IQKivDiZmIjubnT+r5w5kIKqb0-TpQZx$QHMzMZ5TlAHd3i1MXUYYTcLu7KsoUaNqOfIcvtJDHSSHKNosqcLu-49v5ChpYuBmc+CE3VB1bMZabYfaanBiYhJbdI3+ee+yLDA0ok$b72BqK0+c6RBl-poPPsJwdUj8HeJjKnTS+kTME4xxDn6wV2eMmqUtAWjf0jw9u7Nnrudi9mfU+DITtGAIQCbHKDY617Lvadat2Lmvkjd9GiOIqVbkQyxJk3uw2ryzCeJV5QLboJmLE7IAFrGSazf1FcA9YqI89rJmnPBjxQpaZJViVIbvUb8rMGRuLOQQvV-0bvLKXaKBZW+qZTz1otBTSlJPENYM5Jwh-bhWB5l0TyGxsc4MR7-zAWTJvIJ6+jAXVoKDWOY0HZ8H0b+4yT64ZLpwSjIWm4Fu8uTmaGrDAPwsY00NQwQd7$P3JN0uHoO9sdFjFJ-zQclauwFdZK1Qzxwk0oPUiN6FRQ0UMJLHyvbHW4O3f3BAjGNO-WXbW6iAA540jcSnh61pN8-3X8e$mMBLqJRrcXDlZwsK-1KLmdCn2JXPVmpExd$99k90+uBV6oUu5iUybhs0QHGbuxbjBlTTuR5SJKHb4B+yZnTOIP94bumB8I-xkvG$Tk9ePc60LptKhWEvo7verrwafX-weGsNcBAl633oxKbzbU1sQL$smOHQARB9XZ2kJ1VFSXj2QsaXHu9Yb86zBdRxcAv4kvIxRuo94Bd9LZWOHlmML0qXeiP365LckoCUJU4EWBRox34pACPuIuGc8xKw-syU-IWIvXfAoJxUS+W9JWAvxlU3PNTzoibWcLkn2QqfJHetIQ6oOVinRvqUjUOSwSNJddI+voUXlmRLZCAZw1ubWciZHGP209dpMcP9r9w$zQ49j--J2mqVFv3W8I6J1ACjwLH-SB6W6CA+F4NQ3lTaWxwathc7Rh4tWyD2vJALWCRjNrXyBNwd3I8PbrvrCRrEVNl7WHnWFtTmNsaPScKqk7WP$2WdG74WZFTEq-7qLyjmrpA+2cWPdvld7o6awkm+w01CMFXPLjo42NmQNEsTm2vDV6mGVwui95X-VaN9NUvV8jPb5WfECeTbSsFQDjsUs1FwbOp437NI6nOf2xk$4KahbGTXpK5DJD-MBp3Gn18QU4NIE7qlYfRqh1rYapBIrz+eV7cTHKewNR2o7G8DD$hu57Hs9rpj3oZ$cGxFdDIm-frxtxbfcLkzUUfajn1IITw7kFNQyy7BtBJP7lPW4Un6oWD6Yz$oiuyHq96fI7F1cY$Gd1UtAKJ4nsImzk4GZz"}},"response":{"raw":"HTTP/3 200 OK\r\ncf-chl-gen: uKfj+mU8blwI14ro0IQdLTkZEpXRKZ8y/tx5Gtn4wY8=$y9kBSuHq34cLsy2VbGXK3g==\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: br\r\ntiming-allow-origin: https://claim-elsa.xyz\r\ndate: Thu, 05 Feb 2026 14:00:03 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9c92ee8db82d56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17440,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (17440), with no line terminators","md5":"802850aff94c41b134d8d32dede42e98","sha1":"c660d495cf20daaa72b4eaa43a12d4f9c6ee5e5a","sha256":"e280f1a3c2a8cf60f8e5197fefe98d539249f203dc7b7929954b8fe6cd1d0df1","sha512":"b5598d60eb47fb7ae1150f0d9fd7f0ea00168a00ef3c044070cfa2ee2fe92637a6009baf003d488034674f7ffbcd83fc4c26c112b8f4a786a28250e0a2c07f43","ssdeep":"384:YXNHkigoRczhcJ+vs14z6p19JqoLZeHOcOSAyxxg5g7v:CXgo0s14ze19twOcOny05O","tlshash":"d872d0f3c09de69f4b71798a687cd37a079f71bc1faa64229d1189861883f14a209847","first_seen":"2026-02-05T14:00:40.478995Z","last_seen":"2026-02-05T14:00:40.478995Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1377451787:1770298327:j3AjEC2oM_S0egY0E9NpRHGiJs0F_bg4Aaf3ly8VSd0/9c92ee8e582f4e4c/1N29JYPPlx1uG4wpLMek6AOm.c980bf.OQGcR3HHmc8-1770300003-1.2.1.1-7mmaCOaDwmOBSakBu.urcGzLw9JrV4GsDwWuBFsrvW0qolC6nYYV0M7v693FrdeO","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-02-05T14:00:03.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1377451787:1770298327:j3AjEC2oM_S0egY0E9NpRHGiJs0F_bg4Aaf3ly8VSd0/9c92ee8e582f4e4c/1N29JYPPlx1uG4wpLMek6AOm.c980bf.OQGcR3HHmc8-1770300003-1.2.1.1-7mmaCOaDwmOBSakBu.urcGzLw9JrV4GsDwWuBFsrvW0qolC6nYYV0M7v693FrdeO HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\ncf-chl: 1N29JYPPlx1uG4wpLMek6AOm.c980bf.OQGcR3HHmc8-1770300003-1.2.1.1-7mmaCOaDwmOBSakBu.urcGzLw9JrV4GsDwWuBFsrvW0qolC6nYYV0M7v693FrdeO\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 3703\r\nOrigin: https://challenges.cloudflare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3703,"data":"mmw7FIc7jAcPPt-N4kpoxcElZXuoaO6nFSZ4K5hXAMJBzeGIHKiVsxrg6x04HFnCNFGhwOiS0TtMyI2901VWdtZaiKCgNEp5ildeZ0oGAukp-kFnMEfGnUyxVZ9CK0dSp3TDE9-xUae3kb5HS2EwiuJ3+JbFFF5EymoJVRw4lPiUbM8AL8gXu2uwe9Gr9kWiCy-WXoZg+fHXanCoIiAjnupK9XDKDgfqJ09ZhpWxZaUxBeVZyox4ZHsmZRoKEbDftEpCJFaLSfrvx1CiemX0qiZi1uKtPUgVE8Q64iXR-2QP9U7TJ3+yHeZLjG59AmsfpEM4ogQUGPdphfKww09vXlaWgoIDhgWH8Gt3IVwZhs-iTLTc51a9dYdzhRvicj87PX4h8Z88wd30o7UDVmm-ohGam8bI1cQgmnSgsx863P3rrXlqIK2rxWrydUxhBQnYPQn89UHH7IpB8vxpW6DGdkdjBuWzB72VmNcZYiWmJa2cw8AO4yn2qzDHdlZvXCubMHeK8uhKKUM-q9Dgi84mTKKZGHoOHKa+gqtmv2xXygmrLsTdTR2jGjoVtGpDwWI6Xxi5N+Lm-fI9OGMWgnV8ZimCwmI5c78FUOLJdlSsw37P9hXf3PcIhxZ7A0FQxbq2b7a+WN2vLLJCDVj6qK+6MwQgTzrajew4wjEjyqYWLKv5Sip+L-CTJG-gByTUlwCkb4jhf173lMI1y-T5TsOBo6MPpWMoBK8QYA04kdmnritDXXhq-PPcco9VOtaIG5Zfn9ZFkJF9xZ0jbrgIV2Q7g+AWAHz7tOafghzSF+iyI51D5jlAAVw2OMMhs8aeSIEiz+FtF9PAtbhJ4F4M-dGlBiew-6TyXEkaeJ6xT89md9kkILQXKmXTbfH4ecqO1MjHbvJb0DjIwavs9MQK+KKjB4LWfmVNmfCXM6llp-XutXyWTsxuUkH18w9wXgdtsZfNnRAovQUNrZbLNWlRmIZ1sczY5laUwB839jwLRFGRRQYOS02-Ixbu9y7-kJuC8FxIidPhWFw2djgvEmWlm-b6kN-LFtnW1qKNGVAE4GL+IImOI8a9anWUnO+gVelyAIgoEbYV66Qbvg999+P1rYFep71z2F29ZAsBuKUZYV0WQ0jwqRL0Wh7rnrGAH03-KEOFd1gg8t7Kn1EjfFGXKNE-+bmxpjE4-GnBKa4YGP1mgDYLdNfvrNMmpq6XFKf1C89pjDWpjHX4YiJYkeo7jQif1EAbTROANtBI+eQqc81W8NboS5FBcm6-HGKvIt--Ns+CKGVrlaMikS3ByIEPvAtZbhYGOzEwwV2qpoz2U4iLMRUSllxBBVRzZqltg4vxyc9AAdGVUwm01brEFp00DCNou2cCOnKVYazZ1cUODn3MvZANcYUrAKtWVJn6dfdr1q-6CEnMqVSbYs+4VbjTsQurx5SBn9qQ0Ztzc2-YOR1JLbFUKzkh8ob2Z56+CzfG+VE7oaQcFehw5WoaBKBW0jdTr8LY-x2GtuRZrWvDe3RBWKMxfut4nQJpoSuI0bMW4qYVjjIaneaz9ZjVnodenOvrZgIwY1AwAnKvU3Pte2cWMgONZzdkgtR9-UH8mriT9ePqgyOKZlYHPagod6y8XQxhJi78Tv0vYewU+ZhMdNe3JNB+W-J8bTT9jAINYTx1vxOAWwL7Ic1U1oYQ9c4PfdIgth3Ro5bYbCN68xt7jmtw5IwuTM05G1RN-skHiknG5OIdMDNr6LDkY1KZt6vUEfLVeqR4NgNRqAf8rAOdwcOUWWnAgBugz7yp8h2VUJopL4u7JVwva9l3+tTt1aHFiBB3BNnCUJO5uSgddYQxW6kwWWPiyR3nMxfqsYIFQG3w1XGnwrTFBHxrCqrXWQlQT5DFlt8wtmsMNqvlIy8f+adzo5VxBvDv7eT64-LyqHHwIAckZdAgU2cIOamu2-dB3+FMI74v5XYXu1gZbHYRv-Jn-RF7Qk+7EogwswZKD+0r6xb6liDS+vZj8mWkIbmfPiUhTu25X-kotrGgixf+PpeOifBoLg6jW8siFdwDA7gDkWHd4iW6KW9LIjo8h6GHNgXxo647VnJTM0YniNH-K562U307FjZkrU4kfcfYfZIMSfXz4nrEO7axRpNhRBBnIpevtfXq5dkXrziEKPJ-6FEZiSntR7JghX3kfkgvXpnjcCJSbcJl5jx9nPdozHLdFN3tO-UxTD0v-LrvUZSKpg6wak78keTgEZ7WPeSAWMO1MLJ2fT74-BrAB4FpvqB9Cb1c-+WfgnpCSlGPIuLsnnMkHl+NChhnjtozMs+B3ycysT6n7vg8A97QUj87qnYTVcUzP4enbNFRxlrOPsA4wg4vuiqJcHAtsvVcBDVmb2q64IAAjPG7O-wEdTjmMjVLafP-LLi4ElLkB6aLs1FHw-4ekze7oyO-B2vQCvSRL+CY6yGEIaJxs9uQmvZxTz8MXe9eFcLXadeTojOb4qz0DGMYK-atrXidYX+TLcG+aF1bq5Ee61w2HHwuu3vO+YntgGaZ6Q4GMMKSlv9owQdt32yBECQmDcLf1l2--1LBS5+wb19DO0OCDXkITEKm0sepQX25F7Ds+uacPrICuTwZGoaJgYjAmYhsmEG+AnjZKQzGnp4-8yOX05DjvGuATKydgSfZ7mjdcN-hxvxMRoMuDXN2IA3nZ5JsRcIk4AmAAktZYG2GGprc6Q3a2KBPPhIBJ-hNk1dyMrgv2JqEreX1Xx7OiXwkvn6tVA4Zclu4z6lxFi9o-vYcic+JVuglMpNDVRot+7AijSAKLpIxASeSVlIyIsL80eqhBejEYtTHqF5b3Em6zLTQmdL9pJY3sc0WJHfrnq75Vkz-sMoty6X0HCCXGePMcgl9FuVrk2-zpVkcHINftn-a3I0VAA5zp6o9+EUgcRlxnMGLFhCBJwWu2+6zt8G4Y9IaKitAbVhEUbfOPaCkeqpA0694tanqEVSKAhziQxH6WqfqXULplr1VJxf1M0ECWLG1l4femlH-0VZHvFNHJV2AgRn0xp1prhcWqcuOW2H+M4grGrMEEWYUXsb8PvMuLFFjo35y0o0rw0uZCmlV5f61rtWWI66fQT6ThjM27GK5kz4nvLNz0dlozPTkuqR6mJsDPeL2-Ty4hYy3XTPn2jbBH8BOIuU507sL9uHPMp7QFESlu0DvfuVQTZ9qdSQcyJxE0AQQ6dghCDdCaQBtY0J6SKWcaEooV7jAn09GjTZDy9Bfs6cYboUIH-8Bi4Foh-mshUIp6skpnEbb5qBfr7dWo6RqWzYMDYmw-9yvCsEdVQ+CwhsZnN0FdXWLvB5EOhICk+62geKGxMCFrp6JU50zZMhUgFz+CLnaLpOS2VbCDIMeqCu4IN8tcb-tZXGYHwF5u9nmdTxmEqkHo-+ruyqvoB75G2TG5SUUbAyntIk2SPwAN4ANzVkvanFAKvA8Dhz-TnwG+FddRlB0g+MMKwiS38oH7DZ3yR2DkZrVJsH8mujLeBiMRj9yRhvc1wKXhc6XOe6KXXp2b-bqdJ8Tu5TrLVXMkcI27RROFgfPF7gkyELuaz2SQ4AkyDkom6LPTbSyoM-zz3zfN5DsI44RQJbbbRkGUUqecz0-TnLUizroKxO3-9e0DW3zae266iTWeBA9CJkSa6X5nkc5V8y0N00syflGg0wv6SUFlJvr-7DtfR-kKGhqVZ6q0TpYDdgnlckjVPJjMkZ"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 14:00:04 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: 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$5ZMdWFWPBNXpLIMOwLkBqA==\r\ntiming-allow-origin: https://challenges.cloudflare.com\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9c92ee90c8454e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":208028,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"6f1842931996058bd6f9c9a6735538ac","sha1":"a3f1d1bc81209d638ab08d1b51bb5a390541cf4e","sha256":"91bd4219320b2683945f558ad47a9244d4b5a475ebc89da5bfa3e7f7cda30628","sha512":"931eded4ca391febe76fada5be2eb5ddc3058d03b274a4f2d8f0df48aae108e77baac128550ab85293786cced5d36d7843e5c6978df86e8e205d8bb0b9b630b2","ssdeep":"3072:zvEPBBfIeHstp41BVB01322NCD9PHVEnpQSH/FgEytbh/GeYFHKqN8kztz3N:zvEz+IBVO1mHKpQSfO0eYFqszd","tlshash":"fa14133e51ba254f0a315ff74d719814efc4dde82021206867b47f0ca86ab4b462f9af","first_seen":"2026-02-05T14:00:40.480153Z","last_seen":"2026-02-05T14:00:40.480153Z","times_seen":1,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/dd41d32b777c766a.css","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-elsa.xyz/","date":"2026-02-05T14:00:10.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-elsa.