{"report_id":"777b5488-4f43-4cf0-9ac4-a3aea950815e","version":6,"status":"done","tags":[],"date":"2026-01-14T14:06:27Z","url":{"schema":"https","addr":"espresso-registration.app","fqdn":"espresso-registration.app","domain":"espresso-registration.app","tld":"app"},"ip":{"addr":"104.21.60.213","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"espresso-registration.app/","fqdn":"espresso-registration.app","domain":"espresso-registration.app","tld":""},"title":"Espresso Claim Portal","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T19:57:32.423433Z","times_seen":17842444,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"espresso-registration.app","fqdn":"espresso-registration.app","domain":"espresso-registration.app","tld":"app"},"ip":{"addr":"104.21.60.213","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-18T14:06:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":5}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-14T14:06:02Z","timestamp":1768399562,"ip_dst":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":36016,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2026-01-14T14:06:02.448766+0000\",\"flow_id\":669686916890577,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.13\",\"src_port\":36016,\"dest_ip\":\"172.67.74.152\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":915,\"bytes_toclient\":3512,\"start\":\"2026-01-14T14:06:02.442321+0000\"}}"}],"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-01-14","alert":"PHP webshell obfuscated by encoding of mixed hex and dec","trigger":"espresso-registration.app/assets/secure.php?req=ping","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/04/18","description":"PHP webshell obfuscated by encoding of mixed hex and dec","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_obfuscated_encoding_mixed_dec_and_hex"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-01-14","alert":"Known PHP Webshells which contain unique strings, lousy rule for low hanging fruits. Most are catched by other rules in here but maybe these catch different versions.","trigger":"espresso-registration.app/assets/secure.php?req=ping","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/01/09","description":"Known PHP Webshells which contain unique strings, lousy rule for low hanging fruits. Most are catched by other rules in here but maybe these catch different versions.","hash":"7b6471774d14510cf6fa312a496eed72b614f6fc","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_by_string_known_webshell"}},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"claim.espresso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"espresso-registration.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"fbsfoewlknwkpew111.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-11T22:17:18.570046Z","alert_count":0,"request_count":4,"received_data":14996,"sent_data":1974,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"magna-public-assets-prod.s3.amazonaws.com","ip":{"addr":"52.216.38.177","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2005-08-18","domain_rank":0,"first_seen":"2025-12-28T18:47:20.473023Z","last_seen":"2025-12-28T18:47:20.473023Z","alert_count":0,"request_count":1,"received_data":10612,"sent_data":492,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-01-11T22:20:23.507747Z","alert_count":0,"request_count":1,"received_data":435184,"sent_data":446,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fbsfoewlknwkpew111.live","ip":{"addr":"172.67.212.