{"report_id":"75ba7327-bfd9-4bcb-a5ef-2bbd3995195f","version":6,"status":"done","tags":[],"date":"2026-01-31T03:48:19Z","url":{"schema":"https","addr":"register-espresso.com/","fqdn":"register-espresso.com","domain":"register-espresso.com","tld":"com"},"ip":{"addr":"172.67.166.95","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"register-espresso.com/","fqdn":"register-espresso.com","domain":"register-espresso.com","tld":"com"},"title":"Espresso Claim Portal","dom":{"size":39839,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14644)","md5":"daf801dd9808d11c94758f24155028ce","sha1":"596b62bf1f8ede46bd7bd896425684c6d0632aa2","sha256":"e2fa9977cce54ebaf3dcb979412cf8f50483bed36e34fe8bcec49c4821540702","sha512":"7625291833f6cd880079ae6e67ad8fa92cfc5a6e4d689f1a15b13e401f9692fa78e7a92bd5d0488a921887af3b320435bbd202aca00c9431e5673d3dd9f039bf","ssdeep":"768:cDHq7ylWfM8nMmT8pv5uoFMZy6pl0JxhXk:GlWfM8nMmQxpI0lXk","tlshash":"76032af6d01086ba06231f58e5327d99622260ea4f55949cf1acc16c3740dfb8dbb9ef","dom_hash":"domhashec8caf43f80a8762dadbad66a8c2093f","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"register-espresso.com/","fqdn":"register-espresso.com","domain":"register-espresso.com","tld":"com"},"ip":{"addr":"172.67.166.95","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-07T03:48:19Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":4}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-31T03:47:54Z","timestamp":1769831274,"ip_dst":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":37404,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2026-01-31T03:47:54.138778+0000\",\"flow_id\":1914786537934004,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.31\",\"src_port\":37404,\"dest_ip\":\"172.67.74.152\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3437,\"start\":\"2026-01-31T03:47:54.134324+0000\"}}"}],"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-01-31","alert":"PHP webshell obfuscated by encoding of mixed hex and dec","trigger":"register-espresso.com/assets/secure.php?req=ping","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/04/18","description":"PHP webshell obfuscated by encoding of mixed hex and dec","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_obfuscated_encoding_mixed_dec_and_hex"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-01-31","alert":"Known PHP Webshells which contain unique strings, lousy rule for low hanging fruits. Most are catched by other rules in here but maybe these catch different versions.","trigger":"register-espresso.com/assets/secure.php?req=ping","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/01/09","description":"Known PHP Webshells which contain unique strings, lousy rule for low hanging fruits. Most are catched by other rules in here but maybe these catch different versions.","hash":"7b6471774d14510cf6fa312a496eed72b614f6fc","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_by_string_known_webshell"}},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"public-bsc.nownodes.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"fbsfoewlknwkpew111.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"public-bsc.nownodes.io","ip":{"addr":"104.20.35.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-05-20","domain_rank":0,"first_seen":"2025-10-14T19:44:58.496919Z","last_seen":"2026-01-24T14:58:58.884967Z","alert_count":2,"request_count":2,"received_data":1592,"sent_data":1045,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"rpc.walletconnect.org","ip":{"addr":"63.178.159.235","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2018-03-26","domain_rank":891779,"first_seen":"2023-02-11T03:06:43Z","last_seen":"2026-01-30T06:23:13.645409Z","alert_count":0,"request_count":1,"received_data":1653,"sent_data":544,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fbsfoewlknwkpew111.live","ip":{"addr":"172.67.212.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-11-30T01:31:05.094993Z","last_seen":"2026-01-31T03:13:43.489866Z","alert_count":1,"request_count":1,"received_data":627,"sent_data":461,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.ipify.org","ip":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-05","domain_rank":8166,"first_seen":"2014-10-06T12:38:43Z","last_seen":"2026-01-26T08:28:51.266566Z","alert_count":0,"request_count":1,"received_data":271,"sent_data":455,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-25T22:17:37.642954Z","alert_count":0,"request_count":4,"received_data":14996,"sent_data":1958,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-25T22:14:35.458366Z","alert_count":0,"request_count":1,"received_data":73799,"sent_data":544,"comment":"","tags":null,"fingerprints":null},{"fqdn":"magna-public-assets-prod.s3.amazonaws.com","ip":{"addr":"3.5.11.184","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2005-08-18","domain_rank":0,"first_seen":"2025-12-28T18:47:20.473023Z","last_seen":"2026-01-30T19:04:03.542679Z","alert_count":0,"request_count":1,"received_data":10632,"sent_data":492,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-01-25T22:20:32.726712Z","alert_count":0,"request_count":1,"received_data":436772,"sent_data":446,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"us.i.posthog.com","ip":{"addr":"18.205.167.128","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2020-01-23","domain_rank":42193,"first_seen":"2024-02-22T12:48:36Z","last_seen":"2026-01-28T11:22:33.8012Z","alert_count":0,"request_count":3,"received_data":2057,"sent_data":1719,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"us-assets.i.posthog.com","ip":{"addr":"172.66.166.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-01-23","domain_rank":57965,"first_seen":"2024-02-22T12:48:35Z","last_seen":"2026-01-28T14:41:56.829627Z","alert_count":0,"request_count":4,"received_data":113121,"sent_data":2010,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-01-25T22:30:32.196824Z","alert_count":0,"request_count":1,"received_data":164719,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"magna-public-assets-prod.s3.us-east-1.amazonaws.com","ip":{"addr":"16.15.191.133","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2005-08-18","domain_rank":0,"first_seen":"2025-12-31T12:33:52.777756Z","last_seen":"2026-01-30T19:04:04.817814Z","alert_count":0,"request_count":1,"received_data":57085,"sent_data":534,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"assets.unicorn.studio","ip":{"addr":"34.120.54.136","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2020-08-17","domain_rank":3759026,"first_seen":"2024-10-30T11:09:32Z","last_seen":"2026-01-30T19:04:04.891809Z","alert_count":0,"request_count":1,"received_data":77124,"sent_data":525,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"register-espresso.com","ip":{"addr":"172.67.166.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-31","domain_rank":0,"first_seen":"2026-01-31T03:13:41.050468Z","last_seen":"2026-01-31T03:13:41.050468Z","alert_count":2,"request_count":7,"received_data":3580940,"sent_data":3074,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"claim.espresso.foundation","ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2022-02-16","domain_rank":0,"first_seen":"2025-12-31T12:33:52.770511Z","last_seen":"2026-01-30T19:04:03.4689Z","alert_count":0,"request_count":46,"received_data":5594666,"sent_data":22261,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/use-is-client.hook-BMJdPNxQ.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"b3a048544d438ace2c64e19b485cf63c","sha1":"b30ddfa1e937e309283ab7b78a38ab1ba78cce36","sha256":"a6fe5ab77e4bf7d2430db49370055ae2773cbdedcf19c6f8e8faada9308d1ccc","sha512":"c0e16664e5a29f1969c30430988cfe93c2d286f5e55300c1ec276f183ac2d2cbfd4fe0813f072c56e5c79f7b33b6f1b33461cbcd85c5f54eaab44e653f182e77","ssdeep":"","tlshash":"7fc02b561082ac7487004ce00377ddb0953284dc22e51fa0b0254c161f490f74bafc0b","size":141,"data":"","first_seen":"2026-01-14T14:06:39.476463Z","last_seen":"2026-02-05T00:02:23.648243Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"31c5ca8344606c644357cc7bc5fcb4f2","sha1":"15e7956f4907328c3862fa720a83785f0ed12b87","sha256":"74dcb4cb8f2d15ddd47a1fa2cdb56cb103d54874a465c7b55698ab4f6c1cd63e","sha512":"d85c94991e10b65bb479d56f3d45b638f0f1e41a162ca309960ef86dcd5b5336ea6100adb6d2e72ef674722cf05978893d4e9c682b133f299d9eb829ac6123ff","ssdeep":"","tlshash":"78f04c0f859102324dfba1692e57a21170b6a0db294a4a0839ad411c7faec2b4785bc0","size":592,"data":"","first_seen":"2025-03-03T03:45:08.736625Z","last_seen":"2026-05-30T15:32:02.492913Z","times_seen":7230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/use-on-connect.hook-BlUhT0wN.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"6289d88ae4c7996731868f5c55665e76","sha1":"a99342af732a4f727ad9cccc994f54613aca5b96","sha256":"3ddb248ca42188f56b7d2eccc03cdc7eb62db0a99bd31fc7197305f2676ac6a1","sha512":"8fe83918ce8ab58be64237afd2181d0256f31de40a9e137f360c7ae6079d46e358569e368fbd21272ff7d430b4757999a7191d27eb70814f2bcbd9163aa13c21","ssdeep":"","tlshash":"d6f0dd9690c1c1f8930a9ce9c538a7be0a211a99728982c4ecae58331695dc0802ba4b","size":654,"data":"","first_seen":"2026-01-30T19:04:09.892638Z","last_seen":"2026-02-05T00:02:23.584386Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/background-music.context-CLvEvnk8.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"539b8d3b438e9e5122cc1310fbdd3771","sha1":"7f2521651189d41ed321a31cf99c063a5bbf628b","sha256":"501e9100bd864055d1ae3587f8be02d8f88d0b8c61f371b82e3d54aab2c04a98","sha512":"73a3f33902ebb1792bd396c8def7fe0800151657852638543e843bac76ee6f96d93df212d6709540000b1c1d817aa3c6122c7fe351f42730eae7f7ff3b88ff96","ssdeep":"","tlshash":"6111dcb7a8a4907afb8e09a409b1917937333755304a40f1e03ca4ab49d2582d67b7d9","size":927,"data":"","first_seen":"2026-01-14T14:06:39.459677Z","last_seen":"2026-02-05T00:02:23.573049Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/sound-button.component-DqN7VKJb.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"7bfe75236ff0c1135dee7963c01e15d7","sha1":"7dda9a80b1eddf4f81cf5916065009883ee2ed04","sha256":"cdb2474a889013e5a0b6638c62b3e7b6ef7a75a979643ed427adbb095458283b","sha512":"ecd42a553e011d043c6746ada325f7f664cc056f0bf6732161b31629b8ae7958309463ef0e4d322c935be9a3e458d3527c2829a2704b26de0bcef52604696b24","ssdeep":"","tlshash":"924174edc70035ac640e9b30fd177812b1be04fe8ba557d0818c653c6a368e3eb69ac5","size":2189,"data":"","first_seen":"2026-01-14T14:06:39.481157Z","last_seen":"2026-02-05T00:02:23.641485Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/loader.component-C8VnobGF.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"871e5ca8610b62744f94ab5d315e51cf","sha1":"bbfcd4d8c18dd07c05af0d515582b50c291b8660","sha256":"1a6ecc655e049dccc6fd54d4893698c563ee6fab64b240368c5a47c2c245aa0c","sha512":"d8dd6684f7e1268f1be89e22d03261c8cded2552c664d91640acf06e17eab4ea50339b07ee8270cf2e5b765990bd30a700195c5df2212853da9bd492eb124207","ssdeep":"1536:3RK0GSaGlSaeey2MZ+40INYm1C5XeJP2CprtD2zj7br:3RcSllS3e070Bm1jrQ","tlshash":"d0b3c79c7882b8a5539b45a590ff010bf27d6c4b700c84a0f268ddaf79738695263fbd","size":117949,"data":"","first_seen":"2026-01-14T14:06:39.510059Z","last_seen":"2026-02-05T00:02:23.617986Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/en_US-762U7H2X-yyzeC1pM.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"4ad68365e553aceebe0d223a03bc55f8","sha1":"419cc457624395a6dc80cd5e0e2684d445eee636","sha256":"eb7fc9d5aa807fa55616a01a775b95438820fb6c676824af978a725a66f3a44c","sha512":"1f75ce5b98f521665052f3257ad38535d7d09bcc33ef4bdda6cefb6f8f1c68c6a10e54a1c2a02f7522658d78ec9ec7362a2ea21998127a975010bd18ed68a986","ssdeep":"12288:+d/7EPwzWIKWTHoX2f+ozuNqxl+SNa45IVWdyq:IzEIzWIKYIXQ2qx8SR0q","tlshash":"a6c46c44b2a0b565439740e914eb1000f1346e9db50c58a876ecd9be3fbaec885fbf6d","size":562283,"data":"","first_seen":"2026-01-14T14:06:39.458644Z","last_seen":"2026-02-05T00:02:23.649201Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/entry.client-BZGv0Dvy.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"87a49d9268a02072448fe90645ec8ee8","sha1":"6f47ea6e5aa317783a433be74b71ad388759eb75","sha256":"290c74c185aa9ba110d382b5d82955fe0790544a4240a6e7193378b6d3ccd80e","sha512":"2396514b1d8b13a4bdbcd51debb7d35bb4a302de33837d4e8a777dd7df862882315438c4878ddbd7aede573c8a955575beba655df11d745c191eaa46968b156e","ssdeep":"3072:IO8GfDyHDZubrIrn6BEnaE2CmfnoSA016Un/m:RvL4VunIz64eoSvL/m","tlshash":"07041bec32bea7566eb245e6109f1503727c28232c0c4c70a151fe9d66b844a51fbfee","size":189577,"data":"","first_seen":"2026-01-14T14:06:39.454737Z","last_seen":"2026-02-05T00:02:23.563885Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/walletConnectWallet-FNSU4KNU-B0ci71fU.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"05a8359b297686a38136a26a10311301","sha1":"5d995f91f19bdd38e876708ea756b76ad53ce55c","sha256":"ff6da22ac4da1356c60264b8a4ca0e3bf79b026e16220dfac81cf1058e40160d","sha512":"28ffda0d4b0fcf35ec80c90c3bfc90103685a5220858159a9016588568e808550fb18e8b2d8ee45f72817087723c842ad4f3872adf933ef1da6267d6cef4fdbb","ssdeep":"","tlshash":"1a3115ef6be412f4d017e3a3d01590267ddb24ba7729ef44421b4ae0ae0149d64c8d78","size":1513,"data":"","first_seen":"2024-12-25T05:30:42.591141Z","last_seen":"2026-05-20T16:17:57.685031Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-assets.i.posthog.com/static/surveys.js?v=1.332.0","fqdn":"us-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"172.66.166.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c24776fbdc31e9a56fb3e4b63f112b8","sha1":"1ca98034700f56f1f8dacac6a0efa4906c356f8a","sha256":"ba8e556008bafbc7e6cd81416cd0c9030b31afe7d405a3b47113324f66b74962","sha512":"231c39abdf7bbbe91fdcc3787019da8f9f619e827d2f47ad6000f156244f6b2e1ebfb057ac627e8531c3d8a40ceb39f044bee82f2e66d9ed9e1a464899898333","ssdeep":"","tlshash":"9d1102cc7581f5c357c75ca5843b8a47f22d280b544ca4218254ddc46ee1bbda3dbe35","size":1000,"data":"","first_seen":"2026-01-15T22:07:57.153242Z","last_seen":"2026-02-09T14:41:51.331497Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/base-modal.component-Bi8UGgvO.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"982ddb00b60174b4e3698843f015975d","sha1":"5e8bfe1b08679ddfb0569c69b716e2328b2c3ef4","sha256":"3ec44c68631e463d7eab9ab1b5099c41ab17f81ba4d2ba2882dbf6ca85fbc3ff","sha512":"36f490573051687cad3650c09c1d2bea019344d354a57e30fa04db1a0eade64bcd93b8d3f90f54a717dfcec5aa0a063dda8ac3aafb00bcfba3d67dc74ae8a075","ssdeep":"192:8759e1zs+Is14LloIFe58zGmfpWgY4CRE/Yk:GW1zs+Is16oIw52Gmfp7","tlshash":"55f1c91da34ab568fc2fc589e0fdd60aa56f103cf2360991b2bd952e01d4e52722bfd4","size":8038,"data":"","first_seen":"2026-01-30T19:04:09.852009Z","last_seen":"2026-02-05T00:02:23.633252Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"71dfe42af37cec6e1b8a11bd0a94d293","sha1":"2e30765cce85dc76c46065bc9cd4d5da92f173e3","sha256":"d3fbc2d1399dbbfdc68499799ef4a79ed43b2b8096f14395a2aea2040de6ebd2","sha512":"1f3cdf0a2f826385c2cd428986a9c00ffdd0a995e25a5fd76f74d2db5f5f607b92dc518eba0c04d32995ce8d585e4c98bee88cb9c6c16fc9ef229f659668556c","ssdeep":"","tlshash":"50f09738182a0bed4bd326dc9603bb1a331842836404a531d9eccab834c34fa6033cea","size":472,"data":"","first_seen":"2025-12-07T20:46:41.259343Z","last_seen":"2026-05-30T06:14:44.234095Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/metaMaskWallet-YFHEHW7V-BggUDXad.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9faabc0cac059efd75278832f35fba0","sha1":"75a665ec82b0dd2ccab406db25ed49f69ba40931","sha256":"748a6c743322ec0b319bf361b84e929e5099721824636f5a4befd8e0ff8ab826","sha512":"7ab0d0071f01aad00b47c9fd55ef2748c61eeeb46b3abfb66afdae61970d62a77a0f643be0c95cab9a778d28a816b75fbb5c4667be6b794d97cec3937d0b5eec","ssdeep":"192:M1vaqYOX292169AY32zqzKHio+21BZBTibnKCU+jpBxMCXV:my933BU+V","tlshash":"17d15deb67488cbcb8271f24e34a3271613836d7692ee6594c738a79090519dbb7fcc4","size":6516,"data":"","first_seen":"2024-12-25T05:30:42.586528Z","last_seen":"2026-05-20T16:17:57.649029Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/bitgetWallet-CLYTW54T-Wwn2QYd0.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c209ae7e667ef953a67fd9e02e026122","sha1":"263c559b9b3d0aa0da8a7ea36790983dc7a0821f","sha256":"1f5ce5ae5b81eeeb68a411dc27cbdeadab04eecff9fca4447d20755e6b770e46","sha512":"6daddffb9e9d093649df98bcb5d7737e9fa7687dac1308a4710689c88076d5dc81b7de5bbfe7abf7a3910d9f53c331207b153b9f582c2eafa4717e553cc07f58","ssdeep":"","tlshash":"2571a791d7f5e09f6b1803b6ff9a14e79432f4e641140b9de55e3361200ee23e91f554","size":3493,"data":"","first_seen":"2025-04-09T07:08:13.379631Z","last_seen":"2026-05-20T16:17:57.641698Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/rainbowWallet-2SR6TVBF-kimcGeuf.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a0e974aa17cd852cfd0a349aa6cde2a","sha1":"3e83142c11e9b7a57432123b72457ff579f8bcb8","sha256":"0813cf58d2da41c33e74c0fb7e5a9671020dc397611becaacd42e1f6ae5b30a4","sha512":"28eac8d72b65f6e1cd4f0ac75cfe58a515be407e04b12aea7a90a8056018133d9f4de319843eb5238f465a23d817971dbd945e4fdbfc59fca26b823efd59a601","ssdeep":"","tlshash":"c071ca958a3dac3be52dc18cee411420710daabfdc894a5272639fef9d784c6ac4c660","size":3646,"data":"","first_seen":"2024-12-25T05:30:42.549882Z","last_seen":"2026-05-17T17:52:49.736369Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c3e3e350f78cf22bd7b335d70b41a58a","sha1":"cce22220b6a8dff76692755cc45439b4ec474a4d","sha256":"ee6bb81f4e9fc030a39a7c71affc4d1f2b900baa4b4c7af83361388d7c39599b","sha512":"15b6cbf8bd67e82a4952004138ebc95c44e4d373317826f1560eeec13416cc1d6a38d834609ef4b713e7a9c92d1b1bbf84de08e2e4061ed3d1e3891982c25b0a","ssdeep":"","tlshash":"3f90025ff2302063a756122b166f15456421626565550869123830eb4955148474265c","size":57,"data":"","first_seen":"2025-06-30T14:23:19.448274Z","last_seen":"2026-05-30T22:19:26.977796Z","times_seen":50663,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/phantomWallet-IPGVKCAB-BGoqRxdn.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d8d3e122c71dad3b911494fe2c10c5f8","sha1":"1b78a2cd20efa5bf8974c3f1d828585a4dec9961","sha256":"074e942e3627e6929f68a9f298e84f7ca26788c12c1dfc6caf7dc90473303910","sha512":"cf37e331c970b63ce5d64b41b174e697175c73e2d942534a7b77daac130ca72233a08809240204283a3bf66bc52c73846ed55ba5add6302341688d4714158d22","ssdeep":"","tlshash":"e411dcd20f3080e50e9aae39ad3878e416b171af737826841349cf34ea83dc74508a50","size":919,"data":"","first_seen":"2025-05-30T14:20:20.549969Z","last_seen":"2026-04-17T09:09:52.493057Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/injectedWallet-H7LYKTQS-CAHJNGc-.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d15e27dd16cca201d14667c3af8cb320","sha1":"a2a412c0b28c967d51856bd18a3f5b1a039cbf94","sha256":"db58171c5bda95e8016d892b4692c77c4f7644fe1fd3ee9b6ac1f561e867aec0","sha512":"20a745ee7cfac75a1160058128403ca4639ca13460191bceb426a295e6ad64e72d63343c73565dff68a719fb7590fe12853a1b213c9a1e0d33a24d2e0937225a","ssdeep":"","tlshash":"fc01f476d22cd45dc91dc36cfd6e68f3234961e6611f4328755c0f2ea2194cbec1e264","size":685,"data":"","first_seen":"2025-04-01T04:17:39.059491Z","last_seen":"2026-05-20T16:17:57.675356Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/mewWallet-6V4UZOQC-B0qJRky8.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ba9b4ec5d6e0138fdc7dcea74d719b1","sha1":"7e9a5254388ae9b05ccab215bcadfda7cbb92178","sha256":"cabb87e570e8e5c15a34eeb5c010a7651a3e878e76568fa8f274903a86c23047","sha512":"8bbc357ee098b1666e94e09a19e0b9711acc240227e819daa87a564a6a0ff456a338c4b61d83f68344063ce6c0ac09d7ef5e9ccb4c711aefc103562691a600de","ssdeep":"192:vSL2IcUA1oFBu/kyilFZl1s7tWld8YgsII9P3cO6+fzRXygn3IJigNnvMqDCdFIZ:vSL2IcUm/XwZvw0IGrCgivRhilI","tlshash":"9742c5d0332c53f9f507c3a9a7aaa0569a7c30da3daf5158f64f05256b144fa883f843","size":12987,"data":"","first_seen":"2025-12-31T12:33:59.905722Z","last_seen":"2026-04-08T12:13:16.929881Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-assets.i.posthog.com/static/dead-clicks-autocapture.js?v=1.332.0","fqdn":"us-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"172.66.166.