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 07:47:44 GMT","end":"Sat, 18 Apr 2026 08:46:05 GMT"},"fingerprint":{"sha1":"2E:1B:51:31:16:44:BC:60:26:2A:3F:D2:5E:87:C1:5F:11:94:BB:B2","sha256":"96:FC:09:9C:A2:60:FA:0C:A1:97:35:68:41:D2:C8:CD:DD:A0:28:AE:BD:1C:53:0E:5F:15:91:9C:22:86:76:18"}}},"request":{"raw":"GET /dd41d32b777c766a.css HTTP/1.1\r\nHost: claim-elsa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-elsa.xyz/\r\nCookie: cf_clearance=WjsfHqPtXLvRUx4F22P3ulTm5Qjrohqszlsi_6RZwM8-1770300010-1.2.1.1-bWGNPf.HWbCgQ4NjdxFAdCRjrH32_iZ9PBk.ycl9Sm0h1uF8.pSsIRy4VghQH97s9j2vSBjPZc01geXy7yUzp7_xxpPRNGDzXVd.Uvib2h330yXxEoJ.ZuCXcysi0JgOU3azBmlAafaTV0yyySdZkg48mcJOoL5NzgcG0rPXK.jrU78iShc5q9K638zPucdMUx7EVNlEmaBzCMzfN.bAUsHivl0nQOJXNE8A86ZdQPY\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 14:00:10 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=L46SHBAXUNA%2BxEwb%2FlHmokBHwdbkQqx3NBFuZ5kixGtoqbUmIjFwE9mB%2FG28RJD59%2BS8i%2FdwAFTzX3sR3pA1N%2F6ZpKMz2dOHJxxor8KhTmx4aSKS8suKyyi2SVs1u63UOA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9c92eebb5a4556b7-OSL\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 18 Jan 2026 08:34:34 GMT\r\netag: W/\"19380-19bd03de0fd\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2575\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=2660\u0026min_rtt=847\u0026rtt_var=3160\u0026sent=151\u0026recv=46\u0026lost=0\u0026retrans=0\u0026sent_bytes=146079\u0026recv_bytes=18218\u0026delivery_rate=14533073\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=53393\u0026unsent_bytes=0\u0026cid=6ca2ff481225513c\u0026ts=7745\u0026inflight_dur=94\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":103296,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (63243)","md5":"06d90c639ffce6a5ed6f0c85aba0d61a","sha1":"08209db393bb5909379a2194b8872b9d78c0494b","sha256":"a88a1b90b156688ed558feec05b010643c0d9db446098e40c0900ce005c03cea","sha512":"999f6cc0137e8ad34a83475ae5cbe6df40cd7879fed9d3800038e49c7a598554870acd253d9a46a5e7a12b425fba8eb005e92bdee696e1f2768792edbb6f56bc","ssdeep":"3072:GHIk4hwZW7m7014gHZfdyk3jHlni9Lp82GZferlWxDhbz2j4kdqZR5YlqH:GHIk4hwZW7m7014gHZfMkRferlWxDhbB","tlshash":"c3a3425daa55143f7c2784f9e29cec9c911bb1c0ee3a97ebbd4212109be16f72d63240","first_seen":"2026-02-05T13:17:46.816496Z","last_seen":"2026-02-05T14:00:40.48107Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/chartjs-4.3.0.min.js","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-elsa.xyz/","date":"2026-02-05T14:00:10.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-elsa.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 07:47:44 GMT","end":"Sat, 18 Apr 2026 08:46:05 GMT"},"fingerprint":{"sha1":"2E:1B:51:31:16:44:BC:60:26:2A:3F:D2:5E:87:C1:5F:11:94:BB:B2","sha256":"96:FC:09:9C:A2:60:FA:0C:A1:97:35:68:41:D2:C8:CD:DD:A0:28:AE:BD:1C:53:0E:5F:15:91:9C:22:86:76:18"}}},"request":{"raw":"GET /chartjs-4.3.0.min.js HTTP/1.1\r\nHost: claim-elsa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-elsa.xyz/\r\nCookie: cf_clearance=WjsfHqPtXLvRUx4F22P3ulTm5Qjrohqszlsi_6RZwM8-1770300010-1.2.1.1-bWGNPf.HWbCgQ4NjdxFAdCRjrH32_iZ9PBk.ycl9Sm0h1uF8.pSsIRy4VghQH97s9j2vSBjPZc01geXy7yUzp7_xxpPRNGDzXVd.Uvib2h330yXxEoJ.ZuCXcysi0JgOU3azBmlAafaTV0yyySdZkg48mcJOoL5NzgcG0rPXK.jrU78iShc5q9K638zPucdMUx7EVNlEmaBzCMzfN.bAUsHivl0nQOJXNE8A86ZdQPY\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 14:00:10 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=JtL0SdVLUXA9JzdYOo3NI%2BonCnjChMAozAZJNC8gahb4UQCfvE3UVV0swWi8EO%2B7AKtx7BjolszcUfzuqrqyi8vBJtGkL9Rf%2FmK6PWMyLKyDS3Bob6c8GJ%2FiAHzqftFXuw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9c92eebb5a4756b7-OSL\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 18 Jan 2026 08:34:34 GMT\r\netag: W/\"119a8-19bd03de0eb\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2575\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=2660\u0026min_rtt=847\u0026rtt_var=3160\u0026sent=131\u0026recv=46\u0026lost=0\u0026retrans=0\u0026sent_bytes=122588\u0026recv_bytes=18218\u0026delivery_rate=14533073\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=53393\u0026unsent_bytes=0\u0026cid=6ca2ff481225513c\u0026ts=7745\u0026inflight_dur=93\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":72104,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"36da7187a42e168d007751fafc74dd91","sha1":"3a06d8b36e649eaa6fa330aa905565dddea363d7","sha256":"e67fccd7f26f04cc3376d57b39db3672c9cc7f773ff04d545cde8e3af2e316bb","sha512":"53ff4a84e487c02a120b357e6a21a77113cbde85520525d8aa98c95a66016b467ec4e8c0a7e039cd96a2766165a1f24f731da3a3733a75d691035eea89fb9908","ssdeep":"768:ttiJuvYcMUp8wFEqO5b+Ziyxc6VpLEVbzX/O7Kbu1wH6Rczapcscns3rQ7nudti/:Iu5pjBW+Ziyxc6Vpk3vorun4ohP","tlshash":"b36386ea2546d0d58e2120ddc473e908e0684aa3cdadf153e67cdcca786df26884777b","first_seen":"2026-02-05T13:17:46.843044Z","last_seen":"2026-02-05T14:00:40.481616Z","times_seen":2,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.heyelsa.ai/elsa_black_circle_logo.png","fqdn":"app.heyelsa.ai","domain":"heyelsa.ai","tld":"ai"},"ip":{"addr":"172.66.170.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-elsa.xyz/","date":"2026-02-05T14:00:11.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heyelsa.ai","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 21:34:40 GMT","end":"Fri, 20 Mar 2026 22:34:24 GMT"},"fingerprint":{"sha1":"90:BD:17:FF:C4:01:DE:5A:FE:A9:92:A1:E6:FF:29:A1:35:A3:47:9C","sha256":"1C:9B:01:AA:CE:E5:7D:67:93:91:6F:84:F9:8D:1A:A8:D0:92:BF:FA:6F:D1:FC:45:B1:2F:74:4B:38:BA:5E:68"}}},"request":{"raw":"GET /elsa_black_circle_logo.png HTTP/1.1\r\nHost: app.heyelsa.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-elsa.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Feb 2026 14:00:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 3115\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 44409\r\ncache-control: public, max-age=14400, must-revalidate\r\ncontent-disposition: inline; filename=\"elsa_black_circle_logo.png\"\r\ncross-origin-opener-policy: same-origin-allow-popups\r\netag: \"13280aa7effda1764a210afd9516f6ff\"\r\nlast-modified: Wed, 04 Feb 2026 06:57:16 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-matched-path: /elsa_black_circle_logo.png\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::cw6bl-1770232645889-c59cd2dbdfa2\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9c92eebd081a2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3115,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"13280aa7effda1764a210afd9516f6ff","sha1":"2fc986ffe2a52f06bbbddd0c09958e7b1b6eca49","sha256":"e4780c165f211e95b38499cb2dac694fcb8834d1f107ceb2965ae6fad2db5e4d","sha512":"9a2b8c99c6a7e0391cc55ab8c921d2a62fbbbe6498dff2c0d0382db39591dba83723ad80d56bdd3e244c5e274515fed3c6f63a03455a775079255efe49c2fa3f","ssdeep":"","tlshash":"9b515cbde184c9dc484aed293d14148d2a3e3023ff95da3e6602df4065aa78c5c9ac49","first_seen":"2025-06-07T22:25:37.558888Z","last_seen":"2026-02-05T23:33:28.804235Z","times_seen":6,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":24,"connect":1,"send":0,"wait":72,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"app.heyelsa.ai","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://claim-elsa.xyz/","date":"2026-02-05T14:00:03.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 14:00:03 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-NDj4TlAODMcCJfhH' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nreferrer-policy: same-origin\r\ndocument-policy: js-profiling\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9c92ee8e582f4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":211237,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"59bf38dbc9192677f5baf6a7b39720e5","sha1":"339f06a4eb471ae4f295033f0fc9ea26aeb66fce","sha256":"d7afb6f090a296c7b397c6ae1c67843a6d321b3ed75ff9c5f4146d9df1ed9eaa","sha512":"2d8bf4ba3727d47f8c1112d5351ad4bea1120f5458656bbb6f53071c9cadd7b9ac70e48910424d38b22f1603223d347da790e394123870e5ccda4cbd61e21389","ssdeep":"3072:iZBV1PHxc8REo3nvJnBFAbUs7YQwhHW2/PTr9w+S6+tTexJ8+KjHQng:iLRbnvZBFU7YQihPn9w+18+EHEg","tlshash":"d5242ac63ad97b72537764aa015b75ee339e38845098e82de200ddf47c7436c6623fa8","first_seen":"2026-02-05T14:00:40.482863Z","last_seen":"2026-02-05T14:00:40.482863Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-02-05T14:00:03.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 14:00:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 86\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9c92ee8eb96e4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2 x 2, 8-bit/color RGBA, non-interlaced","md5":"70c202196187ab3c11b4e094c20c6de1","sha1":"9c52b959e74aee9d79cbc9f35d1f9f65a3b8c863","sha256":"6255b9231d09ebe6aa1ac19ba46bdd81f3df58989c9ef2e11d6cd6e2e7b21643","sha512":"7e6168e40cce79239fc00a05381e1e95ca3534905d3fc1467973927f317b7f12b6f3e76960d5202c40046618b51e0895082e22338b1b9971038fa0ba158117e4","ssdeep":"","tlshash":"4ea022f3b2203c3eeb2a2333022e8030f83020b803828e0c000eec332a20208c0ca2c2","first_seen":"2025-05-13T14:11:45.873663Z","last_seen":"2026-04-03T11:40:49.866694Z","times_seen":265776,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/css2-2.css","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-elsa.xyz/","date":"2026-02-05T14:00:10.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-elsa.