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-11-30T01:31:05.094993Z","last_seen":"2025-12-28T16:33:18.725095Z","alert_count":1,"request_count":1,"received_data":629,"sent_data":469,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"espresso-registration.app","ip":{"addr":"172.67.201.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":9,"request_count":7,"received_data":3580882,"sent_data":3126,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"rpc.walletconnect.org","ip":{"addr":"3.69.205.134","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2018-03-26","domain_rank":891779,"first_seen":"2023-02-11T03:06:43Z","last_seen":"2026-01-02T07:20:43.814823Z","alert_count":0,"request_count":1,"received_data":1653,"sent_data":552,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-01-11T22:30:04.050705Z","alert_count":0,"request_count":1,"received_data":157958,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"public-bsc.nownodes.io","ip":{"addr":"172.66.145.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-05-20","domain_rank":0,"first_seen":"2025-10-14T19:44:58.496919Z","last_seen":"2025-12-28T16:33:03.325456Z","alert_count":0,"request_count":2,"received_data":1592,"sent_data":1061,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"assets.unicorn.studio","ip":{"addr":"34.120.54.136","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2020-08-17","domain_rank":3759026,"first_seen":"2024-10-30T11:09:32Z","last_seen":"2026-01-05T03:56:19.268519Z","alert_count":0,"request_count":1,"received_data":77131,"sent_data":525,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}]},{"fqdn":"api.ipify.org","ip":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-05","domain_rank":8166,"first_seen":"2014-10-06T12:38:43Z","last_seen":"2026-01-12T07:53:36.470765Z","alert_count":0,"request_count":1,"received_data":271,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-11T22:14:24.773767Z","alert_count":0,"request_count":1,"received_data":73799,"sent_data":548,"comment":"","tags":null,"fingerprints":null},{"fqdn":"claim.espresso.foundation","ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2022-02-16","domain_rank":0,"first_seen":"2025-12-31T12:33:52.770511Z","last_seen":"2025-12-31T12:33:52.770511Z","alert_count":46,"request_count":46,"received_data":5416882,"sent_data":22215,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"magna-public-assets-prod.s3.us-east-1.amazonaws.com","ip":{"addr":"52.216.222.162","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2005-08-18","domain_rank":0,"first_seen":"2025-12-31T12:33:52.777756Z","last_seen":"2025-12-31T12:33:52.777756Z","alert_count":0,"request_count":1,"received_data":51232,"sent_data":534,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"claim.espresso.foundation/","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"31c5ca8344606c644357cc7bc5fcb4f2","sha1":"15e7956f4907328c3862fa720a83785f0ed12b87","sha256":"74dcb4cb8f2d15ddd47a1fa2cdb56cb103d54874a465c7b55698ab4f6c1cd63e","sha512":"d85c94991e10b65bb479d56f3d45b638f0f1e41a162ca309960ef86dcd5b5336ea6100adb6d2e72ef674722cf05978893d4e9c682b133f299d9eb829ac6123ff","ssdeep":"","tlshash":"78f04c0f859102324dfba1692e57a21170b6a0db294a4a0839ad411c