{"report_id":"74ca7b3d-c6e0-4158-a391-a6aa43a43e3e","version":6,"status":"done","tags":[],"date":"2026-02-20T16:07:06Z","url":{"schema":"https","addr":"claim-eden.com/","fqdn":"claim-eden.com","domain":"claim-eden.com","tld":"com"},"ip":{"addr":"172.67.148.162","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"claim-eden.com/","fqdn":"claim-eden.com","domain":"claim-eden.com","tld":"com"},"title":"Eden – All Content, Files, \u0026 AI In One Place","dom":{"size":443236,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (36483)","md5":"e6d939aa4181ae0bc27b7b599479e438","sha1":"ddde30e91ed0ebd70aa1e8a7e2243d24421ab727","sha256":"7802126859373b98225f845425bc62d2651f63bf5dc2ef7ac9cea5d2abc5d9ea","sha512":"f00c7c23a797a97c0174a9586056e71e41f3eab47e796938eaddf40c631be6a606b8690623d14ef53804fe2d071b0d0b2b452599bcb43ebc9161d03b9a4c1577","ssdeep":"1536:S1tszVJVXL3eHCe+8VtedkVmVPaU9VgaTVhVk9VCwikM2xtxAbmuiKdar+29O7eY:S1tw1jkM2xDAbmuBkgjABn4l4B4l4s","tlshash":"0394e7235259e1285cd7257df798a60c39189201ff33c2df66ed526f82ceee422563ac","dom_hash":"domhash832881b1b251b59d210942cf965d5187","first_seen":"2026-02-20T16:07:12.454089Z","last_seen":"2026-02-20T16:07:12.454089Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"claim-eden.com/","fqdn":"claim-eden.com","domain":"claim-eden.com","tld":"com"},"ip":{"addr":"172.67.148.162","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-27T16:07:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"claim-eden.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"claim-eden.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-17","domain_rank":0,"first_seen":"2026-02-20T16:07:07.534671Z","last_seen":"2026-02-20T16:07:07.534671Z","alert_count":29,"request_count":29,"received_data":14516343,"sent_data":13906,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"framerusercontent.com","ip":{"addr":"52.84.50.29","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2019-04-29","domain_rank":18507,"first_seen":"2019-05-01T19:48:10Z","last_seen":"2026-02-18T15:47:01.103612Z","alert_count":0,"request_count":3,"received_data":692905,"sent_data":1485,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"claim-eden.com/","fqdn":"claim-eden.com","domain":"claim-eden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"205229b063c8c132e92b36c819b0fe8a","sha1":"6f7a9c721a1b2d1a527fd9d971682dad70cc3583","sha256":"b76a84f7ff0b1d1af5ecf96be4cd44fb4ae7e679c9b383a0d204189285b718c1","sha512":"491eeb5e72a69ea25e2a7ea234bca0995ffe2c219dc1b54fe4254f1cdb3058fdc77921241b447ce55426734ff02e652a83a0c4c18167c10c83c806d7323a7020","ssdeep":"","tlshash":"ddc0c031eb608cb0442c20fb6135a3c43150289c6143b0c7c6bcccca25ccfc02a58824","size":186,"data":"","first_seen":"2026-02-20T16:07:12.515231Z","last_seen":"2026-02-20T16:31:29.313349Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-eden.com/secureproxy?s=%2Fipfs%2FyW7mvDxxWgFbZT6cuvQp4gaf9ff2e0795590d25730123541d348fb%3Ft%3D1771603602290","fqdn":"claim-eden.com","domain":"claim-eden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"caf13d1c15b727c62dd54729c3a852d3","sha1":"568507d86100a94724a495b042a2da692f4e7d0b","sha256":"887a8c87cee0bb32d41337fabd827c75133b08963d45251ef6f55c841f3f96f6","sha512":"bf76da5bf2a8da5c54e9a7445b5505de59e042be36918bb69fd042211e4faf18d11a8dafe45b792af5f1e7ab1e7c34c5df39af62067a34b5fa168ed11c7b4355","ssdeep":"6144:3h5gDXACl2/EM1CjCjRHlIy6VKcRmWLO2m3fnDRumuSYlhv1wf2Rti:/sXACl4N1CjCjRHlIyQRhOLfD3J","tlshash":"9bd4bdc0875915bf42982aae19b35b7fdfa80d58074bcc5073c31cd163a570a9be6be8","size":599250,"data":"","first_seen":"2026-02-20T16:07:12.504053Z","last_seen":"2026-02-20T16:07:12.504053Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"claim-eden.com/uy2Gax2rmjl1JOojtjM7MNi9cw.png","fqdn":"claim-eden.com","domain":"claim-eden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-eden.com/","date":"2026-02-20T16:06:43.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-eden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:59:55 GMT","end":"Mon, 18 May 2026 15:57:38 GMT"},"fingerprint":{"sha1":"C0:89:F1:7E:14:E9:6A:E5:FF:B6:72:23:79:94:04:60:C0:07:B9:F5","sha256":"F5:98:05:11:F9:0B:64:1B:D0:0F:87:95:7D:4B:87:1B:4A:AD:30:94:E5:DB:19:BE:68:C0:56:68:B3:EC:B2:9E"}}},"request":{"raw":"GET /uy2Gax2rmjl1JOojtjM7MNi9cw.png HTTP/1.1\r\nHost: claim-eden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-eden.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Feb 2026 16:06:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 491\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Feb 2026 15:57:04 GMT\r\netag: \"69948fd0-1eb\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 70828\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=np8pFJucyTgdr%2F4XIgQykXPn8RZGdB3iyNmowFdZ4PpOm%2BXh9ZrkzjwXJZzSPeABfHHfGcvjTpuuQs8stQxMh78YMLEv5SZObSwPVtR4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d0f40ba886ef527-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":491,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 47 x 47, 8-bit colormap, non-interlaced","md5":"9ed31c063c1751e20bd5d9f1a180b065","sha1":"012e1dfa7c443075983f0f168d88dc427a18d9b8","sha256":"5351b16da505b5f08501d81cb26d9ed0050ab00914eeb3ccee26f52fd0036ac3","sha512":"1d1c4fdf435c15fbdead72a4a0372b83e0874ea551e0bf263847c2395a956c699937437ac59b3a78e9945dfe88fb48687a1100b37b71153e2cd18c4e1fffa5b1","ssdeep":"","tlshash":"1af0c4cd37f06c7f8ced1336900b2212c1a65e00900aa0a40204b4880c7da86e393391","first_seen":"2026-02-20T16:07:12.457674Z","last_seen":"2026-02-20T16:31:29.305597Z","times_seen":2,"resource_available":false,"data":null}},"time_used":504,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":504,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"claim-eden.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-eden.com/c89bc51c1740a9b8ebf1df4435e122809d278bd9.svg","fqdn":"claim-eden.com","domain":"claim-eden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-eden.com/","date":"2026-02-20T16:06:42.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-eden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:59:55 GMT","end":"Mon, 18 May 2026 15:57:38 GMT"},"fingerprint":{"sha1":"C0:89:F1:7E:14:E9:6A:E5:FF:B6:72:23:79:94:04:60:C0:07:B9:F5","sha256":"F5:98:05:11:F9:0B:64:1B:D0:0F:87:95:7D:4B:87:1B:4A:AD:30:94:E5:DB:19:BE:68:C0:56:68:B3:EC:B2:9E"}}},"request":{"raw":"GET /c89bc51c1740a9b8ebf1df4435e122809d278bd9.svg HTTP/1.1\r\nHost: claim-eden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-eden.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Feb 2026 16:06:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Feb 2026 15:57:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XFR2A4bZt2JFBLmJbKJWR6SswnbY893RqFNXR0%2B8SQAhlLWBoZXdTY6U8JaILeuoT5RiHyZXzqZSoPoX85LPpGfYvyxEiJ7u9ZUB8Klt\"}]}\r\netag: W/\"69948fd0-295\"\r\ncontent-encoding: br\r\ncf-ray: 9d0f40b33879f527-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":661,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a80b9a81f2c4bea9365e05921ccdd01f","sha1":"c89bc51c1740a9b8ebf1df4435e122809d278bd9","sha256":"3336320a0a6d5874ab3cae3b110648d108c41d8a8a799507060d91e5237996e3","sha512":"3bf1282a0fbc917eb68460e43549203131e904fb91e7b419159daf45e0c8e65dceb55b951e751802c66c0a02c6ae406155202b34397aaa8a4ad0f0925c9f70db","ssdeep":"","tlshash":"b001f49d9f0c4e39381e4b92f46b3a56712d945683db0eccc52c2ce72405c9db726c50","first_seen":"2026-02-20T16:07:12.460433Z","last_seen":"2026-02-20T16:31:29.31029Z","times_seen":2,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"claim-eden.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-eden.com/db1b4409955751d9984650524431104c3b746d0f.svg","fqdn":"claim-eden.com","domain":"claim-eden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-eden.com/","date":"2026-02-20T16:06:42.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-eden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:59:55 GMT","end":"Mon, 18 May 2026 15:57:38 GMT"},"fingerprint":{"sha1":"C0:89:F1:7E:14:E9:6A:E5:FF:B6:72:23:79:94:04:60:C0:07:B9:F5","sha256":"F5:98:05:11:F9:0B:64:1B:D0:0F:87:95:7D:4B:87:1B:4A:AD:30:94:E5:DB:19:BE:68:C0:56:68:B3:EC:B2:9E"}}},"request":{"raw":"GET /db1b4409955751d9984650524431104c3b746d0f.svg HTTP/1.1\r\nHost: claim-eden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-eden.