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 07:47:44 GMT","end":"Sat, 18 Apr 2026 08:46:05 GMT"},"fingerprint":{"sha1":"2E:1B:51:31:16:44:BC:60:26:2A:3F:D2:5E:87:C1:5F:11:94:BB:B2","sha256":"96:FC:09:9C:A2:60:FA:0C:A1:97:35:68:41:D2:C8:CD:DD:A0:28:AE:BD:1C:53:0E:5F:15:91:9C:22:86:76:18"}}},"request":{"raw":"GET /css2-2.css HTTP/1.1\r\nHost: claim-elsa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-elsa.xyz/b7a30beb6bb37fc9.css\r\nCookie: cf_clearance=WjsfHqPtXLvRUx4F22P3ulTm5Qjrohqszlsi_6RZwM8-1770300010-1.2.1.1-bWGNPf.HWbCgQ4NjdxFAdCRjrH32_iZ9PBk.ycl9Sm0h1uF8.pSsIRy4VghQH97s9j2vSBjPZc01geXy7yUzp7_xxpPRNGDzXVd.Uvib2h330yXxEoJ.ZuCXcysi0JgOU3azBmlAafaTV0yyySdZkg48mcJOoL5NzgcG0rPXK.jrU78iShc5q9K638zPucdMUx7EVNlEmaBzCMzfN.bAUsHivl0nQOJXNE8A86ZdQPY\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 14:00:10 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=1yDRGQmug%2BrJQnIMBg5lNvOWbraBLOKfuP88tRRy%2B5whHM0HqXETl4Jfs6scdFaWVAzrxfkdcKd42XGN5Zz9xpa8Nf0yFmnOLuElrH3anKnAimgWa8WlZXWrAM4wzArdbA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9c92eebbaa4d56b7-OSL\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 18 Jan 2026 08:34:34 GMT\r\netag: W/\"840-19bd03de0f3\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2575\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1671\u0026min_rtt=823\u0026rtt_var=1287\u0026sent=234\u0026recv=54\u0026lost=0\u0026retrans=0\u0026sent_bytes=238811\u0026recv_bytes=19073\u0026delivery_rate=40350807\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=82597\u0026unsent_bytes=0\u0026cid=6ca2ff481225513c\u0026ts=7789\u0026inflight_dur=100\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2112,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"94008a89c8d6024db3d861cb7ba4a4f4","sha1":"51705aa43b6b5fe174beb82b06c56178246906ec","sha256":"0a0b13c690f1a1ed9e59cf520667bb9f3d3cee7e8ea89318a03f40ba9b9cf05b","sha512":"e54628d0a2daf050618534f61b4283e15f80ba17123dab3289050740e501a76d9dff62026199c6e2c7df929a7e2d7e3c56b0e22d47a4877dfcd71176264467e0","ssdeep":"","tlshash":"41418b80087ba504d7931cc122ce7e32ee2db19064459d346ffe1498fc5bd59a3b2b4d","first_seen":"2025-01-25T17:56:03.203401Z","last_seen":"2026-07-27T01:14:27.70873Z","times_seen":901,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/cdn-cgi/challenge-platform/h/b/scripts/jsd/d251aa49a8a3/main.js?","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-elsa.xyz/","date":"2026-02-05T14:00:11.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-elsa.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 07:47:44 GMT","end":"Sat, 18 Apr 2026 08:46:05 GMT"},"fingerprint":{"sha1":"2E:1B:51:31:16:44:BC:60:26:2A:3F:D2:5E:87:C1:5F:11:94:BB:B2","sha256":"96:FC:09:9C:A2:60:FA:0C:A1:97:35:68:41:D2:C8:CD:DD:A0:28:AE:BD:1C:53:0E:5F:15:91:9C:22:86:76:18"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/d251aa49a8a3/main.js? HTTP/1.1\r\nHost: claim-elsa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=WjsfHqPtXLvRUx4F22P3ulTm5Qjrohqszlsi_6RZwM8-1770300010-1.2.1.1-bWGNPf.HWbCgQ4NjdxFAdCRjrH32_iZ9PBk.ycl9Sm0h1uF8.pSsIRy4VghQH97s9j2vSBjPZc01geXy7yUzp7_xxpPRNGDzXVd.Uvib2h330yXxEoJ.ZuCXcysi0JgOU3azBmlAafaTV0yyySdZkg48mcJOoL5NzgcG0rPXK.jrU78iShc5q9K638zPucdMUx7EVNlEmaBzCMzfN.bAUsHivl0nQOJXNE8A86ZdQPY\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ndate: Thu, 05 Feb 2026 14:00:11 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9c92eebcfa5b56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21726,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (21726), with no line terminators","md5":"649c7cd17f5531193d2a7c00fde5bd95","sha1":"658214d82c46c7c61d5df17bbf1693dbe63a5200","sha256":"acb96f4a9f5abddce38e2af923c9cf824e83c6397ecefff600a06ae71b0a5633","sha512":"78e7c8ce78407e8d4def31f7b2805850ddf8625dd543f10541ac6a30db5b9a605466cd6646a073ae845b331bbbbbdd11debfed7f8e02c94be01d657640f4cbf7","ssdeep":"384:PIVvkVof4LFC12/oMtmGiwRLhNKQZPt2xE9uCrOSIbLy0fcGN4N62:2sV/LA12h8Gv10EGiD","tlshash":"85a2b78a79d97537c77120b3002b35ca61ffbda92058ae15c128b6bcb93d30c6967f49","first_seen":"2026-02-05T13:38:05.964374Z","last_seen":"2026-02-05T14:28:00.716042Z","times_seen":7,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/secureproxy?e=jscdn/getFile","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-elsa.xyz/","date":"2026-02-05T14:00:11.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-elsa.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 07:47:44 GMT","end":"Sat, 18 Apr 2026 08:46:05 GMT"},"fingerprint":{"sha1":"2E:1B:51:31:16:44:BC:60:26:2A:3F:D2:5E:87:C1:5F:11:94:BB:B2","sha256":"96:FC:09:9C:A2:60:FA:0C:A1:97:35:68:41:D2:C8:CD:DD:A0:28:AE:BD:1C:53:0E:5F:15:91:9C:22:86:76:18"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: claim-elsa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-elsa.xyz/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://claim-elsa.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=WjsfHqPtXLvRUx4F22P3ulTm5Qjrohqszlsi_6RZwM8-1770300010-1.2.1.1-bWGNPf.HWbCgQ4NjdxFAdCRjrH32_iZ9PBk.ycl9Sm0h1uF8.pSsIRy4VghQH97s9j2vSBjPZc01geXy7yUzp7_xxpPRNGDzXVd.Uvib2h330yXxEoJ.ZuCXcysi0JgOU3azBmlAafaTV0yyySdZkg48mcJOoL5NzgcG0rPXK.jrU78iShc5q9K638zPucdMUx7EVNlEmaBzCMzfN.bAUsHivl0nQOJXNE8A86ZdQPY\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"4xxrfftj592qiffrladd\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 14:00:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9c92eebd0a5c56b7-OSL\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OisfptjE%2FFfpfNeY9n28BbrOT0dpX02SaKpYJ0HHrzBg4deyCm5UdPVRpaslLUGiI2QH7PfdgOwVl2BGWkxEC1IjM2LfbeDdqdrpPgENjRDisw%3D%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1692\u0026min_rtt=823\u0026rtt_var=906\u0026sent=377\u0026recv=120\u0026lost=0\u0026retrans=0\u0026sent_bytes=347859\u0026recv_bytes=68833\u0026delivery_rate=40350807\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=120257\u0026ss_exit_bw=40350807\u0026ss_exit_reason=2\u0026cwnd=70184\u0026unsent_bytes=0\u0026cid=6ca2ff481225513c\u0026ts=8575\u0026inflight_dur=209\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3613268,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1fd8154dc2ec92ec19711f1230664076","sha1":"498c72cd53ead36717f28c0deb10d88ae9f9ab8c","sha256":"d4a0013bb87c823e63286436ca60080aacba9f2f1a83d88eecbd1275ae278e09","sha512":"d712ff488b879c7c8222e8e1c2a4c4ad8432c118ba50b0f5fd4135c597d8e82b552caaa6aa3116ddfedd4dd37ea640c4719bd5632211846e2d7c2a6aa7a92f90","ssdeep":"24576:tYZNiwBNf2EeJ0TpIUoAXOAQ79XUT9yVMYGQBNHWQEAYevKy:tQnBNfi9UROp79XU8dJ7HZbf","tlshash":"f92512c2b48920d21354d4207bf3aeedf666606fb6e956b63614ec8034975a7c3dcec2","first_seen":"2026-02-05T13:17:46.863686Z","last_seen":"2026-02-05T14:17:41.229074Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":583,"receive":637,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/9c92ee8e582f4e4c/1770300003975/94dc2b228d414dc471ef8803670f8c737ff74017bbbeb22b6f86f7d8deb29088/HWu35YTXNVFQHYV","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-02-05T14:00:05.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/pat/9c92ee8e582f4e4c/1770300003975/94dc2b228d414dc471ef8803670f8c737ff74017bbbeb22b6f86f7d8deb29088/HWu35YTXNVFQHYV HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 Unauthorized\r\ndate: Thu, 05 Feb 2026 14:00:05 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 1\r\nwww-authenticate: PrivateToken challenge=\"AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20glNwrIo1BTcRx74gDZw-Mc3_3QBe7vrIrb4b32N6ykIgAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAupCEBiYy0ublWPuJ7Q9Js8dMeyws4EgQ8CKktAIkzZ0fkbgeZqpJR5JvyYQxGdjhTQ3y1vsJH3aSgZbODah7YzXUIezD85vG-mMjJzt9sYdFGhWgCt0JdOoR3uVlE1dRsFRCMLYKjBDTj5mUSbxzGa3NkIct1WxujJd9ItwyR8KJ_55fhuf8gHZLrtMR-I2BpWRIk0gxTZXz6OL-ti9SGvex-xZqdJWTnwmK7mDJwpxq6H6vTdCGR64_kDaPw6MIjiWjnezNYWQCV93pV2eIW1x4XQEOaGijupoL1uf3zGPlIQdXaWyr_7erRwnfMXr-tYqABIvLRXgtnM_UPX98tQIDAQAB\", max-age=20, PrivateToken challenge=\"AAIAHXNhdC5wYXQtaXNzdWVyLmNsb3VkZmxhcmUuY29tIJTcKyKNQU3Ece-IA2cPjHN_90AXu76yK2-G99jespCIABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAhhi3ZSNFv1v5ocyLUhSXEq7VYp8Doa03pUK4a60skoQ-PuxF46UZ4-gq1COv-Drm8_fN5ORLMu3_MFw2NmWzCtSbfKo8LOFPjyBiBqGUNKr6FEHXuI16CTs5GbYkyoUnQl35o57nJgjNkKOk_2gXoLFz0WBdpG4jw8-1glVRODyqJcmaURHDbKjg6llEFK4kO2aWkIGebLziSxuQ_akH-ZKFIJYQSW-JAvMRdT04Dnfxij_WKCNzQw_yKTTt_Kaz12VTlYJHfN01VicWArVAObfQ1_eWYXlMB_vtjS9Q1V4VjEOa1X2J5P7JFhtI50pydfRNkdwlGXpgx0OcVZtszQIDAQAB\", max-age=20, PrivateToken challenge=\"AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tIJTcKyKNQU3Ece-IA2cPjHN_90AXu76yK2-G99jespCIABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAz8Ipn_nan_I3zDhpauOIBUXGmjiyNolnniwMBKEWtEVXpDa69JX2Lwn5HP_iuluf_vWqWg2kHBV82cSPVVpY-uAsmYtIFHZ_qESWuWYAtQATvvuzcYJgQY5uE0p0ZMY1Msha5RGLzQL1QRrFcNbGFRVMuSYHgLxIIzSnNWQ2_kI5g27_jKKL4CEWheY5U3eafhtTRlXTn3ZlEUhHWkYxoM7n4FoqRyppySM25E_bYqtFpRP8U3qFqxW3jFLJzE5gZG-Vzek2V51V-yQ5m5oJ_NRlLCmzuP9YuvCHXbaLxUvK7grz5bxCHcrHyhVBGhKiscgRS4BFGVer4LMGJvmBRwIDAQAB\", max-age=20\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9c92ee981a614e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"very short file (no magic)","md5":"ff44570aca8241914870afbc310cdb85","sha1":"58668e7669fd564d99db5d581fcdb6a5618440b5","sha256":"6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5","sha512":"3c266c0035de59eab2a0dd31b3dcb4a9dd157b310289e5db9ab4f8c2fddb7433466d48f25da7ad735a1cb8f2935aa612ad1f62f0efcece3933ba9979082e2304","ssdeep":"","tlshash":"c700000000000003c00000300000003000000000000000000003000000000000000000","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T11:56:48.062449Z","times_seen":492663,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-05T14:00:10.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-elsa.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 07:47:44 GMT","end":"Sat, 18 Apr 2026 08:46:05 GMT"},"fingerprint":{"sha1":"2E:1B:51:31:16:44:BC:60:26:2A:3F:D2:5E:87:C1:5F:11:94:BB:B2","sha256":"96:FC:09:9C:A2:60:FA:0C:A1:97:35:68:41:D2:C8:CD:DD:A0:28:AE:BD:1C:53:0E:5F:15:91:9C:22:86:76:18"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: claim-elsa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-elsa.xyz/?__cf_chl_tk=6mn5dDcBJdKHcibqSB41xQm_.ooPEFy9r4aDz6c0zJM-1770300003-1.0.1.1-CgH0AHdzefsv3AJ5hHaGXF4dNqTEB6tGNO213B2qFSU\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 4163\r\nOrigin: https://claim-elsa.