{"report_id":"590511eb-2a49-4b8a-b41c-3058f3e13c57","version":6,"status":"done","tags":[],"date":"2026-05-01T10:52:47Z","url":{"schema":"http","addr":"pfclaim.live","fqdn":"pfclaim.live","domain":"pfclaim.live","tld":"live"},"ip":{"addr":"104.21.95.220","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"pfclaim.live/","fqdn":"pfclaim.live","domain":"pfclaim.live","tld":"live"},"title":"Pump App | Défonce les tranchées","dom":{"size":184127,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (63486)","md5":"767de13d8926e838dc243882ce793d32","sha1":"4543f2456f04b77b61c00f2eb5cf87c15a8a95ca","sha256":"75628acfb9eac648c7b78e75bb7b1ef9b06a9718a6d36329300da562b288ed17","sha512":"d9758b2ae26c1f52c3b2f53b1af40eb7254fed2df6336c2f810ee5476b2c80c3d2791616ac28e76d03f831009d699edf0593e3713246994972d79273064cc698","ssdeep":"768:C0xXz2Of2Mf2q0A2GwjaAf28QKf2Kpf2qPQPf2tgpLf5Y+aAVymE2/f2rf2X82gn:7JK7MLRY+aBCcDpZ/5Sa4dZqOi","tlshash":"4c040d536119f574ace7593eeb1de119ae252000ff32c3e7a29e025f45ceaf8225276c","dom_hash":"domhash838ff3e324176e952c2315de2c28e400","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"pfclaim.live","fqdn":"pfclaim.live","domain":"pfclaim.live","tld":"live"},"ip":{"addr":"104.21.95.220","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-05T10:52:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"pfclaim.live","ip":{"addr":"172.67.148.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":31,"received_data":10024324,"sent_data":15351,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"framerusercontent.com","ip":{"addr":"52.84.50.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2019-04-29","domain_rank":18507,"first_seen":"2019-05-01T19:48:10Z","last_seen":"2026-04-30T06:40:11.209363Z","alert_count":0,"request_count":1,"received_data":3050,"sent_data":465,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"pfclaim.live/index_1.html","fqdn":"pfclaim.live","domain":"pfclaim.live","tld":"live"},"ip":{"addr":"172.67.148.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"89521d47199f949aab8fa7bcc7878611","sha1":"f1f1406fdb4bd1c2ee628611bc3f90c6831a67be","sha256":"4e0feaf9a7f6ad0f13181460135c3b6cf7439c4730bc7cbf193f3d4e5f406509","sha512":"fed4494a039ec1c96e1b0c88fa5cb1892d6963ae526c4f6c196f9730e8f8ceb134de42a06d01e4520d117a2c4d43aca6ce4e507665c839234d8d7059aedd49a1","ssdeep":"","tlshash":"c7d09720c830cc50173b30af2634729cb062242b4606247dbffc8cd87fd8a894c89660","size":250,"data":"","first_seen":"2026-05-01T10:52:56.921455Z","last_seen":"2026-05-01T10:53:56.613272Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pfclaim.live/index_1.html","fqdn":"pfclaim.live","domain":"pfclaim.live","tld":"live"},"ip":{"addr":"172.67.148.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"16ff7fc7259566d51dd258048312ae3f","sha1":"ea64b4b09cf9f5433d615c27c860a4879084206f","sha256":"e84771e70cfb6e563a4430ae0a2b6ad15055e5b8a4ab9fc78815f8108cee0441","sha512":"bd535b94d0758af266db16521d96bf8c6ce0b47ef8613fb3bd251be37a55dfe382fb651bea09e813117b930fe7628a96adf2362deb0479d91b8f2bcd7b2fb528","ssdeep":"","tlshash":"86019729e9526931027b313a122fa79835b140130144e8173ebd84d98fe8d5985a9bca","size":734,"data":"","first_seen":"2026-05-01T10:52:56.923103Z","last_seen":"2026-05-01T10:53:56.614914Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pfclaim.live/secureproxy?s=%2Fipfs%2F3XuGBQ0gATQLjIyGqDPHWAc51899fe96eecbb76132a3dd2497995f%3Ft%3D1777632742646","fqdn":"pfclaim.live","domain":"pfclaim.live","tld":"live"},"ip":{"addr":"172.67.148.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2cd979b380bc5083a0bbb57611436863","sha1":"91dece516cb58e25a14d83a21fd9d9d7b87b747d","sha256":"1bdfd3998d4c1b658bf6755976662f9640f3078e8d96e863dbd5d0ba98d99aed","sha512":"00669e83c0bdec6cd12a9ae81d7db73b78a014c133b9553a4db9ea65b32c8218447b5424d024a5681d68a93f79766b089a189d0b1041f18d4fc7f6595b97e384","ssdeep":"6144:Ih5gD4AOsstbFZFSXwRTMsS8chPcsdJs3wFYYH/3h8qcPOQA12Lcv0q:os4AnXwRTMP8chPc730WW","tlshash":"6dd4eac2ab09157340ca2eb5047b42afdf882d4d078ba85077f9afd9d74578230eee59","size":622893,"data":"","first_seen":"2026-05-01T10:52:56.918698Z","last_seen":"2026-05-01T10:52:56.918698Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pfclaim.live/","fqdn":"pfclaim.live","domain":"pfclaim.live","tld":"live"},"ip":{"addr":"172.67.148.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"89521d47199f949aab8fa7bcc7878611","sha1":"f1f1406fdb4bd1c2ee628611bc3f90c6831a67be","sha256":"4e0feaf9a7f6ad0f13181460135c3b6cf7439c4730bc7cbf193f3d4e5f406509","sha512":"fed4494a039ec1c96e1b0c88fa5cb1892d6963ae526c4f6c196f9730e8f8ceb134de42a06d01e4520d117a2c4d43aca6ce4e507665c839234d8d7059aedd49a1","ssdeep":"","tlshash":"c7d09720c830cc50173b30af2634729cb062242b4606247dbffc8cd87fd8a894c89660","size":250,"data":"","first_seen":"2026-05-01T10:52:56.921455Z","last_seen":"2026-05-01T10:53:56.613272Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pfclaim.live/","fqdn":"pfclaim.live","domain":"pfclaim.live","tld":"live"},"ip":{"addr":"172.67.148.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"16ff7fc7259566d51dd258048312ae3f","sha1":"ea64b4b09cf9f5433d615c27c860a4879084206f","sha256":"e84771e70cfb6e563a4430ae0a2b6ad15055e5b8a4ab9fc78815f8108cee0441","sha512":"bd535b94d0758af266db16521d96bf8c6ce0b47ef8613fb3bd251be37a55dfe382fb651bea09e813117b930fe7628a96adf2362deb0479d91b8f2bcd7b2fb528","ssdeep":"","tlshash":"86019729e9526931027b313a122fa79835b140130144e8173ebd84d98fe8d5985a9bca","size":734,"data":"","first_seen":"2026-05-01T10:52:56.923103Z","last_seen":"2026-05-01T10:53:56.614914Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pfclaim.live/secureproxy?s=%2Fipfs%2F3XuGBQ0gATQLjIyGqDPHWAc51899fe96eecbb76132a3dd2497995f%3Ft%3D1777632742803","fqdn":"pfclaim.live","domain":"pfclaim.live","tld":"live"},"ip":{"addr":"172.67.148.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7158d5e630a7f18489a1cd5b8ba137a1","sha1":"7167d756e4e15c1a49068bde98be9a8a10b1104c","sha256":"ac89cf59ff5130c9d7ba3c075786bb3d76ad103a9cae9de2bfc34c6a4576763f","sha512":"aee00c99c57785070087a92293f2bb2598d1028f159609dd5a016bb0c5e536c423934dc897c2d66cfe22d48aa8ca3a860f72915b981ae73b817099c9f64393c3","ssdeep":"6144:Ih5gDNAOsstbFZFSXwRTMsS8chPcsdJs3wFYYH/3h8qcPOQA12Lcv0q:osNAnXwRTMP8chPc730WW","tlshash":"2dd4eac2ab09157340ca2eb5047b42afdf882d4d078ba85077f9afd9d74578230eee59","size":622797,"data":"","first_seen":"2026-05-01T10:52:56.914043Z","last_seen":"2026-05-01T10:52:56.914043Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pfclaim.live/secureproxy?s=%2Fipfs%2F3XuGBQ0gATQLjIyGqDPHWAc51899fe96eecbb76132a3dd2497995f%3Ft%3D1777632742973","fqdn":"pfclaim.live","domain":"pfclaim.live","tld":"live"},"ip":{"addr":"172.67.148.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a4919a968178a144569c55b69667ce2","sha1":"1446118864967da52e32be7230f9886a02694875","sha256":"7945ef9b87168fbe8dba618dd2eb6e3fed69c4049520729d1185dd7e34f36a9a","sha512":"e0ffb0365c84219d85bfa8cfb80e9d866c52da21705eb2c49fd703549260e66a9b594842a0eabbfbc495a6c8968ad9db58c2904e8baa39573b0d655ee52ac0e3","ssdeep":"6144:Ih5gDKUAOsstbFZFSXwRTMsS8chPcsdJs3wFYYH/3h8qcPOQA12Lcv0q:oshAnXwRTMP8chPc730WW","tlshash":"b8d4eac2ab09157340ca2eb5047b42afdf882d4d078ba85077f9afd9d74578230eee59","size":622798,"data":"","first_seen":"2026-05-01T10:52:56.895055Z","last_seen":"2026-05-01T10:52:56.895055Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"pfclaim.live/GrgcKwrN6d3Uz8EwcLHZxwEfC4.woff2","fqdn":"pfclaim.live","domain":"pfclaim.live","tld":"live"},"ip":{"addr":"172.67.148.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pfclaim.live/","date":"2026-05-01T10:52:22.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pfclaim.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 07:16:43 GMT","end":"Thu, 30 Jul 2026 07:16:42 GMT"},"fingerprint":{"sha1":"8B:BE:3A:1D:D3:3C:E4:08:76:CA:F5:D4:9D:25:10:05:03:EB:42:F7","sha256":"D1:39:B7:2C:1E:8C:91:9C:C7:65:DA:49:89:6A:64:34:31:76:A1:C5:7B:40:62:6E:EC:C4:22:C9:34:63:74:A1"}}},"request":{"raw":"GET /GrgcKwrN6d3Uz8EwcLHZxwEfC4.woff2 HTTP/1.1\r\nHost: pfclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pfclaim.live/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 10:52:22 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 27380\r\ncast-mode: default\r\nlast-modified: Fri, 01 May 2026 08:05:49 GMT\r\netag: \"69f45edd-6af4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ms0c1D9UxtKatoh8LAzNTUCZCt5AH3wHfR5UoDtz9sAV5v0ssHnYs2dwx2MpryPhNKTDPEabehnqQ%2FpIKcE5w7%2FmkmiSWEvyBI%2FP9BGm0yua8o6JNDWoqh8kvVHxYHU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f4e3c81fff323eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27380,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 27380, version 4.0","md5":"e092f17f85b5a6e5a73296c5819acee5","sha1":"1ab81cfcac2b37a777533f04c1c2c7671c047c2e","sha256":"362b168da82d69bc67d2a358fa20c59151cb4ceac8a5506be6baef5e6827fa42","sha512":"37756285b8dc6d24f04f40b3733ce2e3414f1242b0cf4715ad1a1082901d81caf10582dbcd2060ac8886902aa33d4fc2b1bd717215802f933aea929d181cc5c9","ssdeep":"768:uVmFXapd3t+i2J0dlFlL9baVrL0c8yMErCOtRPCM:uGXabqJsl5urL0xErT9CM","tlshash":"e0c2f1e694653af9ed0d707b065af62b539068bc436e807d9cf960b077a3bd1020f496","first_seen":"2025-08-12T17:14:20.779189Z","last_seen":"2026-06-10T03:33:28.608842Z","times_seen":2831,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pfclaim.live/1ZFS7N918ojhhd0nQWdj3jz4w.woff2","fqdn":"pfclaim.live","domain":"pfclaim.live","tld":"live"},"ip":{"addr":"172.67.148.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pfclaim.live/index_1.html","date":"2026-05-01T10:52:22.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pfclaim.