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Feb 2026 16:06:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Feb 2026 15:57:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\nage: 206911\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XuLjzjrpe0vHJsdF8ygQND8T82qEE5Q7SK6pI%2Fp2273RiHzSa803%2FWc7lU4b54D12A6ZZyxKnX0j9bOa46uT52z3LvNC1du5d059lqKj\"}]}\r\netag: W/\"69948fd0-141\"\r\ncontent-encoding: br\r\ncf-ray: 9d0f40b3488cf527-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":321,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b5f273736cbf5e1a13ddd36b766f305c","sha1":"db1b4409955751d9984650524431104c3b746d0f","sha256":"c3ee5e342f3f3c797ebe6ccd6780459e6b033c43480121d94bc5696769f013de","sha512":"ecc23fa9cf4e955307e20d060baf7446ff6159a8fde811239c8a01c6b415a2c94fcee1cdc1cf603f936ee077240589d4b0f02f428bcd21c8615a7ed71a269c66","ssdeep":"","tlshash":"95e0268c92284c3ea47b86c2e2b07920905d809355c110e8c89974b53001c8ea233681","first_seen":"2026-02-20T16:07:12.462929Z","last_seen":"2026-02-20T16:31:29.279356Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"claim-eden.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-eden.com/e628627cc5bfdf811c5803f8d91828d66c1de1fc.svg","fqdn":"claim-eden.com","domain":"claim-eden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-eden.com/","date":"2026-02-20T16:06:42.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-eden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:59:55 GMT","end":"Mon, 18 May 2026 15:57:38 GMT"},"fingerprint":{"sha1":"C0:89:F1:7E:14:E9:6A:E5:FF:B6:72:23:79:94:04:60:C0:07:B9:F5","sha256":"F5:98:05:11:F9:0B:64:1B:D0:0F:87:95:7D:4B:87:1B:4A:AD:30:94:E5:DB:19:BE:68:C0:56:68:B3:EC:B2:9E"}}},"request":{"raw":"GET /e628627cc5bfdf811c5803f8d91828d66c1de1fc.svg HTTP/1.1\r\nHost: claim-eden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-eden.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Feb 2026 16:06:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Feb 2026 15:57:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5s4nIXmkfWm3yufG65CRxqv%2FJuoN87UEZIomgkHV2vnco05jb3n%2Bi2cDlX2DjsSxTy8hmccUjYtdkeaQOOX%2FQh%2FA7%2FQ5HGtL4iCFA8lD\"}]}\r\netag: W/\"69948fd0-3b1\"\r\ncontent-encoding: br\r\ncf-ray: 9d0f40b348a2f527-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":945,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"61c4391d1b1bb320bf63648bf90e4c4a","sha1":"e628627cc5bfdf811c5803f8d91828d66c1de1fc","sha256":"78bd49e02b21cb53516dbdaa3047ce1f521fcfcecf57a5e280fd4f566b6a5282","sha512":"40240532b230769474c06185482de941c288e49356a29f8dafb8d64ec23990fd1213392b3f48137d15f8b3b27c28d302b0385f6a45189d557e6e146540d3b810","ssdeep":"","tlshash":"3c11bdec4b44ddf6244b8b93fe237d04901f983247ca45d4c51cae581451c5de233c41","first_seen":"2026-02-20T16:07:12.465352Z","last_seen":"2026-02-20T16:31:29.302542Z","times_seen":2,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"claim-eden.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-eden.com/10c82fd99801c988297b1e7d5bb65696496f82d3.svg","fqdn":"claim-eden.com","domain":"claim-eden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-eden.com/","date":"2026-02-20T16:06:42.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-eden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:59:55 GMT","end":"Mon, 18 May 2026 15:57:38 GMT"},"fingerprint":{"sha1":"C0:89:F1:7E:14:E9:6A:E5:FF:B6:72:23:79:94:04:60:C0:07:B9:F5","sha256":"F5:98:05:11:F9:0B:64:1B:D0:0F:87:95:7D:4B:87:1B:4A:AD:30:94:E5:DB:19:BE:68:C0:56:68:B3:EC:B2:9E"}}},"request":{"raw":"GET /10c82fd99801c988297b1e7d5bb65696496f82d3.svg HTTP/1.1\r\nHost: claim-eden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-eden.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Feb 2026 16:06:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Feb 2026 15:57:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\nage: 206911\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xEXOL3DK%2B9NFpFXqN84qKsch8erI7dguejEKlcyCQGc65X%2BccJECgJMti2nPpD1MkHLM2GPhuRN1Jgo%2BmQ4f0ivd8E1w0EPsTuy5ugtT\"}]}\r\netag: W/\"69948fd0-494\"\r\ncontent-encoding: br\r\ncf-ray: 9d0f40b348a8f527-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1172,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c8b654f2f0e146cc4b6792a1d826f5fe","sha1":"10c82fd99801c988297b1e7d5bb65696496f82d3","sha256":"858bf652005f83d54d7f437cfc62296852503476f283cb573ae92d14fb18b04b","sha512":"59769cc646028bb61b4ad98e5a4dac937a1f7794dad7dcef56b48e814c7ba530337b3e92d89a01743cac7c394b1c71699432f9b97a9c4dcc49284a2f465ecfee","ssdeep":"","tlshash":"5721cafce79c4ae479eb5be4feb36061c20f9c37068582d2c55ccc82a0384aa68c7d00","first_seen":"2026-02-20T16:07:12.46783Z","last_seen":"2026-02-20T16:31:29.276662Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"claim-eden.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-eden.com/650553d8e08acd7feabffaa85804622f34e6c51b.svg","fqdn":"claim-eden.com","domain":"claim-eden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-eden.com/","date":"2026-02-20T16:06:42.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-eden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:59:55 GMT","end":"Mon, 18 May 2026 15:57:38 GMT"},"fingerprint":{"sha1":"C0:89:F1:7E:14:E9:6A:E5:FF:B6:72:23:79:94:04:60:C0:07:B9:F5","sha256":"F5:98:05:11:F9:0B:64:1B:D0:0F:87:95:7D:4B:87:1B:4A:AD:30:94:E5:DB:19:BE:68:C0:56:68:B3:EC:B2:9E"}}},"request":{"raw":"GET /650553d8e08acd7feabffaa85804622f34e6c51b.svg HTTP/1.1\r\nHost: claim-eden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-eden.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Feb 2026 16:06:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Feb 2026 15:57:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\nage: 206911\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sdJJV3W04e%2BHKptGqkJvJ3bA2nXAZEnOYqQZQnFtbPsHnfg%2FWJqsQ9PA3Q1RGZd9EeW%2FgA4h5zULqc1Y439KoRIhbYFskggJocwMhxFP\"}]}\r\netag: W/\"69948fd0-321\"\r\ncontent-encoding: br\r\ncf-ray: 9d0f40b358c1f527-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":801,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"98348ddb96f5f69af61d19ab379be7ae","sha1":"650553d8e08acd7feabffaa85804622f34e6c51b","sha256":"9c6001752a3152c1c85b8c58efcc88dd177ab67eb8eda6664d058462d53e6485","sha512":"731acf5f4d1c7294ed68db85b6c8c050f1ab2fd0e20c40a85be20e620803717a21b6ab320750a2955ce00d0c2cd11176c01db1c516c9cfdbbebd1124d43be87a","ssdeep":"","tlshash":"7f01cefe9b7826b8b0d1cb76e331b089905f14305aa55fc6802109acd1a3c29d8124c1","first_seen":"2026-02-20T16:07:12.4703Z","last_seen":"2026-02-20T16:31:29.306818Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"claim-eden.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-eden.com/bfff67e3c25c1718cc50c8377329fa35e4bb11f4.svg","fqdn":"claim-eden.com","domain":"claim-eden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-eden.com/","date":"2026-02-20T16:06:42.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-eden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:59:55 GMT","end":"Mon, 18 May 2026 15:57:38 GMT"},"fingerprint":{"sha1":"C0:89:F1:7E:14:E9:6A:E5:FF:B6:72:23:79:94:04:60:C0:07:B9:F5","sha256":"F5:98:05:11:F9:0B:64:1B:D0:0F:87:95:7D:4B:87:1B:4A:AD:30:94:E5:DB:19:BE:68:C0:56:68:B3:EC:B2:9E"}}},"request":{"raw":"GET /bfff67e3c25c1718cc50c8377329fa35e4bb11f4.svg HTTP/1.1\r\nHost: claim-eden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-eden.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Feb 2026 16:06:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Feb 2026 15:57:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=56Beck4ssf6zKhP3f9Y863k5dS%2BJBwwpkXAGuKjD1fU4oEcKX7VbccAhbcOyiggC4ZwZgnQhLIswzhSIpK0h2AJlduSJGwNA0EIwvE4H\"}]}\r\netag: W/\"69948fd0-5a5\"\r\ncontent-encoding: br\r\ncf-ray: 9d0f40b358c8f527-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1445,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0f6092b28d82f2a5917ecc27edb5c6d6","sha1":"bfff67e3c25c1718cc50c8377329fa35e4bb11f4","sha256":"5863723ce8f9faa068ea71d4f7205431691f70a78131707250827e1dd41fe25d","sha512":"2ad2378d314bbf4fb445cb75a4fdfaea78194143a22f2e2447a370b4ddd9ca41d704a0566c7c1e38d7791db8cf16637aa7e6cb9393e1938cb6cbe0cc74ed0ba5","ssdeep":"","tlshash":"113178d9db685f38b08b43b3ee732390b36d9cb15f814ea5e42c8d0491f9848d417880","first_seen":"2026-02-20T16:07:12.472763Z","last_seen":"2026-02-20T16:31:29.280973Z","times_seen":2,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"claim-eden.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-eden.com/gyBhhwUxId8gMGYQMKR3pzfaWI_RnOM4mJPby1QNtA.woff2","fqdn":"claim-eden.com","domain":"claim-eden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-eden.com/","date":"2026-02-20T16:06:42.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-eden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:59:55 GMT","end":"Mon, 18 May 2026 15:57:38 GMT"},"fingerprint":{"sha1":"C0:89:F1:7E:14:E9:6A:E5:FF:B6:72:23:79:94:04:60:C0:07:B9:F5","sha256":"F5:98:05:11:F9:0B:64:1B:D0:0F:87:95:7D:4B:87:1B:4A:AD:30:94:E5:DB:19:BE:68:C0:56:68:B3:EC:B2:9E"}}},"request":{"raw":"GET /gyBhhwUxId8gMGYQMKR3pzfaWI_RnOM4mJPby1QNtA.woff2 HTTP/1.1\r\nHost: claim-eden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-eden.