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=WjsfHqPtXLvRUx4F22P3ulTm5Qjrohqszlsi_6RZwM8-1770300010-1.2.1.1-bWGNPf.HWbCgQ4NjdxFAdCRjrH32_iZ9PBk.ycl9Sm0h1uF8.pSsIRy4VghQH97s9j2vSBjPZc01geXy7yUzp7_xxpPRNGDzXVd.Uvib2h330yXxEoJ.ZuCXcysi0JgOU3azBmlAafaTV0yyySdZkg48mcJOoL5NzgcG0rPXK.jrU78iShc5q9K638zPucdMUx7EVNlEmaBzCMzfN.bAUsHivl0nQOJXNE8A86ZdQPY\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nSec-Fetch-User: ?1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":4163,"data":"2430d3537851f38bf2b139b05d7e0404db95ba9ff2328f145a1a7a06d38c3231=BOCNi_isNR1qRMsAa6XDjSy2gdnUqtQER2Cynhd63fg-1770300003-1.2.1.1-hFsJ6Woa14h2SgScoMOl6tuAE592SIbFqe1j0x0YFqcJ4Lg1ams_bnLT3ItrSJz3Zkda.q4h1vwf3bBfTJK2SdWK6J_9PxvR5KEWZBIAbD8Xy.HHJ4wVTItNdGhM0dx6xPd4lCxcQeiNeq4q.OTtN_oxJFB08PWorKDBnz5Llg5Nidmtph2I6meeWOLDdVDywrC9LJ5wXuHn8G0kHryFE.N_.zY_SmOqznIpqWyhvVkbjZvSSwcZr0rXGiZGf6zT22UjUAlnCYGGBwMF6ulzi3gebcYr0Q3orLtTiGrrmFGc5A2djeUciVaCSpon.PDPAFBDJ8bo6rs2U7P28VbYDtleS__Wd7Py9t0fxCANzekhpBF0Pe6FPfSkVmWLENnmYQXAMysIxNsF1RCiqZahCPajeLXaNIYfAPLu6JuGK3OEcNcrmwQ8uh872y_nP_UUecQAvHmNQI2Ca80YnOaFcYwB1qNNxYCWQdFh_GnoCUxlYZcfHhoUNHzgfuvbWCwtoNEeqUR6IzRzvnbySNXQryyKfsFNCOEaTnuyQkqXqsz3vhw00NcAG6nWqI3PUsWmE4FC2mS4svXMBEwD04oNxZU9pn9ns2g.U9fbgvT_tkWlN_6bxPaOq.F.BpD8rp8h.hehrpS4I78Z6L.moAiUlK..G5ooie2UAC_tCNWYnx.SUgFYWpMq3NmKxTSQwlHBg7qVykf.fIkg5kukY2J8YL5tMLuG1vSFkneIRepAxH9elLMl8jj.XrgYLnm09ttdWe8TTr7JqCmjrCUaImuzBrmsNCBn.ITJJR_3sp8Q1.TkBAQTIjLt6LFJAYUkCoPqEwVIchbdJfJcJk6iaKCG26m1St1AEHa2bHpoY41HzRI\u0026b487a6f233114340e432c02771dc5588533fd1a33f12091cba041406f7685c71=nTUdKU5O6PaJ1gy08uUzSDtqMIQiVf_s2UIZVPh7z.o-1770300003-1.2.1.1-fzKpo_acTfb7p58Qsuk8b2HXw8V3RAt33EyWwrevAdC1W1VF_Z5D_tn7dj57fJyRPdnj.kVTl0y85Na.w.ABG8jasCjU7rMlbcStFsnv9VZx521NizLyeSPC_82G.r5.abuvuSPBN_G8JHNH8.3fjDg.U.meDdf8tKX1ESkgi31HSWju0N9BxnpX9mAmu5Od5WKTo3fIxLXAlBasFbcBpMSDmuh1rMEah.VKbHuC_8FYM7o03GhKAdqq049AOi5w1wKCX2HpuLK22JM_Nv_gI4_kpXZn0e7CwHVPtb1QLhIL_n7o5hxp4Q7oItcPsySwamwQRkS47Lv4b6kvykhljbdw44t1fCHcdJZGWgEYfmG0jh_iigdy8kKm0Jb.ymne0hw7yupdhOS_q3eeY0saytR2vHWgMXlFOQcSilEg6BHL8tXme6eIzol4coBaYC2NBuaThKTXhDZhVdYoI4RiTdWiWrJ8dIfL1qOC8TT2zXb954xjjIzeVU2jcN7NxjALpjbJnLEe_GxX_D7OL4fa0fDtFyJlr01XSHix2gxvNSOZ7LgmSrleKH6e0QuXzdii_PjAGTyee_9AgD.2SiQPtzarb69nsnzfcWIzZt6Zt3dy8lqtH3xh4hPlEHsKxbzfd8dBmGpH6svjjoRAqBMKutP8O_x1cvGnjfrY.cZJmCXrT7yKn_ClUW7mevYVhoO.e7PGMzZyWRNF7bOH_.CjQPVkQXxU37GWKTagyNRVt_HJ0N.ZjfQdUC2FzyY3taR4InIbZKOWZjx0a.Nxy2RvbJrm5QoVptJwOeB_9VvH5Wvg2TF1RsSYDCh5_gVT0.aSVFk0A_.y0wrLS4g0vixk8KRg3rHFm5UvLE_OXvZOadFlWrKohpNS9UwE.2ZIeSNMPxDkpFjfDHeQHyIhlpXW9DQkwmLp3nArwlP9sqGe21jNq7bAeH2m5dMpaSy5RHl0K0f2umPeCZxzWjQiDHzq1H6p5D6h2ahW3IkvN_Yt8FAkOcvlY91_aE0bZwKcHAsUFsELcS8bQ4_CQS4uzliCxCAr3Ee8EfEdx.RHfmavrYyHJJ70Tlo8Jg7A06GrQLE0tRUTkWvLxxZI7msa29fbzh2AFK73hPr12x6GcbDT_O976wKii4VvfThHpKlUTFoWWg7tk37g1hEphgkxqYBGjat.5gchY8O43ypb_s4R6tYD9.8ogc227SzI7iyTpPGIFmPzVzdxmJfdEuyAMeY19n0hIDWhaMf93bLEzPetWQmDR2oty5GJXRcwn0_jS0zExVo8IRqjnh1g2z2ALKRdKeJYLFYF7TZuxsTBLWw5VmsXmZ1CBn.8DFM3QouaaIOZB7yMnvrR.CYPyH9.k7zexn1x7YmZWH0dHXP5lbsbHPzZNtLadrJmVNtPk0MuCWlL11h_rLZog8WBHT4kQhfQ0KJCS7La0RTpIm5k7bwYBgRlDNo.t6dWvPav4.WAcSm4Pr0fDblmouPnx_YG2ULnVR.XV854rxbloA72eHVOED7nma02_nKUig36N0Ha_Q3affPYI8pH5u3CLcfPBdV0OvrJV8REwkcWXJQ1IMLQiF6amCWsNa15.wJrohiVY_Fu9nUfLLc2ffHSEenRwvP8kvKFGnS4PtkGJkK2WoYC4iz0qhnKmsz6zSIAC1Mv6oBIzX6dPB9KjWd3wT2n5ne3YL5k.9tMyVySh74bPHqqhH.8N34OkOvD7mLPwjBCOFVMr2UH869pG5yyyFN.lQkp9jpght.K9SI_ZY3V5648moIIhPAxuSF4joYTMcFv1n.PrOd17mioU4.KBmHqP64Ti4qeD6ZH2nT97ZiNdiLRL2LvkEsMLKS0d66G0n05O2xv8vIJfOTCy0_UYe9Zs.U2KBtmLJRSz5.8fhYjXMJON3UkB0DFTX98dU8XPlqgDdXS.fbEQ8_jSCFaaJ_dcKRzCuoPBe5CzI3vv4Crgm45X0Zaw9ad9_3nv4z7z0yJ3cFpJdoxHygm7h9P5fQ_4wS_d.T6fw36YPor9SCVHw1C_eoywwKf1tKHiX8GBsJOGUED2fiRj4UQA0KZyHZYUXn9r8gacKr47y_xzqbQBPuNydrU95d6ngVzORgwBm_zk7kSfQnGNGNaDpbojVbvBWepGpReSkoTqO7GJQBxmCNDIBu.vN2gRQhSCVd7t7ITA24SPgWwuuYVnl7qvaXFx2rKGPxU.gI9JOKzT5z4RA8V8uiDz.LXqnwGgbmQCRGBbzXrzrMTyLf8tP16TjudvKWlkAWBPwQIab_gRogh5l8RqZXqT3xrjPRQDY2VOppnpG1SmVfL4swLhG1HVKdH0EROLphcH.53uo_JfEwn54JkmDbvWDpToes7xsmv3EUrAdXMOjR.57u_K1QSdinnbSMWvcn9uENPHdArKiLJqwNn4q2oe7IY63dAVtEodTty_nqWSu7U8nG1vP.5N5S2UEZbxh_d8.a79nuYIj7djSM1sV7e_zXPzIYNqFX.A.3KjI4YdR7xCiWA4AJAEGnMD6SVHRmHEOFgJgQPpWqwPLnm11kbmdmA4gRoz0fh.2AVspPfxOCkhl7teqlzoP.mjPuMXApMs2tkA7RB6CZtJ9vVMyPxXCN.BeGTvAhWxNnQ9ByzKcMMZPepPbPDQDM1xdRh_kgx4qvrTz6jwL9qgD2MmDLWdrSIMYxX0EATqQkUyXb3AXmlQn4Qa2bEtiUcWpqV5w\u0026c6e92e63ea6d0775a64771c8f8bdd524af722586251c8fa458843b7693a950e9=taQn_2C3MinLK5kdPEMUqDOkh9C9aExMgybtCIqLMaY-1770300010-1.0.1.1-11j8bu3zf5CXFOQLAR78RpW1AJ.VlCUfAwsX4xqS1hqhxROfo8y_t5eXUs5O3Q.tCOvBwDpG_q5tSy4Lp6e37mYd9qdVaVpVH7heSXKojiws9fbNaknYc6B6lsRa.XF_c0OQwjHYnTtX50qc6AK0wMP.yyvtCFj2a9az6QV5aEK8sPWUFQKsy58ecrdyycVS"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 14:00:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=BIlw%2Fs1LQ3i2XDBnOX7c%2FZBAeyb9DF0OVTKC0NBZGdFZEN%2BTQloF50%2FKMQIQeDYPEFZFgRNV%2FxibJVX9bFS9EYmo93d%2BNCRa9z%2FZpuOOTAmfgQT68MKN8qcjp9gZa9aw%2Bg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 18 Jan 2026 08:34:34 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 2576\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 9c92eebaca3a56b7-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=3513\u0026min_rtt=946\u0026rtt_var=4426\u0026sent=83\u0026recv=38\u0026lost=0\u0026retrans=0\u0026sent_bytes=75458\u0026recv_bytes=15464\u0026delivery_rate=14533073\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=53393\u0026unsent_bytes=0\u0026cid=6ca2ff481225513c\u0026ts=7652\u0026inflight_dur=87\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":246466,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"3bf7d914ccb975790657965897f6bfaf","sha1":"fb9d732d1a78b6166a5e1c88b0dba1ab56f704cd","sha256":"b38d05df770d9120ad55cab7d12697a1fbac3b1bdee80a16694ede8a8d29fa03","sha512":"71b6b6238eab1547a68fb69ebf1105bad937766167623ffaa5f6af40f871e81e0f31d4ee38cd52c2650bfa2517f76755767fb3a4ad69039b9d35e13f69d42056","ssdeep":"1536:6chR9WeS3cLQ+D9ndIlPoQEUmiW/zLI060AM8O3k3lJJ/TZ0Y8yeE4c0Y0FvdjuI:LDmPCLI060AZAZ5WD4","tlshash":"4834b7ed37a004b4ac6b4beebbe6119e3637e013dd0ace68f14dc7409fc19a8945a745","first_seen":"2026-02-05T14:00:40.486398Z","last_seen":"2026-02-05T14:00:40.486398Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/9d65d8acdeaa72d5.css","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-elsa.xyz/","date":"2026-02-05T14:00:10.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-elsa.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 07:47:44 GMT","end":"Sat, 18 Apr 2026 08:46:05 GMT"},"fingerprint":{"sha1":"2E:1B:51:31:16:44:BC:60:26:2A:3F:D2:5E:87:C1:5F:11:94:BB:B2","sha256":"96:FC:09:9C:A2:60:FA:0C:A1:97:35:68:41:D2:C8:CD:DD:A0:28:AE:BD:1C:53:0E:5F:15:91:9C:22:86:76:18"}}},"request":{"raw":"GET /9d65d8acdeaa72d5.css HTTP/1.1\r\nHost: claim-elsa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-elsa.xyz/\r\nCookie: cf_clearance=WjsfHqPtXLvRUx4F22P3ulTm5Qjrohqszlsi_6RZwM8-1770300010-1.2.1.1-bWGNPf.HWbCgQ4NjdxFAdCRjrH32_iZ9PBk.ycl9Sm0h1uF8.pSsIRy4VghQH97s9j2vSBjPZc01geXy7yUzp7_xxpPRNGDzXVd.Uvib2h330yXxEoJ.ZuCXcysi0JgOU3azBmlAafaTV0yyySdZkg48mcJOoL5NzgcG0rPXK.jrU78iShc5q9K638zPucdMUx7EVNlEmaBzCMzfN.bAUsHivl0nQOJXNE8A86ZdQPY\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 14:00:10 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=vaWkn%2FGvFwqM3n9OWsZ%2FWCSpYkjABk4aJbQAVNjhl8Pkg45YVV%2F3rRtXhLdzA7MPQBdKsDa8wqfFp3T2xuAkOapj8%2FOaFp8BDS9%2BU8rvslRK%2FUmdLDwW1xWJvp5V5v%2FjBg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9c92eebb5a4356b7-OSL\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 18 Jan 2026 08:34:34 GMT\r\netag: W/\"2c1b4-19bd03de0f0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2575\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=2497\u0026min_rtt=847\u0026rtt_var=2696\u0026sent=172\u0026recv=47\u0026lost=0\u0026retrans=0\u0026sent_bytes=169710\u0026recv_bytes=18263\u0026delivery_rate=14533073\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=53393\u0026unsent_bytes=0\u0026cid=6ca2ff481225513c\u0026ts=7748\u0026inflight_dur=95\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":180660,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"8f78f153af22a1f5380219571fe7f087","sha1":"3a3d078764b30d4ee3fec0b0451056c0e858ff74","sha256":"7f2ed7a84655f5719978d5aed5cc88c8f423ec6b3f0a7ac9435bee0f9b860c41","sha512":"9d6dba2bdcbccb05cd0b95d046c5a5de69145421dacdaf52d785ad8c153541d747cf8a397a3d02da006dd3d41a528a45cf68be85b92de07d7105960d1b16a372","ssdeep":"3072:L0P6PwbzPqbpjRkaBTARm4H0/IgBZzGcqIKQF20KARhvG:L0P/vq1jJBTAX0/5UcNKf0Kw0","tlshash":"6a043330490a001fe1737661bfdbb1721e7d240463d84d228eb95d26199f8e6faa3b5f","first_seen":"2026-02-05T13:17:46.814014Z","last_seen":"2026-02-05T14:00:40.487114Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/css2.css","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-elsa.xyz/","date":"2026-02-05T14:00:10.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-elsa.