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 07:16:43 GMT","end":"Thu, 30 Jul 2026 07:16:42 GMT"},"fingerprint":{"sha1":"8B:BE:3A:1D:D3:3C:E4:08:76:CA:F5:D4:9D:25:10:05:03:EB:42:F7","sha256":"D1:39:B7:2C:1E:8C:91:9C:C7:65:DA:49:89:6A:64:34:31:76:A1:C5:7B:40:62:6E:EC:C4:22:C9:34:63:74:A1"}}},"request":{"raw":"GET /1ZFS7N918ojhhd0nQWdj3jz4w.woff2 HTTP/1.1\r\nHost: pfclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pfclaim.live/index_1.html\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 10:52:22 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 28004\r\ncast-mode: default\r\nlast-modified: Fri, 01 May 2026 08:05:49 GMT\r\netag: \"69f45edd-6d64\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tyPtajZRKKJd9BocWFU2GYa0R8jTsUU14r4UpPItTqX%2Ff77DHpXLzZr2Sq2%2FH%2B%2F6CwmuJRu9w1XWLgRAxSngATlx%2Fal7gTbPJU7i5c8J0gDYm%2F5l9djDUysB3aytl%2BI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f4e3c83881f23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28004,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 28004, version 4.0","md5":"6a0a655993cb46fa8421adf0b1c20023","sha1":"d7e6454bb37dd7ca238617749d0fd6763de3cf8c","sha256":"cc324555c1cd681a59c27be1eda61da587d17bf71cc1ed8aa3e4a51e77907685","sha512":"a67e3a335ec63a2515c945b5355794237e3a0203d0f44c49d57ee12b0ebb46a8f2d2bcd354af40a26b6e631fc2c8f2ac707f5032b7efabe96b4720d796d01976","ssdeep":"768:Spm4oXyuupZmdXzlnv47Rov6+gIDoZ364qvnza:Sp9juujsZv4Noi+gzq4qPza","tlshash":"cec2f157c68922f894782291d8a783992332955512ad43ca61935f00d4fdeb7e8bbd34","first_seen":"2023-12-29T15:34:12Z","last_seen":"2026-06-10T03:28:52.445208Z","times_seen":2599,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":43,"dns":0,"connect":0,"send":0,"wait":28,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pfclaim.live/secureproxy?s=%2Fipfs%2F3XuGBQ0gATQLjIyGqDPHWAc51899fe96eecbb76132a3dd2497995f%3Ft%3D1777632742973","fqdn":"pfclaim.live","domain":"pfclaim.live","tld":"live"},"ip":{"addr":"172.67.148.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pfclaim.live/index_1.html","date":"2026-05-01T10:52:22.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pfclaim.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 07:16:43 GMT","end":"Thu, 30 Jul 2026 07:16:42 GMT"},"fingerprint":{"sha1":"8B:BE:3A:1D:D3:3C:E4:08:76:CA:F5:D4:9D:25:10:05:03:EB:42:F7","sha256":"D1:39:B7:2C:1E:8C:91:9C:C7:65:DA:49:89:6A:64:34:31:76:A1:C5:7B:40:62:6E:EC:C4:22:C9:34:63:74:A1"}}},"request":{"raw":"GET /secureproxy?s=%2Fipfs%2F3XuGBQ0gATQLjIyGqDPHWAc51899fe96eecbb76132a3dd2497995f%3Ft%3D1777632742973 HTTP/1.1\r\nHost: pfclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pfclaim.live/index_1.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 10:52:23 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: max-age=2592000\r\netag: W/\"980ce-FEYRiGSWfaUuMr5yMPmIagJpSHU\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=CroQvQcK0hfx58jd8DgxkA.js\r\ncdn-proxyver: 1.51\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/01/2026 10:52:23\r\ncdn-edgestorageid: 1056\r\ncdn-requestid: 1c52e1c2012370e3a08d41e84aeaa110\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IKMsVU7cc3k5g0JRgMFChQHouHR6ryycHWrmtgMRzwJSv81bnD9W5LBDo1XlsqB9la6L4Ajgu4UAqOwvZ6nFSp3vnK8iYS9TBLdTZcXDMCl7GesI%2FiREQyapAKlUwx0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f4e3c83b82823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":622798,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"1a4919a968178a144569c55b69667ce2","sha1":"1446118864967da52e32be7230f9886a02694875","sha256":"7945ef9b87168fbe8dba618dd2eb6e3fed69c4049520729d1185dd7e34f36a9a","sha512":"e0ffb0365c84219d85bfa8cfb80e9d866c52da21705eb2c49fd703549260e66a9b594842a0eabbfbc495a6c8968ad9db58c2904e8baa39573b0d655ee52ac0e3","ssdeep":"6144:Ih5gDKUAOsstbFZFSXwRTMsS8chPcsdJs3wFYYH/3h8qcPOQA12Lcv0q:oshAnXwRTMP8chPc730WW","tlshash":"b8d4eac2ab09157340ca2eb5047b42afdf882d4d078ba85077f9afd9d74578230eee59","first_seen":"2026-05-01T10:52:56.895055Z","last_seen":"2026-05-01T10:52:56.895055Z","times_seen":1,"resource_available":true,"data":null}},"time_used":984,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":872,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pfclaim.live/Th778RFibvl0SWWtDcTgHAmtY.png","fqdn":"pfclaim.live","domain":"pfclaim.live","tld":"live"},"ip":{"addr":"172.67.148.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pfclaim.live/index_1.html","date":"2026-05-01T10:52:23.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pfclaim.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 07:16:43 GMT","end":"Thu, 30 Jul 2026 07:16:42 GMT"},"fingerprint":{"sha1":"8B:BE:3A:1D:D3:3C:E4:08:76:CA:F5:D4:9D:25:10:05:03:EB:42:F7","sha256":"D1:39:B7:2C:1E:8C:91:9C:C7:65:DA:49:89:6A:64:34:31:76:A1:C5:7B:40:62:6E:EC:C4:22:C9:34:63:74:A1"}}},"request":{"raw":"GET /Th778RFibvl0SWWtDcTgHAmtY.png HTTP/1.1\r\nHost: pfclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pfclaim.live/index_1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 10:52:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 3691\r\ncast-mode: default\r\nlast-modified: Fri, 01 May 2026 08:05:49 GMT\r\netag: \"69f45edd-e6b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 88\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IZpuuga%2FtPEK0eOQZ%2BYcQTU5Qu0wuymnIPlBIc19fwUTiDV%2FUnWLFXV9gCfN3SOazsKgL%2BfqV6Ue6t5vZ%2BEhw4j5dPE%2BkwIbV6SoX%2BH4dRfE8RZPwJFhgBBpa3ZN8nw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f4e3c83b82923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3691,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 370 x 382, 8-bit colormap, non-interlaced","md5":"974b5641478c217c3b439075ba19b7b2","sha1":"4b0a532cee62d9fc35ac5e7751f50aa3c4bb951b","sha256":"c49f4729124d9c575671c2e3a06a7ff691fc8670bbcb6897c931e330621de885","sha512":"535fc2672320ba3511b2a5655854db69ce3502b6b5355ab06bb010cba9e3afed3bc70df12c369c6a90e7c13a56584ed68f960575c32581a4410a3e715c82151c","ssdeep":"","tlshash":"8e714a9f6138e887455eaebb469084220a9e435f0d3cb0fab1f24c119074aecaad5736","first_seen":"2025-09-17T10:51:07.660394Z","last_seen":"2026-05-01T10:53:56.588252Z","times_seen":15,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pfclaim.live/DXD0Q7LSl7HEvDzucnyLnGBHM.woff2","fqdn":"pfclaim.live","domain":"pfclaim.live","tld":"live"},"ip":{"addr":"172.67.148.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pfclaim.live/index_1.html","date":"2026-05-01T10:52:23.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pfclaim.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 07:16:43 GMT","end":"Thu, 30 Jul 2026 07:16:42 GMT"},"fingerprint":{"sha1":"8B:BE:3A:1D:D3:3C:E4:08:76:CA:F5:D4:9D:25:10:05:03:EB:42:F7","sha256":"D1:39:B7:2C:1E:8C:91:9C:C7:65:DA:49:89:6A:64:34:31:76:A1:C5:7B:40:62:6E:EC:C4:22:C9:34:63:74:A1"}}},"request":{"raw":"GET /DXD0Q7LSl7HEvDzucnyLnGBHM.woff2 HTTP/1.1\r\nHost: pfclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pfclaim.live/index_1.html\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 10:52:23 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 27992\r\ncast-mode: default\r\nlast-modified: Fri, 01 May 2026 08:05:49 GMT\r\netag: \"69f45edd-6d58\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O%2FM9PbO9L13mIW6PVjaFdAWyiWcb%2BqcYnF0sfZPfW%2Fw95ECWKrlVGxiuyC%2BbA0IX%2BW3HeQ5HympDjwBd6qnJBmKtNcUMOvobc8btzN3txS6tPC%2F7H4qRE61h%2BJfxHm0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f4e3c84083523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27992,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 27992, version 4.0","md5":"6e016e5d8af17b4b0a7d7ea5d09a37f3","sha1":"0d70f443b2d297b1c4bc3cee727c8bfe7f860473","sha256":"2dc968863319a6f57e6428a7b4c292ae254d3e462b5f23f71bab492317067d5f","sha512":"bf2201f695e67518e886a2b1dc7126c4d292614524f6e3e879a8f89cf5c2bbb83eecc827d4b64242d76e7e5d7f18683a37e117c9d8accddc064b0232f3db2952","ssdeep":"768:YWjMCg7zYxo03f+Qo7seRuRCusYCdlebExh/tjqmKyrA:YIUJhTJRu9sdU21q/","tlshash":"92c2f2f0ca9d99b069358cf862bc9848d60c497d9d09d2fd6a73a35d0b50bcac7d8e0d","first_seen":"2024-08-01T19:55:06Z","last_seen":"2026-06-09T06:03:27.918867Z","times_seen":1135,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pfclaim.live/1ZFS7N918ojhhd0nQWdj3jz4w.woff2","fqdn":"pfclaim.live","domain":"pfclaim.live","tld":"live"},"ip":{"addr":"172.67.148.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pfclaim.live/index_1.html","date":"2026-05-01T10:52:23.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pfclaim.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 07:16:43 GMT","end":"Thu, 30 Jul 2026 07:16:42 GMT"},"fingerprint":{"sha1":"8B:BE:3A:1D:D3:3C:E4:08:76:CA:F5:D4:9D:25:10:05:03:EB:42:F7","sha256":"D1:39:B7:2C:1E:8C:91:9C:C7:65:DA:49:89:6A:64:34:31:76:A1:C5:7B:40:62:6E:EC:C4:22:C9:34:63:74:A1"}}},"request":{"raw":"GET /1ZFS7N918ojhhd0nQWdj3jz4w.woff2 HTTP/1.1\r\nHost: pfclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pfclaim.live/index_1.html\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 10:52:23 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 28004\r\ncast-mode: default\r\nlast-modified: Fri, 01 May 2026 08:05:49 GMT\r\netag: \"69f45edd-6d64\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A2agjTqeeObm4eHLAtGkqQkpe68k5QkPHRdkseawPAYIaBTveI9G0lghdbC3s2aPSqTakOP79s0se4unz%2F1dJNbgUpnI5ISMwY7ftV%2FHJVt7zfAxU2hhBX9cCL6FDE0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f4e3c84183623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28004,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 28004, version 4.0","md5":"6a0a655993cb46fa8421adf0b1c20023","sha1":"d7e6454bb37dd7ca238617749d0fd6763de3cf8c","sha256":"cc324555c1cd681a59c27be1eda61da587d17bf71cc1ed8aa3e4a51e77907685","sha512":"a67e3a335ec63a2515c945b5355794237e3a0203d0f44c49d57ee12b0ebb46a8f2d2bcd354af40a26b6e631fc2c8f2ac707f5032b7efabe96b4720d796d01976","ssdeep":"768:Spm4oXyuupZmdXzlnv47Rov6+gIDoZ364qvnza:Sp9juujsZv4Noi+gzq4qPza","tlshash":"cec2f157c68922f894782291d8a783992332955512ad43ca61935f00d4fdeb7e8bbd34","first_seen":"2023-12-29T15:34:12Z","last_seen":"2026-06-10T03:28:52.445208Z","times_seen":2599,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"framerusercontent.com/images/Hfn61PftoaCLZU4KiPcZP7AoO4.png","fqdn":"framerusercontent.com","domain":"framerusercontent.com","tld":"com"},"ip":{"addr":"52.84.50.74","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pfclaim.live/","date":"2026-05-01T10:52:23.