7faec2b4785bc0","size":592,"data":"","first_seen":"2025-03-03T03:45:08.736625Z","last_seen":"2026-08-11T18:48:32.447234Z","times_seen":7843,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"71dfe42af37cec6e1b8a11bd0a94d293","sha1":"2e30765cce85dc76c46065bc9cd4d5da92f173e3","sha256":"d3fbc2d1399dbbfdc68499799ef4a79ed43b2b8096f14395a2aea2040de6ebd2","sha512":"1f3cdf0a2f826385c2cd428986a9c00ffdd0a995e25a5fd76f74d2db5f5f607b92dc518eba0c04d32995ce8d585e4c98bee88cb9c6c16fc9ef229f659668556c","ssdeep":"","tlshash":"50f09738182a0bed4bd326dc9603bb1a331842836404a531d9eccab834c34fa6033cea","size":472,"data":"","first_seen":"2025-12-07T20:46:41.259343Z","last_seen":"2026-07-29T15:21:02.198705Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/user.context-Cpjw0NH7.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"56e6c445b75ce1de2ab55147eeaefa07","sha1":"b568d4cf801a8548fae32bb4b4a2029391d1b466","sha256":"b9e495a35a7a9c2a7b0806ea33a1a19ba8654b09b0dedd03f56a075996b8df37","sha512":"42db848fedc0f6ad3441206bf8c50c1219be7b7a6cd8bc6d2bb36276e3058791d569866784041f84c9c8a85b6ec3c79654633136b28a3f627a1b0625a901b6d5","ssdeep":"384:wPQJMJF7sMqTKP/bSZu/dcLgl1lkkObqtrC8CmUZr8sEo2M48/DFYREV7J/RC5AU:wPQJMJFITKP/b24dcC1lkMtrC8CBl8uM","tlshash":"5bb2f75831d9e0b142e750a0947f620bf17819a0e05ca4a4e2aafdf439f8d97817bf36","size":23804,"data":"","first_seen":"2026-01-14T14:06:39.514611Z","last_seen":"2026-02-05T00:02:23.65945Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/trustWallet-E2GVGE4U-CcH50yxW.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a25b589fc633676b9a58fa384f2d0334","sha1":"119f38e7d9e19f351e022c5fa0f537f15ea3f933","sha256":"7edbc680126336b8db68846c0b688c957b60afd953859b06ca9dfd6a74a54f02","sha512":"ad917ac1bc65cbd0d55a05d5e39241f3badda088e0a56bf1d332a82c1df6d46e706c54bf3f9ddf22c75c3e754a33d6c3c03b2e6138720a09e85e0ce96cd9dc9b","ssdeep":"","tlshash":"3c01c0dbdb29dc77c85f83bced08a4a3521876db60c8436ee6554f1f25a808b1c0db60","size":760,"data":"","first_seen":"2025-06-03T09:03:10.609568Z","last_seen":"2026-07-13T09:43:22.197199Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/assets-NU2OP443-COMs-Mo6.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"33ae24799663e13f83cee5987fa8f728","sha1":"2309fcbf480ac447c060a427f2a6cd24974dfa30","sha256":"aac5c0d81b97b3892fafba21cdf014c77be385f12d7b1f525dc3f79d0cb2ede5","sha512":"f576ef24f5393cb38276b01c0aaa4d41c56a04d9bd0b82c8e04202949fe343407f12514560fe743af27fbff37a401bcff5c38a25ed66cecdd581c265ab9ad58d","ssdeep":"384:LOr2OrPR1YS2qj0FNwZe7QnBZ4pFSMLYp9uVEK:LOCO11D2qYzdyzK","tlshash":"2c82fd9b8728d94e6e6b8ff8ffdcb4d9332c30e5222e04d4115e616291a359feb41d81","size":17965,"data":"","first_seen":"2024-12-25T05:30:42.584192Z","last_seen":"2026-07-19T05:50:19.550396Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/metaMaskWallet-YFHEHW7V-BggUDXad.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9faabc0cac059efd75278832f35fba0","sha1":"75a665ec82b0dd2ccab406db25ed49f69ba40931","sha256":"748a6c743322ec0b319bf361b84e929e5099721824636f5a4befd8e0ff8ab826","sha512":"7ab0d0071f01aad00b47c9fd55ef2748c61eeeb46b3abfb66afdae61970d62a77a0f643be0c95cab9a778d28a816b75fbb5c4667be6b794d97cec3937d0b5eec","ssdeep":"192:M1vaqYOX292169AY32zqzKHio+21BZBTibnKCU+jpBxMCXV:my933BU+V","tlshash":"17d15deb67488cbcb8271f24e34a3271613836d7692ee6594c738a79090519dbb7fcc4","size":6516,"data":"","first_seen":"2024-12-25T05:30:42.586528Z","last_seen":"2026-07-19T05:50:19.564637Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/rabbyWallet-FLVUU35F-BZrp4syk.