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 07:47:44 GMT","end":"Sat, 18 Apr 2026 08:46:05 GMT"},"fingerprint":{"sha1":"2E:1B:51:31:16:44:BC:60:26:2A:3F:D2:5E:87:C1:5F:11:94:BB:B2","sha256":"96:FC:09:9C:A2:60:FA:0C:A1:97:35:68:41:D2:C8:CD:DD:A0:28:AE:BD:1C:53:0E:5F:15:91:9C:22:86:76:18"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: claim-elsa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-elsa.xyz/\r\nCookie: cf_clearance=WjsfHqPtXLvRUx4F22P3ulTm5Qjrohqszlsi_6RZwM8-1770300010-1.2.1.1-bWGNPf.HWbCgQ4NjdxFAdCRjrH32_iZ9PBk.ycl9Sm0h1uF8.pSsIRy4VghQH97s9j2vSBjPZc01geXy7yUzp7_xxpPRNGDzXVd.Uvib2h330yXxEoJ.ZuCXcysi0JgOU3azBmlAafaTV0yyySdZkg48mcJOoL5NzgcG0rPXK.jrU78iShc5q9K638zPucdMUx7EVNlEmaBzCMzfN.bAUsHivl0nQOJXNE8A86ZdQPY\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 14:00:10 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=JiOEJMoBXXbwQNBEEWBKnu38%2BIpkht4mcPk0QLxbAoa0gZrONEv2Im2SWqpZ40lxAOSsExIAz7re8%2F6%2Fjr4l6b2j00J8D4bu6z56yLRPnpUGE8vMgb9og599M%2B3h6CfwPA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9c92eebb5a4656b7-OSL\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 18 Jan 2026 08:34:34 GMT\r\netag: W/\"1aa9-19bd03de10d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2575\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=2173\u0026min_rtt=847\u0026rtt_var=2084\u0026sent=224\u0026recv=49\u0026lost=0\u0026retrans=0\u0026sent_bytes=229374\u0026recv_bytes=18354\u0026delivery_rate=19527246\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=53393\u0026unsent_bytes=0\u0026cid=6ca2ff481225513c\u0026ts=7749\u0026inflight_dur=98\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6825,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"b1b4a008c19b4fb622af6b5d40f78f53","sha1":"753c65bd1402289af4e0cc8455a1a7c7d3e58f6e","sha256":"19d1f58420f480bc20bae3d372eeb699a25fb851872839af052fc7833f1d2b16","sha512":"3fd63c85b881ef89175b0f3dae07b56b847daa3a4a5db7be7b63ae6b57f967a5bc747aa337441c404f6e89a8a4776c098b2da799b5dfa430068f71172261624a","ssdeep":"192:9TNSbO34o5DMTOB0O3/v58WTEv+O3RB5Gp:NvWsJ6a","tlshash":"ade17b91002ba400a7970cd677ce3f3aaedd6044a049da782ffd0d8a6cdeda953a175d","first_seen":"2025-08-15T02:26:36.797065Z","last_seen":"2026-02-05T14:00:40.487822Z","times_seen":3,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/index_2.html#origin=https%3A%2F%2Fapp.heyelsa.ai\u0026nonce=6d1t0wr0lfl","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://claim-elsa.xyz/","date":"2026-02-05T14:00:10.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-elsa.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 07:47:44 GMT","end":"Sat, 18 Apr 2026 08:46:05 GMT"},"fingerprint":{"sha1":"2E:1B:51:31:16:44:BC:60:26:2A:3F:D2:5E:87:C1:5F:11:94:BB:B2","sha256":"96:FC:09:9C:A2:60:FA:0C:A1:97:35:68:41:D2:C8:CD:DD:A0:28:AE:BD:1C:53:0E:5F:15:91:9C:22:86:76:18"}}},"request":{"raw":"GET /index_2.html HTTP/1.1\r\nHost: claim-elsa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-elsa.xyz/\r\nCookie: cf_clearance=WjsfHqPtXLvRUx4F22P3ulTm5Qjrohqszlsi_6RZwM8-1770300010-1.2.1.1-bWGNPf.HWbCgQ4NjdxFAdCRjrH32_iZ9PBk.ycl9Sm0h1uF8.pSsIRy4VghQH97s9j2vSBjPZc01geXy7yUzp7_xxpPRNGDzXVd.Uvib2h330yXxEoJ.ZuCXcysi0JgOU3azBmlAafaTV0yyySdZkg48mcJOoL5NzgcG0rPXK.jrU78iShc5q9K638zPucdMUx7EVNlEmaBzCMzfN.bAUsHivl0nQOJXNE8A86ZdQPY\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 14:00:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=1GE%2B8OhIuWNhT4i6GkR5r1p0MldGu2k9Pewt0YyTi8eVeAGSrQfxMGNi7ULE3lhwyS92snKCaPF6rZlyi%2FaWJfVhdOSkj%2FNxsqfiivlCCXQkm0Mve2ZUF5raot0edj9CLg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 18 Jan 2026 08:34:34 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 2575\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 9c92eebc5a5556b7-OSL\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1580\u0026min_rtt=823\u0026rtt_var=876\u0026sent=242\u0026recv=58\u0026lost=0\u0026retrans=0\u0026sent_bytes=242797\u0026recv_bytes=20317\u0026delivery_rate=40350807\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=86531\u0026unsent_bytes=0\u0026cid=6ca2ff481225513c\u0026ts=7910\u0026inflight_dur=103\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":59697,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (56039)","md5":"27fd0c10fdf2cee6adb4f0938ac838cc","sha1":"85cecaa8ac5f827484785086626a6caf210abbda","sha256":"6091f3dc905a4d47f4fac92b3b3f9890589e0aac9dc33abb368655a53351e04d","sha512":"af78ad750a3e187bf86494f3b2f24cb65a2b4254623adf6d0a277345761acbd71bc23265aeb4fd3c6d90dda7c7fec449e4b16b5df68ea41bfa8e6d0ec5351937","ssdeep":"768:8MjTgoFg88o8kQSlaQGLmyijZYiAbUdrQKBM/+Jv5Y2jAkIuL3xJNrtumWx/0:WU578kQSlCLyyKe/8v+YAk3Kx/0","tlshash":"92439ebaf384217d011fcbaef562bf73861adb4bda2b0ca1757c958626d3d61d483120","first_seen":"2026-02-05T14:00:40.488459Z","last_seen":"2026-02-05T14:00:40.488459Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-elsa.xyz/index_2.html#origin=https%3A%2F%2Fapp.heyelsa.ai\u0026nonce=6d1t0wr0lfl","date":"2026-02-05T14:00:11.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-elsa.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 07:47:44 GMT","end":"Sat, 18 Apr 2026 08:46:05 GMT"},"fingerprint":{"sha1":"2E:1B:51:31:16:44:BC:60:26:2A:3F:D2:5E:87:C1:5F:11:94:BB:B2","sha256":"96:FC:09:9C:A2:60:FA:0C:A1:97:35:68:41:D2:C8:CD:DD:A0:28:AE:BD:1C:53:0E:5F:15:91:9C:22:86:76:18"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: claim-elsa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=rx.Hxb2CGf7WtUMl1dnaJy2j.h7FzyTjYfJRsS2kRIM-1770300011-1.2.1.1-8MX2dQRTrvKZhSoga9p1rxek.Oz.FqG37AicVuYGIBuDEdjFTK5hT8uru_4CPfSEWtvNtaXeeTLnspF2iZu8tm45VTj04scriP4_f.W0dt4R7C_lniHQPVX6tNymJDOo0ieKXXLnE.m9RCuMIGlM18YospOoRDBSOsO7ZYeTyBiiwyklLbvkEdtwSN9XC.H96rO9o1rvnFQQupgo2vnnePBaAudPbFznkbQ0oBFxgGvcgJvGjkgy_XGJso8uwbd3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/d251aa49a8a3/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\ndate: Thu, 05 Feb 2026 14:00:11 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9c92eebe4a6f56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22330,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T11:56:19.668403Z","times_seen":17578971,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/cdn-cgi/challenge-platform/h/b/jsd/oneshot/d251aa49a8a3/0.06437466857555997:1770298327:TJRd2fYeK_8rG-MKdrV5YhvoLSZS8RAof-nCgDb83go/9c92eebc5a5456b7","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://claim-elsa.xyz/index_1.html#origin=https%3A%2F%2Fapp.heyelsa.ai\u0026nonce=ch8gljgswio","date":"2026-02-05T14:00:11.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-elsa.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 07:47:44 GMT","end":"Sat, 18 Apr 2026 08:46:05 GMT"},"fingerprint":{"sha1":"2E:1B:51:31:16:44:BC:60:26:2A:3F:D2:5E:87:C1:5F:11:94:BB:B2","sha256":"96:FC:09:9C:A2:60:FA:0C:A1:97:35:68:41:D2:C8:CD:DD:A0:28:AE:BD:1C:53:0E:5F:15:91:9C:22:86:76:18"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/oneshot/d251aa49a8a3/0.06437466857555997:1770298327:TJRd2fYeK_8rG-MKdrV5YhvoLSZS8RAof-nCgDb83go/9c92eebc5a5456b7 HTTP/1.1\r\nHost: claim-elsa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12226\r\nOrigin: https://claim-elsa.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-elsa.xyz/index_1.html\r\nCookie: cf_clearance=9IaYK8vJLWNGM5XtVNHqDqYgK6LRUiGFQP29slj5PlE-1770300011-1.2.1.1-3Pmjkul04pPi8HNBm9PMIL.GDF.A1MiI7_6G1s2Bj1sYtbMgyTsz32ySqi3vgoadeQfX_GVUa2rio_acru92ph6N6td3SqVSGXAXY3n0IrIMxpjgTmaVmE6cSnrvKQReNkAlyb23ZHgUMAMlN6Qw0bgWex_fm7HDdnnzieboFXd3ZtImNlzxZJTX15FllwV0CSYemLR6L_quaswfClMLNUaOSbjd5kAmtggFAwHMHuqJGe6OtoVDf2IDfwuCqeic\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12226,"data":"63ujbmUTEpZqqoDZpZHYYatoaAUDETfYUZouA5qUHpkLRDjcAaqYrmo5okXjZ60qo2j+pqoDxRstCBqYEg4TqYoeLLomjUr5wuDU2pbGDtcZUndAUxQnf6aQMFoont1H8jtDUfFcC2DoanDX9nbIoduKdpugu+3I-jEWYTYtEv+vY0+7Y0fopnuKCB3OZooVOc7a4QVU1qL$kPjor9YoHjEkN9DoXiLprkor5Py3i-jG085girjoqqYo5j67pFpbnAAoBw4bOMkm9oohOEMjomoo9G0YemUhYjU91hSEtOAbYrjokqvj1cvaSk8o$T8UhoEm4EwQvzDooAGYaZwjgZT9ZM9Eo5hGoZ$ebEoU+ADZ6jkA1EohfDRw3AOt8JrLJrphD1wwsJBcwq25j9aGTwwXODoUprXUow+kVLi9zowuLFG3A1wJUoqeL$e39npNnq4G-HnEsVDjZmYNokZ+eyOFG7IhSOfob+W3YQSghTBxg8JC-WPHBkgkVPmr-QaT2CYo7phOHStE2aqxHwooPmruTMEv7Uq03u6ebt3hPZ9QoZMzs0pKHmT1D+8ZGsXgZ9j2QQ00BxNvkIv5VIWoUA9qh2QPsxCU0Lt4Gt1z3J1DKLBKzoQmrZ5usxhq1DYtS$9Z6bsOiYPiyfshELcvWdXgj6zjC0PYB5nWI3N6fOixx+Z3ZI6hnVsGIuZYcCiOdNc6bW9agJ2jU7fE0mqNSpekoFfIw35VacVs9zqX5ameVoHVyvH1ERkv9zTScfciO8bj7Z3wfoZ90+EomZEmSYIZ0S7q05jjAJcJIPUjcD2m9c37REi4$jmBYOtCZDt0SNmrXmofAtPao+vaZAOUTgTCUz67vjPZfv0KcDpkmcYZoKSAIU6wwdt6cApQqdjN7UcYotjbpYjEouhkReu5Uj67Y0jjKqSako37YqYA0v8+vjtaoyk-wuftF5MWCMom8nhLfyvjdufCZbKUAULf1ZwwDbY7gLZHnZ+qJKPj3AESAJvEpx1CUQxY0rPLz7Ih6KQDdxLXQk6CZNYkUQwSY4ZA9YvPmkPMPYt6p2r8nSmU8r-0rDTuP7BxiHGU7DGunDGZqwfi2qgrcApwfTLcgsjhLaOPkM+Kj4raYczZYo0NYjPjczktY1EFZDhY7EmEADCTMKp6AA0kpfzD3AYxZ3fpSAcXOYAn83pYpSahu0oi6jvpnRKF2nOQxpZgAOZ3ao3uKP2vmnZNsPqZNNZFCoNYnzufnz3GIEk2Ep9gSn1vm-jZ2KbbYmpWJOjWsjvjwOZq2dZ3DUSW0uZ+psRYREwqVTaocXPS3DZ3dqwH0wfTuhaDgeMoTGGhUEpPujB-n$cDgdYVxLCt4o3gyP5VVTouptjoThPyPjqJnb34qpwDUbdLDehFWYXTjhPHG$wDjc$cEEA9XoipIuYCE$FjZZKhyF6Dch9m$cp90d8yRTrFJDsx3AuvQxjjpKcDcji5dPgXwmmXJx9c$J7kpVJIhd+XbhGEvSHVisf-GpBko+h1S-vKy$Jf+HyuvtyzmbIdzDVrfWF6K-2o5F8ICUuAh+Ipo$IvjAahZohCvzFsyRy7sGQ5TktwwOxThJgUaEYocxzuo1UuEK+Dc2moY3dj+jyAq6JSjK7e$MvmpHT4ooxQjYteSaa$buSf+oZMDUfTYSj0E0oLdCV1EVnDQZKU$q2cXsBLO94f8YtgBjUEDeuaNboVTN5w2wqn-oAjDaFopTuPCvtoVz7ydBpAHjcoPH9bMg3gs4jCp3t9uYb0oQMYKk3AV1p2UncHJ3eLFmRhAmpu3Lfq7TmcEBrjkwzuuGDEmQwjnmBwnA0uQPcVVsLeOa$ZuUjeQnnj5XQn3jSkX5BUDkW8f2+5WMXt+neuIQktEoCaoYI4qVn75k6jY$3NhExHud3VwMpq375KZw9SDU4EoAS1OkSzQTjwnTrG5kIUMEshphLkeZoUZ$kTrH8C2nqE55pwzPcyLRS7Ph9P8f9oTjSzLTqrS1o5jRSkkqXpHpet-So5E+qEShUut$6ruYHAPfPYVYoWkwbuchIQMvSkmqzzNFj2faw8NOYh62ER1dpwTr$bAAmnawcJk9IQ5oa1vCYetNoQkOU9tz1eKT0EpxSm2kMvj3vgxt5PYY6xmE5H50L9NeYoHroSbhpGooJZMNL9DPCeYLKAjVtJ0XUk4E+021GxzEjwJkyXDG1QMjEigWJau5Z6PQchMSKhpYN8X4OOqnQBEfdj+3eud+T6VMXO$CzW$$ZsHLr4StBES2gWqAPOoaOzNmchAacLoLhztQdu$FBt1FUs-TL6DQonky4DTKAnMYLOCOYe0GDoyWmS+LmUMnpGGDU6+QuYpjGo17JHGbokJhDt+ZTTL3LWQCJpXEhAYohaPpi+UCeh1vsuT92gYEAHpeZ062vP8PiXnv1HaCS+tFoexYrUmob3NvHvjww5q7jWT9WSrVPcfY0bTjqcqtzFIKV6etN66bawkmoH1JtUTKA5w2oPNRPHkjjq3M8dTjETO+vkV0yM84Fx76kME+ecYEMPWqZ8Jqeokp4rdMEwdBjDszh0oCauZ+vOs0KE8rOC7po779NnxZBAytijoLRVuK0EV3J4eBbD3R+ewWoLPuouVYX4kcnoLmfQTu0iKNwCX-4LxVJEo+iY1GhatgduBDbKoKJYXWHptkTp5QTZ2dZjA4toTXn++emz3mT5Tm2HM+r9m9aRiAV9rQTAUHAEwQBobPLwjpJsLNJWDYBJD7PHsijZSXuDhS00Co3Lu9Y7+oYsZk$zBTbKd9jhC71vEEgmV0t++T7iJpWPRv00T40vQ6r0ZArDrAuZoYhxwxsE3MqnhNeYocihwAduJ2prE+VqYZxywH0Lg-LXnIMK7Cx6huL7jc1qJTLBJuD3o2vEXZD83PbAyKn$-Yz2QW9BK$pEbqcvrL6Yy2owwA5QOqFmmUI5fhJh21ZhonyMANcYZ0ThvwKRVkhPG-NQHM$Pqf3QTYw+2hAUtXcYAgRpM6DUo8hZEoA8o6KbGcC9k25bGoReUgP8O45ren1P6VQ0J5p1GoFxtnuvWXjUGI2pRepSRazLpOmcv$Ag4Tr8fDGz8otkUnxipw7FZJxk1mr2bhhwRzNP4zwIrxGohtn0SMMzf9$KV8dowd3JVhdacIV2kp4xM2X+wJIHQuYePhHX7StazvJnSaoAPvU3NVaXnJdWCOgjDGbq-nD96n2B1Xn$wfwIGsA1k6aEkAfCeM6ziTJO9dENikZ-FZex$fYm9YUMBnpNqkQvMziEEVum09jQE3uVTeJesAQ6OIaO9IQmeyguNJ7DbXOq$UE5RXTVefWo48viYT3G--YkEgjxTrGNk-89Dfu7+YCo5HPA0-Sn17bHB1PcoJ8yCULKyNvn0fYK13DpoxjuYaRxxP$E64oDLjNvxtoKRTtw-jaX1e9ILCbk4KnmkIxgzum4b$peOj6K8kupnhOo2wLgnqP$Y9bkvj2w2$Qo0qGVihbDGCKeTIRayhAgOka3nez4BLKppjNofuDejLE$EaNCyYGCvT0A2ACacaOUNksCRuDaYUBnA4yCYzMh+hpLfAYzNT5mRYWq7C3KYaRYbAZIrLQzImfEnUjIzu0j0o5cfWVgbhkuLVpV2EMoVhfm29QnJ9KAIoGqDYHjfuwgHpOg4VKhqjdo8pjL5Uf$pecaeUFULq3UJg6U7oTUTemmA4wIctQYWX3AcLrCgtRzN$aghCMpEu5gzmDnzcpkoLOqLg9DMW1wSfLgnuoXRoXLBePIGp6Iecf$HWcn7kKcpV8$tmbpTuL9qKAg+knI095tO4fgkUohOtNUmKIoKtzuKeIkpDLvKgfgrvR4K7NV0whYGpRo9ou7$Xmv$eIabD5tHt8WituobELfEmna3V+uPvA9PtHna32A6apLHE1VbAh437dK49ZqQq5obI1gwW5I9XJhmzQm3h3ALIMepIz43uZozCGpaCugpkqfrh67f$yYEjscCUeCxoVCRgQwk$s9V7QYICwSaajWMTiEOjsIenTTh9jC3urqY4BeKAUjpkohmUDIeLjg8SdXREDuRCBez$9YAfi78I9joSL4p45toLYLY4AgpIbptAsoqjcpR4Ag4V5wrLMp774VsXLu77IkSghKoNk4Uk$K3juUHwDULqdc+LjNuNIoNoNKR7-c3u7vfj3foh8EdCFo8E5E1p2CwNBLIvXjiAAqoCOeofVTRosobAbksEoh-h43cntU1D7WDenaaIRoCIQwA43VnSySpk3f-joULujgHEc34L9o3cUjjzojbESAE4jMq48qNXvgOoJe-AyTMpOgIk8EsAOoceb7AzQNGSn43MD7-XhMKNna1YRoxo9MP4HhutoNW$GT7aiAnLU42A74FAwgbpjpFNDo9Tkj6K8MV$st3XzINSDnwOQnLgkVRoXgQhyYVELuW4wMWXnYGcBInn1MKWhSES9Y8AcLnLsOwhia4theKvaXrCgc1ghM8gPaomQX1AA4hhAj8M3Nj+$ULuu7fUquJC9jeSOEiA9oHIzWNYkUBU9ao+WvCgAUj++u2o$32w2vo+ZIQIx+nLivbM3SPT+MDc$K6MLcEOSfvp9jN$3VUzMj0wSfeeREStxv+q6znzWOn+6gz+c74XWe6KZV2cg7yYTGPoHogjINhXZSqKAcDzZpDSft4qQzDIRLDn-vhGpAGTDtiLwtgqGTzOUhuo3f+oypJGjUCV0oQITGjcNkp7xoTOaSNkvIb9$pnXOIrTKKsGkU-vhMampuWToe77OC-LWMwX+UhXKMBeYaTuxn1oZnCg+LEc1YsAEAvjGgQeIhbV0IijLtdMpcRnvGZzohqCRW8cKK+$JPbeGmHn-I-GgXcY6a4oqgzE$GzuFgzSkmvjU7yt3uMKcLzWOtakBeiGWW6NfW9DUudjRosakjhUVWLqA4jx5W3fEAVT4apLj7pk9YMoV+AcmOjW9quY3KZVrqzMA9VCjS79Co4Pz4e$7SrKHA9YnkkL9o1vaWA4$YxYZo5+kL2PghuLQCpYd+DSQYxIVNLPhXzGk7o+Ik8Mja$P5Si+QYXwDYkSsGGTAI0qaPs6mz-oiC86Wq9X7W7h-vH6XzVzAP8OSxfuWqu7A3IIgjp63VDAReTP4kZCzNALyvNkqfUYXVQ+3EuTNk76fG2SHnQPIaXpQX-WuLD6FneYHnfjTLQ42WQ9Io7I$pHG59VxnvQr5t4MIrMEdAuXigDOjNGxGT3VChWq8+7+3VwPa7O9LgU4qj9jXOG6Y7DIoUnePoAjDApA8x9Y+wexyxSfveZ$SfOS+T3KUN3+Be9Y$vZ+6vXpQoz7hX7O4XBeYAYauaIoYtMM9IfMD7Ojn709ZV0TbALxHEZwHqOOExMe0V4hQSDv-vA4ik1T-e9v9YWWja+$OtX6z946p49SK+eCZCDYpPxo2aUAc9wMnq9+7Nb$DmYK-+EP6t$phPuW5TpViIcjpV0rJkNP0wUpjvMEmzkNOgGgVKo9$MYgKP+YZz$9Un34-rpYJfRf1SKSuhkuTUGowWxT2z9j6KpvheFgXvUtbNoUHp7rRAtvJNOWXS7+jNJCpu0NV4zWZsP9neZCBggh9xfMohrBhpKAyTFxSx6Z1wqfEBN+LgnSkj+EjLyG3fWTaXdA9LBT+$HATXeLJI3KN7+$svbTygdv4SMpRrLtvjehn0IqGomt2PZCqOxop6-hz4oVeqVSCLTco+VgzSuS3KRYRYHAmeWqOgZB9peEwpXjoQE9r9j+3u+SwuBe4V5xqj3h2zbk77YaUuzknDe0vsuouBZw1gq0fjVTbpiX6tpYtAzat45t00sAkujVxrAS5m3K8M87dYYODZc6arMEIkIB66uMB6t60626mXNBIYgjUjKe+G1cfMu0pEPUOPfx142IRWs$$g8W5W9MoGPMYGncVTDKA4EckctmSC4VY6s$77gMxOz4D2IjtjUG9N1c4LsoTSZ+Ik+uIxo+NLkKOoMzuA8tnsXpWqOtzE-XOtgBq0UM9Y-aI9X$5M4vbpOg5B+$htRwItxjSTQMBUMo0U-AeWgEEjDqFTjPaLieb03M5NvB+ec3Hw22xeRjYco+ot2uMsFn5ottor-X2BpkiI6+7+2sShCa4qdC3AV0-um7fGYCHpa7XCIZL0P2kj62w2DOe6ojwBOj-GT+56t6AriCT+RG+$HBdBMphbA4ivghZ+EcnDjbrCvjKZNoXsKTtNrNSNQ+xP1bBBnadbZ+ZVGZNrFGX$mTnT2QX$DmsgyLgjA4ZVSBxauICJNXcJfrtaVGGBF4sG+VRYA4VVqXKXYju2XP0w$Lk$6MBQCgHpyCvVwUgNb6IgDvmzQAbAbUu0NYyw0Na9vNVBpkNQQYAP+98GiB3MNvvBz0OBJ6SNrOQY7az4hN1a0$bvA2QWmWC2xM92oj+uK9IX0M3MzGYZI6r8HUsgr7JryVtCuKMp8sUVGzYjS0Oj1rEUM6YjuYe9BemNGo2g-GV93uJWGcyL0o$9ywxZ5wZA1PCaiASrCsTu$0c8bA5XDBBSSBBbXrOQ0oZjdMx8BX-YDYHnquf6iWyjkrf8ghJtLQQGBIcjr2CZcZ8qgZ6KYeJh1CEML9MjTAOjFxOg8ZghgB0ZcRUVFQke16kziCDrq5MBOTfOQr3VH6ojEMGccnFXEWEm-n97u4FBordGxoQXS8mt3fK9-ncStVrXPsmJB2j+SMAt-GNIZW98ERKeJWSjOghhIoDm2TqAv0-UshSNsNF7taJhu0WX91DTiOEMbD4aJYnCGNqu77QbB0QEIRPRC5aK7PNkL2H72qxrH0QQePUGAVfVWQW0TXNUz5N0MemB6Nzr4caXKei6T8-+G+84+EFAuIqj9sHQpYZh5VhpeYPOx4z4IGEefbp2uxJfeQOYMj2H6SMEcNZztO2Ik+u4A3iJT+UcvcfJcs05V+TNxOyh4xLXpX6Wc8u2+uzMmjcIS1DPkLLgL2ohFbJ9rRzWvpUAHpnbG+$B1AEkvBoBjVwPCemGo+oPm1jbd4o$iWIQhUHAgTpYiXtnfGz03GN$8MvjFZGqkc-n$zNJAv43BPpVNUjbZ+GruYj0uLd07eAjjgxRh8gveY6RBsqh0q4ViJo4ZXh+OQxtoJamQANR9drkAMatGkvBJefjxZW6nVGb$ub5y55T7dM1MdryfEtaPJbA0ErBXjfGTu0nan3i+gCB3ypYsxXjgt5eRNu+x09IA3SBmytcNO-emhnQgWCtLuKeUg1wTaezwJiu$zokquosTgR+bDAfQ1PPgbMxhYA4-MzqmNTjhNJcT96KqfdjXjrp-n9sQ5v8a1H4C1YLPPKmI1UXC$2iOo5tj$HLK0m0cLX0FAtRmPbAyCYOORomW$GOQM-v8MQJOg2-GsIeLuSLRQLQe$wQA8uXJQ3KFkjXX$C+jd+LxUp4-v762-y-riuoW6-YhJ11RIy11kO+f$zHNtqf5t3FfWiNVUX79Yykid0bmss676hM-aKinhqy+k61$2Xj0vutSPpkmrRnxUpNuYk-1AIW+vs5BeWFjStwYaPweOjgUm0acbIU9jaso0n+UhXHwsw3Uch5odZW$Ucjm1Z4b02T8AnykKSc1UD1xtaUK4uCQJjutpUHPcww6hSe+4m2BpPnro3mNpjAM1UeV8bYGERLJ3QsjKCAS3hYZtuPYrjTVC0SLeRt03Q9CABhbJAItaorjIpUBnXX3D63qoCAuDbI0oUH+2o+kCYMqawZiYrWXpkZ5uhqOYACVqvSYH+wnaMotncnWp1uEyS5DBUAKvvcDZwY$v8u4owt9bvLa8U2DNAWwnjvcOotzfikoYcxwfV$UuWSuwuYe0EaXoutn6Qw6zam5EstTTYGUw+Em50jDtA9BVZZUSZC7uKBeuwuLSyMSEEtDSpkuAuuJsNmhSYXfHx+MQGO$tSa+$wzZV5ojatVom6UjbBtDZupYuweugCWa8UGo+YpoEp6h5ZDCt2zd-9c+ha8NSmTSwJZpSib0otoTxagja+hwfpouWZUmVqhwZWBAz0NQYrquW55EiuNAqipncXaNECnTYJuYa5ptILktxSwnp7U5AcS6j1A74SK+ga8oauojk5NQtSoBSqftL6$wwp4owArnnuFYjwdwwntDvQHP$dfYWVLK1uXu4QhmdW5$wST4uIoiEdg0BoN9s$W8ukbt+f0yfac83YGE+WfryunLwnwpwDkHBmtAucCoLdEmjP33TLuwdk6vkQSIveAZNuRZbvIUzWburfoF1NjkmMTFCTTah6DA1U0pmdpwCub3$ps1nAuJeEoc4wqDTKBnEecra080jLveLLqNqnN+P3TUHpuqiOeEaMUbvM1wnwEb7O5ZvoD8wnduhtjgmbUDut6EWhWUemoACLU3Ta6Z+cm9neyCOEnhdbno+jJcaY-pbqtkwAoXD3pMpbQ5CYTTCDVSmLS25TAk$IDI-nE+7YRtif33ZjSCct50oRUVtHohEELEKYhtJY1++8jcaBZCtkY$irjEhOt0baabopcGZU33DvtYu2fq4pyYmmQo+huKrJv+8P04orDVTCEUs5rfDXRwSqg9d5Z0Uaf43Oqkk5Ho4wUniLof8RZbA+06jVT+K0EUa+RpAe4o8pCOZD0PZBzinhUjLpu2xfvvEjTjwAogmXp5u-JuwdIpo1qUuW9P+3+315ENAw4wArr6UcI5honaj8UAU9udaQSzSGTuwbP+XfM76mRhMpoE+FZEUqodouAw4SvOhBZuq1LuLDw2XNDnD3KbS6UnDtUU2ohcd2E7ccmuA1L4nZTju+3GDoBuijwkkowcuOLZwNkhkvJ4R0qs0gPqoMbEUDSGpahJhBPekXG5koCgJ9uAwKasbDoZItOae51XVUbqBerMvmkGtGXZDjg7jPFUKELoXfWDOrd+G3ZzAaMFf2ecXU$cAuLELEju-EeYmD1AG8UWLoGiA+hZLk0ooohC$oqj4UrjEHGgj6YKoJvxWTvd8vjuh6toiEM8jMvNmySK3qj2u5DeqYIEBANcHXYTtz+HuDYXo1YBaP-M20$NDvb+jAQG2qSbU4AdBiC27M8UmjrQd3SuUzwWv6Kmjdw03StUQs2Cvj2DS1mDEskWSPrTTa+hR+ZEwzc5op+BHE3FTct+owKe$dqfnjeDuYwLBEoJjNmoAbLrs1ISpZbkkY7hwLCO1Tjm0Rjy6PWo-7SUz7ToHpwLQCdakiQBLQdvthscqfpqct-AawpBCJ+2f6gYudX6Vdh1dQEpufnwaE+850j5utmvZe9ct5zoFuikoeYLSy+hoM72z7Xu1ySnnjmMKuCeTew0ZVvVkSyWDw+wA$9oQoRY+5U5jNwIETENo+qQUy5tojgohzYYuVuZUZUOvDAwfa$cqEx62YGoC3uK+hkjNdNtz+YpeEWfmvh7GTcXdToanrU3ktq4bG2oLV-DahMqjWv8cAOnAXoiptkaMZwaJpqoBnwXcdZq0$vZubqOWoqoentpYo5q7Tk3oDE7LHMrpTcLVL0epoRUqjoAZ3+-8aTRuUAZ6S5pcXC7LORAs4g30UkBu4SnTmfZ-+QeYAzOi4kcg-P2Gho$ojTJcgs5RY9XC7uLhqT5u8nrXIWxTFruGEgSBXLjqTb4gy6zE$ToX8TGq8NaJ1TvLqOTtXgw0Tm3qQ93kPFuidqtFuggbqnAU562neUsDxj+4g6GnELEFhBnoI8meL+rXZOZz+4HJCi15BNq$KycHJCe2FfYXOqCITfU5n7oRubY8Kn-SBnF2toquo4YAooPMvWp+L8IPJAd5FXrgkq69Wof5nAbiXPKycT7UYJIDRupjEcERSnZ-nT+pTyc-5ui7r2duTWhyERuww2Xu+ZouiGFSfPo7V+hATWb1hDLW3POSdH8aPwOm5MMoQALRh8S2OEUwabqAUHjPkNr2XSy$+tgmkfLmb2DjUBtkinBjmbhTrDG4QZhwodY6ExEfZtvttEXbL+uVdKmuNAa-XQ+PfGeoDJ8n$vU3N$QUWVbPtv2$DcEt7gDZFewbH+RqM9dDrcEHSD3bmy7L1bfCT7oGmE07DwVoCZXYG7e59BY9QN2Sd+Pm6duF6KjSboGkkOn81haZm2Sv-Yh7MorWoObSM$AtAayZse70cuJ9ZUByoVL$oPO0oWRcSjLuEhaGkOoOc8+5GSr8zLZS78Fx2GLTZnLZcNgfVhfq7yD7KrQ6zJStebL+9UBeJLr8G4vUMgU6xuzJqtFEHenaSMHprCPrhMG8TOMDRoaPnwGOhKKAaLr21wUEjOjQX6O+2nPA0nRWa95YfgHhNYL6KycLE6AZObETpKh7mwUILOPxWxEf+k+5cLGDRuOoku5Zb8G4YDPeEnhw4d13uVbNFzVjkYfVE$T2tBnTDo50Stk3cTREIXBYrUYwJcI9hxz81dgH5THMuKcbd52q0jM6frh7Fq5+Qm4Y9jcL-e8ruptTbitchIXfdegtChjYuT7OCsbwj-o9uMAzPBya9CauKcRnTwBh9I+TYguquBFqm+a5pb1tsnECg0v+C8UiMIVifcEr+GaJAO1mNWDWNKL7hwaMVnnaechMBksqtVIeYK2xQcmXUoD5AZtjUQG0d+md-xMqEhHfxjxpqmCHbSzZUVRuMo648VqsecJPOiqKTbaqfoU2pOkWxOgpwyGP2BPLTIcLefbPhGwOPo6AwCV$bKJcueWx6BCrKtPVcPnVN4u1mbH+XmxMTXrg4VxCa2WO6WyPTyd-JsJIzAX4rYcqmPSVUxqkmB-40EPZVLjIX4Pgdc8mbVNOMpaxCD511qSfvNXRG8h9SYd2BP9WRrTQw-AXSrx2oU+c3rxC12X+rWXIT9frL-bBPQK3co64-PyXGobKjs8hJxfbVbPfEVs8hroH0JWxfEVBWUVjHIhu6yOcULUrjLZm36XEtsLqiYPSVq+pVmx8j96k$JExrWftgurGCnht3yZCrMYqRCnWOa7$JVZuPJCqhnxJEnB8Vf3C6B9+4OdtH9YawCJv+9$J0QnZwCZJMPnm1WJvNnHnWe6Km2iivVLH5Vgqm0P98hfzPWbt7qVyvB+1HCqY7pUay0PWbFLaTb+VTqQYNJ0YkLVxzk77PLJY4gbo6ea27kjNA4gbf+ga278UNq4thw6Je32EUiq4UbA69VISCMipoMhG7R$iXo+VsYK0jrTaANkWNhHJJqGpCnfo$rJCrbNO+eObYqidLNWXDaX1W8hVXzq7B6nXAMC9Jk4$J0GYXIQvWihxn77GkW$JYPf$H5JZG9Xxbu7rGH68Kr$XONP4c4CnoPG1CsND7EWzRb$rNXN6LG9gaqP2oR3JPQu+3jQZJ7T4RQUX67vKbhTdecjpYVUUeUcna411oSq4ZJtRjrunnw49puYUnANYC3wLV0PIP87c4TD+tk4EdYgoUFasNVcOPZkK3gUhhUsfnwCJr42ztbBaJIyk0CjqqifumpnxAQg41hOGTe5TU2uUonooodYf$6uuVSfoo+NdjALQD+YGWEyobM8RTzuh+FEuSPuemC3Uf0L0Sj+zSjd8bT5Nx$SIuXDWk9efoowEA-qhCU7ZAS8jCAHXhuZ1bejY92tgV5v+awJmwYsAhuWN5hGCSBAn9eqHbVAoNt6jEoZ1YooNFoB3ooSYE$NBRo6fexCQUCoaoWwYyHDboZwNvB8YTHk0iP4W$rBO9XjYuoOyDjcB$oZHYoa3cBO9IU5RfCEU$cB$qaowjwBoW$sB5cysE05uofRtYEoBow1VQzT$Nw3A-koqUvyYousa9AyBIHAoZAunXDCdLA+uGWU1rdj-QZrCQo$oqB+uMuMbifU$UFG93CiYA5JyBopo+nSiHKic0ej3xxoCjpyNDZjv6jUUTT5rbfwWEMYOf++Z-1B3eu7srnPK-O+sQSj+YnDb58voAtN2WmWq-LkLp1Jvo2N3TIT93GVmx7nAQWG5g3EWoa7Gsy1SwcoH6oD$kDccAYpY574XUEBDIV$0qUpZet2j0IjEgA16EEYLBEo+po1qwmGjiB0fkohjUjZyjpuspRZbPoTjL0nAfhU1W6bdwLm7sDSwKjkSuevoJYsA8VbfoDZfa4sCoYXMAZ57Ct$ZbVqVEYWAUCj7tkVJWE06D5Sjoo7+dVAS0$0rMg6rcWwv4P+LB$cIjcFr7x-$EBhcmjvzt7ZYUovKkdjKQNpooUgEYAuooEnkoTL5fg+Evt0ZPJ+TDEuvvX5vt1oooaQJtzDCtj3d4onNXNtOZkTiYaEv0Eoiw+AoobOIajoo"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-out-s: 