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"framerusercontent.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 16 Oct 2025 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:EF:AE:14:9A:1C:B7:8C:AB:DF:01:C0:39:9E:AE:49:90:E5:84:94","sha256":"B7:E9:B0:B0:73:ED:29:A4:09:64:FA:77:EF:60:53:32:51:10:08:95:FD:7B:4A:69:60:51:6D:9F:AF:31:9D:5E"}}},"request":{"raw":"GET /images/Hfn61PftoaCLZU4KiPcZP7AoO4.png HTTP/1.1\r\nHost: framerusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pfclaim.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: image/avif\r\ndate: Sat, 18 Apr 2026 22:17:36 GMT\r\nx-amzn-trace-id: Root=1-69e40300-2d188c9828543de13cae644c;Parent=1fd0d6807d52ccf8;Sampled=0;Lineage=1:f456f256:0\r\nx-amzn-requestid: b4149b8e-d8a5-4199-a7ff-91a106fa5302\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: deny\r\ncontent-security-policy: default-src 'none'; script-src 'none'; img-src 'self'; media-src 'self'; report-uri https://framer.report-uri.com/r/t/csp/enforce;\r\ncache-control: public, max-age=31536000, stale-while-revalidate=31536000\r\nx-content-type-options: nosniff\r\netag: \"e4803eac288bfdae33dcca385c837b4f\"\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d5fd4f36a8dc316ac9f65d9c9b60260e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: _dO1Hsv_hNqx3NKaFy7ssCAbre6oAX6g688sLTYMF3tfgD-0BgKWyA==\r\nage: 1082087\r\ntiming-allow-origin: *\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"OSL50-P3\",cdn-rid;desc=\"_dO1Hsv_hNqx3NKaFy7ssCAbre6oAX6g688sLTYMF3tfgD-0BgKWyA==\",cdn-hit-layer;desc=\"EDGE\",cdn-downstream-fbl;dur=3\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1756,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"e4803eac288bfdae33dcca385c837b4f","sha1":"4a5540be7fa2f185e8bf1053fab244dd5edb42f5","sha256":"2c73a50f6d9716127dee5a41910b674083b0beb33f92e38fe6b1a2a52cae61de","sha512":"ab942af8a71b3400a7cc4a10fecb3b6a3ce836b7554347b3135b92724203f380beba39c9e915470a9f51e11c9dca5e3fc56056733eab57e19500e12a8c934b25","ssdeep":"","tlshash":"0a31180ab7681d05e52d037884da9122f637455e71b706cabc39f0a8bc4aae3c809e1c","first_seen":"2025-09-17T10:51:07.667724Z","last_seen":"2026-05-01T10:53:56.595572Z","times_seen":13,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":21,"dns":3,"connect":2,"send":0,"wait":8,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pfclaim.live/Avhzd9ZdakuMbZdyEXCqnREFFYw.mp4","fqdn":"pfclaim.live","domain":"pfclaim.live","tld":"live"},"ip":{"addr":"172.67.148.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://pfclaim.live/index_1.html","date":"2026-05-01T10:52:23.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pfclaim.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 07:16:43 GMT","end":"Thu, 30 Jul 2026 07:16:42 GMT"},"fingerprint":{"sha1":"8B:BE:3A:1D:D3:3C:E4:08:76:CA:F5:D4:9D:25:10:05:03:EB:42:F7","sha256":"D1:39:B7:2C:1E:8C:91:9C:C7:65:DA:49:89:6A:64:34:31:76:A1:C5:7B:40:62:6E:EC:C4:22:C9:34:63:74:A1"}}},"request":{"raw":"GET /Avhzd9ZdakuMbZdyEXCqnREFFYw.mp4 HTTP/1.1\r\nHost: pfclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pfclaim.live/index_1.html\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 10:52:23 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 2408292\r\ncast-mode: default\r\nlast-modified: Fri, 01 May 2026 08:05:49 GMT\r\netag: \"69f45edd-24bf64\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 88\r\ncontent-range: bytes 0-2408291/2408292\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QdBSLqwW0Rf%2BWlxXHW6Cdq%2BOb6pPiZuY05PaBgxVl62yLx1Uu6nQFz9EHeNXWzqc1N0Ox7swJ378FPRyahi%2FEbrYxChzz49tTKSLpNq2RQ2mjV%2BzH9LUgiOh4H%2FbZAU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f4e3c84483b23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2408292,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"9b038006009fe73d755727bd89887f7c","sha1":"84eab2edb21462fde236711e765511b5df36ba69","sha256":"bc7fa1ebdbde34d6099d52a427508e91f8544a134475ebfb2fc2e06200e31a2c","sha512":"67adbcd4cc6095666df6d5491972a492345838178874f2187339ef5231d1b22dece4e76494f996964b6d0fc33af142d65c03cd36806f922061eaa9eda710b8c1","ssdeep":"24576:3hAgwR1qrM/3n5ub5CK0aYKee2gJXCDv/AFHrFW9U3Nn:aD/I5CKYgZs/mFQU5","tlshash":"ed25235ba3c1a733feb8567651f6688229a3611611e30bdbfc8f5a102fa0c793d5b40d","first_seen":"2025-09-17T10:51:07.676075Z","last_seen":"2026-05-01T10:53:56.596689Z","times_seen":12,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":264,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pfclaim.live/","fqdn":"pfclaim.live","domain":"pfclaim.live","tld":"live"},"ip":{"addr":"172.67.148.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-01T10:52:22.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pfclaim.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 07:16:43 GMT","end":"Thu, 30 Jul 2026 07:16:42 GMT"},"fingerprint":{"sha1":"8B:BE:3A:1D:D3:3C:E4:08:76:CA:F5:D4:9D:25:10:05:03:EB:42:F7","sha256":"D1:39:B7:2C:1E:8C:91:9C:C7:65:DA:49:89:6A:64:34:31:76:A1:C5:7B:40:62:6E:EC:C4:22:C9:34:63:74:A1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: pfclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 01 May 2026 10:52:22 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 01 May 2026 08:05:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xnKW%2BoQ%2BoD4T7g7AusUm%2FGnb3h54oP7kM4xvHid6JL7DlJSMKs7AhnYCxF%2Foevezlkzn0X6Oseljes0O0sfO3UT27fuv6iUH2%2Bg1z0NbYignHD0AY7K56bICqnRfwGU%3D\"}]}\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9f4e3c7fbca956a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":183865,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (63486)","md5":"c65f6c36f0b45eaca843e1582e4c953c","sha1":"c000f7036e142e1179d65d58344b69a22ca30841","sha256":"acebddc7bdcb6603275b7434afc4c1c2d41e64b86e44887bea94a55ac2021b57","sha512":"0c3a2ba6b92c6a1e8c32b2448ce941aee1a9d38a0df49f8b0ed168178606430909a638d63c50cd47b45ad119ec28027f762ce59e6db763907251aa2ec5b01db8","ssdeep":"768:C0xXz2Of2Mf2q0A2GwjaAf28QKf2Kpf2qPQPf2tgpLf5Y+aAVymE2/f2rf2X82gK:7JK7MLRY+aBCcDpZ/kea4dZqOQ","tlshash":"34040d536119f574ace7593eeb1de119ae252000ff32c3e7a29e025f45ceaf8225276c","first_seen":"2026-05-01T10:52:56.909976Z","last_seen":"2026-05-01T10:53:56.59069Z","times_seen":2,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":90,"dns":70,"connect":1,"send":0,"wait":18,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pfclaim.live/969d8ebae81eb6fb0e435918ede61b9d6436b399.svg","fqdn":"pfclaim.live","domain":"pfclaim.live","tld":"live"},"ip":{"addr":"172.67.148.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pfclaim.live/index_1.html","date":"2026-05-01T10:52:23.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pfclaim.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 07:16:43 GMT","end":"Thu, 30 Jul 2026 07:16:42 GMT"},"fingerprint":{"sha1":"8B:BE:3A:1D:D3:3C:E4:08:76:CA:F5:D4:9D:25:10:05:03:EB:42:F7","sha256":"D1:39:B7:2C:1E:8C:91:9C:C7:65:DA:49:89:6A:64:34:31:76:A1:C5:7B:40:62:6E:EC:C4:22:C9:34:63:74:A1"}}},"request":{"raw":"GET /969d8ebae81eb6fb0e435918ede61b9d6436b399.svg HTTP/1.1\r\nHost: pfclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pfclaim.live/index_1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 10:52:23 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Fri, 01 May 2026 08:05:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 88\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"69f45edd-f3\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CADdDlP5dnd4H2eNSAamfqNAQwuus%2FQwC%2FBLfZffeTejeG91tCOxXx1tvOrDNciC9l1%2BmUXNLw80LgS2%2FKF40v7dkCc6WQPspcFVUKpF0FA5QwWvhiv%2FoNhegDUdmeI%3D\"}]}\r\ncf-ray: 9f4e3c84083223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":243,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e0048e66338cc1ebb6df2b125f71b1a0","sha1":"969d8ebae81eb6fb0e435918ede61b9d6436b399","sha256":"ab7a9ee31fa9dc023c3460610c637b281293cb5359e1604c0a6aa72f8805c303","sha512":"c6f18909d566db18974383a70517d01fbd2ab598d5521043412704bbffa007ea00022e39cfe25618a0ed51a17bb253679cdefad3317e8ce9ed2deab31fce5327","ssdeep":"","tlshash":"07d0959fdf1dd309808cd75cf1f93306a48418c001c944ced4c02dc89004cc29c91519","first_seen":"2025-09-17T10:51:07.649804Z","last_seen":"2026-05-01T10:53:56.600245Z","times_seen":13,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pfclaim.live/969d8ebae81eb6fb0e435918ede61b9d6436b399.svg","fqdn":"pfclaim.live","domain":"pfclaim.live","tld":"live"},"ip":{"addr":"172.67.148.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pfclaim.live/","date":"2026-05-01T10:52:22.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pfclaim.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 07:16:43 GMT","end":"Thu, 30 Jul 2026 07:16:42 GMT"},"fingerprint":{"sha1":"8B:BE:3A:1D:D3:3C:E4:08:76:CA:F5:D4:9D:25:10:05:03:EB:42:F7","sha256":"D1:39:B7:2C:1E:8C:91:9C:C7:65:DA:49:89:6A:64:34:31:76:A1:C5:7B:40:62:6E:EC:C4:22:C9:34:63:74:A1"}}},"request":{"raw":"GET /969d8ebae81eb6fb0e435918ede61b9d6436b399.svg HTTP/1.1\r\nHost: pfclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pfclaim.