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f069936d3c6e9665eb0c1bd0a1eee52","sha1":"72a7c9d52a688ac11597fe487ae0551ba16949ca","sha256":"266da4f4ca773c693c9b32dd0554b8efcb493097ccaf70dbc05712df6f11487a","sha512":"f454c439e3294e18a75be8bd13f601336a589c57de078389e16b60b0148dd381e6ea88c3578bf28320c3f7d676303bf4ed20ef0369ac90673e3fa47ec43fbba2","ssdeep":"","tlshash":"3011ce90ac60f0260e721cf4843f8a0bf215253fa1eea0768554cdb15ae125da21ff1a","size":1000,"data":"","first_seen":"2025-12-04T15:44:22.653632Z","last_seen":"2026-03-23T17:15:23.204986Z","times_seen":129,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"52c04177f78c19fc99d7a4b7fec0c156","sha1":"1b9f4a56e06130502407bfdf32aeee3044efc811","sha256":"ba62fd0276ceab12deefeb40303852c107bf809ac43b40838b1b67d26182c21f","sha512":"146fcdaaac2095762d77152362da5c32060498a23eec6138de4f9c9782c11618d8a3746f77c44bab66eb05e78217abf1069058a7a0a20c39c1fcac971bfebb44","ssdeep":"192:vTwl0Vl9H93TfaNl3nWDDssWmb/iuRiYV/uFAuJr6gpC63CTFv8eJ9VuBa7G5pse:cl0f6QinYlShBp4GEoiXb2R","tlshash":"c552d6afd900e3b60b930f567a3b3de862a752e41ba6144c865cc5681620277db3f1df","size":13916,"data":"","first_seen":"2026-01-30T19:04:09.949369Z","last_seen":"2026-01-31T07:12:50.428082Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-assets.i.posthog.com/array/phc_9Cg41wNBIXNBnxyvzsD9AC6UT5KSjNjTR4SSnj4uH4/config.js","fqdn":"us-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"172.66.166.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e10e3029dd4060973ea42f79e34356c","sha1":"7150eebed1de980ce093662f2c18f5150e3b0f51","sha256":"ae86156111d96c259958d7efc1f381162f64d5170a8faaecec8524de21776fdf","sha512":"651a9f259b4fe7a4ec28070e3a5c052ae6a2b4fe5c2032e4643f17101f7c956fdb75a243da336a93a0f9ac4584174f8baed098fb398ec39a06e81039d2a67475","ssdeep":"","tlshash":"ea115929f89008be00e6b51eab97e0436f7b80db52484c1df9c45145bb1d83b9986fc5","size":892,"data":"","first_seen":"2026-01-30T19:04:09.914443Z","last_seen":"2026-01-31T07:12:50.33063Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/hstack-D7BEHBmh.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"cd9c658e6acbaf903d31abcbdcd0a9f0","sha1":"f362d682440d6a4bee383672635f146a50f63d7c","sha256":"cf95ee78b7c72e64f9703177d7e45438f08f4024a14d6530ab92c62efb9ba853","sha512":"5a1869e999538136ef20e5328ffbba297e465bdba6ece9169fee1c6e96b5fad2554200d67a3f8887950ff287851411c368f04e2152b090ddcbd3c69645b6a695","ssdeep":"","tlshash":"96f0d4a7644171b403e5cc5462e5535941de5f9cb67155c890ce880e3a141c5539be49","size":473,"data":"","first_seen":"2026-01-14T14:06:39.493632Z","last_seen":"2026-02-05T00:02:23.609983Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/home.page-CVUoYbyJ.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"6c77dbad2ae3fac6b2f013f05c169935","sha1":"cf05e0cd47131a547f8a921a916b0614cf8bb4f0","sha256":"001232ba8ace103af130eee68c74a6fb7d7fdae65d4a06458cb9d00201ace36d","sha512":"5724a58640d6093a63347474195679f2038a2b1a27418094a88ecb3f18c9eb86db0acf36e3b2da18d16776f3893b8f9e0a0cddbe24eb9e1c6978ead7ce9233a5","ssdeep":"384:iuy1cAKhYuXzTP3faWruuTO+PfzcmB+awuPohss+:zy1czhYczTP3faWruuTSawuPohss+","tlshash":"c4423b4cd299797ee6c20599257bd11c733a0a98727a8091d37e68360370dc2b937bdb","size":12891,"data":"","first_seen":"2026-01-30T19:04:09.916119Z","last_seen":"2026-02-05T00:02:23.571945Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"00933d3d76fccf8f1d330b001b6dc118","sha1":"72a3f9f693a7d05bb6f1b38fd381a0f4e8bb5c7a","sha256":"4009527b06902e2fcd3c2ce78c0652caf43bda1783d1577198d0c3919782c607","sha512":"8fce1ced1efcaf7f17f0fbc71664f0ca59f5f7bddc682fdbc8b9ef3862def740a845bc3cd5cc3926c09b98782296d14c9b38d50b2dd6cb53b296ec76ba558602","ssdeep":"","tlshash":"090156a9f328199a66d92fbfa06a570c7460603e380600319507edfa1700de021cbd8e","size":845,"data":"","first_seen":"2025-08-20T23:30:20.291724Z","last_seen":"2026-05-30T22:19:27.000186Z","times_seen":38088,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/hiunicornstudio/unicornstudio.js@v2.0.1/dist/unicornStudio.umd.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d62fcb8aae79e4ddff0c2f73514cac7f","sha1":"cbf46f8b66d5d226568da0f3ee29eb143784d0c9","sha256":"9a64dbb9af5e9672cc99b091377d7df9a9d1dcb2a910b639360e77b18a31cd71","sha512":"be67b0445a5e1603905d44b113b7d5c70f675e8901d6cf7a7f918cb61f197d581abee3af79af6e846d27cf87b7a0fcac17e0330455992ec09ee337b194a05f35","ssdeep":"3072:2dkdy/7ekEfcyDjn/+H4/l81Ei7PlzLWymGMbnDaURDS5WfeT:2dkdy/7ekEfcMRDS5WfeT","tlshash":"9ef3e9a6716b642e0982818bf0750e07a226655c340dc46d7b7cb8ff68ece5e317d73a","size":163593,"data":"","first_seen":"2026-01-30T19:04:09.913225Z","last_seen":"2026-05-29T10:09:54.461281Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/safeWallet-VUYZPLY4-CXnodgMs.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a09d06d29fe2837adda28d773f8d6e5","sha1":"93c50ca2782f3f0b4c1f6d48c9fa33476f772ac0","sha256":"aaaf8c1f6acc96bda06bfc1e526611b918cd12021d54b15cce8fef605554938e","sha512":"7c181bd28ffca7872846372455d30661b0b89069cc473f94ac177247350091749470603dbf2827abc14eee65d5f98c37664defe6105075889415cee5bc3ac9dd","ssdeep":"","tlshash":"c531229136cca6e0770ae321cd04c166f85528effd66e35c6a015862bd0846d758cdfd","size":1449,"data":"","first_seen":"2024-12-25T05:30:42.588753Z","last_seen":"2026-05-17T17:52:49.735726Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/okxWallet-GJMKZIND-Ctk5JsJ6.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4c59e31efbcd88c687fc0a977d992ca","sha1":"486cb19e8e6498704d418690e59128ebf9a02c6e","sha256":"92b49f1aed987eee109fd98567002c0420d85c602003e003b0f2ad3513c41f15","sha512":"01d94e855345137a19596757a9b585c74536b3c847f6c34ce07e2890fc4536375a159870aa1c88ff8a9b24f94c3cfee0eac0998d73170b52c9887080dff1ec54","ssdeep":"","tlshash":"8e115b9600ad4ddecc5da1eb937ca4aa573d2df8763881352f4c8b5020aacf8f44ad5c","size":898,"data":"","first_seen":"2025-04-09T07:08:13.428855Z","last_seen":"2026-05-20T16:17:57.647911Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/assets-NU2OP443-COMs-Mo6.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"33ae24799663e13f83cee5987fa8f728","sha1":"2309fcbf480ac447c060a427f2a6cd24974dfa30","sha256":"aac5c0d81b97b3892fafba21cdf014c77be385f12d7b1f525dc3f79d0cb2ede5","sha512":"f576ef24f5393cb38276b01c0aaa4d41c56a04d9bd0b82c8e04202949fe343407f12514560fe743af27fbff37a401bcff5c38a25ed66cecdd581c265ab9ad58d","ssdeep":"384:LOr2OrPR1YS2qj0FNwZe7QnBZ4pFSMLYp9uVEK:LOCO11D2qYzdyzK","tlshash":"2c82fd9b8728d94e6e6b8ff8ffdcb4d9332c30e5222e04d4115e616291a359feb41d81","size":17965,"data":"","first_seen":"2024-12-25T05:30:42.584192Z","last_seen":"2026-05-20T16:17:57.627438Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e0699d9362a4e2603cb8ff2bd6ddd2f4","sha1":"5a735efe15b3ec9246eb2ea710a664e7c850190c","sha256":"44164d886dd9b5bdba5e2ffaf7e55179c53804f86b7f172fb292d7311aeb08d1","sha512":"6a7de46450e6dbba8903543d163632bb33c985f7d5e2a61cd8c22781f9487d01dc468174af39aaf2a7e421f9efd29a80c2c3ff347805331254865fd9c357fa2d","ssdeep":"","tlshash":"c8900220542902aa5ae2815d5612fe3977441985110984620154d60b24d20d690369e4","size":53,"data":"","first_seen":"2025-01-19T19:20:19.81482Z","last_seen":"2026-05-30T21:28:19.769498Z","times_seen":9493,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/index.es-7R_i0dTC.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"35a4795ba43156e67ce1f8502f2b5be2","sha1":"da8b0f41a0964cde537d196ffb9b8935aa8cdcad","sha256":"ed3be947c3fa3617c3d50b9b285aaca3983465db75d4f7b0a6f79788c2442001","sha512":"78e09a97a34cf26edcd861f9c6817ab900762379a6a037bb6b9a4ba971e40efeeadb5a50d56f197c3330b3c20f0fde0a5f285004a0f1a1f69a452d8d5c877e3b","ssdeep":"6144:RKozfkuuo9pepoE4y4++7o8IR4zHVwSbZnECpGN26NokB:RRhnep4y4+kO4pwSbZnX6NXB","tlshash":"d9742b8473b6a47603ea95d9a8352201f23458683049d46cffbc6defae844854b3ff76","size":346003,"data":"","first_seen":"2026-01-30T19:04:09.882089Z","last_seen":"2026-01-31T07:12:50.351875Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-assets.i.posthog.com/static/web-vitals.js?v=1.332.0","fqdn":"us-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"172.66.166.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa1e3521e57a40ad394b049fa7ff3bc5","sha1":"ec88012f680be684d8d430c5efd61fc29b658374","sha256":"b17014672e5f28d0dc0cad40ee4d09feb6a1201dadb3932b1f3073a8e4f387d6","sha512":"729c7ed37f0f321fd1c588aab554f289ff37fce9a3cb7dfa78cb8f47db8cbacb69eb0660ea2e245a540dca857f4cf277f67f53c7d789609006e56799ce3ad282","ssdeep":"96:tzI8C48z+TJzq4L88kTAFKb5rbCKHDuqqUtl0AcJ4c0jU4mzWuCD/ZDZkRlulDsd:VC4F4Sk8FKvae0f4TcWuEZDyCSXEdij","tlshash":"eed1d9f59f41e53921bae2b6d47a514333396386a409409ce23eefd0146d4c6739bb32","size":6599,"data":"","first_seen":"2026-01-29T18:42:31.973098Z","last_seen":"2026-05-30T16:55:13.565573Z","times_seen":3485,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/root-CUtwT3UT.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"8479a912b788418f2c05e1a404348356","sha1":"e5106262d1cec36a065699f65cfe1be9a3a99f50","sha256":"557979de2b878155e504ae0d5f4750bf6b97a440b056097adbc74e4ae711fced","sha512":"e1a16c66824f132c976931e91c667da849500352d6ac15a37cdc81276026bc45eadc97d3b3de7d899480bf11728dc52eb18dcb8f1f58d304595eb9a28c837290","ssdeep":"","tlshash":"57f0be1bd54486b66391ccf1c1e0e2b06233815797e3d3b0d0df273693e48b6c6d6602","size":549,"data":"","first_seen":"2026-01-30T19:04:09.848074Z","last_seen":"2026-01-31T07:12:50.380892Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/portal-config.context-Coov9jKr.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"ffee77eb572ae052d4463c4fb50f9573","sha1":"58dbb86bbcef2da3911a2dc3326837e4f082a620","sha256":"1bd503503f94dfc63c388e86bb8039e7e457410197d6d74554fbf4f372826b09","sha512":"ce9bcb1a4e691ccaacf586f5c0e20bcda1d59bbecc66799fba8c0181d7daa95e8e6b5c1fac48ec9a1f2334268865397f5e3606570ffceeb6636041b7fc052aaa","ssdeep":"","tlshash":"14e0c09b6040f67277034ce119208534d333246b30258f70c01c852bbec40f6233f8d5","size":351,"data":"","first_seen":"2026-01-14T14:06:39.450428Z","last_seen":"2026-02-05T00:02:23.583077Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/warning.icon-Dc0zRbzu.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"33a0fd88bdb5a9129d1f5c0403d5831d","sha1":"1ffd6e76124807003f116afe62d3073497f5ae0e","sha256":"9d91956b4453121641b232044a10f3e736d188267a7929c93f3be18013191a02","sha512":"396413eb088130483f66ed12031cdce4cdf3e43d4532fae0d150efe53c732eaf301e77c55d6c2f2b50099ebdbd592be1e7de6310c91b1b5b880bc421449aa55c","ssdeep":"","tlshash":"e4f02377e3f428b87505cee8634f7d363177a0a9b3014645a39e581427a40c5b5ad9d2","size":655,"data":"","first_seen":"2026-01-14T14:06:39.501511Z","last_seen":"2026-02-05T00:02:23.653333Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/x.icon-B-1mXS8R.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"1d5ca9fc89a2b58de61c6ba3a8015341","sha1":"4f9b82272ee87342d81ad7a16cca024e1497f46d","sha256":"b66026f6ab26a0bae77a8273ef7e0d683ea316fc428046769b85195eb0891a85","sha512":"046d9b41904af8361c3556e13c1206f2bbde3a741ea0a53fedcb231c9c1238a3c7cb7a73ad3bd9f3208625338cb44fd494226e47014d2993ef099462a9940e96","ssdeep":"","tlshash":"80f097ff83c1609848595fa62ab23c251177e5f993a409a0c54449619d2d0f6731ee82","size":458,"data":"","first_seen":"2026-01-14T14:06:39.448198Z","last_seen":"2026-02-05T00:02:23.668402Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-espresso.com/assets/eleven.js","fqdn":"register-espresso.com","domain":"register-espresso.com","tld":"com"},"ip":{"addr":"172.67.166.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0731dc266a43636b0e166275728b329f","sha1":"10ab55c566941fe6319681ccaa36e6313c7336e6","sha256":"c8a7922f93eb75f4329d4576efd7cba8a84cd888cf80856fa42dd171a4efe22f","sha512":"01ad04b1d570264819d09409aa94fec0af2f32c2b00dd96d76d8ed616b8293dbbe912e60cbb42a144ee4c665be0039f0f6036ee1ba7c3e682e0fa22066c7a744","ssdeep":"98304:dml/voXqyL4cDRxWyeI4vWSuyZXJPcrnE:dq/gXqyL4cDRxWyeI4vWSuyZXJPcrnE","tlshash":"3ef57c8073b1a079439741e4947b1501f238a85a7408c0acfbecd9f7af999c9897bf79","size":3556158,"data":"","first_seen":"2025-12-02T13:22:34.804996Z","last_seen":"2026-04-17T12:35:57.650437Z","times_seen":517,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/index-CohomkmQ.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"57559ef8dee80a764111f5419139d290","sha1":"f6cd028022423a4169c8c4a571312073ba311412","sha256":"1d2b088ad5c6feb20999d1ded453af513b3348430db3848a6af0807af2fcac80","sha512":"e4eb88ea0b0b1739ee0f6516eb6da5b4feedbca421f81724268d8dcaae23c8b55b68a2950dbc20f25c18600a28474055593dd8b22dda5961e7680151b6bab641","ssdeep":"","tlshash":"b571128db7c4f04249c6a960037ba317b2a9377328bec2a593ee95b012675594227f74","size":3680,"data":"","first_seen":"2026-01-14T14:06:39.487256Z","last_seen":"2026-02-05T00:02:23.592968Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/rabbyWallet-FLVUU35F-BZrp4syk.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"174b08de1e202256a72f7663e79b8461","sha1":"602e294d94f061211502895741144c4320248855","sha256":"0767c9b588d0ab9b532619b26d91fe6e5163f541bcc2d6a9e9adae18f670dc8d","sha512":"640ce4e8d836b4ea90ace61f30c3cbe697e7d9a7d6d04c4b4a4e0f1845f850754434d0415ee9f3a7ec0856d679fe14679d1548d99385bb887a205fb0ab6d3b1f","ssdeep":"","tlshash":"594183e8eb38e993edadc67cdf19a475310e30ff909441a551d65b1e30646d33e0a650","size":2370,"data":"","first_seen":"2025-04-01T04:17:39.073172Z","last_seen":"2026-04-10T09:11:01.513661Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/login-CWDTIDNK-DhDUYE4b.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"baa5f0f7116deb709bd4b3a54c31eaff","sha1":"10c4efb11b9c1bcdd87aca0c0443f636c8d29b39","sha256":"63a8daf7039c537fe8d7ff88c50a6b8022e74f447d5df3ffcd6a515723252c33","sha512":"8d534b9541eb5d33576b4a5a2dbd28aadc57c01fc91ea3644bcfb13ad76470288c9ac8228a1fc8d6f30ca5873abb0c3b20136d5377bdb9923c3ff6665542b4bc","ssdeep":"192:dyAYirZ2ixxPjwzSFW5xrsRo3/58dmho4x7MV:EiN2Qjw+FWjARaidSpx7MV","tlshash":"261283ea5768627ed89bce6cdf668840130d70fd35b8c8e49a9ecf686057c89fd87010","size":9275,"data":"","first_seen":"2024-12-25T05:30:42.593071Z","last_seen":"2026-05-20T16:17:57.645038Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/page-meta.component-CRUC77sT.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"3d9812f9914e954f5ccd021a8dd4255c","sha1":"f6a397af2900a8933a65b8233db006d5c806f3dd","sha256":"e35ebeca2eda50c4f5894c03217e7f8bfbe0c0a1640480eec6ec34992b92adee","sha512":"e38cf96ae5765c7116eeb9477189c8a6015f38b2eb2d4e6009df0ba8f46b13fee98aabc3af86285a34d1fdc9763e0757dd18af465afbf140970865366aee94cb","ssdeep":"","tlshash":"0b014969a510685b1766ce011d5af24db17687bfc038c9a1b1a448390ff1fe7c07277d","size":803,"data":"","first_seen":"2026-01-14T14:06:39.46073Z","last_seen":"2026-02-05T00:02:23.611711Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/chunk-EPOLDU6W-DGaTw-IN.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"c6abfd9f96d5722cdb6157b22e513600","sha1":"67ca400bde56b3d399c8f9cdd1d303ecd24b5111","sha256":"5918ef25bf99e2b2850ab7532eebabdc1df17a7e0d1bcb041a2f3f5ba6a02fad","sha512":"273eac63aa5f47dec6979994ad74e3d461e96ca383d190cf521500d729b39b45d2da1f6a1a21a56a8debae5f7ee7712c9891df97d3a21c0e6f782173460a82fa","ssdeep":"1536:YZe4IJi0G4pPj0hsIkZxr5bRRvMViduOZgVI/rYWYYKyWXML:Ge4IoMaUZxr/RvMVid1GVI/rYWYYLW6","tlshash":"63c33bf9729270794bef13f180bb0015b3b92ca9246d8015b2acc99e35b5c4c967bf79","size":125122,"data":"","first_seen":"2026-01-14T14:06:39.446125Z","last_seen":"2026-02-05T00:02:23.601915Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/user.context-Cpjw0NH7.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"56e6c445b75ce1de2ab55147eeaefa07","sha1":"b568d4cf801a8548fae32bb4b4a2029391d1b466","sha256":"b9e495a35a7a9c2a7b0806ea33a1a19ba8654b09b0dedd03f56a075996b8df37","sha512":"42db848fedc0f6ad3441206bf8c50c1219be7b7a6cd8bc6d2bb36276e3058791d569866784041f84c9c8a85b6ec3c79654633136b28a3f627a1b0625a901b6d5","ssdeep":"384:wPQJMJF7sMqTKP/bSZu/dcLgl1lkkObqtrC8CmUZr8sEo2M48/DFYREV7J/RC5AU:wPQJMJFITKP/b24dcC1lkMtrC8CBl8uM","tlshash":"5bb2f75831d9e0b142e750a0947f620bf17819a0e05ca4a4e2aafdf439f8d97817bf36","size":23804,"data":"","first_seen":"2026-01-14T14:06:39.514611Z","last_seen":"2026-02-05T00:02:23.65945Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/root-Cd8QJFwr.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"f0f209f9bdb7a19a5c1a8a2dd508bec2","sha1":"421e15bfb12b0f7d6cd91e9fd82f41b551511581","sha256":"455682f4efd3a05b12ee968f4e7068fda958e2009df32403910cfa455b44509d","sha512":"acbc180b34c3b317f2861305bb8ee03396118e501f092ce45db6cccb54a55ec0e7ad5edce000b6a196b7c3ec171ea0423247750f2993f8ec11e7ea1a160f75fb","ssdeep":"49152:Z5XlKsKE9zVBfYec6ERH7u+vZ/WjkFqsxJRxsGT5T7XfJASoEsS1RwCRbOnCF4en:Z5pzoVZzxLJy7UVyLSDm6I10N","tlshash":"dd066d8073a6b07243d764e454370006f239a955704984acfeecdbf77ea948a867bf39","size":3690885,"data":"","first_seen":"2026-01-30T19:04:09.960353Z","last_seen":"2026-01-31T07:12:50.458633Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/trustWallet-E2GVGE4U-CcH50yxW.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a25b589fc633676b9a58fa384f2d0334","sha1":"119f38e7d9e19f351e022c5fa0f537f15ea3f933","sha256":"7edbc680126336b8db68846c0b688c957b60afd953859b06ca9dfd6a74a54f02","sha512":"ad917ac1bc65cbd0d55a05d5e39241f3badda088e0a56bf1d332a82c1df6d46e706c54bf3f9ddf22c75c3e754a33d6c3c03b2e6138720a09e85e0ce96cd9dc9b","ssdeep":"","tlshash":"3c01c0dbdb29dc77c85f83bced08a4a3521876db60c8436ee6554f1f25a808b1c0db60","size":760,"data":"","first_seen":"2025-06-03T09:03:10.609568Z","last_seen":"2026-04-17T09:09:52.485468Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-LBSJK40LXZ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d30c0f5310d48359b4adfef2c3f27060","sha1":"263f1ecb5e2d170a931629bc0ad951d96411f0d5","sha256":"77f75e85bcbccc294c75d09f5bfb68e88770ea814b361a84d9e55c08bb46f87e","sha512":"77b10ed48f63ef9eee44d76a073188b0225ebc3a0eb670e52762757837896a0175eec55cf74bf0e7ba9dfa0b14694490f435cf50447666fb6069e8422eb2cf36","ssdeep":"6144:vTa2dvzR1I8aoCsx4V/Gu+rPuz6h8ZSlTpiRpyM3wISktcXId:mUv1i8aoCsx2/Gu+yz6h833w+d","tlshash":"7e941ace73d674269396e478503f018ba57b29a2f44dc89af189cce41e34a9a4137f7c","size":436168,"data":"","first_seen":"2026-01-30T19:04:09.881355Z","last_seen":"2026-01-31T07:12:50.350697Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4533235bc340f56829dea0a7d50f01e1","sha1":"57e36d2d5ea0be6ffc8e6001b28f5b4f3b865a43","sha256":"a7b184efc6db3070eb138216ce988c4adb40b13a54bbbc308b9ff0be71f9e0eb","sha512":"dd0bfc5260b16d9a9b387ef134ba454aa5ed7636fab9b79e5034e229418ca5f0e6fd99dca3c881fa091df55204dfaf7e77e4526050a60e8110ed49b41ea4e831","ssdeep":"","tlshash":"1c60000000c000ff0000f0c03ccf0c000c0cf000300c00000003c3000000000030300c","size":16,"data":"","first_seen":"2023-03-08T20:20:25Z","last_seen":"2026-05-30T21:47:24.204019Z","times_seen":23124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/magna-decimal-CGNfJiea.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"afd2475ce68b29ee23de7afa5ac6589c","sha1":"cb9d723e3b31fba7e3997f22395c5e03722bbb91","sha256":"b0a3a3a26b8ae838e55c6bd74555a177c829958f42f5b8fa0456931a64bc6df9","sha512":"1a9295e6e5a086ef4df8b740e23631b281240ca411d66f74fbd4e4e3bfb3b494ab4166ed67767956f3a2cedd62066bd217c1d777eae1526c43957f0975ae7aa2","ssdeep":"768:G6sjMlJ+Yo/2vqciEry53DiyfrgxlNTQamsZ:G6scMJ2vqVNE8rk1L","tlshash":"27e2c6e972a1f18663e734f201fb9406f23a7d44990d05b1f20886f93cb1686b36af75","size":31987,"data":"","first_seen":"2026-01-14T14:06:39.506799Z","last_seen":"2026-02-05T00:02:23.560291Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/vstack-BSrJ3UrJ.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"6567d103159cb41aa99592d17d711d7c","sha1":"54ee8a139b74f9de41a70b6d34c429f533e3b438","sha256":"049eee56858a0fd2ac719573e418576cfeb9dca4fdefd2f5d5a0a7d9fbf6b7be","sha512":"c3ef5287e4d9192c6a9e4c18c66cbb1c93450e0f3379f6a46e23da268a548ef7511fa872ff4bb22c8577c2a36dd7db39f30505fab1fd85557c34541b3e83a132","ssdeep":"768:DsHWUpDTugn4fMqCgSknl5Qn1upQLpOFZDPTKyPZmZA5J4hdrW:Q2bC1YczpOb2Z0J4i","tlshash":"e0e2f9a132541408f6afc7aef8c61f48c13916335413fccab67c8aa8d1517b91b6bb6d","size":32755,"data":"","first_seen":"2026-01-14T14:06:39.505387Z","last_seen":"2026-02-05T00:02:23.617042Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/proxy-BxNtYgHi.