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Feb 2026 16:06:42 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 29608\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Feb 2026 15:57:04 GMT\r\netag: \"69948fd0-73a8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hVYPsndl8rSVHF%2B3MmVCZmpq2j9invV0zrgNEecXe%2BJdi%2BAl%2Bxbn9uTmtl%2BbcmyKYlekFXKOzHuFyd590Y%2FP8WD0RyS3BnFx1dF73NQt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d0f40b368e4f527-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29608,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29608, version 1.0","md5":"5c40c3c14be773c647c4690bd86ba938","sha1":"6cbcbe2940a3034c7616c6d5c095abe251d93fb1","sha256":"b666ca799570e6c1e7411742155a7dae073a9d7403f14cf93376915e4436a34e","sha512":"4a2248b27c8dda340bfa05cbc355d1ff25dfd53db08416b1b1bb31a0b17ea08f520a9518ebee5e118374e81bfa011c621272eac7ef711ee4ca05904ff4051d38","ssdeep":"768:6EXFKCJ934k1tWR1DL2g0Y9HpgDUdrsUG1CLtcc9MM:+CYkiPDLf0YdpIfUTLicCM","tlshash":"19d2f188608ba7f8dd54a3712696d37b807c4ab7df57084c20ab35d1e95fa1b4c32a1f","first_seen":"2025-10-07T20:54:06.988947Z","last_seen":"2026-07-27T15:48:12.448539Z","times_seen":77,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"claim-eden.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-eden.com/4-Agent.mp4","fqdn":"claim-eden.com","domain":"claim-eden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://claim-eden.com/","date":"2026-02-20T16:06:42.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-eden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:59:55 GMT","end":"Mon, 18 May 2026 15:57:38 GMT"},"fingerprint":{"sha1":"C0:89:F1:7E:14:E9:6A:E5:FF:B6:72:23:79:94:04:60:C0:07:B9:F5","sha256":"F5:98:05:11:F9:0B:64:1B:D0:0F:87:95:7D:4B:87:1B:4A:AD:30:94:E5:DB:19:BE:68:C0:56:68:B3:EC:B2:9E"}}},"request":{"raw":"GET /4-Agent.mp4 HTTP/1.1\r\nHost: claim-eden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-eden.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Fri, 20 Feb 2026 16:06:42 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 4135269\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Feb 2026 15:57:04 GMT\r\netag: \"69948fd0-3f1965\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\nage: 206911\r\ncontent-range: bytes 0-4135268/4135269\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bd9cePHxYipQMise%2FKrvkZXqr5fup1m%2B8cStHPk5B5jrDkchngASB6SK6djd4bNVbXxhizjLp4WlbHd24iNH1LQvxj67%2B%2BDA93ICwpgw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d0f40b3e9faf527-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4135269,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"ab102c39e5e989f021d4d6a49d537448","sha1":"658fce80c4ac9a9e0d30d2d5eaccd75a99cca24d","sha256":"6512adb3ff4e1799105f589430a3e6f40262d6d687ba50141220936550e4d09a","sha512":"bf542c979783791a80fe259947bcdefd1bb2ab6312a65f1da2f8b3cc61ec7021abe4bdd43c390f78f608a51b4d55ca9a6cbc51fcdae78c34008c5af76c73978a","ssdeep":"24576:XPnTlMo9Pefar+OGYEZWXbZDc9P2SIelJt3:XPnTl/pCaSpZ2bZDnbe3t3","tlshash":"0325025e5ee10051fb9cf97ed484dc12d4e2a567c9c2c34fb94e41620b3a2858b7f2b6","first_seen":"2026-02-20T16:07:12.476147Z","last_seen":"2026-02-20T16:31:29.286796Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":1133,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"claim-eden.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-eden.com/3eba9b9e66a77437902573e55d0e0a13003e922b.svg","fqdn":"claim-eden.com","domain":"claim-eden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-eden.com/","date":"2026-02-20T16:06:42.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-eden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:59:55 GMT","end":"Mon, 18 May 2026 15:57:38 GMT"},"fingerprint":{"sha1":"C0:89:F1:7E:14:E9:6A:E5:FF:B6:72:23:79:94:04:60:C0:07:B9:F5","sha256":"F5:98:05:11:F9:0B:64:1B:D0:0F:87:95:7D:4B:87:1B:4A:AD:30:94:E5:DB:19:BE:68:C0:56:68:B3:EC:B2:9E"}}},"request":{"raw":"GET /3eba9b9e66a77437902573e55d0e0a13003e922b.svg HTTP/1.1\r\nHost: claim-eden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-eden.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Feb 2026 16:06:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Feb 2026 15:57:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oG30z%2BS%2BHVqXPBkM1EruPn9HsgSNvveb1iixE3vpZlRIzvUkEcJ%2FS5M8lNzm38ZqBDvHjBSR5t1OyY2CkSKJdBEc%2BRM35D2AURgJ5RLD\"}]}\r\netag: W/\"69948fd0-135\"\r\ncontent-encoding: br\r\ncf-ray: 9d0f40b34886f527-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":309,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"95c99275dccce788cd5f2961f8683ad2","sha1":"3eba9b9e66a77437902573e55d0e0a13003e922b","sha256":"a8c4af811a84cd77578e3f58a8c3d07c924152d72d46cb34746bdef5ce610f6f","sha512":"97473e1b4be9010a75ef52242e7b9fa3d29d8b2ec1dabf12a1f70e76e8d2ef4b89262361ecb5f36900bc98dd38877cc2918eb71241c1e2ce47e27af9f19dc215","ssdeep":"","tlshash":"9be02b4d976c0d3cb0fbcfd1e6f5f961a06d0083498528e9c9a67474301289fb637ad4","first_seen":"2026-02-20T16:07:12.478725Z","last_seen":"2026-02-20T16:31:29.293031Z","times_seen":2,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"claim-eden.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-eden.com/3-Search.mp4","fqdn":"claim-eden.com","domain":"claim-eden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://claim-eden.com/","date":"2026-02-20T16:06:42.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-eden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:59:55 GMT","end":"Mon, 18 May 2026 15:57:38 GMT"},"fingerprint":{"sha1":"C0:89:F1:7E:14:E9:6A:E5:FF:B6:72:23:79:94:04:60:C0:07:B9:F5","sha256":"F5:98:05:11:F9:0B:64:1B:D0:0F:87:95:7D:4B:87:1B:4A:AD:30:94:E5:DB:19:BE:68:C0:56:68:B3:EC:B2:9E"}}},"request":{"raw":"GET /3-Search.mp4 HTTP/1.1\r\nHost: claim-eden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-eden.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Fri, 20 Feb 2026 16:06:42 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Feb 2026 15:57:03 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\nage: 206911\r\ncontent-range: bytes 0-443096/443097\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PMdQs1byQdd%2BG1bLABzw7nRoKQdJeHnYgMBSAtqJpGWxn46m79Iq8%2BZTDOwA01o%2BGP%2BPkT8RTHT6W8l3LZd3Xv9ih0669E9FznVrIU0H\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d0f40b3ea01f527-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}],"data":{"size":229831,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (36641)","md5":"9e2f724cc203f73ae5f9c98cd5eb4df1","sha1":"831465dc06f834b4fba6b2a87fb2e7c99e1def7b","sha256":"e221b4476597abfb090862b6808bf9b070214d226acd038d7049f6488660a63a","sha512":"aa641b54bb02695ecb69bc548248f25e7b16edf6b1e6088069b19a0354edad1504ce64e95935ee1bcfb2b6b38444570397cfca07b53372ccdd9c489610005e9f","ssdeep":"1536:q1tszVJVXL3eHCe+8VtedkVmVPaU9VgaTVhVk9VCwikM2xtxAbmu7:q1tw1jkM2xDAbmu7","tlshash":"382451535269f0649ce7693eeb5da61c78285000ff33c39fa6ad461f80caee4235676c","first_seen":"2026-02-20T16:07:12.480683Z","last_seen":"2026-02-20T16:07:12.480683Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1550,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1533,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"claim-eden.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"framerusercontent.com/images/IS7mpHppfBt0aHLgDuPjR5ctzU.png","fqdn":"framerusercontent.com","domain":"framerusercontent.com","tld":"com"},"ip":{"addr":"52.84.50.29","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-eden.com/","date":"2026-02-20T16:06:43.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"framerusercontent.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 16 Oct 2025 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:EF:AE:14:9A:1C:B7:8C:AB:DF:01:C0:39:9E:AE:49:90:E5:84:94","sha256":"B7:E9:B0:B0:73:ED:29:A4:09:64:FA:77:EF:60:53:32:51:10:08:95:FD:7B:4A:69:60:51:6D:9F:AF:31:9D:5E"}}},"request":{"raw":"GET /images/IS7mpHppfBt0aHLgDuPjR5ctzU.png HTTP/1.1\r\nHost: framerusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-eden.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: CloudFront\r\ncontent-type: image/avif\r\nage: 7249382\r\ntiming-allow-origin: *\r\ndate: Fri, 28 Nov 2025 18:23:41 GMT\r\ncross-origin-resource-policy: cross-origin\r\nx-amzn-trace-id: Root=1-6929e8ac-10165b1d13cc3510072b6eaa;Parent=691905372b1f74ce;Sampled=0;Lineage=1:f456f256:0\r\nx-amzn-requestid: dcbaea38-56d5-4f58-91ec-9ecc7ed5628f\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: deny\r\ncontent-security-policy: default-src 'none'; script-src 'none'; img-src 'self'; media-src 'self'; report-uri https://framer.report-uri.com/r/t/csp/enforce;\r\ncache-control: public, max-age=31536000, stale-while-revalidate=31536000\r\nx-content-type-options: nosniff\r\netag: \"fea2076438c0b235e23af5841b8ad233\"\r\nvary: Accept\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d85ed2d2deba50aaf4938eae2cbcf3ac.