6iNSLPg0raAH8rYnkRNVFg==$pQ50C0opijBHv6mvM1SGEg==\r\nset-cookie: cf_clearance=sHUKtqIt9kS41Wr2V_pvFzJR9h4yBaWgPa5DFvMTZpY-1770300011-1.2.1.1-vWHA07UYJmpA2gNx5EP.BLLDY3DhuIRjInep6xIhE9qNWEoBlo6Ln0bQI4uIMZhUUXsvt7VqJPMT18ioibENX9vCFtgq9bDkrY4G2jLoco7TzN5zYtDQWccjHX0dee7MnFNJA9tPk9mNLNeG_R0V7InHC8v0FRpjM1S5xebO6wRyXs7TGzt5RGrZle8Z44k4AR_9SrGHJVLka6FRIvBCHeTTU8Ca_pJSGANUn6yQr95LDQaNHEgWtF6UIrc3oGyF; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=claim-elsa.xyz; Expires=Fri, 05 Feb 2027 14:00:11 GMT\r\ntiming-allow-origin: https://claim-elsa.xyz\r\ndate: Thu, 05 Feb 2026 14:00:11 GMT\r\ncontent-length: 0\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9c92eebfda7f56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T11:56:19.668403Z","times_seen":17578971,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/favicon.ico","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-elsa.xyz/","date":"2026-02-05T14:00:03.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-elsa.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 07:47:44 GMT","end":"Sat, 18 Apr 2026 08:46:05 GMT"},"fingerprint":{"sha1":"2E:1B:51:31:16:44:BC:60:26:2A:3F:D2:5E:87:C1:5F:11:94:BB:B2","sha256":"96:FC:09:9C:A2:60:FA:0C:A1:97:35:68:41:D2:C8:CD:DD:A0:28:AE:BD:1C:53:0E:5F:15:91:9C:22:86:76:18"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: claim-elsa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-elsa.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Thu, 05 Feb 2026 14:00:03 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'none'\r\nx-content-type-options: nosniff, nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nx-cast-cache: STALE\r\nage: 2576\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q3GOeOLYFuOoHGORtFM7bpe0QLi08wJN43gdXDu5DisrpgH7KBIo7rNOKmSMQh435oGpwMau8g5vWHWzs1EjBmixmNfXmHsdyaKx0A%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c92ee8ca82356b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"84241342d84ac29592a5d9516f8edf7f","sha1":"03c53980e18e17625f439c20e7d438f066202428","sha256":"6e21162bc64073fe9e3d3d6375ca24d04fed1912a5b7716aac0cb0f2d16fae7c","sha512":"7509483335c7a30365f7f403098491ac0b44fffcc68a5cdacb86ec191f02dbda5b16a20a09e924b6a29ac938578d43bacb9a50115db5c5668ea27fe1811bd530","ssdeep":"","tlshash":"34c08c9e140012010b2087042ac1326464973b992de685006a87e027ece8a1ad987288","first_seen":"2023-04-05T13:59:49Z","last_seen":"2026-07-28T11:56:23.810142Z","times_seen":8526,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/Modal-DYQIx-HI.css","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-elsa.xyz/index_1.html#origin=https%3A%2F%2Fapp.heyelsa.ai\u0026nonce=ch8gljgswio","date":"2026-02-05T14:00:11.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-elsa.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 07:47:44 GMT","end":"Sat, 18 Apr 2026 08:46:05 GMT"},"fingerprint":{"sha1":"2E:1B:51:31:16:44:BC:60:26:2A:3F:D2:5E:87:C1:5F:11:94:BB:B2","sha256":"96:FC:09:9C:A2:60:FA:0C:A1:97:35:68:41:D2:C8:CD:DD:A0:28:AE:BD:1C:53:0E:5F:15:91:9C:22:86:76:18"}}},"request":{"raw":"GET /Modal-DYQIx-HI.css HTTP/1.1\r\nHost: claim-elsa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-elsa.xyz/index_1.html\r\nCookie: cf_clearance=WjsfHqPtXLvRUx4F22P3ulTm5Qjrohqszlsi_6RZwM8-1770300010-1.2.1.1-bWGNPf.HWbCgQ4NjdxFAdCRjrH32_iZ9PBk.ycl9Sm0h1uF8.pSsIRy4VghQH97s9j2vSBjPZc01geXy7yUzp7_xxpPRNGDzXVd.Uvib2h330yXxEoJ.ZuCXcysi0JgOU3azBmlAafaTV0yyySdZkg48mcJOoL5NzgcG0rPXK.jrU78iShc5q9K638zPucdMUx7EVNlEmaBzCMzfN.bAUsHivl0nQOJXNE8A86ZdQPY\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 14:00:11 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=AOifd3t%2BPNOBI%2BypL1VAmHjS7DhgG0exStzG7fqytuf%2FiqbYN5mmQzGgG%2BAvUAsQCUNAE1kEOXmRhO6XkG0UplOJxQmRzYvw%2ByGM%2BYEy%2BGs%2B9YIon6Z1dGkNB3lNHaSIVw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9c92eebd1a6056b7-OSL\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 18 Jan 2026 08:34:34 GMT\r\netag: W/\"7aa-19bd03de113\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2574\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1327\u0026min_rtt=823\u0026rtt_var=501\u0026sent=299\u0026recv=73\u0026lost=0\u0026retrans=0\u0026sent_bytes=291814\u0026recv_bytes=25909\u0026delivery_rate=40350807\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=120257\u0026unsent_bytes=0\u0026cid=6ca2ff481225513c\u0026ts=8021\u0026inflight_dur=123\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1962,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1961)","md5":"58c0f1424a1d38247b7afd2537157275","sha1":"e81aa13f0f7d862961cc9b91cafc3341e16ff07f","sha256":"1404a7f9adced7fd80256b65c8463e0aba4c5fd510341f97c4d226bdbecc0faf","sha512":"0b6866e8ef062c900582967183b7f6ccbb1b39db8eab5b1c8c0f653e2104b349a62f39c07a5c84d44649825cb3ce76f5e5f4ab45948bc8c9e411163f5df46803","ssdeep":"","tlshash":"72416795796c0a35cfa6a193e6c4871db46cb9b7eb0a33f80ec6400d0fcf697089019c","first_seen":"2025-11-28T06:08:24.132422Z","last_seen":"2026-06-12T15:40:45.753179Z","times_seen":19,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/Button-DgYaDyiR.css","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-elsa.xyz/index_2.html#origin=https%3A%2F%2Fapp.heyelsa.ai\u0026nonce=6d1t0wr0lfl","date":"2026-02-05T14:00:11.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-elsa.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 07:47:44 GMT","end":"Sat, 18 Apr 2026 08:46:05 GMT"},"fingerprint":{"sha1":"2E:1B:51:31:16:44:BC:60:26:2A:3F:D2:5E:87:C1:5F:11:94:BB:B2","sha256":"96:FC:09:9C:A2:60:FA:0C:A1:97:35:68:41:D2:C8:CD:DD:A0:28:AE:BD:1C:53:0E:5F:15:91:9C:22:86:76:18"}}},"request":{"raw":"GET /Button-DgYaDyiR.css HTTP/1.1\r\nHost: claim-elsa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-elsa.xyz/index_2.html\r\nCookie: cf_clearance=WjsfHqPtXLvRUx4F22P3ulTm5Qjrohqszlsi_6RZwM8-1770300010-1.2.1.1-bWGNPf.HWbCgQ4NjdxFAdCRjrH32_iZ9PBk.ycl9Sm0h1uF8.pSsIRy4VghQH97s9j2vSBjPZc01geXy7yUzp7_xxpPRNGDzXVd.Uvib2h330yXxEoJ.ZuCXcysi0JgOU3azBmlAafaTV0yyySdZkg48mcJOoL5NzgcG0rPXK.jrU78iShc5q9K638zPucdMUx7EVNlEmaBzCMzfN.bAUsHivl0nQOJXNE8A86ZdQPY\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 14:00:11 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=BL1JQI39fG0gtD7t%2FiZWWZlf2IHcSKloToDtArI6Ve0kNz52xnLfhcCKGdUZo%2FBJMj31kGpTLX3DSixv3tzapg3CcAT%2FfouKZUmpvGFpl3ahKpdwnEAjtg6Ly7xv328j6Q%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9c92eebd2a6356b7-OSL\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 18 Jan 2026 08:34:34 GMT\r\netag: W/\"13e-19bd03de0f2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2574\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1232\u0026min_rtt=823\u0026rtt_var=285\u0026sent=326\u0026recv=77\u0026lost=0\u0026retrans=0\u0026sent_bytes=320319\u0026recv_bytes=26086\u0026delivery_rate=40350807\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=120257\u0026ss_exit_bw=40350807\u0026ss_exit_reason=2\u0026cwnd=70184\u0026unsent_bytes=0\u0026cid=6ca2ff481225513c\u0026ts=8032\u0026inflight_dur=128\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":318,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (317)","md5":"8cb60fc26be4bf1522d4720a16a37388","sha1":"800d5a806f0d5325df09a3b2c10e4d091dcea68e","sha256":"9a82fcab0171fe8dcb6026fcc1f3b746a78be1600c09cfc90bebfae727703678","sha512":"b2423683f0fccad372067045f83842915110171362154dbbaddc2f49c05d67e1398ba175ceb6d59d2ed82b5f10bdc106e226f3f8c018b3988981b1ec29845a14","ssdeep":"","tlshash":"c1e08635e081c63b9c1fe811327e36407537d393b4c4d65812129524f38765934b1ec2","first_seen":"2025-08-15T02:26:36.77435Z","last_seen":"2026-02-05T14:00:40.489256Z","times_seen":3,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-elsa.xyz/index_1.html#origin=https%3A%2F%2Fapp.heyelsa.ai\u0026nonce=ch8gljgswio","date":"2026-02-05T14:00:11.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-elsa.