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"a188ac03d4411288331db31b156b9740","sha1":"903b0d6abca85e595c5a77140ffb19f5c070a844","sha256":"516b51b06f3ce73f9cb3f0f783c4c38831cee5663854b3b620e2f830ac1fea4f","sha512":"06d0c03e5abfe1a5e7c0c3c1a4b89160139debeb6b329d8e7e313a846474c77172d38033de7b9899948be555ad3ce8b4e7605de2f30cc5c75c2a0bc823971275","ssdeep":"1536:t+2TsGd6fOmBgDHte9/Q3t/v5ScoeyUK8wlZWJDFV8lovCt5VyF6Puktr/:t+2Tdd6WFteRQ3t/vscoJUxwlMIwqr/","tlshash":"44b307c572917561d3d685e9c0bf0b41b73718983009c0bcb63dadcb6d2240aa6bbb7e","size":115479,"data":"","first_seen":"2026-01-14T14:06:39.428949Z","last_seen":"2026-02-05T00:02:23.57415Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/coinbaseWallet-WWX6LF36-BMRj6mTC.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"694e1f6dd72af86c8c477f9608975a74","sha1":"3b0def5280cfb0e2cb76b3a039bf7e26986a7f92","sha256":"4a238a92bd23caf58037a8423adebebfc6a84b6762f033bc7e6ebf8741ca1e41","sha512":"7290b10e41ef6e0d7bc27cb24d75327c1493f0d2ae961fb89bf1bb387659a9bc14681b66dbe754722c5f2ea5a98b6cc76c2ca9cde9406de0062262f6f056003f","ssdeep":"","tlshash":"64f022a1a2dcb411186ad336513c5ad4bcd7128cae2e621c32801f1af82009a98c8a79","size":598,"data":"","first_seen":"2024-12-25T05:30:42.515918Z","last_seen":"2026-05-17T17:52:49.746342Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/roninWallet-SAB5ESVK-fW2QoTxP.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"68f97b0ae9e3156ac22560e59bd69d4e","sha1":"9809da0a9ae9c30ab42202c55b07eef3acd8d1fb","sha256":"8959d6d3640f29ffad2fcde3305042bd42df292e2059935d19d5227dbe809290","sha512":"d9d8677af4e67b9e869da5a01e783a25305798a87461bc1915b6f9c200ec06c5b44b79758c89ecfbc6324647893faa387e3f594b71729f0d7beb1a457370cf2b","ssdeep":"","tlshash":"36119ce5910889aec51fc22cdd109462231f24e67acac697a7fd4f393147443fc07a59","size":975,"data":"","first_seen":"2025-12-31T12:33:59.906467Z","last_seen":"2026-04-08T12:13:16.914673Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/config-uZ4fvpPM.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"67213f0aa557fdfcd5241078979fe495","sha1":"8a47398f33b1602977d1ebcd3dde8dc60a5efb43","sha256":"491a084aad0861ecbd5d0109d5e44769497fe0b5854e77a25f289b78357a29cf","sha512":"f0de27ceb4f2dcaac56b27cc1893b6206b7d970708b984665befca71efdd1e36d966aa60e0f6e1b44b45b566cfff06740f842bff53eae6ce7365824e47d4828b","ssdeep":"768:vzlHMGUyZBymwaJ2+d3EfZ56gNjwWghktt55HRTrhD1841Mzq2yS6Iv4Gx5U4KMh:vzlHfL2p6lhi9Wq2tHhC9V48pc","tlshash":"6c23a7ca7186b2162be2d1a4483f4015e2396954780e846cb5bdddd3bd72c8ee17bf38","size":47282,"data":"","first_seen":"2026-01-14T14:06:39.497988Z","last_seen":"2026-02-05T00:02:23.640577Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/ledgerWallet-KZKJ5Q2S-DdZeAsds.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"717b03058e9eccce29ae3a8f15544b1a","sha1":"c2b626e64489c6f9084d3bad64c5fb73df88d797","sha256":"59642a8a9d30d9684f1aa6b4c8ca8886bf9a53491a3e238ad3aadac36f1917d9","sha512":"d339c57445af528cd655bad29dc18dbbf61ef6c5a8f6541b4735e8ef7ed872dbf173d22e3c67f976eb78bd25eb8b30a40b2613698d6ef9f24a485a61c7e9f6ee","ssdeep":"","tlshash":"b7f0abe64b508d00874a03b1cabc94c8313775eea758239cb2720619bd420afb90cbb0","size":443,"data":"","first_seen":"2025-09-05T14:38:20.777264Z","last_seen":"2026-04-17T09:09:52.483064Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"register-espresso.com/assets/eleven.js","fqdn":"register-espresso.com","domain":"register-espresso.com","tld":"com"},"ip":{"addr":"172.67.166.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://register-espresso.com/","date":"2026-01-31T03:47:52.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-espresso.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 01:28:13 GMT","end":"Fri, 01 May 2026 02:25:51 GMT"},"fingerprint":{"sha1":"03:6A:B6:2C:F6:3D:23:BD:21:F9:30:67:8E:82:91:15:5F:A5:74:27","sha256":"7D:1A:65:AE:C3:75:13:BE:9A:4D:B6:CD:33:58:01:FF:DC:BE:E8:EA:3A:CA:FB:D7:8C:B2:BB:2B:5E:02:04:ED"}}},"request":{"raw":"GET /assets/eleven.js HTTP/1.1\r\nHost: register-espresso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-espresso.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 31 Jan 2026 03:47:52 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Sat, 31 Jan 2026 02:26:31 GMT\r\netag: W/\"697d6857-36433e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2082\r\npriority: u=3,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xKEfbguGpI6tgt%2B5YR3qN%2FvaGB0Zyj5YNpRT2IG6ZwnZFNYmDIDPhjbos9%2FGW61YEw3Vi1gSe%2FWdAvrfO76IlDQcWTyz%2FGVIZTJ%2FGgba8UNnQXKU4Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c663aee594376ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3556158,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"e60d780300a74c70dc6418ea19873295","sha1":"74001d33824730e25d3d840e0c642f9f986015d7","sha256":"dcb99cd44bfd05f2cfc3c04527f35accfdd3df490666015cbafc125c4b368250","sha512":"617f21408d485ed842373a7c935208431b033f279973a23752599f44a0f4b4f1b125068a3ad244650a5c24d9859d2b9702998c1d415b43eb801bfd6d9b5b2ade","ssdeep":"24576:dmNHxkmMEWI2xMrvZKhch+k+ub6BqyxRz:dmNHKmME32xohKhcoGGBqyLz","tlshash":"a1254c9073a5b06243da14e4187b1006f279bc68744d80acf69cecfb7da9d84963bf79","first_seen":"2025-12-02T13:22:34.735267Z","last_seen":"2026-04-17T12:35:57.645555Z","times_seen":513,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/sound-button.component-DqN7VKJb.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:53.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/sound-button.component-DqN7VKJb.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/home.page-CVUoYbyJ.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 61813\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"sound-button.component-DqN7VKJb.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 31 Jan 2026 03:47:53 GMT\r\netag: \"e9dad0f26074ccd39ca69d70818b940d\"\r\nlast-modified: Fri, 30 Jan 2026 10:37:39 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::67d96-1769831273632-303149f4cc47\r\ncontent-length: 947\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2189,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (2188)","md5":"7bfe75236ff0c1135dee7963c01e15d7","sha1":"7dda9a80b1eddf4f81cf5916065009883ee2ed04","sha256":"cdb2474a889013e5a0b6638c62b3e7b6ef7a75a979643ed427adbb095458283b","sha512":"ecd42a553e011d043c6746ada325f7f664cc056f0bf6732161b31629b8ae7958309463ef0e4d322c935be9a3e458d3527c2829a2704b26de0bcef52604696b24","ssdeep":"","tlshash":"924174edc70035ac640e9b30fd177812b1be04fe8ba557d0818c653c6a368e3eb69ac5","first_seen":"2026-01-14T14:06:39.481157Z","last_seen":"2026-02-05T00:02:23.641485Z","times_seen":10,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/root-Cd8QJFwr.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:53.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/root-Cd8QJFwr.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-CUtwT3UT.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2082\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"root-Cd8QJFwr.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 31 Jan 2026 03:47:53 GMT\r\netag: \"894122e9d0fc0f4bf42bc5195e378c91\"\r\nlast-modified: Sat, 31 Jan 2026 03:13:10 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vf8k2-1769831273792-d5f7ba215f78\r\ncontent-length: 1284240\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3690885,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (34553)","md5":"f00c1c7268d36c0655a387768f21c01b","sha1":"ec4c0e3a292fb70171346a2b7b3c3caf12799f2e","sha256":"3b0b6ce9a83adf9ed7297be561c7d430dded2ef6078981093f44de6fc1c9ed31","sha512":"c10d89535da3fedf15b0ad7b8df218334694e43beff922bb7d9d595bef12ae8d34f49f7ab69fb9367530d6db5bdb51cde175be5826447c9a4841ffe37d5f4465","ssdeep":"24576:Z5XlKnsKE9zVkqfYec6ERH7u+vNa2/WjkFqsxJRxhU:Z5XlKsKE9zVBfYec6ERH7u+vZ/WjkFqd","tlshash":"5825398032e6b1b243c664d8547b0006f23dac51745840acf7add9f7bea69c991bbf39","first_seen":"2026-01-30T19:04:09.911724Z","last_seen":"2026-01-31T07:12:50.311981Z","times_seen":7,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-LBSJK40LXZ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:55.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:36:37 GMT","end":"Mon, 06 Apr 2026 08:36:36 GMT"},"fingerprint":{"sha1":"D1:4E:DB:C9:1C:90:74:26:D2:F3:40:74:02:DB:66:36:23:CB:45:12","sha256":"08:51:D4:42:81:8D:57:AC:83:18:86:85:25:AD:F1:2F:82:17:60:A4:FA:C6:D4:09:86:34:D3:30:65:78:09:B2"}}},"request":{"raw":"GET /gtag/js?id=G-LBSJK40LXZ HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 31 Jan 2026 03:47:55 GMT\r\nexpires: Sat, 31 Jan 2026 03:47:55 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 144834\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":436168,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"d30c0f5310d48359b4adfef2c3f27060","sha1":"263f1ecb5e2d170a931629bc0ad951d96411f0d5","sha256":"77f75e85bcbccc294c75d09f5bfb68e88770ea814b361a84d9e55c08bb46f87e","sha512":"77b10ed48f63ef9eee44d76a073188b0225ebc3a0eb670e52762757837896a0175eec55cf74bf0e7ba9dfa0b14694490f435cf50447666fb6069e8422eb2cf36","ssdeep":"6144:vTa2dvzR1I8aoCsx4V/Gu+rPuz6h8ZSlTpiRpyM3wISktcXId:mUv1i8aoCsx2/Gu+yz6h833w+d","tlshash":"7e941ace73d674269396e478503f018ba57b29a2f44dc89af189cce41e34a9a4137f7c","first_seen":"2026-01-30T19:04:09.881355Z","last_seen":"2026-01-31T07:12:50.350697Z","times_seen":3,"resource_available":true,"data":null}},"time_used":248,"timings":{"blocked":76,"dns":1,"connect":21,"send":0,"wait":37,"receive":58,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-espresso.com/settings.json","fqdn":"register-espresso.com","domain":"register-espresso.com","tld":"com"},"ip":{"addr":"172.67.166.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://register-espresso.com/","date":"2026-01-31T03:47:54.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-espresso.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 01:28:13 GMT","end":"Fri, 01 May 2026 02:25:51 GMT"},"fingerprint":{"sha1":"03:6A:B6:2C:F6:3D:23:BD:21:F9:30:67:8E:82:91:15:5F:A5:74:27","sha256":"7D:1A:65:AE:C3:75:13:BE:9A:4D:B6:CD:33:58:01:FF:DC:BE:E8:EA:3A:CA:FB:D7:8C:B2:BB:2B:5E:02:04:ED"}}},"request":{"raw":"GET /settings.json HTTP/1.1\r\nHost: register-espresso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://register-espresso.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 31 Jan 2026 03:47:54 GMT\r\ncontent-type: application/json\r\ncast-mode: default\r\nlast-modified: Sat, 31 Jan 2026 02:26:32 GMT\r\netag: W/\"697d6858-348\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2083\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YvayDbnpx50AlN5JZzzZkqI6oIvJ%2BWdL51DXCCmgqwngS%2FEVHQUXq1xl4u6Mb6QZe1sDnn4RA76tIknd6Re32dEsIsIJ5V%2FBfa4E9%2BS1pkqhCEAaIQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c663af75a5b76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":840,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e5a17c7f2213f5602e1d5a7e286f2540","sha1":"e1963dd69de8c8804ed692a681e0c07d6b0611fb","sha256":"a0379432881be9bd4087f2e67b2e4a19a12f36951baca5e8719f5c95fcfae054","sha512":"222f53e0095efcb7b39186f48aad1c537f773f57dc58bb5b0e8745b817510ec00e44273eb1c1680ce7c808a0800ba5e5cb020326230ff2b1e6e00db45c7c8293","ssdeep":"","tlshash":"1d014145ec21885be6cd0a28b58e520409017c6747547c406f2f501daf6eb6f4f727cd","first_seen":"2026-01-30T19:04:09.876261Z","last_seen":"2026-02-05T00:02:23.622207Z","times_seen":10,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/trustWallet-E2GVGE4U-CcH50yxW.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:55.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/trustWallet-E2GVGE4U-CcH50yxW.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-Cd8QJFwr.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 61811\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"trustWallet-E2GVGE4U-CcH50yxW.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 31 Jan 2026 03:47:55 GMT\r\netag: \"a25b589fc633676b9a58fa384f2d0334\"\r\nlast-modified: Fri, 30 Jan 2026 10:37:44 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::d6lnf-1769831275669-263e455edbc1\r\ncontent-length: 760\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":760,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (759)","md5":"a25b589fc633676b9a58fa384f2d0334","sha1":"119f38e7d9e19f351e022c5fa0f537f15ea3f933","sha256":"7edbc680126336b8db68846c0b688c957b60afd953859b06ca9dfd6a74a54f02","sha512":"ad917ac1bc65cbd0d55a05d5e39241f3badda088e0a56bf1d332a82c1df6d46e706c54bf3f9ddf22c75c3e754a33d6c3c03b2e6138720a09e85e0ce96cd9dc9b","ssdeep":"","tlshash":"3c01c0dbdb29dc77c85f83bced08a4a3521876db60c8436ee6554f1f25a808b1c0db60","first_seen":"2025-06-03T09:03:10.609568Z","last_seen":"2026-04-17T09:09:52.485468Z","times_seen":36,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/rabbyWallet-FLVUU35F-BZrp4syk.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:55.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/rabbyWallet-FLVUU35F-BZrp4syk.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-Cd8QJFwr.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2082\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"rabbyWallet-FLVUU35F-BZrp4syk.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 31 Jan 2026 03:47:55 GMT\r\netag: \"7529aec7bfab7dad9c01256a12151e9e\"\r\nlast-modified: Sat, 31 Jan 2026 03:13:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::67d96-1769831275672-1cc6ea76f292\r\ncontent-length: 1125\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2370,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2369)","md5":"174b08de1e202256a72f7663e79b8461","sha1":"602e294d94f061211502895741144c4320248855","sha256":"0767c9b588d0ab9b532619b26d91fe6e5163f541bcc2d6a9e9adae18f670dc8d","sha512":"640ce4e8d836b4ea90ace61f30c3cbe697e7d9a7d6d04c4b4a4e0f1845f850754434d0415ee9f3a7ec0856d679fe14679d1548d99385bb887a205fb0ab6d3b1f","ssdeep":"","tlshash":"594183e8eb38e993edadc67cdf19a475310e30ff909441a551d65b1e30646d33e0a650","first_seen":"2025-04-01T04:17:39.073172Z","last_seen":"2026-04-10T09:11:01.513661Z","times_seen":32,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/mewWallet-6V4UZOQC-B0qJRky8.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:55.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/mewWallet-6V4UZOQC-B0qJRky8.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-Cd8QJFwr.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"mewWallet-6V4UZOQC-B0qJRky8.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 31 Jan 2026 03:47:55 GMT\r\netag: \"c9c90c8982869b7541a9ce55464ff15c\"\r\nlast-modified: Sat, 31 Jan 2026 03:47:55 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::zjtgd-1769831275675-ffd12e58ae0f\r\ncontent-length: 4231\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12987,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (12986)","md5":"0ba9b4ec5d6e0138fdc7dcea74d719b1","sha1":"7e9a5254388ae9b05ccab215bcadfda7cbb92178","sha256":"cabb87e570e8e5c15a34eeb5c010a7651a3e878e76568fa8f274903a86c23047","sha512":"8bbc357ee098b1666e94e09a19e0b9711acc240227e819daa87a564a6a0ff456a338c4b61d83f68344063ce6c0ac09d7ef5e9ccb4c711aefc103562691a600de","ssdeep":"192:vSL2IcUA1oFBu/kyilFZl1s7tWld8YgsII9P3cO6+fzRXygn3IJigNnvMqDCdFIZ:vSL2IcUm/XwZvw0IGrCgivRhilI","tlshash":"9742c5d0332c53f9f507c3a9a7aaa0569a7c30da3daf5158f64f05256b144fa883f843","first_seen":"2025-12-31T12:33:59.905722Z","last_seen":"2026-04-08T12:13:16.929881Z","times_seen":17,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Pixelify+Sans:wght@400..700\u0026family=Press+Start+2P\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://register-espresso.com/","date":"2026-01-31T03:47:53.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:56 GMT","end":"Mon, 06 Apr 2026 08:37:55 GMT"},"fingerprint":{"sha1":"DE:3B:B4:94:98:33:3A:CB:2A:A9:96:A1:CB:19:8C:84:B5:8D:23:E9","sha256":"D0:A1:5A:83:80:77:19:74:AA:CB:27:69:4A:C7:2C:F0:DA:06:9C:79:1E:07:77:9A:4D:7B:5D:AA:A2:D2:D4:E9"}}},"request":{"raw":"GET /css2?family=Pixelify+Sans:wght@400..700\u0026family=Press+Start+2P\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-espresso.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 31 Jan 2026 03:47:53 GMT\r\ndate: Sat, 31 Jan 2026 03:47:53 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3080,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"d4e6d79c776bf8fc41c61de47e83d957","sha1":"8bc1ade7d4f4e91f3caa6d459dc1c6e3c0b05528","sha256":"fdaed61fd01a57851820b356beb641c643c8b4e699faddae0b72fa64c5d20bad","sha512":"7044230275f8f8d2e4725a69add094387aea08d50c588f7026b9c1aa00f4e576abae59e8bc05b3eb58f8601bcdee55a9ca9508200e51f6121b8a577bac04c82b","ssdeep":"","tlshash":"1851ddd5052bd040eb931cc233cf7e36ee0f21266495d8699efe18d4acbad664351b4e","first_seen":"2025-09-17T03:18:47.287526Z","last_seen":"2026-05-29T14:23:07.166462Z","times_seen":744,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":136,"dns":1,"connect":9,"send":0,"wait":19,"receive":0,"ssl":137},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us.i.posthog.com/e/?ip=0\u0026_=1769831275577\u0026ver=1.332.0\u0026compression=gzip-js","fqdn":"us.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"18.205.167.128","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:55.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6A:93:A0:4B:D8:27:D0:2A:1E:35:71:6C:A2:1C:2A:2C:2E:E1:A7:D7","sha256":"2A:1F:69:7F:28:B0:DA:BD:59:C5:0F:27:B3:35:6D:E9:5B:8B:A2:4A:F8:89:F1:F0:10:CD:CD:8F:62:8E:07:E6"}}},"request":{"raw":"POST /e/?ip=0\u0026_=1769831275577\u0026ver=1.332.0\u0026compression=gzip-js HTTP/1.1\r\nHost: us.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim.espresso.foundation/\r\ncontent-type: text/plain\r\nContent-Length: 843\r\nOrigin: https://claim.espresso.foundation\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 31 Jan 2026 03:47:55 GMT\r\ncontent-type: application/json\r\ncontent-length: 15\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: https://claim.espresso.foundation\r\naccess-control-allow-credentials: true\r\nx-envoy-upstream-service-time: 69\r\nserver: envoy\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c86a47ac0d792e37182689c73fcbf6ad","sha1":"8fd92e4671341e79f0a3529ac5e9d59d38db9e78","sha256":"0c40bafcfdc8adc6db63a6a5bfdb3dd5201798e6163fc674dc2fcbdb2a4134f1","sha512":"827cafe34edc64ac15f9bb3d269d338f8161a08d174071ed415b8a9e78d0672327e09034445292f90b81f5a063c8606d36ee66b20e0fff0446130303d598a8d3","ssdeep":"","tlshash":"1b600000000000030fc00c00000cc03c3ff30fc0003f00c0030fc0300c030c0c00c000","first_seen":"2023-04-06T21:35:05Z","last_seen":"2026-05-30T22:10:46.154377Z","times_seen":33229,"resource_available":false,"data":null}},"time_used":555,"timings":{"blocked":194,"dns":2,"connect":92,"send":0,"wait":166,"receive":0,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/roninWallet-SAB5ESVK-fW2QoTxP.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:55.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/roninWallet-SAB5ESVK-fW2QoTxP.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-Cd8QJFwr.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 61811\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"roninWallet-SAB5ESVK-fW2QoTxP.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 31 Jan 2026 03:47:55 GMT\r\netag: \"68f97b0ae9e3156ac22560e59bd69d4e\"\r\nlast-modified: Fri, 30 Jan 2026 10:37:44 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::pjwpp-1769831275675-1dc9b2ef70fd\r\ncontent-length: 975\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":975,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (974)","md5":"68f97b0ae9e3156ac22560e59bd69d4e","sha1":"9809da0a9ae9c30ab42202c55b07eef3acd8d1fb","sha256":"8959d6d3640f29ffad2fcde3305042bd42df292e2059935d19d5227dbe809290","sha512":"d9d8677af4e67b9e869da5a01e783a25305798a87461bc1915b6f9c200ec06c5b44b79758c89ecfbc6324647893faa387e3f594b71729f0d7beb1a457370cf2b","ssdeep":"","tlshash":"36119ce5910889aec51fc22cdd109462231f24e67acac697a7fd4f393147443fc07a59","first_seen":"2025-12-31T12:33:59.906467Z","last_seen":"2026-04-08T12:13:16.914673Z","times_seen":17,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/bitgetWallet-CLYTW54T-Wwn2QYd0.