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"OSL50-P3\",cdn-hit-layer;desc=\"EDGE\",cdn-rid;desc=\"QSsWvEZZQu3tGS558REwrz1gCKRogwMv__y-aQ68bRqLp5PwsgZ2_Q==\",cdn-downstream-fbl;dur=4\r\nx-amz-cf-id: QSsWvEZZQu3tGS558REwrz1gCKRogwMv__y-aQ68bRqLp5PwsgZ2_Q==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":6977,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"fea2076438c0b235e23af5841b8ad233","sha1":"f04e7a4a0cb7fc659f125358ab73cdcb5572ae6e","sha256":"63e096355b899fd4cc2f371940e065f94c4e4a7c8e36b63e6a11c9850dde0986","sha512":"dae02d716922a2011a4c2d096f07c9d37452503def6070eb3674b6897f9059bcb9580e275561d545abfa8f0290eb4af55bb9639c675089e556808780668a58e8","ssdeep":"192:rGTCu8jPv/mzZaNzNfxT71+exK2eFF7+w:rNHjHgZ+Jfzszj","tlshash":"2ae19edc19267d4fdc0e4678888f4b423f701ae1628b4911ce606967e0a18ffccb3ad9","first_seen":"2026-02-20T16:07:12.483151Z","last_seen":"2026-02-20T16:31:29.301126Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-eden.com/8799913e3fb2c33de171fe9208479def09f70b41.svg","fqdn":"claim-eden.com","domain":"claim-eden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-eden.com/","date":"2026-02-20T16:06:42.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-eden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:59:55 GMT","end":"Mon, 18 May 2026 15:57:38 GMT"},"fingerprint":{"sha1":"C0:89:F1:7E:14:E9:6A:E5:FF:B6:72:23:79:94:04:60:C0:07:B9:F5","sha256":"F5:98:05:11:F9:0B:64:1B:D0:0F:87:95:7D:4B:87:1B:4A:AD:30:94:E5:DB:19:BE:68:C0:56:68:B3:EC:B2:9E"}}},"request":{"raw":"GET /8799913e3fb2c33de171fe9208479def09f70b41.svg HTTP/1.1\r\nHost: claim-eden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-eden.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Feb 2026 16:06:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Feb 2026 15:57:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tn5Jv5dwySbJFIA2mkK8R%2FFTXJLqUCchEjWWB7wr5Am11rNAkAz8XsEYvVHrTZrVmIeObzx1swl3OUm%2Byzn66aq6js3ppBTVOB3%2FX4%2BG\"}]}\r\netag: W/\"69948fd0-102\"\r\ncontent-encoding: br\r\ncf-ray: 9d0f40b358cdf527-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":258,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8e2c7859c07c7762821367d261e368e8","sha1":"8799913e3fb2c33de171fe9208479def09f70b41","sha256":"4668f680e679c8077f5e61ba180e6f8f648e19ad66fccdb47b786dc2328ca8ce","sha512":"aec1d22cdf10e535b4c5deaf3362a66b32e3bc9840cba12d5a596ccbe1b2ba6ca945a4355d0f90375753817f40fe14bd03719e57e7429e62ef8ea14da4501726","ssdeep":"","tlshash":"02d02e5ea30c8c3cb43bcbd0f2f53621e02d80c280802098cab22830321049e721bac0","first_seen":"2026-02-20T16:07:12.485038Z","last_seen":"2026-02-20T16:31:29.266044Z","times_seen":2,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"claim-eden.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-eden.com/mGjvtvBWxIh2dedRubXmN0XHbx4.woff2","fqdn":"claim-eden.com","domain":"claim-eden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-eden.com/","date":"2026-02-20T16:06:42.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-eden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:59:55 GMT","end":"Mon, 18 May 2026 15:57:38 GMT"},"fingerprint":{"sha1":"C0:89:F1:7E:14:E9:6A:E5:FF:B6:72:23:79:94:04:60:C0:07:B9:F5","sha256":"F5:98:05:11:F9:0B:64:1B:D0:0F:87:95:7D:4B:87:1B:4A:AD:30:94:E5:DB:19:BE:68:C0:56:68:B3:EC:B2:9E"}}},"request":{"raw":"GET /mGjvtvBWxIh2dedRubXmN0XHbx4.woff2 HTTP/1.1\r\nHost: claim-eden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-eden.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Feb 2026 16:06:42 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 35673\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Feb 2026 15:57:04 GMT\r\netag: \"69948fd0-8b59\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T0cNfAxVaGp08YUF%2BAJdnHKKUr0Fm7AenTtxn280ffx71zJ%2F28k23NDWKJfOV95wdWt6Qh65mVgnaRNO%2B%2B3fMwZVSrA4XtMFSgOqLE1M\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d0f40b368def527-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35673,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35673, version 1.0","md5":"bc104464330db65a8686273ecdda800f","sha1":"9868efb6f056c4887675e751b9b5e63745c76f1e","sha256":"067e5f7a9197f80dab717f4c31e6b072eb9b3e9de7eaae8405cec1fe39724892","sha512":"2b0fc236e86c2eb81cfe23a3c1af536732f0db2e995b358b76edc425e9437fb31c890b3c09425eb42c867ddc17516f2015edab9da43f44808ccb242232744a16","ssdeep":"768:SuCo8brlgllyzqy70GrOnlmSnA6z7n4gIsR8kG7B0lS4Mz9k9t:Co8V04ziGKwWn4gIw8J0VO9kT","tlshash":"e6f2f1da87af5815e31522d030a1192f7a3f6bada1699fd9f37f04033241c4f2da122e","first_seen":"2026-02-20T16:07:12.486728Z","last_seen":"2026-02-20T16:31:29.267887Z","times_seen":2,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"claim-eden.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-eden.com/gyBhhwUxId8gMGYQMKR3pzfaWI_RruM4mJPby1QNtA.woff2","fqdn":"claim-eden.com","domain":"claim-eden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-eden.com/","date":"2026-02-20T16:06:42.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-eden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:59:55 GMT","end":"Mon, 18 May 2026 15:57:38 GMT"},"fingerprint":{"sha1":"C0:89:F1:7E:14:E9:6A:E5:FF:B6:72:23:79:94:04:60:C0:07:B9:F5","sha256":"F5:98:05:11:F9:0B:64:1B:D0:0F:87:95:7D:4B:87:1B:4A:AD:30:94:E5:DB:19:BE:68:C0:56:68:B3:EC:B2:9E"}}},"request":{"raw":"GET /gyBhhwUxId8gMGYQMKR3pzfaWI_RruM4mJPby1QNtA.woff2 HTTP/1.1\r\nHost: claim-eden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-eden.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Feb 2026 16:06:42 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 30364\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Feb 2026 15:57:04 GMT\r\netag: \"69948fd0-769c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qonK%2BtIn8KyqiBwT9PzWuenuk43DnLu8pFokCXVcWmrWSplPDaHny9Spofsjo98xgHoehmnOBBUj8Mua%2B9cwlW5HGKqTvvq5T19EWQfc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d0f40b368eff527-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30364,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30364, version 1.0","md5":"426e88459aa2660e9809130f22399173","sha1":"4d3adce72d27af85a0c7be33b94012a77091e36e","sha256":"cc59022e7b24f809c694a20a94c5a9592be363eea9f67e51e28e85b7c8ead2b4","sha512":"fe04666a7cc18619cca63048fc33ed3c4f9480024f47d43572fc5c14f5796771240bbee1939ad127e0ee23064d7cdf4620e0ebe4487de3b9bb7173426e79cec5","ssdeep":"768:2eE4e+NSeUXg/M+X73H75PCRNEcoyiUqrTifB:xe+QeUQ/M+X7L5PCRqjTZrTcB","tlshash":"22d2d1d09bb80daee985169c6ea51e5fe9853243eb4fe233b0129dd1ebc3f55c639004","first_seen":"2025-12-20T03:24:58.652027Z","last_seen":"2026-07-16T07:18:13.705748Z","times_seen":58,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"claim-eden.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-eden.com/gyBhhwUxId8gMGYQMKR3pzfaWI_Re-Q4mJPby1QNtA.woff2","fqdn":"claim-eden.com","domain":"claim-eden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-eden.com/","date":"2026-02-20T16:06:42.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-eden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:59:55 GMT","end":"Mon, 18 May 2026 15:57:38 GMT"},"fingerprint":{"sha1":"C0:89:F1:7E:14:E9:6A:E5:FF:B6:72:23:79:94:04:60:C0:07:B9:F5","sha256":"F5:98:05:11:F9:0B:64:1B:D0:0F:87:95:7D:4B:87:1B:4A:AD:30:94:E5:DB:19:BE:68:C0:56:68:B3:EC:B2:9E"}}},"request":{"raw":"GET /gyBhhwUxId8gMGYQMKR3pzfaWI_Re-Q4mJPby1QNtA.woff2 HTTP/1.1\r\nHost: claim-eden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-eden.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Feb 2026 16:06:42 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 30440\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Feb 2026 15:57:04 GMT\r\netag: \"69948fd0-76e8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bRChigEZ1Yii9P264fSBhDoLwrwzygv8nVUOyU75uWJBvXUfaJRLJcGikwsx8RPmzO4n2dGK%2FGQ7QSZfpWH0iS6yq1OgFB%2FC4K3gDmJt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d0f40b368f3f527-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30440,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30440, version 1.0","md5":"31d82ab84de58442e617c312de072632","sha1":"de1f20558d9f407a9c82137800a05b31e68417e1","sha256":"69e00bcd2a2b04d0aab4256c8afc61c7b89ab03a468df3bc49e2891eb11f0d06","sha512":"65ebd8f91371228ad959397b4190ea826b40cb3453c036744d8e176876223f77f1ae5ea06909dafaddb3af2ee0101a4bfabe2eadb8a9a034743f74d2ad303d88","ssdeep":"768:7MK5tReePGXl1CuBwNwDTsZ7/lVJnQ3e6VjhqAJvC:7f8ePEkYTE7dVWeCFqIC","tlshash":"a8d2e1b51fd022d6b192757814fa827cfd43a1f2394d832bc156128cde39a8ca948f8d","first_seen":"2025-10-27T02:55:24.465559Z","last_seen":"2026-07-19T00:16:31.182604Z","times_seen":31,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"claim-eden.