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 10:52:22 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Fri, 01 May 2026 08:05:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 88\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"69f45edd-f3\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NXg4Ut5Q4B0pmcTpq0jOSpyBgaL8VI9OJlsSgW9ICgqwEpi5Nib8oRtn1HinsIMUfpJKdM9K5lBQ5T2NWQDtWQPqb2CEQ0TCpMqO7Vls4yXqxlspfmn9HX%2B5qDWrdKU%3D\"}]}\r\ncf-ray: 9f4e3c81dfee23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":243,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e0048e66338cc1ebb6df2b125f71b1a0","sha1":"969d8ebae81eb6fb0e435918ede61b9d6436b399","sha256":"ab7a9ee31fa9dc023c3460610c637b281293cb5359e1604c0a6aa72f8805c303","sha512":"c6f18909d566db18974383a70517d01fbd2ab598d5521043412704bbffa007ea00022e39cfe25618a0ed51a17bb253679cdefad3317e8ce9ed2deab31fce5327","ssdeep":"","tlshash":"07d0959fdf1dd309808cd75cf1f93306a48418c001c944ced4c02dc89004cc29c91519","first_seen":"2025-09-17T10:51:07.649804Z","last_seen":"2026-05-01T10:53:56.600245Z","times_seen":13,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pfclaim.live/969d8ebae81eb6fb0e435918ede61b9d6436b399.svg","fqdn":"pfclaim.live","domain":"pfclaim.live","tld":"live"},"ip":{"addr":"172.67.148.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pfclaim.live/index_1.html","date":"2026-05-01T10:52:22.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pfclaim.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 07:16:43 GMT","end":"Thu, 30 Jul 2026 07:16:42 GMT"},"fingerprint":{"sha1":"8B:BE:3A:1D:D3:3C:E4:08:76:CA:F5:D4:9D:25:10:05:03:EB:42:F7","sha256":"D1:39:B7:2C:1E:8C:91:9C:C7:65:DA:49:89:6A:64:34:31:76:A1:C5:7B:40:62:6E:EC:C4:22:C9:34:63:74:A1"}}},"request":{"raw":"GET /969d8ebae81eb6fb0e435918ede61b9d6436b399.svg HTTP/1.1\r\nHost: pfclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pfclaim.live/index_1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 10:52:22 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Fri, 01 May 2026 08:05:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 88\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"69f45edd-f3\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oVcOKxmiNtxEmaEqYmGXtWVYdGJkic8JFFUNwC2N4EPQOSCH1gKwmEExiNZ3%2Bds9AQMlZ1F6mEkSE2ugy%2BDAnihsU8kwtFWx3TvLGXr1gr7CYLtFbzxwtfEPPQJZq%2FI%3D\"}]}\r\ncf-ray: 9f4e3c83881e23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":243,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e0048e66338cc1ebb6df2b125f71b1a0","sha1":"969d8ebae81eb6fb0e435918ede61b9d6436b399","sha256":"ab7a9ee31fa9dc023c3460610c637b281293cb5359e1604c0a6aa72f8805c303","sha512":"c6f18909d566db18974383a70517d01fbd2ab598d5521043412704bbffa007ea00022e39cfe25618a0ed51a17bb253679cdefad3317e8ce9ed2deab31fce5327","ssdeep":"","tlshash":"07d0959fdf1dd309808cd75cf1f93306a48418c001c944ced4c02dc89004cc29c91519","first_seen":"2025-09-17T10:51:07.649804Z","last_seen":"2026-05-01T10:53:56.600245Z","times_seen":13,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":45,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pfclaim.live/secureproxy?s=%2Fipfs%2F3XuGBQ0gATQLjIyGqDPHWAc51899fe96eecbb76132a3dd2497995f%3Ft%3D1777632742803","fqdn":"pfclaim.live","domain":"pfclaim.live","tld":"live"},"ip":{"addr":"172.67.148.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pfclaim.live/index_1.html","date":"2026-05-01T10:52:22.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pfclaim.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 07:16:43 GMT","end":"Thu, 30 Jul 2026 07:16:42 GMT"},"fingerprint":{"sha1":"8B:BE:3A:1D:D3:3C:E4:08:76:CA:F5:D4:9D:25:10:05:03:EB:42:F7","sha256":"D1:39:B7:2C:1E:8C:91:9C:C7:65:DA:49:89:6A:64:34:31:76:A1:C5:7B:40:62:6E:EC:C4:22:C9:34:63:74:A1"}}},"request":{"raw":"GET /secureproxy?s=%2Fipfs%2F3XuGBQ0gATQLjIyGqDPHWAc51899fe96eecbb76132a3dd2497995f%3Ft%3D1777632742803 HTTP/1.1\r\nHost: pfclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pfclaim.live/index_1.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 10:52:23 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: max-age=2592000\r\netag: W/\"980cd-cWfXVuThXBpJBovemL6aihCxEEw\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=163NSt5OmKtiRefk0HMv-A.js\r\ncdn-proxyver: 1.51\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/01/2026 10:52:23\r\ncdn-edgestorageid: 1056\r\ncdn-requestid: 8a883a0b4bccbcbca21ff08c4507bab8\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hcA%2BYO3h0tLBOjDlOjkXo8jZUy92qg%2FAl1Z3NeoB%2F14fPlKIwKJyBusr1ogAyif53QrPMAGHeIGPxFIrL7H9qizJPAzkZO2Q14qP04WnM3WU1NqLRsihz0hY4daOZJA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f4e3c82980423eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":622797,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7158d5e630a7f18489a1cd5b8ba137a1","sha1":"7167d756e4e15c1a49068bde98be9a8a10b1104c","sha256":"ac89cf59ff5130c9d7ba3c075786bb3d76ad103a9cae9de2bfc34c6a4576763f","sha512":"aee00c99c57785070087a92293f2bb2598d1028f159609dd5a016bb0c5e536c423934dc897c2d66cfe22d48aa8ca3a860f72915b981ae73b817099c9f64393c3","ssdeep":"6144:Ih5gDNAOsstbFZFSXwRTMsS8chPcsdJs3wFYYH/3h8qcPOQA12Lcv0q:osNAnXwRTMP8chPc730WW","tlshash":"2dd4eac2ab09157340ca2eb5047b42afdf882d4d078ba85077f9afd9d74578230eee59","first_seen":"2026-05-01T10:52:56.914043Z","last_seen":"2026-05-01T10:52:56.914043Z","times_seen":1,"resource_available":true,"data":null}},"time_used":830,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":719,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pfclaim.live/DXD0Q7LSl7HEvDzucnyLnGBHM.woff2","fqdn":"pfclaim.live","domain":"pfclaim.live","tld":"live"},"ip":{"addr":"172.67.148.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pfclaim.live/index_1.html","date":"2026-05-01T10:52:22.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pfclaim.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 07:16:43 GMT","end":"Thu, 30 Jul 2026 07:16:42 GMT"},"fingerprint":{"sha1":"8B:BE:3A:1D:D3:3C:E4:08:76:CA:F5:D4:9D:25:10:05:03:EB:42:F7","sha256":"D1:39:B7:2C:1E:8C:91:9C:C7:65:DA:49:89:6A:64:34:31:76:A1:C5:7B:40:62:6E:EC:C4:22:C9:34:63:74:A1"}}},"request":{"raw":"GET /DXD0Q7LSl7HEvDzucnyLnGBHM.woff2 HTTP/1.1\r\nHost: pfclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pfclaim.live/index_1.html\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 10:52:22 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 27992\r\ncast-mode: default\r\nlast-modified: Fri, 01 May 2026 08:05:49 GMT\r\netag: \"69f45edd-6d58\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FyOATsxgI38hxo7lYr09hXJagVUbjrRuXdqFJXstTSU%2F6SgYKhhGUaVIVaLSuRhV%2B%2Bv7STl42vMSIJyRZVzSUz8Ik2jzG3RojCDt4U4XSH9%2FJKHHVcrnHljDXGMxsBE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f4e3c83882123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27992,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 27992, version 4.0","md5":"6e016e5d8af17b4b0a7d7ea5d09a37f3","sha1":"0d70f443b2d297b1c4bc3cee727c8bfe7f860473","sha256":"2dc968863319a6f57e6428a7b4c292ae254d3e462b5f23f71bab492317067d5f","sha512":"bf2201f695e67518e886a2b1dc7126c4d292614524f6e3e879a8f89cf5c2bbb83eecc827d4b64242d76e7e5d7f18683a37e117c9d8accddc064b0232f3db2952","ssdeep":"768:YWjMCg7zYxo03f+Qo7seRuRCusYCdlebExh/tjqmKyrA:YIUJhTJRu9sdU21q/","tlshash":"92c2f2f0ca9d99b069358cf862bc9848d60c497d9d09d2fd6a73a35d0b50bcac7d8e0d","first_seen":"2024-08-01T19:55:06Z","last_seen":"2026-06-09T06:03:27.918867Z","times_seen":1135,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":44,"dns":0,"connect":0,"send":0,"wait":28,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pfclaim.live/GrgcKwrN6d3Uz8EwcLHZxwEfC4.woff2","fqdn":"pfclaim.live","domain":"pfclaim.live","tld":"live"},"ip":{"addr":"172.67.148.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pfclaim.live/index_1.html","date":"2026-05-01T10:52:23.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pfclaim.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 07:16:43 GMT","end":"Thu, 30 Jul 2026 07:16:42 GMT"},"fingerprint":{"sha1":"8B:BE:3A:1D:D3:3C:E4:08:76:CA:F5:D4:9D:25:10:05:03:EB:42:F7","sha256":"D1:39:B7:2C:1E:8C:91:9C:C7:65:DA:49:89:6A:64:34:31:76:A1:C5:7B:40:62:6E:EC:C4:22:C9:34:63:74:A1"}}},"request":{"raw":"GET /GrgcKwrN6d3Uz8EwcLHZxwEfC4.woff2 HTTP/1.1\r\nHost: pfclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pfclaim.live/index_1.html\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 10:52:23 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 27380\r\ncast-mode: default\r\nlast-modified: Fri, 01 May 2026 08:05:49 GMT\r\netag: \"69f45edd-6af4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Db1p%2Fq9ajdwpnpVM5jvN1cnVh6gNlLg%2FB%2BHZ9iSTMxbUq%2Bid8TNoV2TxmcmXT5CLF%2F8XeRte7IxEoqx3HZViuclZM%2FRriekhqQ7ZSToYHqmJYnR9dATbJjiii1RSES0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f4e3c84183723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27380,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 27380, version 4.0","md5":"e092f17f85b5a6e5a73296c5819acee5","sha1":"1ab81cfcac2b37a777533f04c1c2c7671c047c2e","sha256":"362b168da82d69bc67d2a358fa20c59151cb4ceac8a5506be6baef5e6827fa42","sha512":"37756285b8dc6d24f04f40b3733ce2e3414f1242b0cf4715ad1a1082901d81caf10582dbcd2060ac8886902aa33d4fc2b1bd717215802f933aea929d181cc5c9","ssdeep":"768:uVmFXapd3t+i2J0dlFlL9baVrL0c8yMErCOtRPCM:uGXabqJsl5urL0xErT9CM","tlshash":"e0c2f1e694653af9ed0d707b065af62b539068bc436e807d9cf960b077a3bd1020f496","first_seen":"2025-08-12T17:14:20.779189Z","last_seen":"2026-06-10T03:33:28.608842Z","times_seen":2831,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pfclaim.live/d3tHnaQIAeqiE5hGcRw4mmgWYU.woff2","fqdn":"pfclaim.live","domain":"pfclaim.live","tld":"live"},"ip":{"addr":"172.67.148.