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:55.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/bitgetWallet-CLYTW54T-Wwn2QYd0.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-Cd8QJFwr.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 61811\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"bitgetWallet-CLYTW54T-Wwn2QYd0.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 31 Jan 2026 03:47:55 GMT\r\netag: \"0d3fcd1494db0e6f08944e18e1dab82e\"\r\nlast-modified: Fri, 30 Jan 2026 10:37:44 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::67d96-1769831275675-3e0d97424a9c\r\ncontent-length: 1320\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3493,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3492)","md5":"c209ae7e667ef953a67fd9e02e026122","sha1":"263c559b9b3d0aa0da8a7ea36790983dc7a0821f","sha256":"1f5ce5ae5b81eeeb68a411dc27cbdeadab04eecff9fca4447d20755e6b770e46","sha512":"6daddffb9e9d093649df98bcb5d7737e9fa7687dac1308a4710689c88076d5dc81b7de5bbfe7abf7a3910d9f53c331207b153b9f582c2eafa4717e553cc07f58","ssdeep":"","tlshash":"2571a791d7f5e09f6b1803b6ff9a14e79432f4e641140b9de55e3361200ee23e91f554","first_seen":"2025-04-09T07:08:13.379631Z","last_seen":"2026-05-20T16:17:57.641698Z","times_seen":32,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/injectedWallet-H7LYKTQS-CAHJNGc-.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:55.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/injectedWallet-H7LYKTQS-CAHJNGc-.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-Cd8QJFwr.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"injectedWallet-H7LYKTQS-CAHJNGc-.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 31 Jan 2026 03:47:55 GMT\r\netag: \"d15e27dd16cca201d14667c3af8cb320\"\r\nlast-modified: Sat, 31 Jan 2026 03:47:55 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::smbck-1769831275678-55b2a2a3a90f\r\ncontent-length: 685\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":685,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (684)","md5":"d15e27dd16cca201d14667c3af8cb320","sha1":"a2a412c0b28c967d51856bd18a3f5b1a039cbf94","sha256":"db58171c5bda95e8016d892b4692c77c4f7644fe1fd3ee9b6ac1f561e867aec0","sha512":"20a745ee7cfac75a1160058128403ca4639ca13460191bceb426a295e6ad64e72d63343c73565dff68a719fb7590fe12853a1b213c9a1e0d33a24d2e0937225a","ssdeep":"","tlshash":"fc01f476d22cd45dc91dc36cfd6e68f3234961e6611f4328755c0f2ea2194cbec1e264","first_seen":"2025-04-01T04:17:39.059491Z","last_seen":"2026-05-20T16:17:57.675356Z","times_seen":35,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us.i.posthog.com/i/v0/e/?ip=0\u0026_=1769831289410\u0026ver=1.332.0\u0026compression=gzip-js","fqdn":"us.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"18.205.167.128","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:48:09.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6A:93:A0:4B:D8:27:D0:2A:1E:35:71:6C:A2:1C:2A:2C:2E:E1:A7:D7","sha256":"2A:1F:69:7F:28:B0:DA:BD:59:C5:0F:27:B3:35:6D:E9:5B:8B:A2:4A:F8:89:F1:F0:10:CD:CD:8F:62:8E:07:E6"}}},"request":{"raw":"POST /i/v0/e/?ip=0\u0026_=1769831289410\u0026ver=1.332.0\u0026compression=gzip-js HTTP/1.1\r\nHost: us.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim.espresso.foundation/\r\ncontent-type: text/plain\r\nContent-Length: 1112\r\nOrigin: https://claim.espresso.foundation\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 31 Jan 2026 03:48:09 GMT\r\ncontent-type: application/json\r\ncontent-length: 15\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: https://claim.espresso.foundation\r\naccess-control-allow-credentials: true\r\nx-envoy-upstream-service-time: 30\r\nserver: envoy\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c86a47ac0d792e37182689c73fcbf6ad","sha1":"8fd92e4671341e79f0a3529ac5e9d59d38db9e78","sha256":"0c40bafcfdc8adc6db63a6a5bfdb3dd5201798e6163fc674dc2fcbdb2a4134f1","sha512":"827cafe34edc64ac15f9bb3d269d338f8161a08d174071ed415b8a9e78d0672327e09034445292f90b81f5a063c8606d36ee66b20e0fff0446130303d598a8d3","ssdeep":"","tlshash":"1b600000000000030fc00c00000cc03c3ff30fc0003f00c0030fc0300c030c0c00c000","first_seen":"2023-04-06T21:35:05Z","last_seen":"2026-05-30T22:10:46.154377Z","times_seen":33229,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/config-uZ4fvpPM.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:53.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/config-uZ4fvpPM.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/home.page-CVUoYbyJ.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 6616\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"config-uZ4fvpPM.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 31 Jan 2026 03:47:53 GMT\r\netag: \"dc454468c652df3fd023455b21ef7b58\"\r\nlast-modified: Sat, 31 Jan 2026 01:57:37 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5l5v2-1769831273638-f8230bf06776\r\ncontent-length: 16775\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":47282,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (47281)","md5":"67213f0aa557fdfcd5241078979fe495","sha1":"8a47398f33b1602977d1ebcd3dde8dc60a5efb43","sha256":"491a084aad0861ecbd5d0109d5e44769497fe0b5854e77a25f289b78357a29cf","sha512":"f0de27ceb4f2dcaac56b27cc1893b6206b7d970708b984665befca71efdd1e36d966aa60e0f6e1b44b45b566cfff06740f842bff53eae6ce7365824e47d4828b","ssdeep":"768:vzlHMGUyZBymwaJ2+d3EfZ56gNjwWghktt55HRTrhD1841Mzq2yS6Iv4Gx5U4KMh:vzlHfL2p6lhi9Wq2tHhC9V48pc","tlshash":"6c23a7ca7186b2162be2d1a4483f4015e2396954780e846cb5bdddd3bd72c8ee17bf38","first_seen":"2026-01-14T14:06:39.497988Z","last_seen":"2026-02-05T00:02:23.640577Z","times_seen":10,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/user.context-Cpjw0NH7.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:53.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/user.context-Cpjw0NH7.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/home.page-CVUoYbyJ.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2082\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"user.context-Cpjw0NH7.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 31 Jan 2026 03:47:53 GMT\r\netag: \"543b1b44a035ee51f97b8ad64d6cc82a\"\r\nlast-modified: Sat, 31 Jan 2026 03:13:10 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::2xj4n-1769831273634-eb2bd6a2e855\r\ncontent-length: 8556\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":23804,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12049)","md5":"56e6c445b75ce1de2ab55147eeaefa07","sha1":"b568d4cf801a8548fae32bb4b4a2029391d1b466","sha256":"b9e495a35a7a9c2a7b0806ea33a1a19ba8654b09b0dedd03f56a075996b8df37","sha512":"42db848fedc0f6ad3441206bf8c50c1219be7b7a6cd8bc6d2bb36276e3058791d569866784041f84c9c8a85b6ec3c79654633136b28a3f627a1b0625a901b6d5","ssdeep":"384:wPQJMJF7sMqTKP/bSZu/dcLgl1lkkObqtrC8CmUZr8sEo2M48/DFYREV7J/RC5AU:wPQJMJFITKP/b24dcC1lkMtrC8CBl8uM","tlshash":"5bb2f75831d9e0b142e750a0947f620bf17819a0e05ca4a4e2aafdf439f8d97817bf36","first_seen":"2026-01-14T14:06:39.514611Z","last_seen":"2026-02-05T00:02:23.65945Z","times_seen":10,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/vstack-BSrJ3UrJ.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:53.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/vstack-BSrJ3UrJ.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/home.page-CVUoYbyJ.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 61813\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"vstack-BSrJ3UrJ.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 31 Jan 2026 03:47:53 GMT\r\netag: \"6a2f9c4d534af73c81c7b38ccfa6d8a7\"\r\nlast-modified: Fri, 30 Jan 2026 10:37:39 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::67d96-1769831273642-96ff21e6c538\r\ncontent-length: 10826\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32755,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32754)","md5":"6567d103159cb41aa99592d17d711d7c","sha1":"54ee8a139b74f9de41a70b6d34c429f533e3b438","sha256":"049eee56858a0fd2ac719573e418576cfeb9dca4fdefd2f5d5a0a7d9fbf6b7be","sha512":"c3ef5287e4d9192c6a9e4c18c66cbb1c93450e0f3379f6a46e23da268a548ef7511fa872ff4bb22c8577c2a36dd7db39f30505fab1fd85557c34541b3e83a132","ssdeep":"768:DsHWUpDTugn4fMqCgSknl5Qn1upQLpOFZDPTKyPZmZA5J4hdrW:Q2bC1YczpOb2Z0J4i","tlshash":"e0e2f9a132541408f6afc7aef8c61f48c13916335413fccab67c8aa8d1517b91b6bb6d","first_seen":"2026-01-14T14:06:39.505387Z","last_seen":"2026-02-05T00:02:23.617042Z","times_seen":10,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/base-modal.component-Bi8UGgvO.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:53.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/base-modal.component-Bi8UGgvO.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/home.page-CVUoYbyJ.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 61850\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"base-modal.component-Bi8UGgvO.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 31 Jan 2026 03:47:53 GMT\r\netag: \"bbb160e3aa46b1045b6e03eff39ddf62\"\r\nlast-modified: Fri, 30 Jan 2026 10:37:02 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::l4nvj-1769831273639-c7ff20375a0d\r\ncontent-length: 3125\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":8038,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (8037)","md5":"982ddb00b60174b4e3698843f015975d","sha1":"5e8bfe1b08679ddfb0569c69b716e2328b2c3ef4","sha256":"3ec44c68631e463d7eab9ab1b5099c41ab17f81ba4d2ba2882dbf6ca85fbc3ff","sha512":"36f490573051687cad3650c09c1d2bea019344d354a57e30fa04db1a0eade64bcd93b8d3f90f54a717dfcec5aa0a063dda8ac3aafb00bcfba3d67dc74ae8a075","ssdeep":"192:8759e1zs+Is14LloIFe58zGmfpWgY4CRE/Yk:GW1zs+Is16oIw52Gmfp7","tlshash":"55f1c91da34ab568fc2fc589e0fdd60aa56f103cf2360991b2bd952e01d4e52722bfd4","first_seen":"2026-01-30T19:04:09.852009Z","last_seen":"2026-02-05T00:02:23.633252Z","times_seen":9,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-espresso.com/assets/secure.php?req=ping","fqdn":"register-espresso.com","domain":"register-espresso.com","tld":"com"},"ip":{"addr":"172.67.166.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://register-espresso.com/","date":"2026-01-31T03:47:54.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-espresso.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 01:28:13 GMT","end":"Fri, 01 May 2026 02:25:51 GMT"},"fingerprint":{"sha1":"03:6A:B6:2C:F6:3D:23:BD:21:F9:30:67:8E:82:91:15:5F:A5:74:27","sha256":"7D:1A:65:AE:C3:75:13:BE:9A:4D:B6:CD:33:58:01:FF:DC:BE:E8:EA:3A:CA:FB:D7:8C:B2:BB:2B:5E:02:04:ED"}}},"request":{"raw":"GET /assets/secure.php?req=ping HTTP/1.1\r\nHost: register-espresso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://register-espresso.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 31 Jan 2026 03:47:54 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 13263\r\ncast-mode: default\r\nlast-modified: Sat, 31 Jan 2026 02:26:32 GMT\r\netag: \"697d6858-33cf\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 2082\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Tuz4Kc5pmRXAO6xqKddwgBXMicibVbfFjJ9J0xu3Y4cgsKgTm3teYvjpC%2Fc52tkn%2BrqhK3UQsumduLfri5GtV%2FDAx04R2AenIk0CnOctHTWxlRJWw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c663af75a5a76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13263,"size_decoded":0,"mime_type":"application/octet-stream","magic":"PHP script, ASCII text, with very long lines (13257)","md5":"1c925167dc939ba7920a7b978a42b65d","sha1":"9b4d27462d3d897552a996e85fde3fbf24283df2","sha256":"0da07b458e6aeb7e396730ce0272d86319a458189810252b1a99ca689f765dac","sha512":"f09322f748a40ff5aa579399a7a7fef8eeca5c81c193eab15cea18d0c3ae30ad34719cd9aad64674575ef05cb185087dd43ab9a9a38340ce1295255a34188101","ssdeep":"384:CLpx+D3MQZuRAxe+0A0C2A6VR0NBfAqRq:CLpxQMnRQt0C2A6VR0NdAqRq","tlshash":"735230702582559b789e0dc7afd32a8e71b042e74e0f7a8f8e3839d9249c259c14dfe4","first_seen":"2025-11-08T08:53:34.56198Z","last_seen":"2026-05-29T14:23:07.170517Z","times_seen":107,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-01-31","alert":"PHP webshell obfuscated by encoding of mixed hex and dec","trigger":"register-espresso.com/assets/secure.php?req=ping","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/04/18","description":"PHP webshell obfuscated by encoding of mixed hex and dec","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_obfuscated_encoding_mixed_dec_and_hex"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-01-31","alert":"Known PHP Webshells which contain unique strings, lousy rule for low hanging fruits. Most are catched by other rules in here but maybe these catch different versions.","trigger":"register-espresso.com/assets/secure.php?req=ping","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/01/09","description":"Known PHP Webshells which contain unique strings, lousy rule for low hanging fruits. Most are catched by other rules in here but maybe these catch different versions.","hash":"7b6471774d14510cf6fa312a496eed72b614f6fc","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_by_string_known_webshell"}}],"urlquery":null}},{"url":{"schema":"https","addr":"register-espresso.com/","fqdn":"register-espresso.com","domain":"register-espresso.com","tld":"com"},"ip":{"addr":"172.67.166.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-31T03:47:52.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-espresso.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 01:28:13 GMT","end":"Fri, 01 May 2026 02:25:51 GMT"},"fingerprint":{"sha1":"03:6A:B6:2C:F6:3D:23:BD:21:F9:30:67:8E:82:91:15:5F:A5:74:27","sha256":"7D:1A:65:AE:C3:75:13:BE:9A:4D:B6:CD:33:58:01:FF:DC:BE:E8:EA:3A:CA:FB:D7:8C:B2:BB:2B:5E:02:04:ED"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: register-espresso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 31 Jan 2026 03:47:52 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 31 Jan 2026 02:26:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yLTMBLbGZPqMQS5hDG%2F7DFDiwr%2FE4t0y28LN%2BHoA8%2F1QQxVwXCQe4k27Tu7lWKf9ZyH1P25YFcjd8YjYq4Lctx5OUwwb1fouYwZ96ZaMRUmU1ZA%3D\"}]}\r\nage: 2083\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9c663aed5f425690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":744,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"e20e07478d13693175c9687188a7fb2d","sha1":"57937bcaa6df884341168df1921330418a34e1b3","sha256":"0e5b6056296c8c82684d7482a27205344c4cceeafa4ae6855f2bf8dfa0ca4120","sha512":"73dc52469a705c9d75976f39b946d9e6161c4a1ed3353b6d52bd20268df5302aa97ec497871c50b9f107df7e3564349d51dd77c12400acedc375704d10e96bcc","ssdeep":"","tlshash":"1701fea228d08c0981b48379bdf0a24cde83468357456850badd31632ff4a438ce37ec","first_seen":"2025-12-31T12:33:59.877053Z","last_seen":"2026-02-14T01:27:34.016745Z","times_seen":15,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":29,"dns":7,"connect":2,"send":0,"wait":13,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-espresso.com/favicon.svg","fqdn":"register-espresso.com","domain":"register-espresso.com","tld":"com"},"ip":{"addr":"172.67.166.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://register-espresso.com/","date":"2026-01-31T03:47:53.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-espresso.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 01:28:13 GMT","end":"Fri, 01 May 2026 02:25:51 GMT"},"fingerprint":{"sha1":"03:6A:B6:2C:F6:3D:23:BD:21:F9:30:67:8E:82:91:15:5F:A5:74:27","sha256":"7D:1A:65:AE:C3:75:13:BE:9A:4D:B6:CD:33:58:01:FF:DC:BE:E8:EA:3A:CA:FB:D7:8C:B2:BB:2B:5E:02:04:ED"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: register-espresso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-espresso.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 31 Jan 2026 03:47:53 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Sat, 31 Jan 2026 02:26:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 2082\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"697d6858-a64\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kfhihbzX5Nd4nN4fK6bpJq2WmdgGzXqWbdFx6xp2zJFsFX%2BJQOR4zoFEuyszr4VRrjhIsjh1zVcSKWH3YJRkpCVaNgNnXeV7r1Blbx2A%2Fgm%2BkXFfYw%3D%3D\"}]}\r\npriority: u=6,i=?0\r\ncf-ray: 9c663af289de76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2660,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0e5690d3b329d727d3beebed48d6c2d8","sha1":"46b9b822697390227617c5ae61b21db0bd9674cd","sha256":"99b5446fdb0675412588659f6eacf34bd66b95ddb4d340801d98d6b8f297a149","sha512":"bd902ea28f21257e5cecaf6d06b6a2585b0b937a8815b357b170f618e575343710c9a741c267176410640221cead59ad991db5e9e32b0ae74245618a29eea20e","ssdeep":"","tlshash":"3451ffdc361cd1854a5c6bcb9f5aa0791c26e1e0de8e8509ea442e1f38c5c6f6c393c5","first_seen":"2025-12-28T18:47:24.367929Z","last_seen":"2026-04-08T12:13:16.913402Z","times_seen":28,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/warning.icon-Dc0zRbzu.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:53.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/warning.icon-Dc0zRbzu.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/home.page-CVUoYbyJ.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 61813\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"warning.icon-Dc0zRbzu.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 31 Jan 2026 03:47:53 GMT\r\netag: \"33a0fd88bdb5a9129d1f5c0403d5831d\"\r\nlast-modified: Fri, 30 Jan 2026 10:37:39 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::zjtgd-1769831273637-c20e962fb2de\r\ncontent-length: 655\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":655,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (654)","md5":"33a0fd88bdb5a9129d1f5c0403d5831d","sha1":"1ffd6e76124807003f116afe62d3073497f5ae0e","sha256":"9d91956b4453121641b232044a10f3e736d188267a7929c93f3be18013191a02","sha512":"396413eb088130483f66ed12031cdce4cdf3e43d4532fae0d150efe53c732eaf301e77c55d6c2f2b50099ebdbd592be1e7de6310c91b1b5b880bc421449aa55c","ssdeep":"","tlshash":"e4f02377e3f428b87505cee8634f7d363177a0a9b3014645a39e581427a40c5b5ad9d2","first_seen":"2026-01-14T14:06:39.501511Z","last_seen":"2026-02-05T00:02:23.653333Z","times_seen":10,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://register-espresso.com/","date":"2026-01-31T03:47:52.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-espresso.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: text/html\r\ndate: Sat, 31 Jan 2026 03:47:52 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::ksxp2-1769831272766-869045021029\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35900,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14663)","md5":"0ab0f340b5273cd2c2411119a714df59","sha1":"1325386aa576b366d6a0eebee84b19e7a2f63253","sha256":"7ff1be149427df5d92c15e8eb841ee6f4fc488e937c3fe33c5429d5c29e461ae","sha512":"1050997d3fdff3e9d1b9aa7352b04d98da8e82aee13a3abb2b778e9f434f389fb6e1b5a808d02e1750a4a4684ed981be11af7f3aaf6e4824ec9050cb0f84781d","ssdeep":"384:BAIWUuk85rv77fMarMvem9W9aknne8pT75+BoF+Z8M1UyUUmk/l0f6QinYlShBpk:BAI/ET7fMoMm08pv5uoF+Zy6jl0JxhXv","tlshash":"95f229f6d120cab606531f68f5327d98616320ea4f55909cf1acc16c2740db78ebbdea","first_seen":"2026-01-30T19:04:09.902193Z","last_seen":"2026-01-31T07:12:50.343209Z","times_seen":7,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":63,"dns":40,"connect":9,"send":0,"wait":11,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/x.icon-B-1mXS8R.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:53.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/x.icon-B-1mXS8R.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-CUtwT3UT.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2083\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"x.icon-B-1mXS8R.