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-eden.com/1-Capture.mp4","fqdn":"claim-eden.com","domain":"claim-eden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://claim-eden.com/","date":"2026-02-20T16:06:42.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-eden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:59:55 GMT","end":"Mon, 18 May 2026 15:57:38 GMT"},"fingerprint":{"sha1":"C0:89:F1:7E:14:E9:6A:E5:FF:B6:72:23:79:94:04:60:C0:07:B9:F5","sha256":"F5:98:05:11:F9:0B:64:1B:D0:0F:87:95:7D:4B:87:1B:4A:AD:30:94:E5:DB:19:BE:68:C0:56:68:B3:EC:B2:9E"}}},"request":{"raw":"GET /1-Capture.mp4 HTTP/1.1\r\nHost: claim-eden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-eden.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Fri, 20 Feb 2026 16:06:42 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 4083559\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Feb 2026 15:57:04 GMT\r\netag: \"69948fd0-3e4f67\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\nage: 206912\r\ncontent-range: bytes 0-4083558/4083559\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ww9UcCf73eZ1FJbZOou5wBMJYis1JJdaNHaXt1n7JNnh13Gn6lMQO9DOXD9QR7z4AFQQ6VUYe7NW7GKyxOvwaq6amSiVpDS9ZDYAd70B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d0f40b3e9f6f527-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4083559,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"17c9b8c3e4973fe4ab10d419a1f198fc","sha1":"eedc1296c4c9a22664281dd48abbef949bdc828a","sha256":"52b1988c5c62234b3a2a2e286cd5c48ff4998be3ff8b2236448dd3388a207029","sha512":"e262e396fd8bcc96ecaf9d424f4caff29819fabca92e684da91c884a9cd7da343066751eb46ff1f8502225d6d680502e3ef30de224121a3c4ef84817c13ea01b","ssdeep":"24576:nZmyFh3BB8BCHpq58xLVu0omxyBMke1jW6n1:p/8BCJq5rD04M9Tn1","tlshash":"0825224dafc51862fb5ee1bfc889f825e8d26996c5c1e657b08e00105f320a44b9f67f","first_seen":"2026-02-20T16:07:12.492799Z","last_seen":"2026-02-20T16:31:29.285096Z","times_seen":2,"resource_available":false,"data":null}},"time_used":732,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":714,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"claim-eden.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-eden.com/secureproxy?s=%2Fjmpd%2F","fqdn":"claim-eden.com","domain":"claim-eden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-eden.com/","date":"2026-02-20T16:06:44.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-eden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:59:55 GMT","end":"Mon, 18 May 2026 15:57:38 GMT"},"fingerprint":{"sha1":"C0:89:F1:7E:14:E9:6A:E5:FF:B6:72:23:79:94:04:60:C0:07:B9:F5","sha256":"F5:98:05:11:F9:0B:64:1B:D0:0F:87:95:7D:4B:87:1B:4A:AD:30:94:E5:DB:19:BE:68:C0:56:68:B3:EC:B2:9E"}}},"request":{"raw":"POST /secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: claim-eden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-eden.com/\r\ncontent-type: application/json\r\nContent-Length: 1439\r\nOrigin: https://claim-eden.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1439,"data":"{\"route\":\"n9POyFeFG1tUtiSU-z9JOx3n\",\"payload\":\"0hqM-6_N52QBFQMDAy8AEgC9Aq4CKgDUAhcAAgEAPwMAAO8nhn2XtsKCAb0LkqfX9EtOA4joCWUCAAA_MGQDPJswGE5v9Ql9ImGM7tyIiajYkeIS3HGZzwd74Jc3bw1D8wjZfcCPKqbu12vLq9CNY1B6tKk2_d9q1DdaALnDpVBULvMkx8IDuEbWGD4gNHWJnUqN1b3Pk7mHZQmK6hat-IrsOJ_wJORX914VoD_RqtklD_YSkhtKnwNQX_e1YKYYAhfYInIUjJf1M1aR1Bv7ra7_O0X04yzAp5BAe4SqfQ62S1ChQySHTl9CfBAV6c_pPXl3EACgCU7P4kwyCQQoxH23hIQiZmQ-2whGNQgKiJI9qa1HNwlV0mifKrHfcDkQUCw-xUwZerE3C4-fcfb1Ij2hu7jPAgM41r4PqmkWpdDvRStC_cl_-T5qnrjTGUbiUAOjhrY2_-Z9rTI5eap7_Q5Xu7DfMNdH-iOnXlD_kHJ5XuQBCltt_pnrtLbymdplu_W1u6qA0S6Y9SDTYbS_gjynaPWsk7gSsRiprnYb4xee0yMlPlP0bJmWNyJYlMiXQBtA_8lQEl4E_XSKqtQivigUmZX6LWd45319JZtncz-Di8SutZLs80l3snXmoj46e7ZOhJz-xI7d7zXEVgsdx37ninwkL8J18IJbaItl5QYdbNDZ5GyuEQz1ITbazf6TOqNe7F_M0fshITq-o5vwvItDxdU-orNqM5fmX4Nkj7VtfrpTm5vGb-tOgr7CkN6AIzYxu0YB_JhdL1wN5Shmskq5Xm-FfAVn4TmoSJc1dQzKD5RRA9OOpwmu22mCZfasXyDfVAs7-QQ4WKX0SPuwiJGWorFsisrKYsawrkrmYSRkU0w1DlN1d_6-sJaZuZLZFEjPzYo_IiMizUpIcH0-V7OeeCvwGRhy6iBVTKyJn40ttZAOfvh0Yr-QVCS2oJ-7fK8uPEnJx8rHgjcd5z6mn8GBBW6cjGhSxXW1s4sI-hlANgP-r7Zd-BTqTfqTT4Z47YaNKR-KHYlCF7jpaOM04ke8qaLcXpscbX3BNUIjkxp1jw9ghBxP00Fxaq45tM46FhbPK9lk-YTCdf7WqvrHwt1D8KAVo3UQtL2IfC7kRvUmpxgLKIG696XcMxYXH7E0ARSmIIfwNZIbLGG8MuPHgCLHWE91sXMrLIwqo2AMzsm022oz0zVqRjj4ldB6lNlT8xA\",\"challenge\":\"eyJpZCI6ImEyalhhMm8wTkloRXYxS0ZfemMtZEEiLCJub25jZSI6NDU3LCJoYXNoIjoiMDA3NjI1ZDVjZDU5NmM5OTQ2ZjRiMGVhNDdlMThlMWE2OWNjNTUwMGRlOGEwM2Y1YzBiMDE5NGU1MzIxMTJlMCJ9\"}"}},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Fri, 20 Feb 2026 16:06:45 GMT\r\nserver: cloudflare\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"a-bAsFyilMr4Ra1hIU5PyoyFRunpI\"\r\nx-ratelimit-limit: 10000\r\nx-ratelimit-remaining: 9999\r\nx-ratelimit-reset: 1771603664568\r\ncdn-proxyver: 1.46\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 02/20/2026 16:06:45\r\ncdn-edgestorageid: 1056\r\ncdn-requestid: cf20fe75a85ea2614922b4a21ec9ec00\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lhmM4QOB6XB2h3mE1wTGi9GdUIXyg6DFjMZsKo299zw2TGqysoasWkvt8UOuTJOtK%2BGVcM5JbyJTLxtHVx5DHXMZ7NFS21RAHOn%2BDl%2Fs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d0f40bf4acff527-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T01:24:27.380512Z","times_seen":17770569,"resource_available":true,"data":null}},"time_used":861,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":861,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"claim-eden.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-eden.com/b761c24069430217e0f3e9e48aea59324f05fb31.svg","fqdn":"claim-eden.com","domain":"claim-eden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-eden.com/","date":"2026-02-20T16:06:42.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-eden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:59:55 GMT","end":"Mon, 18 May 2026 15:57:38 GMT"},"fingerprint":{"sha1":"C0:89:F1:7E:14:E9:6A:E5:FF:B6:72:23:79:94:04:60:C0:07:B9:F5","sha256":"F5:98:05:11:F9:0B:64:1B:D0:0F:87:95:7D:4B:87:1B:4A:AD:30:94:E5:DB:19:BE:68:C0:56:68:B3:EC:B2:9E"}}},"request":{"raw":"GET /b761c24069430217e0f3e9e48aea59324f05fb31.svg HTTP/1.1\r\nHost: claim-eden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-eden.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Feb 2026 16:06:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Feb 2026 15:57:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rmy%2BxPA%2FpxMwHBVQdu52j%2FtbK574DHRYvDOY7nGONH0Lg92Y2zT8kQ7F%2F7lTU8H%2F689asClFZLUsNNQVuzPbI%2FSWn%2FHk9FpTAvkpA76%2F\"}]}\r\netag: W/\"69948fd0-132\"\r\ncontent-encoding: br\r\ncf-ray: 9d0f40b3386cf527-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":306,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6d9ad955b27b44db21e653b4c2d0c04d","sha1":"b761c24069430217e0f3e9e48aea59324f05fb31","sha256":"731408656b4f1cc3c667276bf0e2e0a13fa4d4c5b9d79ca9cbcc00816c5ece0e","sha512":"4d4ddcaea8ce5fedcf2c0bcc053b62060205e9984477015ec3abfbe1b326be9c12653ace3595cfd406d1080793c63ad2bb72edda5c19c085b08cbdf6771f9c97","ssdeep":"","tlshash":"2be02759530c8d3df46acfd0f1f57552d01d44a34ac411d9c4523874102587fb7776d5","first_seen":"2026-02-20T16:07:12.495375Z","last_seen":"2026-02-20T16:31:29.26403Z","times_seen":2,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"claim-eden.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-eden.com/g0QcWrxr87K0ufOxIUFBakwYA8.png","fqdn":"claim-eden.com","domain":"claim-eden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-eden.com/","date":"2026-02-20T16:06:42.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-eden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:59:55 GMT","end":"Mon, 18 May 2026 15:57:38 GMT"},"fingerprint":{"sha1":"C0:89:F1:7E:14:E9:6A:E5:FF:B6:72:23:79:94:04:60:C0:07:B9:F5","sha256":"F5:98:05:11:F9:0B:64:1B:D0:0F:87:95:7D:4B:87:1B:4A:AD:30:94:E5:DB:19:BE:68:C0:56:68:B3:EC:B2:9E"}}},"request":{"raw":"GET /g0QcWrxr87K0ufOxIUFBakwYA8.png HTTP/1.1\r\nHost: claim-eden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-eden.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Feb 2026 16:06:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 82262\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Feb 2026 15:57:04 GMT\r\netag: \"69948fd0-14156\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 206912\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=26v2hIm0PS58B6l4kOUraYaWBqmqbxvw7vm1XtdSPPhmDfBjQqcskz%2FhhN9EYOTfwKpRYMMLldcIFubMoa9HdSxfvjDzOIGJj4hMF72i\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d0f40b358d5f527-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":82262,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"2faa7b868f98b54efcb79cd5362cacab","sha1":"08311517f46ff3ba0da31f7544c45c58b9ef16df","sha256":"a7723ec07acdbbcdda4e9de1d47d65cd28991ed00a3de07aa3720589bc9683f7","sha512":"69542d50141d982de9c0dbfc37d68ad469a0d8050e1bd7d5caa6f9584204a7921fc43dbb9e5a4e6635a22360a071e091755c4d02b34f3b50cb092644aabcde13","ssdeep":"1536:dzOimrWv9uNA1DzzsG4ocrV+Yv3b4dGaGjaBV08ClxPWiTGw:dzOhrnNA1DUG4ocrV+whaGjQV0pxPWGH","tlshash":"bc8312dbd37bf6e7e9407b75c00898d898e8d4400daa920e3c12736970b5a7fe570719","first_seen":"2026-02-20T16:07:12.496746Z","last_seen":"2026-02-20T16:31:29.299697Z","times_seen":2,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"claim-eden.