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pfclaim.live/","date":"2026-05-01T10:52:22.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pfclaim.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 07:16:43 GMT","end":"Thu, 30 Jul 2026 07:16:42 GMT"},"fingerprint":{"sha1":"8B:BE:3A:1D:D3:3C:E4:08:76:CA:F5:D4:9D:25:10:05:03:EB:42:F7","sha256":"D1:39:B7:2C:1E:8C:91:9C:C7:65:DA:49:89:6A:64:34:31:76:A1:C5:7B:40:62:6E:EC:C4:22:C9:34:63:74:A1"}}},"request":{"raw":"GET /d3tHnaQIAeqiE5hGcRw4mmgWYU.woff2 HTTP/1.1\r\nHost: pfclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pfclaim.live/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 10:52:22 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 28032\r\ncast-mode: default\r\nlast-modified: Fri, 01 May 2026 08:05:49 GMT\r\netag: \"69f45edd-6d80\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A1%2FQsAuVX1ZZ9FiI7q2ZRRbdA9SVq1PtvQkHoX5BsiBxKidcPZbypVQzJsR7RTD6Y5f5uyv8wcH1EPU0HFAPn25H4pLlvCW0J2XeoG%2BYCtpYrucwyQJi%2F%2BljjjfoZCE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f4e3c820ff523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28032,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 28032, version 4.0","md5":"b8c08053843729b89c7d30418d11b8e8","sha1":"777b479da40801eaa213984673e470e269a05985","sha256":"2f1040eb66570b6eb6b943d10ca5d91fb8c6dddecac26fe8823627437291229b","sha512":"eb4dd7f19084bd7ad2091446e532110963ea89f1c957137cbd12f058938bb40117c58f527256c25334231329049a2b01897601bd1f3a732cbdeeec64f389e270","ssdeep":"768:Lix98832s/NBFN5wDlEOef2X7bs1Qlq3ZdkQ9e:ux3Xn2DlEOa2X3ef3Z9e","tlshash":"75c2e198d7323c5a7c0a71a4e94b0551ca0211ac32e1ed40b92933fb993d2da6fe708d","first_seen":"2024-07-28T17:20:17Z","last_seen":"2026-06-10T03:28:52.453967Z","times_seen":2665,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pfclaim.live/Th778RFibvl0SWWtDcTgHAmtY.png","fqdn":"pfclaim.live","domain":"pfclaim.live","tld":"live"},"ip":{"addr":"172.67.148.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pfclaim.live/index_1.html","date":"2026-05-01T10:52:22.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pfclaim.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 07:16:43 GMT","end":"Thu, 30 Jul 2026 07:16:42 GMT"},"fingerprint":{"sha1":"8B:BE:3A:1D:D3:3C:E4:08:76:CA:F5:D4:9D:25:10:05:03:EB:42:F7","sha256":"D1:39:B7:2C:1E:8C:91:9C:C7:65:DA:49:89:6A:64:34:31:76:A1:C5:7B:40:62:6E:EC:C4:22:C9:34:63:74:A1"}}},"request":{"raw":"GET /Th778RFibvl0SWWtDcTgHAmtY.png HTTP/1.1\r\nHost: pfclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pfclaim.live/index_1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 10:52:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 3691\r\ncast-mode: default\r\nlast-modified: Fri, 01 May 2026 08:05:49 GMT\r\netag: \"69f45edd-e6b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 88\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k2JSbykk0%2FfxEjaCGpxJXOVJMhg3z5lRAc9HtjiO6crtlwDc1qtVUHSo2eh%2FtGvpdjt4j4BmmeiglUOCGYrwenu%2FqCDvyLff7dA1Hzdv04CA%2FDNe7lqM28ME1ygmst0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f4e3c82a80523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3691,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 370 x 382, 8-bit colormap, non-interlaced","md5":"974b5641478c217c3b439075ba19b7b2","sha1":"4b0a532cee62d9fc35ac5e7751f50aa3c4bb951b","sha256":"c49f4729124d9c575671c2e3a06a7ff691fc8670bbcb6897c931e330621de885","sha512":"535fc2672320ba3511b2a5655854db69ce3502b6b5355ab06bb010cba9e3afed3bc70df12c369c6a90e7c13a56584ed68f960575c32581a4410a3e715c82151c","ssdeep":"","tlshash":"8e714a9f6138e887455eaebb469084220a9e435f0d3cb0fab1f24c119074aecaad5736","first_seen":"2025-09-17T10:51:07.660394Z","last_seen":"2026-05-01T10:53:56.588252Z","times_seen":15,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pfclaim.live/index_1.html","fqdn":"pfclaim.live","domain":"pfclaim.live","tld":"live"},"ip":{"addr":"172.67.148.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://pfclaim.live/index_1.html","date":"2026-05-01T10:52:22.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pfclaim.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 07:16:43 GMT","end":"Thu, 30 Jul 2026 07:16:42 GMT"},"fingerprint":{"sha1":"8B:BE:3A:1D:D3:3C:E4:08:76:CA:F5:D4:9D:25:10:05:03:EB:42:F7","sha256":"D1:39:B7:2C:1E:8C:91:9C:C7:65:DA:49:89:6A:64:34:31:76:A1:C5:7B:40:62:6E:EC:C4:22:C9:34:63:74:A1"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: pfclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pfclaim.live/index_1.html\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 10:52:22 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Fri, 01 May 2026 08:05:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nage: 88\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mFkZ6LBWcfitW%2B6AnkBHW%2FbHS3rxTOFfeaSRtgxHqjIe6hr%2ByBHgz4R5lYXoy%2FZpz2Nqnsq4o2M9C5tqZKZtfQm1eJkvitsunnNxthiM97l%2B0%2FxvUDZ1oMez580ScA4%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9f4e3c82c80923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]}],"data":{"size":183865,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (63486)","md5":"c65f6c36f0b45eaca843e1582e4c953c","sha1":"c000f7036e142e1179d65d58344b69a22ca30841","sha256":"acebddc7bdcb6603275b7434afc4c1c2d41e64b86e44887bea94a55ac2021b57","sha512":"0c3a2ba6b92c6a1e8c32b2448ce941aee1a9d38a0df49f8b0ed168178606430909a638d63c50cd47b45ad119ec28027f762ce59e6db763907251aa2ec5b01db8","ssdeep":"768:C0xXz2Of2Mf2q0A2GwjaAf28QKf2Kpf2qPQPf2tgpLf5Y+aAVymE2/f2rf2X82gK:7JK7MLRY+aBCcDpZ/kea4dZqOQ","tlshash":"34040d536119f574ace7593eeb1de119ae252000ff32c3e7a29e025f45ceaf8225276c","first_seen":"2026-05-01T10:52:56.909976Z","last_seen":"2026-05-01T10:53:56.59069Z","times_seen":2,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pfclaim.live/Avhzd9ZdakuMbZdyEXCqnREFFYw.mp4","fqdn":"pfclaim.live","domain":"pfclaim.live","tld":"live"},"ip":{"addr":"172.67.148.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://pfclaim.live/index_1.html","date":"2026-05-01T10:52:22.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pfclaim.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 07:16:43 GMT","end":"Thu, 30 Jul 2026 07:16:42 GMT"},"fingerprint":{"sha1":"8B:BE:3A:1D:D3:3C:E4:08:76:CA:F5:D4:9D:25:10:05:03:EB:42:F7","sha256":"D1:39:B7:2C:1E:8C:91:9C:C7:65:DA:49:89:6A:64:34:31:76:A1:C5:7B:40:62:6E:EC:C4:22:C9:34:63:74:A1"}}},"request":{"raw":"GET /Avhzd9ZdakuMbZdyEXCqnREFFYw.mp4 HTTP/1.1\r\nHost: pfclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pfclaim.live/index_1.html\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 10:52:22 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 2408292\r\ncast-mode: default\r\nlast-modified: Fri, 01 May 2026 08:05:49 GMT\r\netag: \"69f45edd-24bf64\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 88\r\ncontent-range: bytes 0-2408291/2408292\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V7IApsF8E8iwfLdaYStIiZSmwwVo0Xo77sU3GrrL7BYsalhg55A%2BMNdNF5a3ndku%2FxK35%2FNwjKPM9nLKT2adpaaUkNCT1gbsQ6l40F1V9SINKN1kqu%2Fe7W9vXo5VJ00%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f4e3c83881d23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2408292,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"9b038006009fe73d755727bd89887f7c","sha1":"84eab2edb21462fde236711e765511b5df36ba69","sha256":"bc7fa1ebdbde34d6099d52a427508e91f8544a134475ebfb2fc2e06200e31a2c","sha512":"67adbcd4cc6095666df6d5491972a492345838178874f2187339ef5231d1b22dece4e76494f996964b6d0fc33af142d65c03cd36806f922061eaa9eda710b8c1","ssdeep":"24576:3hAgwR1qrM/3n5ub5CK0aYKee2gJXCDv/AFHrFW9U3Nn:aD/I5CKYgZs/mFQU5","tlshash":"ed25235ba3c1a733feb8567651f6688229a3611611e30bdbfc8f5a102fa0c793d5b40d","first_seen":"2025-09-17T10:51:07.676075Z","last_seen":"2026-05-01T10:53:56.596689Z","times_seen":12,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":48,"dns":0,"connect":0,"send":0,"wait":21,"receive":206,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pfclaim.live/d3tHnaQIAeqiE5hGcRw4mmgWYU.woff2","fqdn":"pfclaim.live","domain":"pfclaim.live","tld":"live"},"ip":{"addr":"172.67.148.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pfclaim.live/index_1.html","date":"2026-05-01T10:52:23.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pfclaim.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 07:16:43 GMT","end":"Thu, 30 Jul 2026 07:16:42 GMT"},"fingerprint":{"sha1":"8B:BE:3A:1D:D3:3C:E4:08:76:CA:F5:D4:9D:25:10:05:03:EB:42:F7","sha256":"D1:39:B7:2C:1E:8C:91:9C:C7:65:DA:49:89:6A:64:34:31:76:A1:C5:7B:40:62:6E:EC:C4:22:C9:34:63:74:A1"}}},"request":{"raw":"GET /d3tHnaQIAeqiE5hGcRw4mmgWYU.woff2 HTTP/1.1\r\nHost: pfclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pfclaim.live/index_1.html\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 10:52:23 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 28032\r\ncast-mode: default\r\nlast-modified: Fri, 01 May 2026 08:05:49 GMT\r\netag: \"69f45edd-6d80\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rzq0CG3ggYnbUAAEakLrs2TCbs9du%2FVGt3RroZCNje1tEnUrMcYICoS5tpOk%2FaHSoMfoBDmkx2nwyxgnGKiCdlGYgxHYhMKGpuBzE8%2BjrdUpQFAQlxaZNhHGvnP89Tg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f4e3c84183823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28032,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 28032, version 4.0","md5":"b8c08053843729b89c7d30418d11b8e8","sha1":"777b479da40801eaa213984673e470e269a05985","sha256":"2f1040eb66570b6eb6b943d10ca5d91fb8c6dddecac26fe8823627437291229b","sha512":"eb4dd7f19084bd7ad2091446e532110963ea89f1c957137cbd12f058938bb40117c58f527256c25334231329049a2b01897601bd1f3a732cbdeeec64f389e270","ssdeep":"768:Lix98832s/NBFN5wDlEOef2X7bs1Qlq3ZdkQ9e:ux3Xn2DlEOa2X3ef3Z9e","tlshash":"75c2e198d7323c5a7c0a71a4e94b0551ca0211ac32e1ed40b92933fb993d2da6fe708d","first_seen":"2024-07-28T17:20:17Z","last_seen":"2026-06-10T03:28:52.453967Z","times_seen":2665,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pfclaim.live/gD19zQdpu6Hw0s5gG3VMOioQ.png","fqdn":"pfclaim.live","domain":"pfclaim.live","tld":"live"},"ip":{"addr":"172.67.148.