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 31 Jan 2026 03:47:53 GMT\r\netag: \"1d5ca9fc89a2b58de61c6ba3a8015341\"\r\nlast-modified: Sat, 31 Jan 2026 03:13:10 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hjd8m-1769831273793-c48ae349f1ab\r\ncontent-length: 458\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":458,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (457)","md5":"1d5ca9fc89a2b58de61c6ba3a8015341","sha1":"4f9b82272ee87342d81ad7a16cca024e1497f46d","sha256":"b66026f6ab26a0bae77a8273ef7e0d683ea316fc428046769b85195eb0891a85","sha512":"046d9b41904af8361c3556e13c1206f2bbde3a741ea0a53fedcb231c9c1238a3c7cb7a73ad3bd9f3208625338cb44fd494226e47014d2993ef099462a9940e96","ssdeep":"","tlshash":"80f097ff83c1609848595fa62ab23c251177e5f993a409a0c54449619d2d0f6731ee82","first_seen":"2026-01-14T14:06:39.448198Z","last_seen":"2026-02-05T00:02:23.668402Z","times_seen":10,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/safeWallet-VUYZPLY4-CXnodgMs.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:55.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/safeWallet-VUYZPLY4-CXnodgMs.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-Cd8QJFwr.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2082\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"safeWallet-VUYZPLY4-CXnodgMs.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 31 Jan 2026 03:47:55 GMT\r\netag: \"88dc16e86969db1d05c7274f714816d0\"\r\nlast-modified: Sat, 31 Jan 2026 03:13:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hsg8h-1769831275676-93b499f25c2e\r\ncontent-length: 689\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1449,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1448)","md5":"9a09d06d29fe2837adda28d773f8d6e5","sha1":"93c50ca2782f3f0b4c1f6d48c9fa33476f772ac0","sha256":"aaaf8c1f6acc96bda06bfc1e526611b918cd12021d54b15cce8fef605554938e","sha512":"7c181bd28ffca7872846372455d30661b0b89069cc473f94ac177247350091749470603dbf2827abc14eee65d5f98c37664defe6105075889415cee5bc3ac9dd","ssdeep":"","tlshash":"c531229136cca6e0770ae321cd04c166f85528effd66e35c6a015862bd0846d758cdfd","first_seen":"2024-12-25T05:30:42.588753Z","last_seen":"2026-05-17T17:52:49.735726Z","times_seen":40,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/chunk-EPOLDU6W-DGaTw-IN.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:53.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/chunk-EPOLDU6W-DGaTw-IN.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/home.page-CVUoYbyJ.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"chunk-EPOLDU6W-DGaTw-IN.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 31 Jan 2026 03:47:53 GMT\r\netag: \"14db290fb017567c6c72437dafb1d3ec\"\r\nlast-modified: Sat, 31 Jan 2026 03:47:53 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hlkhv-1769831273627-043dc836e92f\r\ncontent-length: 43638\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":125122,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (46949)","md5":"c6abfd9f96d5722cdb6157b22e513600","sha1":"67ca400bde56b3d399c8f9cdd1d303ecd24b5111","sha256":"5918ef25bf99e2b2850ab7532eebabdc1df17a7e0d1bcb041a2f3f5ba6a02fad","sha512":"273eac63aa5f47dec6979994ad74e3d461e96ca383d190cf521500d729b39b45d2da1f6a1a21a56a8debae5f7ee7712c9891df97d3a21c0e6f782173460a82fa","ssdeep":"1536:YZe4IJi0G4pPj0hsIkZxr5bRRvMViduOZgVI/rYWYYKyWXML:Ge4IoMaUZxr/RvMVid1GVI/rYWYYLW6","tlshash":"63c33bf9729270794bef13f180bb0015b3b92ca9246d8015b2acc99e35b5c4c967bf79","first_seen":"2026-01-14T14:06:39.446125Z","last_seen":"2026-02-05T00:02:23.601915Z","times_seen":10,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/fonts/pp-neue-montreal/font.css","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:53.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /fonts/pp-neue-montreal/font.css HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 7537\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"font.css\"\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sat, 31 Jan 2026 03:47:53 GMT\r\netag: \"a6a6e32dbe741d171e83cee23cf2248a\"\r\nlast-modified: Sat, 31 Jan 2026 01:42:15 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ksxp2-1769831273084-b6822b152ded\r\ncontent-length: 400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":400,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a6a6e32dbe741d171e83cee23cf2248a","sha1":"b89b8228695b1b63c2abdb052b48dbbbd19a2528","sha256":"91fafc1905bf8c2ed7d8d91ee2c57deea7a7f886c4b8d9f1a6544f7fd9c08589","sha512":"39e9abd765670064d807e614cfa029e1b368beaa357afb935f88837d838c5bee37cfcd3285731fe84c825282bda9ac5a93c14238e28e6d4ea1f47e463382717f","ssdeep":"","tlshash":"d4e0228008aaa600d2290c46b38f8f272d1d48062002c4ae5b7b78489de38b173c0b0f","first_seen":"2025-12-31T12:33:59.892068Z","last_seen":"2026-02-17T15:15:31.670744Z","times_seen":16,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/use-is-client.hook-BMJdPNxQ.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:53.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/use-is-client.hook-BMJdPNxQ.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/home.page-CVUoYbyJ.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2082\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"use-is-client.hook-BMJdPNxQ.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 31 Jan 2026 03:47:53 GMT\r\netag: \"b3a048544d438ace2c64e19b485cf63c\"\r\nlast-modified: Sat, 31 Jan 2026 03:13:10 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vf8k2-1769831273635-9f59aa5bd326\r\ncontent-length: 141\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":141,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"b3a048544d438ace2c64e19b485cf63c","sha1":"b30ddfa1e937e309283ab7b78a38ab1ba78cce36","sha256":"a6fe5ab77e4bf7d2430db49370055ae2773cbdedcf19c6f8e8faada9308d1ccc","sha512":"c0e16664e5a29f1969c30430988cfe93c2d286f5e55300c1ec276f183ac2d2cbfd4fe0813f072c56e5c79f7b33b6f1b33461cbcd85c5f54eaab44e653f182e77","ssdeep":"","tlshash":"7fc02b561082ac7487004ce00377ddb0953284dc22e51fa0b0254c161f490f74bafc0b","first_seen":"2026-01-14T14:06:39.476463Z","last_seen":"2026-02-05T00:02:23.648243Z","times_seen":10,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Fira+Code:wght@300..700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://register-espresso.com/","date":"2026-01-31T03:47:53.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:56 GMT","end":"Mon, 06 Apr 2026 08:37:55 GMT"},"fingerprint":{"sha1":"DE:3B:B4:94:98:33:3A:CB:2A:A9:96:A1:CB:19:8C:84:B5:8D:23:E9","sha256":"D0:A1:5A:83:80:77:19:74:AA:CB:27:69:4A:C7:2C:F0:DA:06:9C:79:1E:07:77:9A:4D:7B:5D:AA:A2:D2:D4:E9"}}},"request":{"raw":"GET /css2?family=Fira+Code:wght@300..700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-espresso.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 31 Jan 2026 03:47:53 GMT\r\ndate: Sat, 31 Jan 2026 03:47:53 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2425,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"364d80757a1c7c81dccbf8d6caeb7ae7","sha1":"abf8e3b38eb2295c6378231fb2ecabae5ecd4b2f","sha256":"17babf90f4bae4a92ef7f4f24552b88b41c391b89328f46faa49286f5c2c2c6a","sha512":"6a0c6519a03917cedd40ecfe91e6cb8d30a42a61c005244bf8c09934a12132ba0fe963dd6e5c77a9baa19944cadb274ecf81e1780697acc5f3e22ae85b02c131","ssdeep":"","tlshash":"1c41aaa601a79400afa30cc177cebe779e1e2198b041c6b95efd08989ce7d32435472e","first_seen":"2025-09-17T03:18:47.282954Z","last_seen":"2026-05-29T22:44:06.413207Z","times_seen":813,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":135,"dns":0,"connect":21,"send":0,"wait":18,"receive":0,"ssl":135},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://register-espresso.com/","date":"2026-01-31T03:47:54.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://register-espresso.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 26 Jan 2026 18:20:37 GMT\r\nexpires: Tue, 26 Jan 2027 18:20:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 379637\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72964,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72964, version 1.0","md5":"91247c94dcda6ff52b445d71d6bbfb81","sha1":"ad2f62363ed047b430b91f32afa31df51fcd7c5e","sha256":"6a3c3e024b31eeacbf1f19c3c7be78612d91c623186f64035a50038241dad4f9","sha512":"a12dcac84e9f9ae02df3aabe29d76994281cd1005edca471194605cfcd6a0456eec872fd28c63c72ae124804d0b47d8377048caae49c40b0a18b5d6be4d6213f","ssdeep":"768:zbw+rLBkMxbCkupj4Y69/Yr71+j9pWiKahMM6+AWEqXB0oGuNGku+QCcIKE205C7:zbw+iwuS/iZWeaO1zP1/9Esvf8fXnm1","tlshash":"8f6302244e3c50c2a54d33aa286940f6f6e79c75b2b79ba4a69c589cd410f329cdfdc4","first_seen":"2025-05-29T18:51:13.223047Z","last_seen":"2026-05-30T22:22:49.020113Z","times_seen":24878,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":81,"dns":1,"connect":23,"send":0,"wait":21,"receive":37,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us.i.posthog.com/flags/?v=2\u0026config=true\u0026ip=0\u0026_=1769831275449\u0026ver=1.332.0\u0026compression=base64","fqdn":"us.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"18.205.167.128","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:55.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6A:93:A0:4B:D8:27:D0:2A:1E:35:71:6C:A2:1C:2A:2C:2E:E1:A7:D7","sha256":"2A:1F:69:7F:28:B0:DA:BD:59:C5:0F:27:B3:35:6D:E9:5B:8B:A2:4A:F8:89:F1:F0:10:CD:CD:8F:62:8E:07:E6"}}},"request":{"raw":"POST /flags/?v=2\u0026config=true\u0026ip=0\u0026_=1769831275449\u0026ver=1.332.0\u0026compression=base64 HTTP/1.1\r\nHost: us.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim.espresso.foundation/\r\ncontent-type: application/x-www-form-urlencoded\r\nContent-Length: 269\r\nOrigin: https://claim.espresso.foundation\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":269,"data":"data=eyJ0b2tlbiI6InBoY185Q2c0MXdOQklYTkJueHl2enNEOUFDNlVUNUtTak5qVFI0U1NuajR1SDQiLCJkaXN0aW5jdF9pZCI6IjAxOWMxMjJhLTFiYjctN2QzZS1iYzg3LWJjYTEyZmUwZDg5OSIsImdyb3VwcyI6e30sInBlcnNvbl9wcm9wZXJ0aWVzIjp7fSwiJGRldmljZV9pZCI6IjAxOWMxMjJhLTFiYjctN2QzZS1iYzg3LWJjYTEyZmUwZDg5OSJ9"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 31 Jan 2026 03:47:55 GMT\r\ncontent-type: application/json\r\nvary: origin, access-control-request-method, access-control-request-headers, Accept-Encoding\r\naccess-control-allow-origin: https://claim.espresso.foundation\r\naccess-control-allow-credentials: true\r\nx-envoy-upstream-service-time: 30\r\ncontent-encoding: gzip\r\nserver: envoy\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":743,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b91b432486afc138efd3ddc7fe1c1a88","sha1":"544b5ae0c247b795ffe1503426b7b80dd0325c8e","sha256":"46a058f3f407b6cc7273c5f2994d3848938b33d733af2189d5458f13abeb9d2e","sha512":"fa3e795e54f40474145ac1243fa7c2d06720a4b5824b257eda2e256f0053ddcbde2940e0edfbbb0ab179415adcc23272820668e0562917d2dbe696ef729653ba","ssdeep":"","tlshash":"7d011b3eb960093c8c098346f8e6784a4fff053731207c4ce2e8448331d60da8aa3a0b","first_seen":"2026-01-31T03:48:27.116825Z","last_seen":"2026-01-31T03:48:27.116825Z","times_seen":1,"resource_available":false,"data":null}},"time_used":659,"timings":{"blocked":266,"dns":21,"connect":94,"send":0,"wait":126,"receive":0,"ssl":148},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/walletConnectWallet-FNSU4KNU-B0ci71fU.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:55.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/walletConnectWallet-FNSU4KNU-B0ci71fU.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-Cd8QJFwr.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2082\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"walletConnectWallet-FNSU4KNU-B0ci71fU.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 31 Jan 2026 03:47:55 GMT\r\netag: \"c54691e324f11158e160ac01cf110898\"\r\nlast-modified: Sat, 31 Jan 2026 03:13:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::2xj4n-1769831275678-4b416f384762\r\ncontent-length: 655\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1513,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1512)","md5":"05a8359b297686a38136a26a10311301","sha1":"5d995f91f19bdd38e876708ea756b76ad53ce55c","sha256":"ff6da22ac4da1356c60264b8a4ca0e3bf79b026e16220dfac81cf1058e40160d","sha512":"28ffda0d4b0fcf35ec80c90c3bfc90103685a5220858159a9016588568e808550fb18e8b2d8ee45f72817087723c842ad4f3872adf933ef1da6267d6cef4fdbb","ssdeep":"","tlshash":"1a3115ef6be412f4d017e3a3d01590267ddb24ba7729ef44421b4ae0ae0149d64c8d78","first_seen":"2024-12-25T05:30:42.591141Z","last_seen":"2026-05-20T16:17:57.685031Z","times_seen":75,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/fonts/pp-neue-montreal/pp-neue-montreal-medium.woff2","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:53.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /fonts/pp-neue-montreal/pp-neue-montreal-medium.woff2 HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/fonts/pp-neue-montreal/font.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 61845\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"pp-neue-montreal-medium.woff2\"\r\ncontent-type: font/woff2\r\ndate: Sat, 31 Jan 2026 03:47:53 GMT\r\netag: \"b36caee87073c28b3f64d07e13d86b2a\"\r\nlast-modified: Fri, 30 Jan 2026 10:37:07 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qctkn-1769831273507-1e8143388595\r\ncontent-length: 51980\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51980,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 51980, version 1.0","md5":"b36caee87073c28b3f64d07e13d86b2a","sha1":"5f77698d1e7c61ee9dbeda0774b7227c0e3ebf3a","sha256":"11a1b227a4f432bdc5587a529d34a46abbed7067b6e1fb913db0c489c7175828","sha512":"4d868669f739643351e9d2d6ec442fce5db761eb35f48e855deb755529556b28bf55adbd1eb4d25b34478efb35cc34662ead7af40342f365f6082b11f337ad38","ssdeep":"1536:mfOh/to3MFPyrfkIsvSfkMmIxH1S0VSIw6b:mfOh/+cJmpOYI0cIXb","tlshash":"f933f254a314656ed906ef65c95c2ba363bd33dae801e84f303d3bdbf91aa312790057","first_seen":"2023-11-11T04:34:18Z","last_seen":"2026-05-29T08:17:09.902791Z","times_seen":366,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/loader.component-C8VnobGF.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:53.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/loader.component-C8VnobGF.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/home.page-CVUoYbyJ.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"loader.component-C8VnobGF.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 31 Jan 2026 03:47:53 GMT\r\netag: \"a35b82037f2a03e431a30bf64c578a6d\"\r\nlast-modified: Sat, 31 Jan 2026 03:47:53 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::zjtgd-1769831273642-738192b59477\r\ncontent-length: 38026\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":117949,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (46483)","md5":"871e5ca8610b62744f94ab5d315e51cf","sha1":"bbfcd4d8c18dd07c05af0d515582b50c291b8660","sha256":"1a6ecc655e049dccc6fd54d4893698c563ee6fab64b240368c5a47c2c245aa0c","sha512":"d8dd6684f7e1268f1be89e22d03261c8cded2552c664d91640acf06e17eab4ea50339b07ee8270cf2e5b765990bd30a700195c5df2212853da9bd492eb124207","ssdeep":"1536:3RK0GSaGlSaeey2MZ+40INYm1C5XeJP2CprtD2zj7br:3RcSllS3e070Bm1jrQ","tlshash":"d0b3c79c7882b8a5539b45a590ff010bf27d6c4b700c84a0f268ddaf79738695263fbd","first_seen":"2026-01-14T14:06:39.510059Z","last_seen":"2026-02-05T00:02:23.617986Z","times_seen":10,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-espresso.com/settings.json","fqdn":"register-espresso.com","domain":"register-espresso.com","tld":"com"},"ip":{"addr":"172.67.166.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://register-espresso.com/","date":"2026-01-31T03:47:53.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-espresso.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 01:28:13 GMT","end":"Fri, 01 May 2026 02:25:51 GMT"},"fingerprint":{"sha1":"03:6A:B6:2C:F6:3D:23:BD:21:F9:30:67:8E:82:91:15:5F:A5:74:27","sha256":"7D:1A:65:AE:C3:75:13:BE:9A:4D:B6:CD:33:58:01:FF:DC:BE:E8:EA:3A:CA:FB:D7:8C:B2:BB:2B:5E:02:04:ED"}}},"request":{"raw":"GET /settings.json HTTP/1.1\r\nHost: register-espresso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://register-espresso.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 31 Jan 2026 03:47:53 GMT\r\ncontent-type: application/json\r\ncast-mode: default\r\nlast-modified: Sat, 31 Jan 2026 02:26:32 GMT\r\netag: W/\"697d6858-348\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 2082\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5YaWB41IWl%2FJgE13P8q8PiOCFxSvkB2hw7dDPa50O4nvVIlrlem3410axgJ%2BAichMY%2FqsRYgAT68wMTtsoryXnIojqHnEfzxZoVtI%2FStBY1s2p1Jcg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c663af4ea2476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":840,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e5a17c7f2213f5602e1d5a7e286f2540","sha1":"e1963dd69de8c8804ed692a681e0c07d6b0611fb","sha256":"a0379432881be9bd4087f2e67b2e4a19a12f36951baca5e8719f5c95fcfae054","sha512":"222f53e0095efcb7b39186f48aad1c537f773f57dc58bb5b0e8745b817510ec00e44273eb1c1680ce7c808a0800ba5e5cb020326230ff2b1e6e00db45c7c8293","ssdeep":"","tlshash":"1d014145ec21885be6cd0a28b58e520409017c6747547c406f2f501daf6eb6f4f727cd","first_seen":"2026-01-30T19:04:09.876261Z","last_seen":"2026-02-05T00:02:23.622207Z","times_seen":10,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"public-bsc.nownodes.io/","fqdn":"public-bsc.nownodes.io","domain":"nownodes.io","tld":"io"},"ip":{"addr":"104.20.35.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://register-espresso.com/","date":"2026-01-31T03:47:54.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nownodes.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 23:24:15 GMT","end":"Sun, 12 Apr 2026 00:24:07 GMT"},"fingerprint":{"sha1":"EC:BA:9B:AB:CB:AC:F0:50:15:55:17:89:D4:5F:52:04:A6:2E:C8:1F","sha256":"43:C6:97:66:EC:F0:C7:EB:3D:64:36:C1:2D:53:6A:54:A0:BC:D0:0A:21:A3:CD:D9:75:A0:F7:5E:15:04:A5:18"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: public-bsc.nownodes.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://register-espresso.com/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://register-espresso.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x6981E9EA7023a8407E4B08ad97f186A5CBDaFCf5\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 31 Jan 2026 03:47:54 GMT\r\ncontent-type: application/json\r\ncontent-length: 194\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: Origin, accept-encoding\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9c663af87a8e1a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":807,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d2d64c5f9293eb3ef064b089af272cf3","sha1":"9087ac99c5049ae550deb6681558d2b36c367d36","sha256":"1298242b7d0d06fa652c31118aca2012644308584d15fd18ddf0acac54153be3","sha512":"85f143037c6f65aa56187e7181381ce7a2d6f528f01af6f4ef61383c977e2d4600bcf204dbcc0add7b68945fb6c8f61523a3d8f0b1ce8cbc52916dc24a8462be","ssdeep":"","tlshash":"40018cf006978e60d0f89c8ab116be8562107c87f8cb2e430d084dc02af9485f734463","first_seen":"2025-11-30T01:31:11.661996Z","last_seen":"2026-02-07T14:06:38.452246Z","times_seen":39,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"public-bsc.nownodes.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/metaMaskWallet-YFHEHW7V-BggUDXad.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:55.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/metaMaskWallet-YFHEHW7V-BggUDXad.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-Cd8QJFwr.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2082\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"metaMaskWallet-YFHEHW7V-BggUDXad.