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-eden.com/44ec34f5fefeabee420d7156b8b87b387b5b5b40.svg","fqdn":"claim-eden.com","domain":"claim-eden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-eden.com/","date":"2026-02-20T16:06:42.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-eden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:59:55 GMT","end":"Mon, 18 May 2026 15:57:38 GMT"},"fingerprint":{"sha1":"C0:89:F1:7E:14:E9:6A:E5:FF:B6:72:23:79:94:04:60:C0:07:B9:F5","sha256":"F5:98:05:11:F9:0B:64:1B:D0:0F:87:95:7D:4B:87:1B:4A:AD:30:94:E5:DB:19:BE:68:C0:56:68:B3:EC:B2:9E"}}},"request":{"raw":"GET /44ec34f5fefeabee420d7156b8b87b387b5b5b40.svg HTTP/1.1\r\nHost: claim-eden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-eden.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Feb 2026 16:06:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Feb 2026 15:57:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yYMVXiJH6m3uw2zcX8XKKv8R%2Bw%2FiGUZkLrKDLi1VfpW4zrx4hemFZthu5PDW2udkiuwP2QmFvHM3JS0xO%2BSfZD63ZajRc8JGBK0lKzsz\"}]}\r\netag: W/\"69948fd0-476\"\r\ncontent-encoding: br\r\ncf-ray: 9d0f40b358daf527-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1142,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2c83ef3fcab128761795c9ea850b8e86","sha1":"44ec34f5fefeabee420d7156b8b87b387b5b5b40","sha256":"eb313065ff39db45d8559290410e14a85f6f8056ed1a3515d1b31bfbc4ae8751","sha512":"d0f1bdd5b224fec2eac55efa82b8f6d867788d1780a21f2c25d0324a24cc7439bccaccc86d15d47d34f73a7230a77cab1dca806118fd98d2b70c8bd2fd1b2eda","ssdeep":"","tlshash":"57219bdddf4de648b0d313e1fb132018a69f9034af921a53900edff752155b95bd48a0","first_seen":"2026-02-20T16:07:12.498204Z","last_seen":"2026-02-20T16:31:29.277967Z","times_seen":2,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"claim-eden.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-eden.com/d4e6332fdfef56f1e174e5338e271bc30d6c5f15.svg","fqdn":"claim-eden.com","domain":"claim-eden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-eden.com/","date":"2026-02-20T16:06:42.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-eden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:59:55 GMT","end":"Mon, 18 May 2026 15:57:38 GMT"},"fingerprint":{"sha1":"C0:89:F1:7E:14:E9:6A:E5:FF:B6:72:23:79:94:04:60:C0:07:B9:F5","sha256":"F5:98:05:11:F9:0B:64:1B:D0:0F:87:95:7D:4B:87:1B:4A:AD:30:94:E5:DB:19:BE:68:C0:56:68:B3:EC:B2:9E"}}},"request":{"raw":"GET /d4e6332fdfef56f1e174e5338e271bc30d6c5f15.svg HTTP/1.1\r\nHost: claim-eden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-eden.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Feb 2026 16:06:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Feb 2026 15:57:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eLz7C8j3X%2Bht%2BCixM5njzO44UapO8KOwgzSVTBJWVPM26fDi5dyKGfQZxgq8xuiwhHt3XO2GHFkr02OaWZzZ0rm7SVXqeTjdOlBibMjt\"}]}\r\netag: W/\"69948fd0-1da\"\r\ncontent-encoding: br\r\ncf-ray: 9d0f40b368ddf527-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":474,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"974ae26a44fb6843e8dcef84947ecbd1","sha1":"d4e6332fdfef56f1e174e5338e271bc30d6c5f15","sha256":"9818730f4f82d638a7f10e63559a9ee907e19383d8fd827c468a2b7e48b9b1cd","sha512":"15f54eca49d5b269793c946b3b0a8967f0d763137ffe27c13b6ff6e4575f2346be7abb33f65b0b435f0894125278e54ddbb0a7074be2494ce0994ecb1810290c","ssdeep":"","tlshash":"18f00e9cce6d2c9e44069360e796002c3bf66408128282b6cc0d11b4008c8b37a1b580","first_seen":"2026-02-20T16:07:12.499552Z","last_seen":"2026-02-20T16:31:29.296289Z","times_seen":2,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"claim-eden.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-eden.com/41dd74e91f0e077df8eb3857d61e997971684425.svg","fqdn":"claim-eden.com","domain":"claim-eden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-eden.com/","date":"2026-02-20T16:06:42.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-eden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:59:55 GMT","end":"Mon, 18 May 2026 15:57:38 GMT"},"fingerprint":{"sha1":"C0:89:F1:7E:14:E9:6A:E5:FF:B6:72:23:79:94:04:60:C0:07:B9:F5","sha256":"F5:98:05:11:F9:0B:64:1B:D0:0F:87:95:7D:4B:87:1B:4A:AD:30:94:E5:DB:19:BE:68:C0:56:68:B3:EC:B2:9E"}}},"request":{"raw":"GET /41dd74e91f0e077df8eb3857d61e997971684425.svg HTTP/1.1\r\nHost: claim-eden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-eden.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Feb 2026 16:06:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Feb 2026 15:57:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\nage: 206911\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YA8vicjNJT%2BlPqe%2FSA1MInVo2GuPa48O6FgThq2PAi4IykDcN6qCthAVEdog2yxd%2FzcGjieMWO3c6PG21yx7lOTKiFbfozmkqfuC2owY\"}]}\r\netag: W/\"69948fd0-2aa\"\r\ncontent-encoding: br\r\ncf-ray: 9d0f40b34899f527-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":682,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ab20c249afde3890c7af7b8b8dee15d0","sha1":"41dd74e91f0e077df8eb3857d61e997971684425","sha256":"8a0e6c6307f3406c12be1e6b2646d4bfee9738b4a0ea54e012202b98c17381eb","sha512":"1a6807e837109fca9c0766685e6def616ea13938a900a2c43249846f1f0ad48536ba9f5d6ea464e45a72c98c6d59581dd7adb7cf63ab8c00036bb719c44e77b2","ssdeep":"","tlshash":"7901496cd3182bbc28ef8be1e2f56450f02fa8784bc04fc8c53ca9959445acee307895","first_seen":"2026-02-20T16:07:12.500897Z","last_seen":"2026-02-20T16:31:29.294395Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"claim-eden.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-eden.com/2-Canvas.mp4","fqdn":"claim-eden.com","domain":"claim-eden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://claim-eden.com/","date":"2026-02-20T16:06:42.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-eden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:59:55 GMT","end":"Mon, 18 May 2026 15:57:38 GMT"},"fingerprint":{"sha1":"C0:89:F1:7E:14:E9:6A:E5:FF:B6:72:23:79:94:04:60:C0:07:B9:F5","sha256":"F5:98:05:11:F9:0B:64:1B:D0:0F:87:95:7D:4B:87:1B:4A:AD:30:94:E5:DB:19:BE:68:C0:56:68:B3:EC:B2:9E"}}},"request":{"raw":"GET /2-Canvas.mp4 HTTP/1.1\r\nHost: claim-eden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-eden.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Fri, 20 Feb 2026 16:06:42 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 4449826\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Feb 2026 15:57:04 GMT\r\netag: \"69948fd0-43e622\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\ncontent-range: bytes 0-4449825/4449826\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kSBOMqiQudugf96Rio%2FEe0qtl71JYwJqkTHonzTyJxBoA4OHjCZ9zOfLAcEzy3xAHK7%2B61cGsWB1DUvx43L3%2FBTx6gg%2Ffqf%2FXwneI6Hh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d0f40b3e9fdf527-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4449826,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"3fed8e2b027a3335f4be014dbb952f98","sha1":"c68d88126046c63b087858192f87a4386f3808a3","sha256":"dc6558096f542ee521661eaf25782e6b5ac9dd76146586b1aa4aab927d1233d3","sha512":"4ffddeb6598648086a02c70eb8847801f36f60375d0d0a9aaf89981544af1425ce61ed2784a0fcf065be37547bce30f6945bdc91588069deb177fc559b39a9c8","ssdeep":"24576:DslXr5YTU0nHvKVEy4kdbQjfMBPKNTKdJhW:D4mrCbb0fYSkPE","tlshash":"8625225c0f910042fb0ee2bec1a4fe15d5e7a99ac8c3c187795e65580f7046a8baf1b7","first_seen":"2026-02-20T16:07:12.502386Z","last_seen":"2026-02-20T16:31:29.309135Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1534,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1180,"receive":354,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"claim-eden.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-eden.com/secureproxy?s=%2Fipfs%2FyW7mvDxxWgFbZT6cuvQp4gaf9ff2e0795590d25730123541d348fb%3Ft%3D1771603602290","fqdn":"claim-eden.com","domain":"claim-eden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-eden.com/","date":"2026-02-20T16:06:42.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-eden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:59:55 GMT","end":"Mon, 18 May 2026 15:57:38 GMT"},"fingerprint":{"sha1":"C0:89:F1:7E:14:E9:6A:E5:FF:B6:72:23:79:94:04:60:C0:07:B9:F5","sha256":"F5:98:05:11:F9:0B:64:1B:D0:0F:87:95:7D:4B:87:1B:4A:AD:30:94:E5:DB:19:BE:68:C0:56:68:B3:EC:B2:9E"}}},"request":{"raw":"GET /secureproxy?s=%2Fipfs%2FyW7mvDxxWgFbZT6cuvQp4gaf9ff2e0795590d25730123541d348fb%3Ft%3D1771603602290 HTTP/1.1\r\nHost: claim-eden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-eden.