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 07:47:44 GMT","end":"Sat, 18 Apr 2026 08:46:05 GMT"},"fingerprint":{"sha1":"2E:1B:51:31:16:44:BC:60:26:2A:3F:D2:5E:87:C1:5F:11:94:BB:B2","sha256":"96:FC:09:9C:A2:60:FA:0C:A1:97:35:68:41:D2:C8:CD:DD:A0:28:AE:BD:1C:53:0E:5F:15:91:9C:22:86:76:18"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: claim-elsa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=rx.Hxb2CGf7WtUMl1dnaJy2j.h7FzyTjYfJRsS2kRIM-1770300011-1.2.1.1-8MX2dQRTrvKZhSoga9p1rxek.Oz.FqG37AicVuYGIBuDEdjFTK5hT8uru_4CPfSEWtvNtaXeeTLnspF2iZu8tm45VTj04scriP4_f.W0dt4R7C_lniHQPVX6tNymJDOo0ieKXXLnE.m9RCuMIGlM18YospOoRDBSOsO7ZYeTyBiiwyklLbvkEdtwSN9XC.H96rO9o1rvnFQQupgo2vnnePBaAudPbFznkbQ0oBFxgGvcgJvGjkgy_XGJso8uwbd3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/d251aa49a8a3/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\ndate: Thu, 05 Feb 2026 14:00:11 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9c92eebe5a7056b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20747,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T11:56:19.668403Z","times_seen":17578971,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-elsa.xyz/","date":"2026-02-05T14:00:11.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-elsa.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 07:47:44 GMT","end":"Sat, 18 Apr 2026 08:46:05 GMT"},"fingerprint":{"sha1":"2E:1B:51:31:16:44:BC:60:26:2A:3F:D2:5E:87:C1:5F:11:94:BB:B2","sha256":"96:FC:09:9C:A2:60:FA:0C:A1:97:35:68:41:D2:C8:CD:DD:A0:28:AE:BD:1C:53:0E:5F:15:91:9C:22:86:76:18"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: claim-elsa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=WjsfHqPtXLvRUx4F22P3ulTm5Qjrohqszlsi_6RZwM8-1770300010-1.2.1.1-bWGNPf.HWbCgQ4NjdxFAdCRjrH32_iZ9PBk.ycl9Sm0h1uF8.pSsIRy4VghQH97s9j2vSBjPZc01geXy7yUzp7_xxpPRNGDzXVd.Uvib2h330yXxEoJ.ZuCXcysi0JgOU3azBmlAafaTV0yyySdZkg48mcJOoL5NzgcG0rPXK.jrU78iShc5q9K638zPucdMUx7EVNlEmaBzCMzfN.bAUsHivl0nQOJXNE8A86ZdQPY\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/d251aa49a8a3/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\ndate: Thu, 05 Feb 2026 14:00:11 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9c92eebcda5a56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21726,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T11:56:19.668403Z","times_seen":17578971,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/index-Di9PsSOD.css","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-elsa.xyz/index_2.html#origin=https%3A%2F%2Fapp.heyelsa.ai\u0026nonce=6d1t0wr0lfl","date":"2026-02-05T14:00:11.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-elsa.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 07:47:44 GMT","end":"Sat, 18 Apr 2026 08:46:05 GMT"},"fingerprint":{"sha1":"2E:1B:51:31:16:44:BC:60:26:2A:3F:D2:5E:87:C1:5F:11:94:BB:B2","sha256":"96:FC:09:9C:A2:60:FA:0C:A1:97:35:68:41:D2:C8:CD:DD:A0:28:AE:BD:1C:53:0E:5F:15:91:9C:22:86:76:18"}}},"request":{"raw":"GET /index-Di9PsSOD.css HTTP/1.1\r\nHost: claim-elsa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-elsa.xyz/index_2.html\r\nCookie: cf_clearance=WjsfHqPtXLvRUx4F22P3ulTm5Qjrohqszlsi_6RZwM8-1770300010-1.2.1.1-bWGNPf.HWbCgQ4NjdxFAdCRjrH32_iZ9PBk.ycl9Sm0h1uF8.pSsIRy4VghQH97s9j2vSBjPZc01geXy7yUzp7_xxpPRNGDzXVd.Uvib2h330yXxEoJ.ZuCXcysi0JgOU3azBmlAafaTV0yyySdZkg48mcJOoL5NzgcG0rPXK.jrU78iShc5q9K638zPucdMUx7EVNlEmaBzCMzfN.bAUsHivl0nQOJXNE8A86ZdQPY\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 14:00:11 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=S9tsgduvNjyivPJmDnCNxI5ZCTFq%2BeelPLiHqu9PmwHNB5ecVBmLXrkJIjlfIQ0jI3MTnLNolhZprho0h6KGq0BTM%2FCz5DTS16HG1qihjfBpylg3bAN4b7%2BNp82%2Fx5kQ2A%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9c92eebd2a6256b7-OSL\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 18 Jan 2026 08:34:34 GMT\r\netag: W/\"1038a-19bd03de108\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2574\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1278\u0026min_rtt=823\u0026rtt_var=357\u0026sent=303\u0026recv=75\u0026lost=0\u0026retrans=0\u0026sent_bytes=294611\u0026recv_bytes=25998\u0026delivery_rate=40350807\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=120257\u0026unsent_bytes=0\u0026cid=6ca2ff481225513c\u0026ts=8025\u0026inflight_dur=125\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":66442,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"39930b826aaa1347e787b9764f4e910d","sha1":"4cddb9a73a3072c23503f71b41a98b2ea0ec183c","sha256":"2d7772907fa9db88158b7892ebbaa541fdafbedf75706b84ffb17b0412c46db8","sha512":"ded0652d885a529daf366d8b9a2bce2d8e6643f2ac2b8fedb42d44870ab97a4aba929553373f97616814b2ae34d8125e3c9eedb960c7b167a1920c7dc674f312","ssdeep":"1536:Twk2fclMx2sWoOkd3DxQQBhIJ/asyuQ1rhAqHqVZxLGxgAqOjLnpdA2hjyb1nMCA:sfclMx2sWoOkd38TyNTzK3xLGxgAqO3X","tlshash":"d75367bef790523eac33cd9d829c6efe291e7c429e1757f6fa56e1a015c26e50922004","first_seen":"2026-02-05T13:17:46.820555Z","last_seen":"2026-02-05T14:00:40.489872Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-elsa.xyz/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=9c92ee8ad9c27130","fqdn":"claim-elsa.xyz","domain":"claim-elsa.xyz","tld":"xyz"},"ip":{"addr":"104.21.57.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-elsa.xyz/","date":"2026-02-05T14:00:03.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-elsa.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 07:47:44 GMT","end":"Sat, 18 Apr 2026 08:46:05 GMT"},"fingerprint":{"sha1":"2E:1B:51:31:16:44:BC:60:26:2A:3F:D2:5E:87:C1:5F:11:94:BB:B2","sha256":"96:FC:09:9C:A2:60:FA:0C:A1:97:35:68:41:D2:C8:CD:DD:A0:28:AE:BD:1C:53:0E:5F:15:91:9C:22:86:76:18"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=9c92ee8ad9c27130 HTTP/1.1\r\nHost: claim-elsa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-elsa.xyz/?__cf_chl_rt_tk=6mn5dDcBJdKHcibqSB41xQm_.ooPEFy9r4aDz6c0zJM-1770300003-1.0.1.1-CgH0AHdzefsv3AJ5hHaGXF4dNqTEB6tGNO213B2qFSU\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncontent-encoding: br\r\ndate: Thu, 05 Feb 2026 14:00:03 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9c92ee8c081a56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":130836,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"8eb51fbdd36baa800d004eaaa2cbdb81","sha1":"cf2bc32f65176324a4d68c4056c53a7ac0893abb","sha256":"3bb4863d42ab2589236fc626e654dfcb9d969fbe6d9dec5e209af8bc39c28dc1","sha512":"b3e8b07382d4f12cf069eaaaab162af6fcb8a81c8a03f924944390a32922bb74187a12db2908ea9ab7d1541be9fdc6b90d8705c38773438ac9ed1c3620897777","ssdeep":"1536:Ui5FWYqDCqNPY+/NpHw6YUmGziv8Au6itmIPKzAASD8mxOugtEJkEOzyuxSwT5Zi:U8AJCq5Y+/3wtGiSAfmteUVuxSwTyNH","tlshash":"7cd3d8ceb9da7a5b03367470001b35ee52ae7c8460688d1df210d9f43cd4769b977ab8","first_seen":"2026-02-05T14:00:40.490385Z","last_seen":"2026-02-05T14:00:40.490385Z","times_seen":1,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-05","alert":"Sinkholed","trigger":"claim-elsa.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/d251aa49a8a3/api.js?onload=cAdz2\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-elsa.xyz/","date":"2026-02-05T14:00:03.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"GET /turnstile/v0/b/d251aa49a8a3/api.js?onload=cAdz2\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://claim-elsa.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Feb 2026 14:00:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nlast-modified: Wed, 14 Jan 2026 16:37:41 GMT\r\nset-cookie: _cfuvid=8UDYB.cq_cUvnO1LfgB78spK6jIEqzQCGbAZWzfcUtw-1770300003.3319228-1.0.1.1-8hM03oKW7Fqsv5BVipC.2jD9A6cpwHxb6dyG1DeSwSo; HttpOnly; SameSite=None; Secure; Path=/; Domain=challenges.cloudflare.com\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: https://claim-elsa.xyz\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9c92ee8cda822efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50453,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (50452)","md5":"8a7db0e0bae22d940e720d06abf548f7","sha1":"e68beaeb9b7b3aa74a922a3df2d7294811b62e72","sha256":"1d8e9927430ea86701daa3074746758677a012f2ee4196ce60438b4a526ac10f","sha512":"d7106b476dc2ca5f6f5fcf79fe9e69d72d27b12decbac13cf20bbec28fd7c5e72a920802eea9b15e41803252471548290533da353eec5e66ce9211854bb72083","ssdeep":"768:/Cofu2DMaHL9VAQepxn2tSv+1odY+0rOF8msKULg49Tr7+CuAUyG13PE0okbsO10:Q2gaHL9VAQepFbZdYlrNRg4t","tlshash":"37332a583196387267dd80e4617b63437325793af94ccc909827d92636acecad233f7a","first_seen":"2026-01-15T11:24:19.542226Z","last_seen":"2026-02-12T13:18:09.210194Z","times_seen":38367,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":10,"dns":0,"connect":1,"send":0,"wait":7,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/9c92ee8e582f4e4c/1770300003974/UJStz5yrgmtKyQG","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-02-05T14:00:04.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/d/9c92ee8e582f4e4c/1770300003974/UJStz5yrgmtKyQG HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/f2e9g/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 05 Feb 2026 14:00:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 125\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9c92ee9558894e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":125,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 47 x 2, 8-bit/color RGBA, non-interlaced","md5":"c0b7d68cc42a99177168d7cdc6e33428","sha1":"472515f1bd0073b1d70137c1fbe7f2278944ebb7","sha256":"7eb83a688b6495fea6a3c00807784a5dd1570f4933f38e9a38b306daae128bd7","sha512":"2e3596eadd3588740e9e280956ccedcd06c992a5579172775b16ca3498075137511e68fd538d7978c869b2f6861541e6b5ca86dba6a3cd64c3c336fce6e6c0a0","ssdeep":"","tlshash":"7bb02bd06254b4308f1c2f270224d7054c30420804104cae821d497117018c880837c2","first_seen":"2025-05-31T17:23:47.671763Z","last_seen":"2026-04-02T01:11:12.948569Z","times_seen":109,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}