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 31 Jan 2026 03:47:55 GMT\r\netag: \"cd224897b488e3c58bcb44d3799d7877\"\r\nlast-modified: Sat, 31 Jan 2026 03:13:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::zjtgd-1769831275656-4dce2f3b898d\r\ncontent-length: 1181\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":6516,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (6515)","md5":"c9faabc0cac059efd75278832f35fba0","sha1":"75a665ec82b0dd2ccab406db25ed49f69ba40931","sha256":"748a6c743322ec0b319bf361b84e929e5099721824636f5a4befd8e0ff8ab826","sha512":"7ab0d0071f01aad00b47c9fd55ef2748c61eeeb46b3abfb66afdae61970d62a77a0f643be0c95cab9a778d28a816b75fbb5c4667be6b794d97cec3937d0b5eec","ssdeep":"192:M1vaqYOX292169AY32zqzKHio+21BZBTibnKCU+jpBxMCXV:my933BU+V","tlshash":"17d15deb67488cbcb8271f24e34a3271613836d7692ee6594c738a79090519dbb7fcc4","first_seen":"2024-12-25T05:30:42.586528Z","last_seen":"2026-05-20T16:17:57.649029Z","times_seen":72,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/rainbowWallet-2SR6TVBF-kimcGeuf.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:55.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/rainbowWallet-2SR6TVBF-kimcGeuf.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-Cd8QJFwr.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 61811\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"rainbowWallet-2SR6TVBF-kimcGeuf.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 31 Jan 2026 03:47:55 GMT\r\netag: \"1dfeaa46d390c3e839db0407f735db86\"\r\nlast-modified: Fri, 30 Jan 2026 10:37:44 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::67d96-1769831275666-019953a3b921\r\ncontent-length: 900\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3646,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3645)","md5":"8a0e974aa17cd852cfd0a349aa6cde2a","sha1":"3e83142c11e9b7a57432123b72457ff579f8bcb8","sha256":"0813cf58d2da41c33e74c0fb7e5a9671020dc397611becaacd42e1f6ae5b30a4","sha512":"28eac8d72b65f6e1cd4f0ac75cfe58a515be407e04b12aea7a90a8056018133d9f4de319843eb5238f465a23d817971dbd945e4fdbfc59fca26b823efd59a601","ssdeep":"","tlshash":"c071ca958a3dac3be52dc18cee411420710daabfdc894a5272639fef9d784c6ac4c660","first_seen":"2024-12-25T05:30:42.549882Z","last_seen":"2026-05-17T17:52:49.736369Z","times_seen":59,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/page-meta.component-CRUC77sT.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:53.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/page-meta.component-CRUC77sT.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/home.page-CVUoYbyJ.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"page-meta.component-CRUC77sT.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 31 Jan 2026 03:47:53 GMT\r\netag: \"3d9812f9914e954f5ccd021a8dd4255c\"\r\nlast-modified: Sat, 31 Jan 2026 03:47:53 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ksxp2-1769831273629-d9783564db9e\r\ncontent-length: 803\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":803,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (802)","md5":"3d9812f9914e954f5ccd021a8dd4255c","sha1":"f6a397af2900a8933a65b8233db006d5c806f3dd","sha256":"e35ebeca2eda50c4f5894c03217e7f8bfbe0c0a1640480eec6ec34992b92adee","sha512":"e38cf96ae5765c7116eeb9477189c8a6015f38b2eb2d4e6009df0ba8f46b13fee98aabc3af86285a34d1fdc9763e0757dd18af465afbf140970865366aee94cb","ssdeep":"","tlshash":"0b014969a510685b1766ce011d5af24db17687bfc038c9a1b1a448390ff1fe7c07277d","first_seen":"2026-01-14T14:06:39.46073Z","last_seen":"2026-02-05T00:02:23.611711Z","times_seen":10,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"magna-public-assets-prod.s3.amazonaws.com/portal-assets/espresso/logo.svg","fqdn":"magna-public-assets-prod.s3.amazonaws.com","domain":"magna-public-assets-prod.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.11.184","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:53.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /portal-assets/espresso/logo.svg HTTP/1.1\r\nHost: magna-public-assets-prod.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: ykoRYYJJefzbTLOXIC7T9dCE4G9rWa39zpmZnu4ymoGXCGKLihsCJd+DnwmZLOkI7HkkVTD7bZoAqIxL2OJLtZxPkcCyW91m\r\nx-amz-request-id: H7CGE516XHSV6C6F\r\nDate: Sat, 31 Jan 2026 03:47:54 GMT\r\nx-amz-replication-status: COMPLETED\r\nLast-Modified: Wed, 12 Nov 2025 16:32:20 GMT\r\nETag: \"e7d57d12734f150bf16762985f60e68f\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: TqihulMH7zzidS_xLcOiP5lydJnvVth2\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 10123\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":10123,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e7d57d12734f150bf16762985f60e68f","sha1":"8b9e922d3d6cb0e595f06f9be854993143e08c39","sha256":"fff37441b6ebebe425ac73d7370e23f99ef080363dde784aed0d5ab0d2f6d67e","sha512":"c3e6515d8895a288314112f2e450bbac693526a28f7bd3aaeb993e2cb6c387e15b6ae1a666e4c91db478c84ae041786c517745a1f58a7bbf618ddcc14661660c","ssdeep":"192:8+g/3Z39WicEGuje62Ar97zpAa2OiVv4218mT5Uq/ww1y:ng/3xQieuD2AZBAPPy2FTfBy","tlshash":"0d2296da6be8f3f1d506f3e2c65a4078ba2b70f56d66cb18cba52d55aa1045fc884cc0","first_seen":"2025-12-28T18:47:24.370223Z","last_seen":"2026-04-08T12:13:16.923463Z","times_seen":27,"resource_available":false,"data":null}},"time_used":591,"timings":{"blocked":234,"dns":4,"connect":92,"send":0,"wait":120,"receive":1,"ssl":137},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-assets.i.posthog.com/static/web-vitals.js?v=1.332.0","fqdn":"us-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"172.66.166.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:55.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 21:09:57 GMT","end":"Mon, 20 Apr 2026 22:09:56 GMT"},"fingerprint":{"sha1":"28:A9:79:25:3F:AF:B7:89:AC:9D:42:8A:C3:69:5B:4C:8E:6F:4C:77","sha256":"4D:63:13:FA:35:7E:FE:29:D4:53:E6:EF:2E:3B:8F:06:9D:32:9C:B5:EB:7E:3C:76:62:83:84:76:B4:C3:88:3C"}}},"request":{"raw":"GET /static/web-vitals.js?v=1.332.0 HTTP/1.1\r\nHost: us-assets.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://claim.espresso.foundation\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 31 Jan 2026 03:47:56 GMT\r\ncontent-type: text/javascript; charset=\"utf-8\"\r\ncache-control: public, max-age=300\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nlast-modified: Sat, 31 Jan 2026 02:56:29 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-opener-policy: same-origin\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 3\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: EXPIRED\r\ncf-ray: 9c663b027e5eb28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6599,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6559)","md5":"aa1e3521e57a40ad394b049fa7ff3bc5","sha1":"ec88012f680be684d8d430c5efd61fc29b658374","sha256":"b17014672e5f28d0dc0cad40ee4d09feb6a1201dadb3932b1f3073a8e4f387d6","sha512":"729c7ed37f0f321fd1c588aab554f289ff37fce9a3cb7dfa78cb8f47db8cbacb69eb0660ea2e245a540dca857f4cf277f67f53c7d789609006e56799ce3ad282","ssdeep":"96:tzI8C48z+TJzq4L88kTAFKb5rbCKHDuqqUtl0AcJ4c0jU4mzWuCD/ZDZkRlulDsd:VC4F4Sk8FKvae0f4TcWuEZDyCSXEdij","tlshash":"eed1d9f59f41e53921bae2b6d47a514333396386a409409ce23eefd0146d4c6739bb32","first_seen":"2026-01-29T18:42:31.973098Z","last_seen":"2026-05-30T16:55:13.565573Z","times_seen":3485,"resource_available":true,"data":null}},"time_used":358,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":358,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/fonts/pp-neue-montreal/pp-neue-montreal-regular.woff2","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:53.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /fonts/pp-neue-montreal/pp-neue-montreal-regular.woff2 HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/fonts/pp-neue-montreal/font.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 61810\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"pp-neue-montreal-regular.woff2\"\r\ncontent-type: font/woff2\r\ndate: Sat, 31 Jan 2026 03:47:53 GMT\r\netag: \"9f495aeb5f20fa526a69654c7a1af5e7\"\r\nlast-modified: Fri, 30 Jan 2026 10:37:43 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qctkn-1769831273514-8fa48427ca3d\r\ncontent-length: 47564\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":47564,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 47564, version 1.0","md5":"9f495aeb5f20fa526a69654c7a1af5e7","sha1":"5456093ac2a3210ebea9ea6fec4faed78cfbf4c1","sha256":"1a020a0ccc2b29ad091b713864b135d9f7fb6d3114e69620f6d56eeb9abefbcc","sha512":"0de585585140f263fb24e97236052ecf380c92b75c724fe3fe99c966ca90a53c6eeea812081e89850ca9c1d343c70ba967dd3f666a437f9b8237e49a5a6ad711","ssdeep":"768:L1MGt41Apz7bVFaRdg9IwhVyuCaMC4C0nRprwgT7XRgLyp2:OGG1AV7bX8g9IpuXtsjrw4up","tlshash":"b323029700fe4ff5c9adb0e81523fa130529898c59a73b7743a32da4a76d7f8ca06107","first_seen":"2023-11-11T04:34:18Z","last_seen":"2026-05-29T08:17:09.891852Z","times_seen":381,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/hstack-D7BEHBmh.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:53.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/hstack-D7BEHBmh.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/home.page-CVUoYbyJ.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 6616\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"hstack-D7BEHBmh.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 31 Jan 2026 03:47:53 GMT\r\netag: \"cd9c658e6acbaf903d31abcbdcd0a9f0\"\r\nlast-modified: Sat, 31 Jan 2026 01:57:37 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hjd8m-1769831273638-37ca5fa98a4e\r\ncontent-length: 473\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":473,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (472)","md5":"cd9c658e6acbaf903d31abcbdcd0a9f0","sha1":"f362d682440d6a4bee383672635f146a50f63d7c","sha256":"cf95ee78b7c72e64f9703177d7e45438f08f4024a14d6530ab92c62efb9ba853","sha512":"5a1869e999538136ef20e5328ffbba297e465bdba6ece9169fee1c6e96b5fad2554200d67a3f8887950ff287851411c368f04e2152b090ddcbd3c69645b6a695","ssdeep":"","tlshash":"96f0d4a7644171b403e5cc5462e5535941de5f9cb67155c890ce880e3a141c5539be49","first_seen":"2026-01-14T14:06:39.493632Z","last_seen":"2026-02-05T00:02:23.609983Z","times_seen":10,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-assets.i.posthog.com/static/surveys.js?v=1.332.0","fqdn":"us-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"172.66.166.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:55.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 21:09:57 GMT","end":"Mon, 20 Apr 2026 22:09:56 GMT"},"fingerprint":{"sha1":"28:A9:79:25:3F:AF:B7:89:AC:9D:42:8A:C3:69:5B:4C:8E:6F:4C:77","sha256":"4D:63:13:FA:35:7E:FE:29:D4:53:E6:EF:2E:3B:8F:06:9D:32:9C:B5:EB:7E:3C:76:62:83:84:76:B4:C3:88:3C"}}},"request":{"raw":"GET /static/surveys.js?v=1.332.0 HTTP/1.1\r\nHost: us-assets.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://claim.espresso.foundation\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 31 Jan 2026 03:47:56 GMT\r\ncontent-type: text/javascript; charset=\"utf-8\"\r\ncache-control: public, max-age=300\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nlast-modified: Sat, 31 Jan 2026 02:56:29 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-opener-policy: same-origin\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 3\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: EXPIRED\r\ncf-ray: 9c663b027e58b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":88854,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"eed1739be3b5f3cbcb8b4348da95df6c","sha1":"a6a9bb3c87a1d6a5e9a3c3fa4a504cdf5fb8c933","sha256":"aa71231d82c88044f916cb947cd23aae69f132701555cd8bce2b400c55ba388c","sha512":"cfbc612fe5f11aff4caa160599c8b2bf4291b118f8343596b0f447b2f5dc996d1cfd333d57e2893830174b1f6229dd49a8028dd13d3b31fe8648646e1eed875c","ssdeep":"1536:JXbkgL+74ocKIQvuE1p+5WeLIVZCnT9mYGfp/r4BL:1Ygq71zgZT9mYhL","tlshash":"b4934cd5b640f1ae41df81b4207e4842f33d2b1afa0d4958b157dc943de9848a39ffa6","first_seen":"2026-01-28T03:11:07.691683Z","last_seen":"2026-02-16T00:04:04.164647Z","times_seen":1184,"resource_available":true,"data":null}},"time_used":476,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":474,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/app-BrQSMlSM.css","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:53.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/app-BrQSMlSM.css HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"app-BrQSMlSM.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sat, 31 Jan 2026 03:47:53 GMT\r\netag: \"25658d0f4b4cceca0246887f02259dd8\"\r\nlast-modified: Sat, 31 Jan 2026 03:47:53 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qctkn-1769831273089-4a512a8fda7a\r\ncontent-length: 6504\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25488,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (25484)","md5":"5790452e0244fa3908cafc7597c3699b","sha1":"ba4ed2200d53e8dbdd691ab8cae7e3a238b59007","sha256":"ac7532963ab96d4e148ce9637f0992698418e1e31a96582b22b4de2d0819765b","sha512":"45dd4575538d8b250d4558d951e82d45f69a66af1ff5f8404eb959049e56383d6b81813e7736437c48d68bcc6a56adf3f403bf81cd031508fb2df672cad77f05","ssdeep":"768:DvyYAfX3HpL1YkPjTem0rRkuyS59zEyUkHbTcf0/JkoIAoi9KckbFiH5TRIZU:LAfX3HpL1YkPjTem0rmuyS59wyUkHbTr","tlshash":"bfb29689b6009abe7c3be56a576dea0c6309be12ec100eeff95835021be7ff615d1504","first_seen":"2026-01-30T19:04:09.908604Z","last_seen":"2026-02-05T21:18:16.58353Z","times_seen":9,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":385,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/phantomWallet-IPGVKCAB-BGoqRxdn.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:55.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/phantomWallet-IPGVKCAB-BGoqRxdn.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-Cd8QJFwr.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 12871\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"phantomWallet-IPGVKCAB-BGoqRxdn.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 31 Jan 2026 03:47:55 GMT\r\netag: \"d8d3e122c71dad3b911494fe2c10c5f8\"\r\nlast-modified: Sat, 31 Jan 2026 00:13:24 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::zjtgd-1769831275668-e6cc60c4a3ed\r\ncontent-length: 919\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":919,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (918)","md5":"d8d3e122c71dad3b911494fe2c10c5f8","sha1":"1b78a2cd20efa5bf8974c3f1d828585a4dec9961","sha256":"074e942e3627e6929f68a9f298e84f7ca26788c12c1dfc6caf7dc90473303910","sha512":"cf37e331c970b63ce5d64b41b174e697175c73e2d942534a7b77daac130ca72233a08809240204283a3bf66bc52c73846ed55ba5add6302341688d4714158d22","ssdeep":"","tlshash":"e411dcd20f3080e50e9aae39ad3878e416b171af737826841349cf34ea83dc74508a50","first_seen":"2025-05-30T14:20:20.549969Z","last_seen":"2026-04-17T09:09:52.493057Z","times_seen":22,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rpc.walletconnect.org/v1/supported-chains?st=appkit\u0026sv=html-ethers-1.6.9\u0026projectId=22ce30f65990b8a9b4db074398fa3e89","fqdn":"rpc.walletconnect.org","domain":"walletconnect.org","tld":"org"},"ip":{"addr":"63.178.159.235","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://register-espresso.com/","date":"2026-01-31T03:47:54.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rpc.walletconnect.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 16 Oct 2025 00:00:00 GMT","end":"Sat, 14 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"38:E6:43:A0:F8:F2:8D:21:9C:36:21:F5:DB:3B:F9:93:F7:7B:C4:8B","sha256":"09:1F:96:1E:4B:E3:8B:06:C3:8F:0A:2E:0F:79:E7:43:9C:B4:45:CC:26:0C:77:C5:50:CD:15:A8:7D:1D:83:DB"}}},"request":{"raw":"GET /v1/supported-chains?st=appkit\u0026sv=html-ethers-1.6.9\u0026projectId=22ce30f65990b8a9b4db074398fa3e89 HTTP/1.1\r\nHost: rpc.walletconnect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://register-espresso.com/\r\nOrigin: https://register-espresso.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 31 Jan 2026 03:47:54 GMT\r\ncontent-type: application/json\r\ncontent-length: 1310\r\ncache-control: public, max-age=86400, s-maxage=86400\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\nx-request-id: f265217c-727c-4a31-b83c-b1e8fbdb1a80\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1310,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"79edd0910a030600d2e11c3a6e87d048","sha1":"62284603b77d5076d10249769d560fedcaec83f1","sha256":"389845f7f06a8416710a799eed6898b20624855769fb0ac4bc311e8134c48fa5","sha512":"eae599cf4ea77a27981c6bbcdade950617d62a72eb7e7fc46dd82aebe12762f81e926c41c54b03ef6635fcdbbb2f9f2fb37481438e152147abd9c2c00d3ea445","ssdeep":"","tlshash":"1321368c84801840dcb0d398dbbce8cb955ef01399cd289999f42cb155bd6b3355276e","first_seen":"2026-01-30T19:04:09.901338Z","last_seen":"2026-02-09T14:25:41.918215Z","times_seen":117,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":37,"dns":5,"connect":21,"send":0,"wait":29,"receive":0,"ssl":200},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"public-bsc.nownodes.io/","fqdn":"public-bsc.nownodes.io","domain":"nownodes.io","tld":"io"},"ip":{"addr":"104.20.35.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://register-espresso.com/","date":"2026-01-31T03:47:54.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nownodes.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 23:24:15 GMT","end":"Sun, 12 Apr 2026 00:24:07 GMT"},"fingerprint":{"sha1":"EC:BA:9B:AB:CB:AC:F0:50:15:55:17:89:D4:5F:52:04:A6:2E:C8:1F","sha256":"43:C6:97:66:EC:F0:C7:EB:3D:64:36:C1:2D:53:6A:54:A0:BC:D0:0A:21:A3:CD:D9:75:A0:F7:5E:15:04:A5:18"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: public-bsc.nownodes.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://register-espresso.com/\r\nOrigin: https://register-espresso.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 31 Jan 2026 03:47:54 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Authorization,DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,api-key\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9c663af7ea271a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-30T23:03:13.093782Z","times_seen":15934029,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":36,"dns":6,"connect":1,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"public-bsc.nownodes.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbsfoewlknwkpew111.live/api/ping","fqdn":"fbsfoewlknwkpew111.live","domain":"fbsfoewlknwkpew111.live","tld":"live"},"ip":{"addr":"172.67.212.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://register-espresso.com/","date":"2026-01-31T03:47:54.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbsfoewlknwkpew111.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 22:55:32 GMT","end":"Fri, 24 Apr 2026 23:52:04 GMT"},"fingerprint":{"sha1":"D3:F2:75:B7:2A:F1:2A:F9:9C:76:E2:03:5B:61:3C:39:C7:58:E8:0D","sha256":"D7:47:0C:1D:BA:A7:EA:DD:AF:C6:0D:11:B3:A5:C0:27:30:9A:70:93:A2:92:40:45:26:5F:1A:98:CE:12:74:C0"}}},"request":{"raw":"GET /api/ping HTTP/1.1\r\nHost: fbsfoewlknwkpew111.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://register-espresso.com/\r\nOrigin: https://register-espresso.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 31 Jan 2026 03:47:54 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mH4oYH9hIUeRlhT4VCi66tro%2F5Hg5fHgu%2Fy%2F5p1xjB5D3OZIf1q5MDyQ7NwfxMiQbnLmeYzy1emxptaVmGYgFmzhNkLHu1c8CHSsGF9pOUlp71bk1w%3D%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9c663af948ca0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"594d96ea0628a6a87187b8e17a7fa4b0","sha1":"5fbf4e5362196240e62d4e192bd93777898755b2","sha256":"cb100e693b55b36a08dc2b04eb312835069a4f2fc406ff374b21313b1f56b5cd","sha512":"c92fac11849dbd07dd610982d2d2e49f7aa59ec6048782145992bed639b1a518c539d9603bea6b79e4f29aa745e301923edaa9d96e1dec3ce27a8a2f4c2f2f4c","ssdeep":"","tlshash":"d96000330c0c0330030c0cc0300fcf030cc0c0c00000fcc000000300c300c000c00300","first_seen":"2025-10-03T14:25:47.505502Z","last_seen":"2026-05-30T12:00:07.017436Z","times_seen":741,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":39,"dns":20,"connect":1,"send":0,"wait":241,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"fbsfoewlknwkpew111.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/coinbaseWallet-WWX6LF36-BMRj6mTC.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:55.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/coinbaseWallet-WWX6LF36-BMRj6mTC.