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Feb 2026 16:06:42 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: max-age=2592000\r\netag: W/\"924d2-VoUH2GEAqUckpJWwQqLaaS9OfQs\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=is-Z2xIlxrrA245tTXq7GA.js\r\ncdn-proxyver: 1.46\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 02/20/2026 16:06:42\r\ncdn-edgestorageid: 879\r\ncdn-requestid: 01a53aeaf784fab5bf0050ebf139e0b9\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9YSlQ%2BzY8fs2GUGX5zqmhjBQz1wSMbMMx1ZoVw2TQclmlCUOmGd14Lfbt7UzWXO5iWZTKnGPWZ%2FLGF%2F2lIALHGVwdhWt1SrYnfKfSCO5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d0f40b26e77f527-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":599250,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"caf13d1c15b727c62dd54729c3a852d3","sha1":"568507d86100a94724a495b042a2da692f4e7d0b","sha256":"887a8c87cee0bb32d41337fabd827c75133b08963d45251ef6f55c841f3f96f6","sha512":"bf76da5bf2a8da5c54e9a7445b5505de59e042be36918bb69fd042211e4faf18d11a8dafe45b792af5f1e7ab1e7c34c5df39af62067a34b5fa168ed11c7b4355","ssdeep":"6144:3h5gDXACl2/EM1CjCjRHlIy6VKcRmWLO2m3fnDRumuSYlhv1wf2Rti:/sXACl4N1CjCjRHlIyQRhOLfD3J","tlshash":"9bd4bdc0875915bf42982aae19b35b7fdfa80d58074bcc5073c31cd163a570a9be6be8","first_seen":"2026-02-20T16:07:12.504053Z","last_seen":"2026-02-20T16:07:12.504053Z","times_seen":1,"resource_available":true,"data":null}},"time_used":991,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":702,"receive":288,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"claim-eden.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-eden.com/gEulGDbGwms4zhp1tGv4BerAI.png","fqdn":"claim-eden.com","domain":"claim-eden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-eden.com/","date":"2026-02-20T16:06:42.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-eden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:59:55 GMT","end":"Mon, 18 May 2026 15:57:38 GMT"},"fingerprint":{"sha1":"C0:89:F1:7E:14:E9:6A:E5:FF:B6:72:23:79:94:04:60:C0:07:B9:F5","sha256":"F5:98:05:11:F9:0B:64:1B:D0:0F:87:95:7D:4B:87:1B:4A:AD:30:94:E5:DB:19:BE:68:C0:56:68:B3:EC:B2:9E"}}},"request":{"raw":"GET /gEulGDbGwms4zhp1tGv4BerAI.png HTTP/1.1\r\nHost: claim-eden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-eden.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Feb 2026 16:06:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 266993\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Feb 2026 15:57:04 GMT\r\netag: \"69948fd0-412f1\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AnpfOuJjU%2BNKJbjgM8Qi0hr8InkPhnKZHePFMPA95tz4J39%2BQ1n3AnpbjUIvNIvx%2Fz3041qL4Nrjk4Hl83ZMQ1%2BE1%2BQEHK32OFD%2BEuD3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d0f40b358d4f527-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":266993,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2048 x 1151, 8-bit colormap, non-interlaced","md5":"0f4e534d73fce66dd1a6da16cab5f4a3","sha1":"db263f3e346037300518abc0bfba5af08775249f","sha256":"1f82110137164efc978f1d426218e3af3ab26f4568e38dde78566d570bbb9dcb","sha512":"75d99607b220cff2cf1b24d480c4c7d5bbd8f528f91470c137b3d6115801a2a55a31390e83d390317a73161718f18b4d426b225f6463aecaefd2f859ba350ebf","ssdeep":"6144:YHpnwP9I2HmmsQtwScHYmVI+L6eOcCPGj9YgiMJ3azwDOzwp:4pn89IHhQaSfneOlr+1tDOzwp","tlshash":"93442352f75d66afb901b2a33b9ca091db361b700c0c2e58fe5d961e29bcd85cd0721b","first_seen":"2026-02-20T16:07:12.505676Z","last_seen":"2026-02-20T16:31:29.307951Z","times_seen":2,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":207,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"claim-eden.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-eden.com/gyByhwUxId8gMHweElSvO5Tc.woff2","fqdn":"claim-eden.com","domain":"claim-eden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-eden.com/","date":"2026-02-20T16:06:42.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-eden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:59:55 GMT","end":"Mon, 18 May 2026 15:57:38 GMT"},"fingerprint":{"sha1":"C0:89:F1:7E:14:E9:6A:E5:FF:B6:72:23:79:94:04:60:C0:07:B9:F5","sha256":"F5:98:05:11:F9:0B:64:1B:D0:0F:87:95:7D:4B:87:1B:4A:AD:30:94:E5:DB:19:BE:68:C0:56:68:B3:EC:B2:9E"}}},"request":{"raw":"GET /gyByhwUxId8gMHweElSvO5Tc.woff2 HTTP/1.1\r\nHost: claim-eden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-eden.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Feb 2026 16:06:42 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 63448\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Feb 2026 15:57:04 GMT\r\netag: \"69948fd0-f7d8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d%2BmZYHpfd4piPGSDMNZYL8DMPxnjYy4251IgYjDRbMmGwYPM88Q%2BcIHoTblA%2BjcFZQP4PylLvBtxJmQbHFKCSgGRuHvhU6fZag6vxJ28\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d0f40b37903f527-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63448,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63448, version 1.0","md5":"f36a4587e610296a15f16c258b60a77f","sha1":"ec4caa7b454bb6734655a2e5895ff1416ea64e60","sha256":"4cbb05aff640b319613c442d96833b7fe94ce4f3b656692fdaae94326294857d","sha512":"d4eb08fae700769b79f7debc705c46b69d131b387a555827807e0a07b6eed50babc48544e5da13c5e46bfe75a031af55648b91dede6d329047ad1c49f8a23e00","ssdeep":"768:/jPWSEcHQj++Zv47F4iLn7xHahsq/mwcJcEAxT/9yHYv+qEpNkM3ZHJ+VUREWi+T:7PtmCis7RahsqtucnTw/pdGVUCSF","tlshash":"2f5302adb1f86dd46089c2bf86d0d509bfe904f897796536e0930c54b83eee6b80530b","first_seen":"2026-02-20T16:07:12.506999Z","last_seen":"2026-06-17T12:40:32.733687Z","times_seen":15,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"claim-eden.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-eden.com/","fqdn":"claim-eden.com","domain":"claim-eden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-20T16:06:41.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-eden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:59:55 GMT","end":"Mon, 18 May 2026 15:57:38 GMT"},"fingerprint":{"sha1":"C0:89:F1:7E:14:E9:6A:E5:FF:B6:72:23:79:94:04:60:C0:07:B9:F5","sha256":"F5:98:05:11:F9:0B:64:1B:D0:0F:87:95:7D:4B:87:1B:4A:AD:30:94:E5:DB:19:BE:68:C0:56:68:B3:EC:B2:9E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: claim-eden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 16:06:42 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Feb 2026 15:57:03 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nSquW0LwtCGYbxv1gffAQiyuCOb%2BfC%2Fsj2fApY1uRAMd1DI1O1umLwNW0OvjhmoB7e82F1HQzTxAPuWxTlB9Kl6MyOcaKVkqgmwTRqcX\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 256179\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9d0f40b07e88a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Framer Sites","description":"Framer is a no-code web design platform for designing and publishing responsive websites.","website":"https://www.framer.com","common_platform_enumeration":"","icon":"Framer Sites.svg","categories":["CMS","Page builders"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":443097,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (36641)","md5":"685b598d4f0545016a26897cb87e26b9","sha1":"89d4266b0c7908824a322d1a7d59a751a2572996","sha256":"05e84771cb5dbd30b8a13a9cbe6566354a5259acee461d79b9f84c61f2dfc158","sha512":"16f24a556ce810595e3f932b192879d13646db665064c13c9d1202ac6c82f70c07f7e91219dd54d6a4d69cd3d084063e36898eb8046634b4f6d36382ffe1b723","ssdeep":"1536:q1tszVJVXL3eHCe+8VtedkVmVPaU9VgaTVhVk9VCwikM2xtxAbmuizda14a9u7iW:q1tw1jkM2xDAbmuCAAVy774l4B4l4s","tlshash":"9794d7235259e1285cd7257df798a60c39189201ff33c2df66ed526f82ceee422563ac","first_seen":"2026-02-20T16:07:12.508299Z","last_seen":"2026-02-20T16:31:29.261917Z","times_seen":2,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":107,"dns":70,"connect":12,"send":0,"wait":30,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"claim-eden.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"framerusercontent.com/images/n1CUtQNh6MFnf07jCSuDbqX5XIE.png?scale-down-to=2048\u0026width=3000\u0026height=2567","fqdn":"framerusercontent.com","domain":"framerusercontent.com","tld":"com"},"ip":{"addr":"52.84.50.29","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://claim-eden.com/","date":"2026-02-20T16:06:42.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"framerusercontent.