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pfclaim.live/","date":"2026-05-01T10:52:23.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pfclaim.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 07:16:43 GMT","end":"Thu, 30 Jul 2026 07:16:42 GMT"},"fingerprint":{"sha1":"8B:BE:3A:1D:D3:3C:E4:08:76:CA:F5:D4:9D:25:10:05:03:EB:42:F7","sha256":"D1:39:B7:2C:1E:8C:91:9C:C7:65:DA:49:89:6A:64:34:31:76:A1:C5:7B:40:62:6E:EC:C4:22:C9:34:63:74:A1"}}},"request":{"raw":"GET /gD19zQdpu6Hw0s5gG3VMOioQ.png HTTP/1.1\r\nHost: pfclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pfclaim.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 10:52:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 891\r\ncast-mode: default\r\nlast-modified: Fri, 01 May 2026 08:05:49 GMT\r\netag: \"69f45edd-37b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 87\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7A50vm8YK2IKDBmTUbeD7HfZC1XVq%2FqysoA%2BN%2BUUpfm2nWe4PKH3mobl9LgYoxahZrLHCl%2FV35L5o%2Bd4jojmKGVTvk4gq%2FAMeDrdKfbIb5A5WHqAxtkt1lSYCKM8s9c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9f4e3c84f84b23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":891,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"ad13e1b2040acebbddf7b2ff4c633c9c","sha1":"6f6eb727b2767e00e9312653ffe195c6c253a4eb","sha256":"ac18bbdf8cd6598fdceb147eb661513b7c19e246e44b1e4465f2dfeae23f4051","sha512":"8551ce50349c81cf79f768085ab7d72f6aea8c6104b701a52d82f1f5e7114a1a593c1956f32fc91602bbe6ee383d58b9c5490391eec26383998a2db7b61cd76e","ssdeep":"","tlshash":"081196c6b73337a2f4f8dae349c384e6da668f78b502403c140ac91a56c736c6a36208","first_seen":"2025-09-17T10:51:07.672816Z","last_seen":"2026-05-01T10:53:56.612236Z","times_seen":13,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pfclaim.live/secureproxy?s=%2Fipfs%2F3XuGBQ0gATQLjIyGqDPHWAc51899fe96eecbb76132a3dd2497995f%3Ft%3D1777632742646","fqdn":"pfclaim.live","domain":"pfclaim.live","tld":"live"},"ip":{"addr":"172.67.148.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pfclaim.live/","date":"2026-05-01T10:52:22.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pfclaim.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 07:16:43 GMT","end":"Thu, 30 Jul 2026 07:16:42 GMT"},"fingerprint":{"sha1":"8B:BE:3A:1D:D3:3C:E4:08:76:CA:F5:D4:9D:25:10:05:03:EB:42:F7","sha256":"D1:39:B7:2C:1E:8C:91:9C:C7:65:DA:49:89:6A:64:34:31:76:A1:C5:7B:40:62:6E:EC:C4:22:C9:34:63:74:A1"}}},"request":{"raw":"GET /secureproxy?s=%2Fipfs%2F3XuGBQ0gATQLjIyGqDPHWAc51899fe96eecbb76132a3dd2497995f%3Ft%3D1777632742646 HTTP/1.1\r\nHost: pfclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pfclaim.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 10:52:23 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: max-age=2592000\r\netag: W/\"9812d-kd7OUWy1jiWhTYOiH9nZ17h7dH0\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=rhe6I0288WxMqoWxcyYrJg.js\r\ncdn-proxyver: 1.51\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/01/2026 10:52:23\r\ncdn-edgestorageid: 1056\r\ncdn-requestid: ca3aa7e9b12b50d93e1b64a33e7f7254\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pmul4N6VA%2F3qP4067QPoOT%2F9jbu2TOeUlMSb5mXiSoYM7URloXFJckFemfL7H36wXc6S%2FahbZ%2B0WSiACcOMRIB%2BOCDvhmUAPtdf5AkFDVhcNk26xi4BVUfhbmPuvLIc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f4e3c818fe123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":622893,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2cd979b380bc5083a0bbb57611436863","sha1":"91dece516cb58e25a14d83a21fd9d9d7b87b747d","sha256":"1bdfd3998d4c1b658bf6755976662f9640f3078e8d96e863dbd5d0ba98d99aed","sha512":"00669e83c0bdec6cd12a9ae81d7db73b78a014c133b9553a4db9ea65b32c8218447b5424d024a5681d68a93f79766b089a189d0b1041f18d4fc7f6595b97e384","ssdeep":"6144:Ih5gD4AOsstbFZFSXwRTMsS8chPcsdJs3wFYYH/3h8qcPOQA12Lcv0q:os4AnXwRTMP8chPc730WW","tlshash":"6dd4eac2ab09157340ca2eb5047b42afdf882d4d078ba85077f9afd9d74578230eee59","first_seen":"2026-05-01T10:52:56.918698Z","last_seen":"2026-05-01T10:52:56.918698Z","times_seen":1,"resource_available":true,"data":null}},"time_used":928,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":778,"receive":150,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pfclaim.live/DXD0Q7LSl7HEvDzucnyLnGBHM.woff2","fqdn":"pfclaim.live","domain":"pfclaim.live","tld":"live"},"ip":{"addr":"172.67.148.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pfclaim.live/","date":"2026-05-01T10:52:22.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pfclaim.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 07:16:43 GMT","end":"Thu, 30 Jul 2026 07:16:42 GMT"},"fingerprint":{"sha1":"8B:BE:3A:1D:D3:3C:E4:08:76:CA:F5:D4:9D:25:10:05:03:EB:42:F7","sha256":"D1:39:B7:2C:1E:8C:91:9C:C7:65:DA:49:89:6A:64:34:31:76:A1:C5:7B:40:62:6E:EC:C4:22:C9:34:63:74:A1"}}},"request":{"raw":"GET /DXD0Q7LSl7HEvDzucnyLnGBHM.woff2 HTTP/1.1\r\nHost: pfclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pfclaim.live/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 10:52:22 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 27992\r\ncast-mode: default\r\nlast-modified: Fri, 01 May 2026 08:05:49 GMT\r\netag: \"69f45edd-6d58\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h0TReRQZk%2BumyfuASgGidm22f6zOCn7XMLUjb1SACtThFZn%2Foe8idy38Tl2DC2X8XcWYnDscREOOSnO3Q%2F4FH0WYfyObid893Hr1f%2FClb6ugjB37ckdwPIxLWBFTmGw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f4e3c81eff123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27992,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 27992, version 4.0","md5":"6e016e5d8af17b4b0a7d7ea5d09a37f3","sha1":"0d70f443b2d297b1c4bc3cee727c8bfe7f860473","sha256":"2dc968863319a6f57e6428a7b4c292ae254d3e462b5f23f71bab492317067d5f","sha512":"bf2201f695e67518e886a2b1dc7126c4d292614524f6e3e879a8f89cf5c2bbb83eecc827d4b64242d76e7e5d7f18683a37e117c9d8accddc064b0232f3db2952","ssdeep":"768:YWjMCg7zYxo03f+Qo7seRuRCusYCdlebExh/tjqmKyrA:YIUJhTJRu9sdU21q/","tlshash":"92c2f2f0ca9d99b069358cf862bc9848d60c497d9d09d2fd6a73a35d0b50bcac7d8e0d","first_seen":"2024-08-01T19:55:06Z","last_seen":"2026-06-09T06:03:27.918867Z","times_seen":1135,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pfclaim.live/d3tHnaQIAeqiE5hGcRw4mmgWYU.woff2","fqdn":"pfclaim.live","domain":"pfclaim.live","tld":"live"},"ip":{"addr":"172.67.148.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pfclaim.live/index_1.html","date":"2026-05-01T10:52:22.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pfclaim.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 07:16:43 GMT","end":"Thu, 30 Jul 2026 07:16:42 GMT"},"fingerprint":{"sha1":"8B:BE:3A:1D:D3:3C:E4:08:76:CA:F5:D4:9D:25:10:05:03:EB:42:F7","sha256":"D1:39:B7:2C:1E:8C:91:9C:C7:65:DA:49:89:6A:64:34:31:76:A1:C5:7B:40:62:6E:EC:C4:22:C9:34:63:74:A1"}}},"request":{"raw":"GET /d3tHnaQIAeqiE5hGcRw4mmgWYU.woff2 HTTP/1.1\r\nHost: pfclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pfclaim.live/index_1.html\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 10:52:22 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 28032\r\ncast-mode: default\r\nlast-modified: Fri, 01 May 2026 08:05:49 GMT\r\netag: \"69f45edd-6d80\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ANy4zWwuF%2B4ZF7Obrw2IP4n8ab3LWrn%2FjF%2FlxQmYHhv0At%2BlhrsXluWpx1H%2B9al1H%2B0X20L5QhI8C%2FpnI3lFExjg3fZ%2BdKb37YDu0VlJjAdMbKg%2BcfN7OPcuyonQbKQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f4e3c83882223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28032,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 28032, version 4.0","md5":"b8c08053843729b89c7d30418d11b8e8","sha1":"777b479da40801eaa213984673e470e269a05985","sha256":"2f1040eb66570b6eb6b943d10ca5d91fb8c6dddecac26fe8823627437291229b","sha512":"eb4dd7f19084bd7ad2091446e532110963ea89f1c957137cbd12f058938bb40117c58f527256c25334231329049a2b01897601bd1f3a732cbdeeec64f389e270","ssdeep":"768:Lix98832s/NBFN5wDlEOef2X7bs1Qlq3ZdkQ9e:ux3Xn2DlEOa2X3ef3Z9e","tlshash":"75c2e198d7323c5a7c0a71a4e94b0551ca0211ac32e1ed40b92933fb993d2da6fe708d","first_seen":"2024-07-28T17:20:17Z","last_seen":"2026-06-10T03:28:52.453967Z","times_seen":2665,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":40,"dns":0,"connect":0,"send":0,"wait":31,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pfclaim.live/secureproxy?s=%2Fjmpd%2F","fqdn":"pfclaim.live","domain":"pfclaim.live","tld":"live"},"ip":{"addr":"172.67.148.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pfclaim.live/","date":"2026-05-01T10:52:24.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pfclaim.