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-Cd8QJFwr.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2082\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"coinbaseWallet-WWX6LF36-BMRj6mTC.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 31 Jan 2026 03:47:55 GMT\r\netag: \"694e1f6dd72af86c8c477f9608975a74\"\r\nlast-modified: Sat, 31 Jan 2026 03:13:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::smbck-1769831275661-82635440d459\r\ncontent-length: 598\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":598,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (597)","md5":"694e1f6dd72af86c8c477f9608975a74","sha1":"3b0def5280cfb0e2cb76b3a039bf7e26986a7f92","sha256":"4a238a92bd23caf58037a8423adebebfc6a84b6762f033bc7e6ebf8741ca1e41","sha512":"7290b10e41ef6e0d7bc27cb24d75327c1493f0d2ae961fb89bf1bb387659a9bc14681b66dbe754722c5f2ea5a98b6cc76c2ca9cde9406de0062262f6f056003f","ssdeep":"","tlshash":"64f022a1a2dcb411186ad336513c5ad4bcd7128cae2e621c32801f1af82009a98c8a79","first_seen":"2024-12-25T05:30:42.515918Z","last_seen":"2026-05-17T17:52:49.746342Z","times_seen":63,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-assets.i.posthog.com/static/dead-clicks-autocapture.js?v=1.332.0","fqdn":"us-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"172.66.166.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:55.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 21:09:57 GMT","end":"Mon, 20 Apr 2026 22:09:56 GMT"},"fingerprint":{"sha1":"28:A9:79:25:3F:AF:B7:89:AC:9D:42:8A:C3:69:5B:4C:8E:6F:4C:77","sha256":"4D:63:13:FA:35:7E:FE:29:D4:53:E6:EF:2E:3B:8F:06:9D:32:9C:B5:EB:7E:3C:76:62:83:84:76:B4:C3:88:3C"}}},"request":{"raw":"GET /static/dead-clicks-autocapture.js?v=1.332.0 HTTP/1.1\r\nHost: us-assets.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://claim.espresso.foundation\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 31 Jan 2026 03:47:56 GMT\r\ncontent-type: text/javascript; charset=\"utf-8\"\r\ncache-control: public, max-age=14400\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nlast-modified: Sat, 31 Jan 2026 02:56:29 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-opener-policy: same-origin\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\netag: \"697d6f5d-3303\"\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9c663b026e52b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":13059,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13006)","md5":"cc981e3687edce8a3d22380972ee45e3","sha1":"1955fa562b42c9f134b62e7ac0e9c11bbfa4da75","sha256":"a40d91c2014cca52defeb2481998498f02fc53526fd05302df0e0e490173814a","sha512":"2dc021b1b3ef375290f2d59d97ccc6bd6306aa4af2791c6cc29a129b50acc89a0566e5b27074037312082f55966c0bda2d77ab2ace32ad4a2154d08176e1c2c1","ssdeep":"384:sw+VM/tkSeCRi2WzHiAOjCQBgxjOJWgikn26FT:n+D9QeOMgM6FT","tlshash":"69420a88b7d0f3b12bd7145ac4bf1702f03525082556c824b159ecdab4adb1622bbe7f","first_seen":"2026-01-12T11:07:28.642714Z","last_seen":"2026-05-30T16:55:13.558939Z","times_seen":5172,"resource_available":true,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":366,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.unicorn.studio/images/hK13GObf5rZ2ZBOA1482Q9StWR73/coin.png","fqdn":"assets.unicorn.studio","domain":"unicorn.studio","tld":"studio"},"ip":{"addr":"34.120.54.136","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:56.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.unicorn.studio","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 01:15:17 GMT","end":"Sat, 11 Apr 2026 02:09:11 GMT"},"fingerprint":{"sha1":"DE:FB:B9:C7:64:66:73:ED:A0:17:64:C3:90:DC:C4:DA:51:F9:1E:8A","sha256":"1B:C6:C2:0F:6E:57:8E:65:50:70:81:13:33:ED:B6:62:DE:B7:E4:60:18:5C:4C:BC:E8:0B:86:F9:84:5D:74:88"}}},"request":{"raw":"GET /images/hK13GObf5rZ2ZBOA1482Q9StWR73/coin.png HTTP/1.1\r\nHost: assets.unicorn.studio\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://claim.espresso.foundation\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5XCE90QNV-xxKSYIJLj-VrnbNe7YvALXjfcGafAglgUwSx0l1R40WOs9ZEprAXNcr42\r\nx-goog-generation: 1762861129615574\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 76234\r\nx-goog-hash: crc32c=s/wkUw==, md5=VUPxydD/UXnXMiBrkbzzgw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 76234\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, Content-Type, Date, ETag, If-None-Match, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 31 Jan 2026 03:13:13 GMT\r\nage: 2083\r\nlast-modified: Tue, 11 Nov 2025 11:38:49 GMT\r\netag: \"5543f1c9d0ff5179d732206b91bcf383\"\r\ncontent-type: image/png\r\ncache-control: public,max-age=3600\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":76234,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 404 x 408, 8-bit colormap, non-interlaced","md5":"5543f1c9d0ff5179d732206b91bcf383","sha1":"7405c218b26efc284452c6f39c8522148667c4e5","sha256":"5b0b5b3c7175810ea204b14934608e55218c4a9326bdfa23c4c8a1ff4038063b","sha512":"578b57a63cf1cc650711f5525b08259affa1d722374a1cdfdde8c1f7282f315d444be30e134c361e34cce6bedd57f52c4fbde79b70ce3839fcd76c04c29d0fa9","ssdeep":"1536:ub3pH4uPjKs/YvPbs2vYdmUqNcD+LZoQdi+iL:w3pH4uPjKs/kAnqNS+LZoAAL","tlshash":"107302a84b7f871a9400a786a5a688b6e999fc3711b05a3dfdc403787c1c3d0c376da8","first_seen":"2025-12-31T12:33:59.890405Z","last_seen":"2026-04-08T12:13:16.930494Z","times_seen":19,"resource_available":false,"data":null}},"time_used":607,"timings":{"blocked":265,"dns":35,"connect":26,"send":0,"wait":28,"receive":49,"ssl":200},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/en_US-762U7H2X-yyzeC1pM.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:53.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/en_US-762U7H2X-yyzeC1pM.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/home.page-CVUoYbyJ.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2082\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"en_US-762U7H2X-yyzeC1pM.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 31 Jan 2026 03:47:53 GMT\r\netag: \"06dd9b8704986e408216d793fcb220b5\"\r\nlast-modified: Sat, 31 Jan 2026 03:13:10 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::2xj4n-1769831273646-9aa231541ede\r\ncontent-length: 171564\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":562283,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (7497)","md5":"4ad68365e553aceebe0d223a03bc55f8","sha1":"419cc457624395a6dc80cd5e0e2684d445eee636","sha256":"eb7fc9d5aa807fa55616a01a775b95438820fb6c676824af978a725a66f3a44c","sha512":"1f75ce5b98f521665052f3257ad38535d7d09bcc33ef4bdda6cefb6f8f1c68c6a10e54a1c2a02f7522658d78ec9ec7362a2ea21998127a975010bd18ed68a986","ssdeep":"12288:+d/7EPwzWIKWTHoX2f+ozuNqxl+SNa45IVWdyq:IzEIzWIKYIXQ2qx8SR0q","tlshash":"a6c46c44b2a0b565439740e914eb1000f1346e9db50c58a876ecd9be3fbaec885fbf6d","first_seen":"2026-01-14T14:06:39.458644Z","last_seen":"2026-02-05T00:02:23.649201Z","times_seen":10,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/root-xUBic4Hn.css","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:53.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/root-xUBic4Hn.css HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2082\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"root-xUBic4Hn.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sat, 31 Jan 2026 03:47:53 GMT\r\netag: \"88d9636b024941894745a79fb35a84d3\"\r\nlast-modified: Sat, 31 Jan 2026 03:13:10 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::67d96-1769831273088-b00f76493952\r\ncontent-length: 4341\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28032,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (28031)","md5":"b791fa2cfe8eea5dc35ba023b26bf0cb","sha1":"12f5d243511c0b9273162b3018d0dd57ccea4f1f","sha256":"6dc4c7194a918e7786fa782145e281df7b49fad5e2a449716bde8a904e07e0d4","sha512":"8d059d197b5ef2bd53175dc7f2092ddfb74d73c124965b15dc92600efb15e2bfc7efd6622e6e90f9a8513a817cbb9876588cf43f97478a5df12879b9aa71220c","ssdeep":"384:P56ed283ZcW23qWF7O36YBzQ4JYf1ojPFEINi:P56UJoYBzQmSojPFEwi","tlshash":"73c2c9093e2d3f38ba13a32440c0949c620b775feebd8797acd1265d9d9d78431aca79","first_seen":"2025-12-28T18:47:24.374234Z","last_seen":"2026-04-08T12:13:16.905421Z","times_seen":25,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Press+Start+2P\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://register-espresso.com/","date":"2026-01-31T03:47:53.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:56 GMT","end":"Mon, 06 Apr 2026 08:37:55 GMT"},"fingerprint":{"sha1":"DE:3B:B4:94:98:33:3A:CB:2A:A9:96:A1:CB:19:8C:84:B5:8D:23:E9","sha256":"D0:A1:5A:83:80:77:19:74:AA:CB:27:69:4A:C7:2C:F0:DA:06:9C:79:1E:07:77:9A:4D:7B:5D:AA:A2:D2:D4:E9"}}},"request":{"raw":"GET /css2?family=Press+Start+2P\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-espresso.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 31 Jan 2026 03:47:53 GMT\r\ndate: Sat, 31 Jan 2026 03:47:53 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1860,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"b7cad844ac5ba76f2eaa0a5f19927973","sha1":"0f619ace2a91abd4ba25e81b02b34e50708501aa","sha256":"c432858c887f02896894b1e44507b18fa1d22287d3bac0c1da9883849c63a118","sha512":"1056d64979f32cc0013a2564c64a6142439088d81b298c3da42cbd73ac308a5e0622cb5fee52c560d6e993e35eaaaea05d10226b42c65379b22a5c4252d1e632","ssdeep":"","tlshash":"043167e6052b94409b931cd373cf7e36de0e2125649184699efe1c84acbaca60391b5e","first_seen":"2025-09-17T02:54:26.564123Z","last_seen":"2026-05-30T20:06:37.656518Z","times_seen":1249,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":137,"dns":1,"connect":10,"send":0,"wait":20,"receive":0,"ssl":142},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-espresso.com/","fqdn":"register-espresso.com","domain":"register-espresso.com","tld":"com"},"ip":{"addr":"172.67.166.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://register-espresso.com/","date":"2026-01-31T03:47:54.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-espresso.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 01:28:13 GMT","end":"Fri, 01 May 2026 02:25:51 GMT"},"fingerprint":{"sha1":"03:6A:B6:2C:F6:3D:23:BD:21:F9:30:67:8E:82:91:15:5F:A5:74:27","sha256":"7D:1A:65:AE:C3:75:13:BE:9A:4D:B6:CD:33:58:01:FF:DC:BE:E8:EA:3A:CA:FB:D7:8C:B2:BB:2B:5E:02:04:ED"}}},"request":{"raw":"HEAD / HTTP/1.1\r\nHost: register-espresso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://register-espresso.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 31 Jan 2026 03:47:54 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sat, 31 Jan 2026 02:26:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nage: 2084\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8viv5lz6OhqVK5P851zGU3Kg4lcG4H8r9ZYk71dN21VuNK0NAmkO1UroyD3CoVD3FfrkIKvP5FDEqYQt3Q1AVP7BAksn3gdAcrTGQv%2FifmiyQfh8gg%3D%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: 9c663af75a5c76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-30T23:03:13.093782Z","times_seen":15934029,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-assets.i.posthog.com/array/phc_9Cg41wNBIXNBnxyvzsD9AC6UT5KSjNjTR4SSnj4uH4/config.js","fqdn":"us-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"172.66.166.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:55.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 21:09:57 GMT","end":"Mon, 20 Apr 2026 22:09:56 GMT"},"fingerprint":{"sha1":"28:A9:79:25:3F:AF:B7:89:AC:9D:42:8A:C3:69:5B:4C:8E:6F:4C:77","sha256":"4D:63:13:FA:35:7E:FE:29:D4:53:E6:EF:2E:3B:8F:06:9D:32:9C:B5:EB:7E:3C:76:62:83:84:76:B4:C3:88:3C"}}},"request":{"raw":"GET /array/phc_9Cg41wNBIXNBnxyvzsD9AC6UT5KSjNjTR4SSnj4uH4/config.js HTTP/1.1\r\nHost: us-assets.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://claim.espresso.foundation\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 31 Jan 2026 03:47:55 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 534\r\nvary: Origin, Referer, Accept-Encoding\r\nallow: GET, HEAD, OPTIONS\r\nx-frame-options: SAMEORIGIN\r\nreporting-endpoints: posthog=\"https://us.i.posthog.com/report/?token=sTMFPsFhdP1Ssg\u0026sample_rate=0.1\u0026v=2\"\r\ncontent-security-policy-report-only: default-src 'self'; style-src 'self' 'unsafe-inline' https://*.posthog.com https://fonts.googleapis.com; script-src 'self' 'nonce-2iUyeh6yRFfVTYoRL2WJQP' https://*.posthog.com https://*.i.posthog.com; font-src 'self' https://*.posthog.com https://app-static.eu.posthog.com https://app-static-prod.posthog.com https://d1sdjtjk6xzm7.cloudfront.net https://fonts.gstatic.com https://cdn.jsdelivr.net https://assets.faircado.com https://use.typekit.net; worker-src 'self'; child-src 'none'; object-src 'none'; media-src https://res.cloudinary.com; img-src 'self' data: https://*.posthog.com https://posthog.com https://www.gravatar.com https://res.cloudinary.com https://platform.slack-edge.com https://raw.githubusercontent.com; frame-ancestors https://posthog.com https://preview.posthog.com https://vercel.com; connect-src 'self' https://status.posthog.com https://*.posthog.com  https://raw.githubusercontent.com https://api.github.com; frame-src https:; manifest-src 'self'; base-uri 'self'; report-uri https://us.i.posthog.com/report/?token=sTMFPsFhdP1Ssg\u0026sample_rate=0.1\u0026v=2; report-to posthog\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-opener-policy: same-origin\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 22\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ranges: bytes\r\ncache-control: max-age=300\r\ncf-cache-status: EXPIRED\r\nlast-modified: Sat, 31 Jan 2026 03:47:55 GMT\r\ncf-ray: 9c663affbc56b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":892,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (694)","md5":"9e10e3029dd4060973ea42f79e34356c","sha1":"7150eebed1de980ce093662f2c18f5150e3b0f51","sha256":"ae86156111d96c259958d7efc1f381162f64d5170a8faaecec8524de21776fdf","sha512":"651a9f259b4fe7a4ec28070e3a5c052ae6a2b4fe5c2032e4643f17101f7c956fdb75a243da336a93a0f9ac4584174f8baed098fb398ec39a06e81039d2a67475","ssdeep":"","tlshash":"ea115929f89008be00e6b51eab97e0436f7b80db52484c1df9c45145bb1d83b9986fc5","first_seen":"2026-01-30T19:04:09.914443Z","last_seen":"2026-01-31T07:12:50.33063Z","times_seen":7,"resource_available":true,"data":null}},"time_used":405,"timings":{"blocked":18,"dns":4,"connect":1,"send":0,"wait":368,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/home.page-CVUoYbyJ.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:53.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/home.page-CVUoYbyJ.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 61848\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"home.page-CVUoYbyJ.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 31 Jan 2026 03:47:53 GMT\r\netag: \"16686040e03a719ac9fbfe872a07a3d2\"\r\nlast-modified: Fri, 30 Jan 2026 10:37:04 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hlkhv-1769831273551-0d9ce32463f7\r\ncontent-length: 5355\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12891,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12462)","md5":"6c77dbad2ae3fac6b2f013f05c169935","sha1":"cf05e0cd47131a547f8a921a916b0614cf8bb4f0","sha256":"001232ba8ace103af130eee68c74a6fb7d7fdae65d4a06458cb9d00201ace36d","sha512":"5724a58640d6093a63347474195679f2038a2b1a27418094a88ecb3f18c9eb86db0acf36e3b2da18d16776f3893b8f9e0a0cddbe24eb9e1c6978ead7ce9233a5","ssdeep":"384:iuy1cAKhYuXzTP3faWruuTO+PfzcmB+awuPohss+:zy1czhYczTP3faWruuTSawuPohss+","tlshash":"c4423b4cd299797ee6c20599257bd11c733a0a98727a8091d37e68360370dc2b937bdb","first_seen":"2026-01-30T19:04:09.916119Z","last_seen":"2026-02-05T00:02:23.571945Z","times_seen":9,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/background-music.context-CLvEvnk8.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:53.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/background-music.context-CLvEvnk8.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/home.page-CVUoYbyJ.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 61813\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"background-music.context-CLvEvnk8.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 31 Jan 2026 03:47:53 GMT\r\netag: \"539b8d3b438e9e5122cc1310fbdd3771\"\r\nlast-modified: Fri, 30 Jan 2026 10:37:39 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::l4nvj-1769831273645-ffdc2ea8ea64\r\ncontent-length: 927\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":927,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (926)","md5":"539b8d3b438e9e5122cc1310fbdd3771","sha1":"7f2521651189d41ed321a31cf99c063a5bbf628b","sha256":"501e9100bd864055d1ae3587f8be02d8f88d0b8c61f371b82e3d54aab2c04a98","sha512":"73a3f33902ebb1792bd396c8def7fe0800151657852638543e843bac76ee6f96d93df212d6709540000b1c1d817aa3c6122c7fe351f42730eae7f7ff3b88ff96","ssdeep":"","tlshash":"6111dcb7a8a4907afb8e09a409b1917937333755304a40f1e03ca4ab49d2582d67b7d9","first_seen":"2026-01-14T14:06:39.459677Z","last_seen":"2026-02-05T00:02:23.573049Z","times_seen":10,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/magna-decimal-CGNfJiea.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:53.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/magna-decimal-CGNfJiea.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-CUtwT3UT.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2083\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"magna-decimal-CGNfJiea.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 31 Jan 2026 03:47:53 GMT\r\netag: \"9a46f42293f49a1583d9ad49cacb8f7d\"\r\nlast-modified: Sat, 31 Jan 2026 03:13:10 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::67d96-1769831273797-d8c68f7958f4\r\ncontent-length: 13337\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31987,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (31986)","md5":"afd2475ce68b29ee23de7afa5ac6589c","sha1":"cb9d723e3b31fba7e3997f22395c5e03722bbb91","sha256":"b0a3a3a26b8ae838e55c6bd74555a177c829958f42f5b8fa0456931a64bc6df9","sha512":"1a9295e6e5a086ef4df8b740e23631b281240ca411d66f74fbd4e4e3bfb3b494ab4166ed67767956f3a2cedd62066bd217c1d777eae1526c43957f0975ae7aa2","ssdeep":"768:G6sjMlJ+Yo/2vqciEry53DiyfrgxlNTQamsZ:G6scMJ2vqVNE8rk1L","tlshash":"27e2c6e972a1f18663e734f201fb9406f23a7d44990d05b1f20886f93cb1686b36af75","first_seen":"2026-01-14T14:06:39.506799Z","last_seen":"2026-02-05T00:02:23.560291Z","times_seen":10,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/index.es-7R_i0dTC.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:55.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/index.es-7R_i0dTC.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-Cd8QJFwr.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 61850\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"index.es-7R_i0dTC.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 31 Jan 2026 03:47:55 GMT\r\netag: \"313658d02ce3086086f11a20762786c6\"\r\nlast-modified: Fri, 30 Jan 2026 10:37:04 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::zjtgd-1769831275512-61e93b507a0e\r\ncontent-length: 84125\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":346003,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (53177)","md5":"35a4795ba43156e67ce1f8502f2b5be2","sha1":"da8b0f41a0964cde537d196ffb9b8935aa8cdcad","sha256":"ed3be947c3fa3617c3d50b9b285aaca3983465db75d4f7b0a6f79788c2442001","sha512":"78e09a97a34cf26edcd861f9c6817ab900762379a6a037bb6b9a4ba971e40efeeadb5a50d56f197c3330b3c20f0fde0a5f285004a0f1a1f69a452d8d5c877e3b","ssdeep":"6144:RKozfkuuo9pepoE4y4++7o8IR4zHVwSbZnECpGN26NokB:RRhnep4y4+kO4pwSbZnX6NXB","tlshash":"d9742b8473b6a47603ea95d9a8352201f23458683049d46cffbc6defae844854b3ff76","first_seen":"2026-01-30T19:04:09.882089Z","last_seen":"2026-01-31T07:12:50.351875Z","times_seen":7,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/ledgerWallet-KZKJ5Q2S-DdZeAsds.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:55.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/ledgerWallet-KZKJ5Q2S-DdZeAsds.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-Cd8QJFwr.