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 16 Oct 2025 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:EF:AE:14:9A:1C:B7:8C:AB:DF:01:C0:39:9E:AE:49:90:E5:84:94","sha256":"B7:E9:B0:B0:73:ED:29:A4:09:64:FA:77:EF:60:53:32:51:10:08:95:FD:7B:4A:69:60:51:6D:9F:AF:31:9D:5E"}}},"request":{"raw":"GET /images/n1CUtQNh6MFnf07jCSuDbqX5XIE.png?scale-down-to=2048\u0026width=3000\u0026height=2567 HTTP/1.1\r\nHost: framerusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-eden.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: image/avif\r\ndate: Fri, 28 Nov 2025 18:23:44 GMT\r\ncross-origin-resource-policy: cross-origin\r\nx-amzn-trace-id: Root=1-6929e8aa-55ba557a7bf3bcd25d045ccc;Sampled=1;Lineage=1:f456f256:0\r\nx-amzn-requestid: 712f7a0f-dbb7-41f9-834c-ee1fe446543b\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: deny\r\ncontent-security-policy: default-src 'none'; script-src 'none'; img-src 'self'; media-src 'self'; report-uri https://framer.report-uri.com/r/t/csp/enforce;\r\ncache-control: public, max-age=31536000, stale-while-revalidate=31536000\r\nx-content-type-options: nosniff\r\netag: \"220295024e8ce3c457fe11b959af1eb6\"\r\nvary: Accept\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 f3eb7b5e20267dea293dbfae056ecd62.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: Q11BOKlXg_ISn-Vs_pCKGiEUfQJluzrBX8Fi1c7wFekyUJWxMRMlhQ==\r\nage: 7249378\r\ntiming-allow-origin: *\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"OSL50-P3\",cdn-rid;desc=\"Q11BOKlXg_ISn-Vs_pCKGiEUfQJluzrBX8Fi1c7wFekyUJWxMRMlhQ==\",cdn-hit-layer;desc=\"EDGE\",cdn-downstream-fbl;dur=4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":424888,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"220295024e8ce3c457fe11b959af1eb6","sha1":"9a7a8e38341ac4d6026e2e4970f2aa69aa4c52c1","sha256":"2cbb71f57e85243afc06dc1097a01dddb7543a5aaca481bb3d4a9a8beaca6b9a","sha512":"7effe408ed588327c63e28448eb24504648ba0ae999da0e433f3c2f9ec7ff2a046e384673e1e80d539c12d3d0820c4515930821951265e2e26d4eea274950413","ssdeep":"12288:M41UOJAEGj7KKHp/AHc4xKAnhMCHHgjod:P1UO6nWE4rx3nqj8","tlshash":"6a9423d886c3987a7bc88ee508165529b13f790f274ae9afc51d44cd8f2225f794cb38","first_seen":"2026-02-20T16:07:12.510123Z","last_seen":"2026-02-20T16:31:29.289715Z","times_seen":2,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":41,"dns":26,"connect":3,"send":0,"wait":7,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"framerusercontent.com/images/vKE9k5hO0HjGifxAMXZoNP4Vo.png?scale-down-to=2048\u0026width=2880\u0026height=2048","fqdn":"framerusercontent.com","domain":"framerusercontent.com","tld":"com"},"ip":{"addr":"52.84.50.29","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://claim-eden.com/","date":"2026-02-20T16:06:42.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"framerusercontent.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 16 Oct 2025 00:00:00 GMT","end":"Fri, 13 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:EF:AE:14:9A:1C:B7:8C:AB:DF:01:C0:39:9E:AE:49:90:E5:84:94","sha256":"B7:E9:B0:B0:73:ED:29:A4:09:64:FA:77:EF:60:53:32:51:10:08:95:FD:7B:4A:69:60:51:6D:9F:AF:31:9D:5E"}}},"request":{"raw":"GET /images/vKE9k5hO0HjGifxAMXZoNP4Vo.png?scale-down-to=2048\u0026width=2880\u0026height=2048 HTTP/1.1\r\nHost: framerusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-eden.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: image/avif\r\ndate: Fri, 13 Feb 2026 16:11:47 GMT\r\ncross-origin-resource-policy: cross-origin\r\nx-amzn-trace-id: Root=1-698f4d40-26a37099254eb36417f06c19;Sampled=1;Lineage=1:f456f256:0\r\nx-amzn-requestid: b7001a29-ff01-46af-80b2-4cfabd36ff47\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: deny\r\ncontent-security-policy: default-src 'none'; script-src 'none'; img-src 'self'; media-src 'self'; report-uri https://framer.report-uri.com/r/t/csp/enforce;\r\ncache-control: public, max-age=31536000, stale-while-revalidate=31536000\r\nx-content-type-options: nosniff\r\netag: \"83c4c01d73dcfb774f4ef94445355a84\"\r\nvary: Accept\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 f3eb7b5e20267dea293dbfae056ecd62.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: f05gl6Z_cvit5kj7qLIozIhFP9sazS7EG8l-b4UKl1_F4Bt6OkVo3g==\r\nage: 604495\r\ntiming-allow-origin: *\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"OSL50-P3\",cdn-rid;desc=\"f05gl6Z_cvit5kj7qLIozIhFP9sazS7EG8l-b4UKl1_F4Bt6OkVo3g==\",cdn-hit-layer;desc=\"EDGE\",cdn-downstream-fbl;dur=5\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":257227,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"83c4c01d73dcfb774f4ef94445355a84","sha1":"f6f52e7ac079c59afde04c41d3b3cfd45d9a3393","sha256":"9e593a0e50523490a1e1662ba2cf20de6874fcd7d8b39713ee9c66afec9c86c2","sha512":"98366c539cb7ae993cfcbed4e85b2de582f31833265eb8586cf196e3cb6739522dc9535a0974d8b4bb57a36732f6682dd8e103027a9eafb6be1bc9b82ea16358","ssdeep":"6144:2SOcGAqEe8JDX6GazNXcZdXqJVNRocV9ouhPgsxsHk:5OcGue8Jj6GOMnqJTpuOB","tlshash":"824423d9857e6644de686879dfccca951c578094fc788f09c821acc992c42ecf66f8e3","first_seen":"2026-02-20T16:07:12.511541Z","last_seen":"2026-02-20T16:31:29.272489Z","times_seen":2,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":40,"dns":26,"connect":3,"send":0,"wait":22,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-eden.com/1a4c3741c01c487674547de1761df3fb3415c27e.svg","fqdn":"claim-eden.com","domain":"claim-eden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-eden.com/","date":"2026-02-20T16:06:42.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-eden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:59:55 GMT","end":"Mon, 18 May 2026 15:57:38 GMT"},"fingerprint":{"sha1":"C0:89:F1:7E:14:E9:6A:E5:FF:B6:72:23:79:94:04:60:C0:07:B9:F5","sha256":"F5:98:05:11:F9:0B:64:1B:D0:0F:87:95:7D:4B:87:1B:4A:AD:30:94:E5:DB:19:BE:68:C0:56:68:B3:EC:B2:9E"}}},"request":{"raw":"GET /1a4c3741c01c487674547de1761df3fb3415c27e.svg HTTP/1.1\r\nHost: claim-eden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-eden.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Feb 2026 16:06:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Feb 2026 15:57:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zsP3Y%2BlJvY%2BnB8EaXrfUb3ixHqwAb1ZUFiqZfyA%2FTykP0TROWBckrcCYxBs0Iy7k7N6e0wGTWeXKeZ6juxdd8jqf%2FbkwvlsdfY60r2Ge\"}]}\r\netag: W/\"69948fd0-360\"\r\ncontent-encoding: br\r\ncf-ray: 9d0f40b33870f527-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":864,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"08dbd80aa53271036da0655376fba67a","sha1":"1a4c3741c01c487674547de1761df3fb3415c27e","sha256":"a3a09c0d935678ac77df000348de90a17814c02aa511536b1ad3c42d54afbba9","sha512":"95f326dee8d7a95c5a38f6583c458813a9bfbe94496f1b55d27587153d46fdf561f7d6fbd6338b97b597dc2374535300be6fe9bb193f02cca602d268a0a14ba4","ssdeep":"","tlshash":"291166f8932d843f61972f82edb2245a810098b1cf8672e4c61edca48885cacd337c79","first_seen":"2026-02-20T16:07:12.512789Z","last_seen":"2026-02-20T16:31:29.291194Z","times_seen":2,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"claim-eden.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-eden.com/2d92011e0cefc60aad9bc10fe6d71e846d0863a3.svg","fqdn":"claim-eden.com","domain":"claim-eden.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-eden.com/","date":"2026-02-20T16:06:42.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-eden.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:59:55 GMT","end":"Mon, 18 May 2026 15:57:38 GMT"},"fingerprint":{"sha1":"C0:89:F1:7E:14:E9:6A:E5:FF:B6:72:23:79:94:04:60:C0:07:B9:F5","sha256":"F5:98:05:11:F9:0B:64:1B:D0:0F:87:95:7D:4B:87:1B:4A:AD:30:94:E5:DB:19:BE:68:C0:56:68:B3:EC:B2:9E"}}},"request":{"raw":"GET /2d92011e0cefc60aad9bc10fe6d71e846d0863a3.svg HTTP/1.1\r\nHost: claim-eden.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-eden.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Feb 2026 16:06:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Feb 2026 15:57:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\nage: 206911\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dBzAr94ElVIHBE1kTndBco8SGRehl8yAz2rT%2FNsssUhHqfrrV372KYdfQto%2FRUwIF5jAWN0GHBgIxslU1TyDR2Qc5hSfy1yYRk8YMb2p\"}]}\r\netag: W/\"69948fd0-13d\"\r\ncontent-encoding: br\r\ncf-ray: 9d0f40b358b1f527-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":317,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"579a862595cf2e0a2e7a53888b0d7343","sha1":"2d92011e0cefc60aad9bc10fe6d71e846d0863a3","sha256":"2a1930111a3b2587f3fe51de7a0bed5c1a4ba5fbae938eebe101e2d5bed5a723","sha512":"cb8c4bdf255ebceea86a5800d970bfb86aedf8581577a5729d8919074965b2262c0b8c5914fc336c8c5a568db18eb624ef4ba0c54ce53c36d9e34e04f83a47fe","ssdeep":"","tlshash":"fde07ddca3044c3cb0668bf4d3f07214e0ad80d254c41148c4627834200149d713bdc4","first_seen":"2026-02-20T16:07:12.513945Z","last_seen":"2026-02-20T16:31:29.31147Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"claim-eden.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}