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 07:16:43 GMT","end":"Thu, 30 Jul 2026 07:16:42 GMT"},"fingerprint":{"sha1":"8B:BE:3A:1D:D3:3C:E4:08:76:CA:F5:D4:9D:25:10:05:03:EB:42:F7","sha256":"D1:39:B7:2C:1E:8C:91:9C:C7:65:DA:49:89:6A:64:34:31:76:A1:C5:7B:40:62:6E:EC:C4:22:C9:34:63:74:A1"}}},"request":{"raw":"POST /secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: pfclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pfclaim.live/\r\ncontent-type: application/json\r\nContent-Length: 1407\r\nOrigin: https://pfclaim.live\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1407,"data":"{\"route\":\"n9POyFeFG1tUtiSU-z9JOx3n\",\"payload\":\"0hqM-6_N52QBzAIWAx0AEQCsAsQCLQD5AhgAAAECJwMAAO8nhn2XtsKCAQed6_QWPVjkc4VK8GMCAABSjMrFpd4sTRsgDZZr0hkn1KZ5a1G7J_llmTI6-uCbtG6HUpdY8jBpseShXaTBpuZHz7mjaOOEu0xzkaFA799oj_winWAeJodXhSKRx-FRVI4hKbpYA5Wen3nL3C7kxywotWOgMjMwY214s6fZwxzU1Gf9wjkqWXlFqpjJkoJJ8aThSeYmTIgMNS5ELK4xce4ViImKmqZMBNVizhCK8oXFGvo5R5cHmxJd-C-MxBNM4qkCZKFqQiUrpfyF3kC9TRfGpg2Zoq_1UG8nkjx5cJWgSIL8QK_IzCik3KzvgLNvaFPGpdYeTQhccxzS1x8Yy33HFwvnVLAydj_nLoawQho6kspxTrxaxm5aNDrZh7X4elaW4loMHQW7-0vqXCNZ2F_3dUd2EldFPsy3cNhRO4_I6mK_nCVN0bZndYAIS5J_1Vu5yWBFb00esy-1YK7SMdSIPwtnqegCcEusNU2uU3oUibdO9beRgEqwVCBOBPuclNCdEJApSOgEZ7u7u0j63S3xuwzXWUkvo7g8hENYG5vstM_5m6AbyHNsUAXjSb00Qe7fmvkX6zX7vkqxWQGPdVP4JbxghnlsbjLsckJrMEu-0GALR5loP0ePKLu4HPLsg6Fl5xjd16xiyNgHyz94b-_0weYsBRJ8KBm0g3cIXncDkoqBU36JhdkaD3bTvwoNrQISCSIQarkIcXU-BqGArb5ytFinIBCx1bxNIm_Ke_6Q6Ipn1INjkaK4-pBysLu1i2ZNIr4VTlHAp4CprrhmZSPxuQ0akMgGsN2E74aazTOwQ_yDu_5ONdfUu3fJrTWaN0XIJXzfdg9to2McOp4G8ubMEZ45rcP6z4VXT8EaUpi8btDUfQl7Ic2ZeiZvDTRwtfwCcPbkn0MjdNhxmDEpMRrlQmbXrunndbXdmkAHkQ3JDei-4qHqC6dSqz23V1eVYM7x9m59rslIWx0phDfdTZj86OGgJrtdXM9MIxdTc_O4ffa81MQDPjZnrAEAjJs4FVPGXE4-1nt-OBEiMsydCN5xWRDQ0tIgcW0H-JkmF402nK0v5Q3BhaxeCsZnsBUv84tQkCOgdr7ihhsgtbXG779H6bCr5DOpCUZcnGNlhxA\",\"challenge\":\"eyJpZCI6IlBpM2Q2S2wyZF9vQlJOT3RJb3ZHUXciLCJub25jZSI6MzM0LCJoYXNoIjoiMDAxYTk5YjJhZThkNTAxZjUxNmIwMTJjMzA3NDkzNmJmYmM0M2FmZWYyZDE1ZWRmNDU5MTcwMjA2M2Q4ZWUxYSJ9\"}"}},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 10:52:25 GMT\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"a-bAsFyilMr4Ra1hIU5PyoyFRunpI\"\r\nx-ratelimit-limit: 20\r\nx-ratelimit-remaining: 17\r\nx-ratelimit-reset: 1777632805184\r\ncdn-proxyver: 1.51\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 05/01/2026 10:52:25\r\ncdn-edgestorageid: 879\r\ncdn-requestid: d55ce1eb4c93749a196dfe76d7ff84d0\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zwbvxL7aSsH6%2BLO5X1OU6HXbWW%2BjfvCAs%2F5DRLN2afK1Y8OFYniGEO%2BGk9%2BJn%2FBb7TRrzv5LkSsbZcDrJZtqSxV5LEqO8zPWdV35lShXXx%2BMymqauOH0Qxh8gdKvqB8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f4e3c8ffa4223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T07:14:22.229857Z","times_seen":16290217,"resource_available":true,"data":null}},"time_used":807,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":807,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pfclaim.live/Th778RFibvl0SWWtDcTgHAmtY.png","fqdn":"pfclaim.live","domain":"pfclaim.live","tld":"live"},"ip":{"addr":"172.67.148.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pfclaim.live/","date":"2026-05-01T10:52:22.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pfclaim.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 07:16:43 GMT","end":"Thu, 30 Jul 2026 07:16:42 GMT"},"fingerprint":{"sha1":"8B:BE:3A:1D:D3:3C:E4:08:76:CA:F5:D4:9D:25:10:05:03:EB:42:F7","sha256":"D1:39:B7:2C:1E:8C:91:9C:C7:65:DA:49:89:6A:64:34:31:76:A1:C5:7B:40:62:6E:EC:C4:22:C9:34:63:74:A1"}}},"request":{"raw":"GET /Th778RFibvl0SWWtDcTgHAmtY.png HTTP/1.1\r\nHost: pfclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pfclaim.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 10:52:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 3691\r\ncast-mode: default\r\nlast-modified: Fri, 01 May 2026 08:05:49 GMT\r\netag: \"69f45edd-e6b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 88\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BIsFV9cG7ob36V0%2Fr71mi6biiuM9mcxcieWNkR6yQxGxc3mfHBnPAEpyyVjmvnbFqJ%2FPAdK64jPN7Z9thjHwx%2Ft2iEJqUPaJaSiSYGZ3vc3rrlMDcjDFhkdjNGkYPRk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f4e3c815fdb23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3691,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 370 x 382, 8-bit colormap, non-interlaced","md5":"974b5641478c217c3b439075ba19b7b2","sha1":"4b0a532cee62d9fc35ac5e7751f50aa3c4bb951b","sha256":"c49f4729124d9c575671c2e3a06a7ff691fc8670bbcb6897c931e330621de885","sha512":"535fc2672320ba3511b2a5655854db69ce3502b6b5355ab06bb010cba9e3afed3bc70df12c369c6a90e7c13a56584ed68f960575c32581a4410a3e715c82151c","ssdeep":"","tlshash":"8e714a9f6138e887455eaebb469084220a9e435f0d3cb0fab1f24c119074aecaad5736","first_seen":"2025-09-17T10:51:07.660394Z","last_seen":"2026-05-01T10:53:56.588252Z","times_seen":15,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pfclaim.live/index_1.html","fqdn":"pfclaim.live","domain":"pfclaim.live","tld":"live"},"ip":{"addr":"172.67.148.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://pfclaim.live/","date":"2026-05-01T10:52:22.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pfclaim.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 07:16:43 GMT","end":"Thu, 30 Jul 2026 07:16:42 GMT"},"fingerprint":{"sha1":"8B:BE:3A:1D:D3:3C:E4:08:76:CA:F5:D4:9D:25:10:05:03:EB:42:F7","sha256":"D1:39:B7:2C:1E:8C:91:9C:C7:65:DA:49:89:6A:64:34:31:76:A1:C5:7B:40:62:6E:EC:C4:22:C9:34:63:74:A1"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: pfclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pfclaim.live/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 10:52:22 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Fri, 01 May 2026 08:05:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nage: 88\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PPtdbPp3xDZTqnvijk203RaZzwGD182fBnEingyxYVsVf1wQ03fJjevieJW9QRosZrzjTN0KnC522DOa6DcYw8y06gt38kNyu6aNamF8NzU5N4HPK6FpAmuI%2Bzfgky0%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9f4e3c820ff723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":183865,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (63486)","md5":"c65f6c36f0b45eaca843e1582e4c953c","sha1":"c000f7036e142e1179d65d58344b69a22ca30841","sha256":"acebddc7bdcb6603275b7434afc4c1c2d41e64b86e44887bea94a55ac2021b57","sha512":"0c3a2ba6b92c6a1e8c32b2448ce941aee1a9d38a0df49f8b0ed168178606430909a638d63c50cd47b45ad119ec28027f762ce59e6db763907251aa2ec5b01db8","ssdeep":"768:C0xXz2Of2Mf2q0A2GwjaAf28QKf2Kpf2qPQPf2tgpLf5Y+aAVymE2/f2rf2X82gK:7JK7MLRY+aBCcDpZ/kea4dZqOQ","tlshash":"34040d536119f574ace7593eeb1de119ae252000ff32c3e7a29e025f45ceaf8225276c","first_seen":"2026-05-01T10:52:56.909976Z","last_seen":"2026-05-01T10:53:56.59069Z","times_seen":2,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pfclaim.live/Avhzd9ZdakuMbZdyEXCqnREFFYw.mp4","fqdn":"pfclaim.live","domain":"pfclaim.live","tld":"live"},"ip":{"addr":"172.67.148.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://pfclaim.live/","date":"2026-05-01T10:52:22.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pfclaim.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 07:16:43 GMT","end":"Thu, 30 Jul 2026 07:16:42 GMT"},"fingerprint":{"sha1":"8B:BE:3A:1D:D3:3C:E4:08:76:CA:F5:D4:9D:25:10:05:03:EB:42:F7","sha256":"D1:39:B7:2C:1E:8C:91:9C:C7:65:DA:49:89:6A:64:34:31:76:A1:C5:7B:40:62:6E:EC:C4:22:C9:34:63:74:A1"}}},"request":{"raw":"GET /Avhzd9ZdakuMbZdyEXCqnREFFYw.mp4 HTTP/1.1\r\nHost: pfclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pfclaim.live/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 10:52:22 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 2408292\r\ncast-mode: default\r\nlast-modified: Fri, 01 May 2026 08:05:49 GMT\r\netag: \"69f45edd-24bf64\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 88\r\ncontent-range: bytes 0-2408291/2408292\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V%2FTPOasSlC8eEIrSm9kZluGPmS7iae6%2F9woBOnE1EQFrw5aFxAgScAe43SJFMRdnIPC%2B9nZotyEsxnUgMXE6E4q0ZiKTfXyfz%2BY%2FaNm6HHU9jX1TYc%2FZWgn0FQOXNXE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f4e3c823ffd23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2408292,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"9b038006009fe73d755727bd89887f7c","sha1":"84eab2edb21462fde236711e765511b5df36ba69","sha256":"bc7fa1ebdbde34d6099d52a427508e91f8544a134475ebfb2fc2e06200e31a2c","sha512":"67adbcd4cc6095666df6d5491972a492345838178874f2187339ef5231d1b22dece4e76494f996964b6d0fc33af142d65c03cd36806f922061eaa9eda710b8c1","ssdeep":"24576:3hAgwR1qrM/3n5ub5CK0aYKee2gJXCDv/AFHrFW9U3Nn:aD/I5CKYgZs/mFQU5","tlshash":"ed25235ba3c1a733feb8567651f6688229a3611611e30bdbfc8f5a102fa0c793d5b40d","first_seen":"2025-09-17T10:51:07.676075Z","last_seen":"2026-05-01T10:53:56.596689Z","times_seen":12,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":198,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pfclaim.live/1ZFS7N918ojhhd0nQWdj3jz4w.woff2","fqdn":"pfclaim.live","domain":"pfclaim.live","tld":"live"},"ip":{"addr":"172.67.148.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pfclaim.live/","date":"2026-05-01T10:52:22.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pfclaim.