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2082\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"ledgerWallet-KZKJ5Q2S-DdZeAsds.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 31 Jan 2026 03:47:55 GMT\r\netag: \"717b03058e9eccce29ae3a8f15544b1a\"\r\nlast-modified: Sat, 31 Jan 2026 03:13:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::67d96-1769831275659-a304f4bc3e75\r\ncontent-length: 443\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":443,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (442)","md5":"717b03058e9eccce29ae3a8f15544b1a","sha1":"c2b626e64489c6f9084d3bad64c5fb73df88d797","sha256":"59642a8a9d30d9684f1aa6b4c8ca8886bf9a53491a3e238ad3aadac36f1917d9","sha512":"d339c57445af528cd655bad29dc18dbbf61ef6c5a8f6541b4735e8ef7ed872dbf173d22e3c67f976eb78bd25eb8b30a40b2613698d6ef9f24a485a61c7e9f6ee","ssdeep":"","tlshash":"b7f0abe64b508d00874a03b1cabc94c8313775eea758239cb2720619bd420afb90cbb0","first_seen":"2025-09-05T14:38:20.777264Z","last_seen":"2026-04-17T09:09:52.483064Z","times_seen":21,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/assets-NU2OP443-COMs-Mo6.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:55.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/assets-NU2OP443-COMs-Mo6.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/en_US-762U7H2X-yyzeC1pM.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 61811\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"assets-NU2OP443-COMs-Mo6.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 31 Jan 2026 03:47:55 GMT\r\netag: \"34655b758c0c687593438afead60111e\"\r\nlast-modified: Fri, 30 Jan 2026 10:37:44 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ksxp2-1769831275679-c854986b1c4c\r\ncontent-length: 3960\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17965,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (17964)","md5":"33ae24799663e13f83cee5987fa8f728","sha1":"2309fcbf480ac447c060a427f2a6cd24974dfa30","sha256":"aac5c0d81b97b3892fafba21cdf014c77be385f12d7b1f525dc3f79d0cb2ede5","sha512":"f576ef24f5393cb38276b01c0aaa4d41c56a04d9bd0b82c8e04202949fe343407f12514560fe743af27fbff37a401bcff5c38a25ed66cecdd581c265ab9ad58d","ssdeep":"384:LOr2OrPR1YS2qj0FNwZe7QnBZ4pFSMLYp9uVEK:LOCO11D2qYzdyzK","tlshash":"2c82fd9b8728d94e6e6b8ff8ffdcb4d9332c30e5222e04d4115e616291a359feb41d81","first_seen":"2024-12-25T05:30:42.584192Z","last_seen":"2026-05-20T16:17:57.627438Z","times_seen":81,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/root-CUtwT3UT.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:53.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/root-CUtwT3UT.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"root-CUtwT3UT.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 31 Jan 2026 03:47:53 GMT\r\netag: \"8479a912b788418f2c05e1a404348356\"\r\nlast-modified: Sat, 31 Jan 2026 03:47:53 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ksxp2-1769831273549-d5ac50956df4\r\ncontent-length: 549\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":549,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (548)","md5":"8479a912b788418f2c05e1a404348356","sha1":"e5106262d1cec36a065699f65cfe1be9a3a99f50","sha256":"557979de2b878155e504ae0d5f4750bf6b97a440b056097adbc74e4ae711fced","sha512":"e1a16c66824f132c976931e91c667da849500352d6ac15a37cdc81276026bc45eadc97d3b3de7d899480bf11728dc52eb18dcb8f1f58d304595eb9a28c837290","ssdeep":"","tlshash":"57f0be1bd54486b66391ccf1c1e0e2b06233815797e3d3b0d0df273693e48b6c6d6602","first_seen":"2026-01-30T19:04:09.848074Z","last_seen":"2026-01-31T07:12:50.380892Z","times_seen":7,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/proxy-BxNtYgHi.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:53.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/proxy-BxNtYgHi.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/home.page-CVUoYbyJ.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2082\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"proxy-BxNtYgHi.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 31 Jan 2026 03:47:53 GMT\r\netag: \"1647f85dd2c80272643bc412761a9485\"\r\nlast-modified: Sat, 31 Jan 2026 03:13:10 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hjd8m-1769831273647-aacfe2365213\r\ncontent-length: 40243\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":115479,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (39601)","md5":"a188ac03d4411288331db31b156b9740","sha1":"903b0d6abca85e595c5a77140ffb19f5c070a844","sha256":"516b51b06f3ce73f9cb3f0f783c4c38831cee5663854b3b620e2f830ac1fea4f","sha512":"06d0c03e5abfe1a5e7c0c3c1a4b89160139debeb6b329d8e7e313a846474c77172d38033de7b9899948be555ad3ce8b4e7605de2f30cc5c75c2a0bc823971275","ssdeep":"1536:t+2TsGd6fOmBgDHte9/Q3t/v5ScoeyUK8wlZWJDFV8lovCt5VyF6Puktr/:t+2Tdd6WFteRQ3t/vscoJUxwlMIwqr/","tlshash":"44b307c572917561d3d685e9c0bf0b41b73718983009c0bcb63dadcb6d2240aa6bbb7e","first_seen":"2026-01-14T14:06:39.428949Z","last_seen":"2026-02-05T00:02:23.57415Z","times_seen":10,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/index-CohomkmQ.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:53.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/index-CohomkmQ.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/home.page-CVUoYbyJ.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 61813\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"index-CohomkmQ.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 31 Jan 2026 03:47:53 GMT\r\netag: \"38514b0faeeb3504a155360cde8c8c6f\"\r\nlast-modified: Fri, 30 Jan 2026 10:37:39 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::l4nvj-1769831273648-2b5abe0ffc2d\r\ncontent-length: 1466\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3680,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3679)","md5":"57559ef8dee80a764111f5419139d290","sha1":"f6cd028022423a4169c8c4a571312073ba311412","sha256":"1d2b088ad5c6feb20999d1ded453af513b3348430db3848a6af0807af2fcac80","sha512":"e4eb88ea0b0b1739ee0f6516eb6da5b4feedbca421f81724268d8dcaae23c8b55b68a2950dbc20f25c18600a28474055593dd8b22dda5961e7680151b6bab641","ssdeep":"","tlshash":"b571128db7c4f04249c6a960037ba317b2a9377328bec2a593ee95b012675594227f74","first_seen":"2026-01-14T14:06:39.487256Z","last_seen":"2026-02-05T00:02:23.592968Z","times_seen":10,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/?format=json","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://register-espresso.com/","date":"2026-01-31T03:47:54.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 12:15:50 GMT","end":"Wed, 01 Apr 2026 13:15:39 GMT"},"fingerprint":{"sha1":"E8:04:3F:4D:91:E2:52:D3:E0:EA:F7:1A:C8:8C:94:50:7C:2E:FF:FF","sha256":"A1:8E:F1:BF:52:25:E4:EE:2D:91:8B:1E:0B:E7:A1:C3:B9:7D:DF:7D:D1:57:11:6A:14:CF:F2:A6:DF:D1:B0:18"}}},"request":{"raw":"GET /?format=json HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://register-espresso.com/\r\nOrigin: https://register-espresso.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 31 Jan 2026 03:47:54 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c663af77e8d120a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7d69c71af0f191e9a72db6153f8018d1","sha1":"f67c5f2887bc05654b47f76e9621e53a4091aed1","sha256":"5bac6e06cf0e1ad38c55f9f9d12122272bf4b8157877629fe68cd33fe2133c65","sha512":"fdf43a8f3d843fe9008949d6709c8e2a5cd640f6101522319745f0a829f21dc8f4bd4d70ff3e2f6e1fd53ca0d2dd872bf3588c593a403071102ab28763cbdba5","ssdeep":"","tlshash":"b8700022000000208c80800eca0a032223a0000ac20a00088e800b2288a0b380282032","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-05-30T22:13:53.074587Z","times_seen":92177,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":6,"dns":2,"connect":1,"send":0,"wait":117,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/entry.client-BZGv0Dvy.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:55.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/entry.client-BZGv0Dvy.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2082\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"entry.client-BZGv0Dvy.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 31 Jan 2026 03:47:55 GMT\r\netag: \"4e6ff072e92c8fa3ac5a1e4d283660d8\"\r\nlast-modified: Sat, 31 Jan 2026 03:13:12 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7jbp6-1769831275119-81c13d8fe785\r\ncontent-length: 61663\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":189577,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (54963)","md5":"87a49d9268a02072448fe90645ec8ee8","sha1":"6f47ea6e5aa317783a433be74b71ad388759eb75","sha256":"290c74c185aa9ba110d382b5d82955fe0790544a4240a6e7193378b6d3ccd80e","sha512":"2396514b1d8b13a4bdbcd51debb7d35bb4a302de33837d4e8a777dd7df862882315438c4878ddbd7aede573c8a955575beba655df11d745c191eaa46968b156e","ssdeep":"3072:IO8GfDyHDZubrIrn6BEnaE2CmfnoSA016Un/m:RvL4VunIz64eoSvL/m","tlshash":"07041bec32bea7566eb245e6109f1503727c28232c0c4c70a151fe9d66b844a51fbfee","first_seen":"2026-01-14T14:06:39.454737Z","last_seen":"2026-02-05T00:02:23.563885Z","times_seen":10,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/login-CWDTIDNK-DhDUYE4b.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:55.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/login-CWDTIDNK-DhDUYE4b.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/en_US-762U7H2X-yyzeC1pM.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2082\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"login-CWDTIDNK-DhDUYE4b.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 31 Jan 2026 03:47:55 GMT\r\netag: \"0d95c7b76de7398234f93d6201b6706c\"\r\nlast-modified: Sat, 31 Jan 2026 03:13:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hjd8m-1769831275682-489ad97d8afc\r\ncontent-length: 2843\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9275,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (9274)","md5":"baa5f0f7116deb709bd4b3a54c31eaff","sha1":"10c4efb11b9c1bcdd87aca0c0443f636c8d29b39","sha256":"63a8daf7039c537fe8d7ff88c50a6b8022e74f447d5df3ffcd6a515723252c33","sha512":"8d534b9541eb5d33576b4a5a2dbd28aadc57c01fc91ea3644bcfb13ad76470288c9ac8228a1fc8d6f30ca5873abb0c3b20136d5377bdb9923c3ff6665542b4bc","ssdeep":"192:dyAYirZ2ixxPjwzSFW5xrsRo3/58dmho4x7MV:EiN2Qjw+FWjARaidSpx7MV","tlshash":"261283ea5768627ed89bce6cdf668840130d70fd35b8c8e49a9ecf686057c89fd87010","first_seen":"2024-12-25T05:30:42.593071Z","last_seen":"2026-05-20T16:17:57.645038Z","times_seen":81,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/portal-config.context-Coov9jKr.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:53.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/portal-config.context-Coov9jKr.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/home.page-CVUoYbyJ.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"portal-config.context-Coov9jKr.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 31 Jan 2026 03:47:53 GMT\r\netag: \"ffee77eb572ae052d4463c4fb50f9573\"\r\nlast-modified: Sat, 31 Jan 2026 03:47:53 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hsg8h-1769831273633-6d544c193a96\r\ncontent-length: 351\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":351,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (350)","md5":"ffee77eb572ae052d4463c4fb50f9573","sha1":"58dbb86bbcef2da3911a2dc3326837e4f082a620","sha256":"1bd503503f94dfc63c388e86bb8039e7e457410197d6d74554fbf4f372826b09","sha512":"ce9bcb1a4e691ccaacf586f5c0e20bcda1d59bbecc66799fba8c0181d7daa95e8e6b5c1fac48ec9a1f2334268865397f5e3606570ffceeb6636041b7fc052aaa","ssdeep":"","tlshash":"14e0c09b6040f67277034ce119208534d333246b30258f70c01c852bbec40f6233f8d5","first_seen":"2026-01-14T14:06:39.450428Z","last_seen":"2026-02-05T00:02:23.583077Z","times_seen":10,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://register-espresso.com/","date":"2026-01-31T03:47:53.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:56 GMT","end":"Mon, 06 Apr 2026 08:37:55 GMT"},"fingerprint":{"sha1":"DE:3B:B4:94:98:33:3A:CB:2A:A9:96:A1:CB:19:8C:84:B5:8D:23:E9","sha256":"D0:A1:5A:83:80:77:19:74:AA:CB:27:69:4A:C7:2C:F0:DA:06:9C:79:1E:07:77:9A:4D:7B:5D:AA:A2:D2:D4:E9"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://register-espresso.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 31 Jan 2026 03:47:53 GMT\r\ndate: Sat, 31 Jan 2026 03:47:53 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4887,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3fd96ba77783845730c343cf00ac7a93","sha1":"bc4f7f4f71aeae387232155c55c4f031c5f3f769","sha256":"27b95b2fcbc857ba25f7e5a707c5c4c06c5cf93415519b7669c19f4045edca37","sha512":"20b137cf9c61842c7bad62dd6c36125833022552379ad97324dbee2c2e9cb0303b17a9aee813ea2bcdbb68541c8c6edbfecfcfb2858cf27c2cff480d756d80cd","ssdeep":"96:aYg4aMzqYg4aybFZHYg4agkYg4aUJ3vYg4aERYg4aYGJc+uTYg4aR6NDO4a3qO4L:vywfydyGy63gy/yFVyR73xpmj3U8fHN","tlshash":"37a1ed91006f9104ea431dd627cf7e32ad8e51956082e27d6ffd2dca6cdbd23122874c","first_seen":"2025-09-10T21:50:06.177565Z","last_seen":"2026-05-30T22:53:23.317507Z","times_seen":15742,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":137,"dns":2,"connect":7,"send":0,"wait":20,"receive":0,"ssl":141},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/hiunicornstudio/unicornstudio.js@v2.0.1/dist/unicornStudio.umd.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:55.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /gh/hiunicornstudio/unicornstudio.js@v2.0.1/dist/unicornStudio.umd.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 31 Jan 2026 03:47:55 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 40621\r\ncf-ray: 9c663aff1b9449c5-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 2.0.1\r\nx-jsd-version-type: version\r\netag: W/\"27f09-y/Rvi2bV0iZWjaDz7inrFDeE0Mk\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-etou8220079-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 1579980\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=WJK6Z%2Fc%2BTB6jQdUdgNq04Z73yWP2yYAwAYMuZS4siAcXphTDXoLFC%2BbZ9weMPTquIrM5tYnbWZl%2FsYxfhk21I1moyOjN0SJT1svjlkAVP%2FpriRB2KJwMbsHnzgHDI6hctIo%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":163593,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d62fcb8aae79e4ddff0c2f73514cac7f","sha1":"cbf46f8b66d5d226568da0f3ee29eb143784d0c9","sha256":"9a64dbb9af5e9672cc99b091377d7df9a9d1dcb2a910b639360e77b18a31cd71","sha512":"be67b0445a5e1603905d44b113b7d5c70f675e8901d6cf7a7f918cb61f197d581abee3af79af6e846d27cf87b7a0fcac17e0330455992ec09ee337b194a05f35","ssdeep":"3072:2dkdy/7ekEfcyDjn/+H4/l81Ei7PlzLWymGMbnDaURDS5WfeT:2dkdy/7ekEfcMRDS5WfeT","tlshash":"9ef3e9a6716b642e0982818bf0750e07a226655c340dc46d7b7cb8ff68ece5e317d73a","first_seen":"2026-01-30T19:04:09.913225Z","last_seen":"2026-05-29T10:09:54.461281Z","times_seen":16,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":13,"dns":6,"connect":1,"send":0,"wait":9,"receive":2,"ssl":5},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/okxWallet-GJMKZIND-Ctk5JsJ6.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:55.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/okxWallet-GJMKZIND-Ctk5JsJ6.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-Cd8QJFwr.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2082\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"okxWallet-GJMKZIND-Ctk5JsJ6.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 31 Jan 2026 03:47:55 GMT\r\netag: \"f4c59e31efbcd88c687fc0a977d992ca\"\r\nlast-modified: Sat, 31 Jan 2026 03:13:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ksxp2-1769831275672-07e48aa4db57\r\ncontent-length: 898\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":898,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (897)","md5":"f4c59e31efbcd88c687fc0a977d992ca","sha1":"486cb19e8e6498704d418690e59128ebf9a02c6e","sha256":"92b49f1aed987eee109fd98567002c0420d85c602003e003b0f2ad3513c41f15","sha512":"01d94e855345137a19596757a9b585c74536b3c847f6c34ce07e2890fc4536375a159870aa1c88ff8a9b24f94c3cfee0eac0998d73170b52c9887080dff1ec54","ssdeep":"","tlshash":"8e115b9600ad4ddecc5da1eb937ca4aa573d2df8763881352f4c8b5020aacf8f44ad5c","first_seen":"2025-04-09T07:08:13.428855Z","last_seen":"2026-05-20T16:17:57.647911Z","times_seen":47,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"magna-public-assets-prod.s3.us-east-1.amazonaws.com/portal-assets/espresso/unicorn-animation.json","fqdn":"magna-public-assets-prod.s3.us-east-1.amazonaws.com","domain":"magna-public-assets-prod.s3.us-east-1.amazonaws.com","tld":"s3.us-east-1.amazonaws.com"},"ip":{"addr":"16.15.191.133","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:55.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 20 Jul 2025 00:00:00 GMT","end":"Thu, 25 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"16:D2:7A:E0:6B:B2:6D:C0:8F:8C:4E:E5:2B:1F:47:F3:EF:60:7F:68","sha256":"EF:42:24:62:84:5D:EF:F9:AE:18:7F:85:D7:C7:56:73:2D:8B:30:D2:CD:83:77:3B:45:EF:24:B2:93:43:99:33"}}},"request":{"raw":"GET /portal-assets/espresso/unicorn-animation.json HTTP/1.1\r\nHost: magna-public-assets-prod.s3.us-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim.espresso.foundation/\r\nOrigin: https://claim.espresso.foundation\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: u/rz5TfMNm6Xe+9Q1UH3oj2AkaedXtt4ZStcJyhxNmWbPfxG6quygpmqHYp2PzYLcQc1r48xZvcDxPj2JcBNflScBd7RM1WX\r\nx-amz-request-id: PF63D1A51XFPQPYQ\r\nDate: Sat, 31 Jan 2026 03:47:56 GMT\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, HEAD\r\nVary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-amz-replication-status: COMPLETED\r\nLast-Modified: Fri, 16 Jan 2026 10:57:15 GMT\r\nETag: \"2ea07af947a247d91ddb094057983718\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: yoEgpUTK0HwwaorqC_3lM4zQe4dn91Hn\r\nAccept-Ranges: bytes\r\nContent-Type: application/json\r\nContent-Length: 56423\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":56423,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2ea07af947a247d91ddb094057983718","sha1":"f09ec926559ecf8dd1d7b02e535108c095767f3f","sha256":"260d78304c9f29249b0a22d6ae969adc5229b7f31100cb9cd80cd0e6679436ce","sha512":"5019faf50bff8d5a8f6df76f1bede43f2842942a7aa55280582adb3856740a1b297023fe808265ae0c6456b31a539fd06b9f40caeccd4ec309453c8eb363d00e","ssdeep":"1536:El31c1NrzuK2drRbHZF6pDyzCnCFkCbCFyCbC5L7U7soa9:El31c1NvhorRbHVz0QkOQy0KL7U7st9","tlshash":"5f43c5b464dad1249f07ad5ddc130288e37e70f91844a6979e1ec881e0c735ce7baadb","first_seen":"2026-01-30T19:04:09.864004Z","last_seen":"2026-04-08T12:13:16.917948Z","times_seen":14,"resource_available":false,"data":null}},"time_used":649,"timings":{"blocked":208,"dns":7,"connect":93,"send":0,"wait":127,"receive":94,"ssl":117},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/use-on-connect.hook-BlUhT0wN.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-31T03:47:53.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/use-on-connect.hook-BlUhT0wN.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/home.page-CVUoYbyJ.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"use-on-connect.hook-BlUhT0wN.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 31 Jan 2026 03:47:53 GMT\r\netag: \"6289d88ae4c7996731868f5c55665e76\"\r\nlast-modified: Sat, 31 Jan 2026 03:47:53 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vf8k2-1769831273642-1385bd5d4c7a\r\ncontent-length: 654\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":654,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (653)","md5":"6289d88ae4c7996731868f5c55665e76","sha1":"a99342af732a4f727ad9cccc994f54613aca5b96","sha256":"3ddb248ca42188f56b7d2eccc03cdc7eb62db0a99bd31fc7197305f2676ac6a1","sha512":"8fe83918ce8ab58be64237afd2181d0256f31de40a9e137f360c7ae6079d46e358569e368fbd21272ff7d430b4757999a7191d27eb70814f2bcbd9163aa13c21","ssdeep":"","tlshash":"d6f0dd9690c1c1f8930a9ce9c538a7be0a211a99728982c4ecae58331695dc0802ba4b","first_seen":"2026-01-30T19:04:09.892638Z","last_seen":"2026-02-05T00:02:23.584386Z","times_seen":9,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}