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 07:16:43 GMT","end":"Thu, 30 Jul 2026 07:16:42 GMT"},"fingerprint":{"sha1":"8B:BE:3A:1D:D3:3C:E4:08:76:CA:F5:D4:9D:25:10:05:03:EB:42:F7","sha256":"D1:39:B7:2C:1E:8C:91:9C:C7:65:DA:49:89:6A:64:34:31:76:A1:C5:7B:40:62:6E:EC:C4:22:C9:34:63:74:A1"}}},"request":{"raw":"GET /1ZFS7N918ojhhd0nQWdj3jz4w.woff2 HTTP/1.1\r\nHost: pfclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pfclaim.live/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 10:52:22 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 28004\r\ncast-mode: default\r\nlast-modified: Fri, 01 May 2026 08:05:49 GMT\r\netag: \"69f45edd-6d64\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FyChkafBWz%2Fb2tzt3QuDJIE64tFs0I6e9P7hqdL2ZgLk%2B1brRUWGzAl3LsaSpsfip2mV8HR2gMj4fdEevLy39wWB3vnaAangxkUfaoycQedCiEnMGPSFOg6kKJndYCk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f4e3c81fff423eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28004,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 28004, version 4.0","md5":"6a0a655993cb46fa8421adf0b1c20023","sha1":"d7e6454bb37dd7ca238617749d0fd6763de3cf8c","sha256":"cc324555c1cd681a59c27be1eda61da587d17bf71cc1ed8aa3e4a51e77907685","sha512":"a67e3a335ec63a2515c945b5355794237e3a0203d0f44c49d57ee12b0ebb46a8f2d2bcd354af40a26b6e631fc2c8f2ac707f5032b7efabe96b4720d796d01976","ssdeep":"768:Spm4oXyuupZmdXzlnv47Rov6+gIDoZ364qvnza:Sp9juujsZv4Noi+gzq4qPza","tlshash":"cec2f157c68922f894782291d8a783992332955512ad43ca61935f00d4fdeb7e8bbd34","first_seen":"2023-12-29T15:34:12Z","last_seen":"2026-06-10T03:28:52.445208Z","times_seen":2599,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":241,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pfclaim.live/GrgcKwrN6d3Uz8EwcLHZxwEfC4.woff2","fqdn":"pfclaim.live","domain":"pfclaim.live","tld":"live"},"ip":{"addr":"172.67.148.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://pfclaim.live/index_1.html","date":"2026-05-01T10:52:22.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pfclaim.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 07:16:43 GMT","end":"Thu, 30 Jul 2026 07:16:42 GMT"},"fingerprint":{"sha1":"8B:BE:3A:1D:D3:3C:E4:08:76:CA:F5:D4:9D:25:10:05:03:EB:42:F7","sha256":"D1:39:B7:2C:1E:8C:91:9C:C7:65:DA:49:89:6A:64:34:31:76:A1:C5:7B:40:62:6E:EC:C4:22:C9:34:63:74:A1"}}},"request":{"raw":"GET /GrgcKwrN6d3Uz8EwcLHZxwEfC4.woff2 HTTP/1.1\r\nHost: pfclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pfclaim.live/index_1.html\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 10:52:22 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 27380\r\ncast-mode: default\r\nlast-modified: Fri, 01 May 2026 08:05:49 GMT\r\netag: \"69f45edd-6af4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MkMcW3hQAnnphrLyWuaovoTJZ8%2BZmPudQDcWMim1wisVZkbfRs6SYo333%2BpairwyxTBYYLpLJcrOA4Hed6CNerZGey7SxdBaT%2FxugQ2WQShxXBYPEgrjLYw%2FWvn5kMc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f4e3c83882023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27380,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 27380, version 4.0","md5":"e092f17f85b5a6e5a73296c5819acee5","sha1":"1ab81cfcac2b37a777533f04c1c2c7671c047c2e","sha256":"362b168da82d69bc67d2a358fa20c59151cb4ceac8a5506be6baef5e6827fa42","sha512":"37756285b8dc6d24f04f40b3733ce2e3414f1242b0cf4715ad1a1082901d81caf10582dbcd2060ac8886902aa33d4fc2b1bd717215802f933aea929d181cc5c9","ssdeep":"768:uVmFXapd3t+i2J0dlFlL9baVrL0c8yMErCOtRPCM:uGXabqJsl5urL0xErT9CM","tlshash":"e0c2f1e694653af9ed0d707b065af62b539068bc436e807d9cf960b077a3bd1020f496","first_seen":"2025-08-12T17:14:20.779189Z","last_seen":"2026-06-10T03:33:28.608842Z","times_seen":2831,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":41,"dns":0,"connect":0,"send":0,"wait":31,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pfclaim.live/secureproxy?s=%2Fjmpd%2F","fqdn":"pfclaim.live","domain":"pfclaim.live","tld":"live"},"ip":{"addr":"172.67.148.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pfclaim.live/index_1.html","date":"2026-05-01T10:52:24.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pfclaim.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 07:16:43 GMT","end":"Thu, 30 Jul 2026 07:16:42 GMT"},"fingerprint":{"sha1":"8B:BE:3A:1D:D3:3C:E4:08:76:CA:F5:D4:9D:25:10:05:03:EB:42:F7","sha256":"D1:39:B7:2C:1E:8C:91:9C:C7:65:DA:49:89:6A:64:34:31:76:A1:C5:7B:40:62:6E:EC:C4:22:C9:34:63:74:A1"}}},"request":{"raw":"POST /secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: pfclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pfclaim.live/index_1.html\r\ncontent-type: application/json\r\nContent-Length: 1470\r\nOrigin: https://pfclaim.live\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1470,"data":"{\"route\":\"n9POyFeFG1tUtiSU-z9JOx3n\",\"payload\":\"0hqM-6_N52QBNQP1AisAFQDLArgCIQAKAyoAAAIBVgMAAO8nhn2XtsKCAQfZBQuIcN6NcIr-q28CAACRzjqVyg-TO_Mxn46CIK_NcUrabv9hOKKFij6kVT8rLe0ae8GDu3FqdzgJ1r_S8IIoQathqUzfCzB8ptaq7IKpoyc6q9SxInogY7LCUxwkXyWmgids4efw43M9EAzQ3W0QLvBS3K_gKAQgvAw12B41PUfulRuPaAYIpsxq2_jx6Wz4ke-EukahXqp_EfdIxi9JMABMZfaXHhZHsAMLgKhZzgJkcm3LTNBp6j-ty1PdrYRydbAP_qGpfWd-973vwjcge9VYTEsjggcdOHL5rnAn0fhKC3lrdYQvCcoBFNKRQRAo2emAmoG4EB8_a_cr35k88Dm9yXKdCmVP67p_7uikVBrVITEGg03wj5MwNtKE31O3FT9ZqrMfnbqaNk5hNxMwpZ-p-zzXL1TsEbfv6yVTAfa3cJAxMeArrfmyiIP5cDBZlK1ur6K7ImlPmPWNf5mhZhK2QyQXLp2gvjtwICXb2MZxPEV3xEm4krHNUnS_ncIy5ZYdE8YnQfC-GEYPO7kEBYj-s0g2BvBiAGwjQ7Odn62dKz7PZdhSTboFtsvSsMXJ56PYr7sdFE971uDnjG3YnfQqLNFBdCP28FMSNAAafbZA4AGaE2k2mk1ZgX63ygV4_NYxR7WIFxNTuYNMY2icyBFzWRhOAMidxazMOI0vk5k3JmBAYAd3TTRIgoqNo6qd-NhG8El7WtJuPbi5atXIXcL1_GMiEKTIuqTWOiMWdTBIKhaqz1RiqjDN7mCPU7KLQUSeDHTrfBfKYNALWyeC9yzfq3ATfBdrucQNzf9qI5QH0xkJsWTVEq4Qn5ZHLZ2yszwlcF9EtcGwiEemMIbmQ8S9xzOFCZOiTgrPFuwIj8Qyo1UopfgQJHLXWYg_CueDPGmHRIy5zdncjUDntKbIvUA1KKeXoNULk0sozU1-KR3iw1lUE2HLl5GBd4yjBRsyaoSZwWj4_4ShzvUwsTkadU-vsItuULTgp3kxGhrJj7WCSPvIiqX-TFTGj2-h3CJixqGM-SSYccZXwI5mZU4fB-KQDfoKn4sVZy0riF2Wv95X4L2VTO61bbfQ457XBA-5I3smJ8NtJg478DzyJBajU5WKLjvrsh91y_mvu940t3hJ6_4EuuP3qdcdvrtn7fXKdzWXPVGmzYjhOlhQ6shtNbK-P_5DlcVIegBXEA\",\"challenge\":\"eyJpZCI6IjdsWUdENU1JajNKYnZDLWNDVUo5THciLCJub25jZSI6MjIsImhhc2giOiIwMDJlMTNjYTFlYWQ1MTU2ZDQ5ZTcwODgyOGU5MGZlYTRmOWVmM2FhNTJlNjg5NmI0YzkyMDI0OGFmNzYyOWI4In0=\"}"}},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 10:52:25 GMT\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"a-bAsFyilMr4Ra1hIU5PyoyFRunpI\"\r\nx-ratelimit-limit: 20\r\nx-ratelimit-remaining: 19\r\nx-ratelimit-reset: 1777632805117\r\ncdn-proxyver: 1.51\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 05/01/2026 10:52:25\r\ncdn-edgestorageid: 879\r\ncdn-requestid: 7c32d46cea1ef9c2e02dbedcad4b99e4\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mTx5YM7wtqfSBDop6vbPme6aMnh%2FoP40y6W2YyBItMqpBWOd9uXdyikIa436d1xCmp0rzG0ewVYVufwWMctd6Jwb4R9NBdVS18Py0FfnKX34GtTY3fAiJM8qDBNsBB0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f4e3c8fca3423eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T07:14:22.229857Z","times_seen":16290217,"resource_available":true,"data":null}},"time_used":763,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":762,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pfclaim.live/secureproxy?s=%2Fjmpd%2F","fqdn":"pfclaim.live","domain":"pfclaim.live","tld":"live"},"ip":{"addr":"172.67.148.172","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pfclaim.live/index_1.html","date":"2026-05-01T10:52:25.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pfclaim.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 07:16:43 GMT","end":"Thu, 30 Jul 2026 07:16:42 GMT"},"fingerprint":{"sha1":"8B:BE:3A:1D:D3:3C:E4:08:76:CA:F5:D4:9D:25:10:05:03:EB:42:F7","sha256":"D1:39:B7:2C:1E:8C:91:9C:C7:65:DA:49:89:6A:64:34:31:76:A1:C5:7B:40:62:6E:EC:C4:22:C9:34:63:74:A1"}}},"request":{"raw":"POST /secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: pfclaim.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pfclaim.live/index_1.html\r\ncontent-type: application/json\r\nContent-Length: 1400\r\nOrigin: https://pfclaim.live\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1400,"data":"{\"route\":\"n9POyFeFG1tUtiSU-z9JOx3n\",\"payload\":\"0hqM-6_N52QBBgO4AhAADgDGAvQCHADkAh4AAQACIgMAAO8nhn2XtsKCAYlGByn_b4CfqpZx728CAAC0ZIJ5z0YprPe8cXBj7Jv-2Yo4ZXn_GDtvlN3xtc9TNO2a7PzQVUgVlAvadWZuALN8Z3ACfSktxnUt88O3jsHUgbU0MlhFb4Wr_szY6jJhuSMXepPoOsZUxhBtPkB7HfltojimNld5l60wJ2liprXq5DNFA57mv7NorbPQaG-MNoCEYAF_MPoqw9mSYsH53ELoJd0B6qfii24--MQKJJPI3tDdS3EVDC_i51UtTjkhUJQ7C8hLQTKh_xWqbp_GFBjTNB4lmyqQFhPVcg2j0vOsZyN1yq2IsEEoiegh3dETGP9FOA8E7gNlrEFEWOKmDmEFzu_ArHuSxKflAx_xCXxNSKVMQVCNZg9d6E1NCeqVkhf2NR1dU4XPHadJdJ8Ktxrglh5LmlSG_9KUZEvLmXMoeCnF5UMXbkj6iyCMM6HyEU8TEavdDGv60q3ZncNJH9jrEHvjKAiyLn796EqdWJUK2MV6RHZJMvPfu-giOtQGk4Ej9nqF19QH81GrULJ5ZcVcMHfup7IsUDcfJRpMQ9bYzL-sAFUjPpGhmeuqgXEcvF-R3L7S5CxSp-mTJwtsKiS3VXgz1i8UVsnOF-NS960V-avzBK1VF1-KRWUXL4GjiAd4koYAqPh6xYNaFSI38K1KrqaUH0SV45dSBDBWSTg475uNSsoutIwvjcMvN5BYDo3jObl-jzhYB4Y9aoMOmPW6clBwyBNy7yRqVI9IhXyA4RUgOTF1LJsUTfCjk-LZkJllWBQ9idFCgad3DgoTZSPOjW4zE74cm5UqP1VgItxow0g9CVHN-RQI8SCqeusC4NK3ddzbWv0BZLSrk899qARLFZDabNCnC_t0Ie6m4ICKAxIuOT_eeLaXvvaiXSZfHIJrwkc_GQk42D48aD2Fpf18prJTdwMAOW5BIF7LU5COnfFfL13P5o9n1qQ9I2diaHxdz3cuO8OCnLfLMf84mf56ZtFc3dteMMHF8HgO6KRkHprpm5GurRJUb1ijY7_j-Pgqj-oiYvxPzG2egElNUuKyq09OvWkgcQkngg-xWWM2R9Aln28aJ0ZLkqO__MOsmRzIOhs7SWWO0L2EzdaaQpBahXuTz8NVnd0Q\",\"challenge\":\"eyJpZCI6IjB2QXdxblpieHFMUjk1WFhTamJpemciLCJub25jZSI6MTMzLCJoYXNoIjoiMDAzZTMzZGFhMWZjODZjNGZjZWE2NTdhNTlmOGJlNDRjOTFmZDdiYTExMzQyZDkwNzAwMThkOTliZGJiODgzYSJ9\"}"}},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Fri, 01 May 2026 10:52:25 GMT\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"a-bAsFyilMr4Ra1hIU5PyoyFRunpI\"\r\nx-ratelimit-limit: 20\r\nx-ratelimit-remaining: 18\r\nx-ratelimit-reset: 1777632805141\r\ncdn-proxyver: 1.51\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 05/01/2026 10:52:25\r\ncdn-edgestorageid: 879\r\ncdn-requestid: 86edfe831d38b9bb58756739e3a6a644\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XQzDXEeHjK6Nw23BUxc5%2BzJh8XPJVoC49x1y4p0%2FpSCGA%2B0WuHnu4o9s%2FUYgmG717mKItsWhVwwiPmGdfsoR5hCMI21fWXQghUolhpxYfiPB%2FuPvszaY0Nlhwt37Hj4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f4e3c908a9523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T07:14:22.229857Z","times_seen":16290217,"resource_available":true,"data":null}},"time_used":669,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":668,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}