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"174b08de1e202256a72f7663e79b8461","sha1":"602e294d94f061211502895741144c4320248855","sha256":"0767c9b588d0ab9b532619b26d91fe6e5163f541bcc2d6a9e9adae18f670dc8d","sha512":"640ce4e8d836b4ea90ace61f30c3cbe697e7d9a7d6d04c4b4a4e0f1845f850754434d0415ee9f3a7ec0856d679fe14679d1548d99385bb887a205fb0ab6d3b1f","ssdeep":"","tlshash":"594183e8eb38e993edadc67cdf19a475310e30ff909441a551d65b1e30646d33e0a650","size":2370,"data":"","first_seen":"2025-04-01T04:17:39.073172Z","last_seen":"2026-04-10T09:11:01.513661Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/okxWallet-GJMKZIND-Ctk5JsJ6.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4c59e31efbcd88c687fc0a977d992ca","sha1":"486cb19e8e6498704d418690e59128ebf9a02c6e","sha256":"92b49f1aed987eee109fd98567002c0420d85c602003e003b0f2ad3513c41f15","sha512":"01d94e855345137a19596757a9b585c74536b3c847f6c34ce07e2890fc4536375a159870aa1c88ff8a9b24f94c3cfee0eac0998d73170b52c9887080dff1ec54","ssdeep":"","tlshash":"8e115b9600ad4ddecc5da1eb937ca4aa573d2df8763881352f4c8b5020aacf8f44ad5c","size":898,"data":"","first_seen":"2025-04-09T07:08:13.428855Z","last_seen":"2026-06-19T04:51:30.55393Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/roninWallet-SAB5ESVK-fW2QoTxP.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"68f97b0ae9e3156ac22560e59bd69d4e","sha1":"9809da0a9ae9c30ab42202c55b07eef3acd8d1fb","sha256":"8959d6d3640f29ffad2fcde3305042bd42df292e2059935d19d5227dbe809290","sha512":"d9d8677af4e67b9e869da5a01e783a25305798a87461bc1915b6f9c200ec06c5b44b79758c89ecfbc6324647893faa387e3f594b71729f0d7beb1a457370cf2b","ssdeep":"","tlshash":"36119ce5910889aec51fc22cdd109462231f24e67acac697a7fd4f393147443fc07a59","size":975,"data":"","first_seen":"2025-12-31T12:33:59.906467Z","last_seen":"2026-07-09T03:01:17.40461Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/phantomWallet-IPGVKCAB-BGoqRxdn.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d8d3e122c71dad3b911494fe2c10c5f8","sha1":"1b78a2cd20efa5bf8974c3f1d828585a4dec9961","sha256":"074e942e3627e6929f68a9f298e84f7ca26788c12c1dfc6caf7dc90473303910","sha512":"cf37e331c970b63ce5d64b41b174e697175c73e2d942534a7b77daac130ca72233a08809240204283a3bf66bc52c73846ed55ba5add6302341688d4714158d22","ssdeep":"","tlshash":"e411dcd20f3080e50e9aae39ad3878e416b171af737826841349cf34ea83dc74508a50","size":919,"data":"","first_seen":"2025-05-30T14:20:20.549969Z","last_seen":"2026-04-17T09:09:52.493057Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/mewWallet-6V4UZOQC-B0qJRky8.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ba9b4ec5d6e0138fdc7dcea74d719b1","sha1":"7e9a5254388ae9b05ccab215bcadfda7cbb92178","sha256":"cabb87e570e8e5c15a34eeb5c010a7651a3e878e76568fa8f274903a86c23047","sha512":"8bbc357ee098b1666e94e09a19e0b9711acc240227e819daa87a564a6a0ff456a338c4b61d83f68344063ce6c0ac09d7ef5e9ccb4c711aefc103562691a600de","ssdeep":"192:vSL2IcUA1oFBu/kyilFZl1s7tWld8YgsII9P3cO6+fzRXygn3IJigNnvMqDCdFIZ:vSL2IcUm/XwZvw0IGrCgivRhilI","tlshash":"9742c5d0332c53f9f507c3a9a7aaa0569a7c30da3daf5158f64f05256b144fa883f843","size":12987,"data":"","first_seen":"2025-12-31T12:33:59.905722Z","last_seen":"2026-04-08T12:13:16.929881Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c3e3e350f78cf22bd7b335d70b41a58a","sha1":"cce22220b6a8dff76692755cc45439b4ec474a4d","sha256":"ee6bb81f4e9fc030a39a7c71affc4d1f2b900baa4b4c7af83361388d7c39599b","sha512":"15b6cbf8bd67e82a4952004138ebc95c44e4d373317826f1560eeec13416cc1d6a38d834609ef4b713e7a9c92d1b1bbf84de08e2e4061ed3d1e3891982c25b0a","ssdeep":"","tlshash":"3f90025ff2302063a756122b166f15456421626565550869123830eb4955148474265c","size":57,"data":"","first_seen":"2025-06-30T14:23:19.448274Z","last_seen":"2026-08-11T19:53:41.408387Z","times_seen":66843,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/chunk-EPOLDU6W-DGaTw-IN.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"c6abfd9f96d5722cdb6157b22e513600","sha1":"67ca400bde56b3d399c8f9cdd1d303ecd24b5111","sha256":"5918ef25bf99e2b2850ab7532eebabdc1df17a7e0d1bcb041a2f3f5ba6a02fad","sha512":"273eac63aa5f47dec6979994ad74e3d461e96ca383d190cf521500d729b39b45d2da1f6a1a21a56a8debae5f7ee7712c9891df97d3a21c0e6f782173460a82fa","ssdeep":"1536:YZe4IJi0G4pPj0hsIkZxr5bRRvMViduOZgVI/rYWYYKyWXML:Ge4IoMaUZxr/RvMVid1GVI/rYWYYLW6","tlshash":"63c33bf9729270794bef13f180bb0015b3b92ca9246d8015b2acc99e35b5c4c967bf79","size":125122,"data":"","first_seen":"2026-01-14T14:06:39.446125Z","last_seen":"2026-02-05T00:02:23.601915Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/safeWallet-VUYZPLY4-CXnodgMs.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a09d06d29fe2837adda28d773f8d6e5","sha1":"93c50ca2782f3f0b4c1f6d48c9fa33476f772ac0","sha256":"aaaf8c1f6acc96bda06bfc1e526611b918cd12021d54b15cce8fef605554938e","sha512":"7c181bd28ffca7872846372455d30661b0b89069cc473f94ac177247350091749470603dbf2827abc14eee65d5f98c37664defe6105075889415cee5bc3ac9dd","ssdeep":"","tlshash":"c531229136cca6e0770ae321cd04c166f85528effd66e35c6a015862bd0846d758cdfd","size":1449,"data":"","first_seen":"2024-12-25T05:30:42.588753Z","last_seen":"2026-07-19T05:50:19.558096Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/login-CWDTIDNK-DhDUYE4b.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"baa5f0f7116deb709bd4b3a54c31eaff","sha1":"10c4efb11b9c1bcdd87aca0c0443f636c8d29b39","sha256":"63a8daf7039c537fe8d7ff88c50a6b8022e74f447d5df3ffcd6a515723252c33","sha512":"8d534b9541eb5d33576b4a5a2dbd28aadc57c01fc91ea3644bcfb13ad76470288c9ac8228a1fc8d6f30ca5873abb0c3b20136d5377bdb9923c3ff6665542b4bc","ssdeep":"192:dyAYirZ2ixxPjwzSFW5xrsRo3/58dmho4x7MV:EiN2Qjw+FWjARaidSpx7MV","tlshash":"261283ea5768627ed89bce6cdf668840130d70fd35b8c8e49a9ecf686057c89fd87010","size":9275,"data":"","first_seen":"2024-12-25T05:30:42.593071Z","last_seen":"2026-07-19T05:50:19.57153Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"58c586e7af4613815a41aae60a40c654","sha1":"56fb96c42b5085e1e4529e7a4ba4540e2420e3f0","sha256":"8b866e4aef8ad8b1d47dbe703c042165fe8b0f069b471108d305323d44946e64","sha512":"905a1bcfdba43f3c9eb833d2d26e367b15bf8bc3aee7292465ea443b5d866eacee007b19186c8d1cc9b0dafc13516729074b912614307305c208a291aa21e6f5","ssdeep":"192:voHtIVj7H93TfLljWDDXiV/HRiYSnCs8UPCTU4J9KBDGGsMMAxoFUp7ppS:2tIV1L4qqYSCsByTCxoFIpS","tlshash":"5d52e6efd900e2761b930f85373a3de962a662940ba6144c851dc5a417106bbeb3f1df","size":13813,"data":"","first_seen":"2026-01-14T14:06:39.522453Z","last_seen":"2026-01-14T14:06:39.522453Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso-registration.app/assets/eleven.js","fqdn":"espresso-registration.app","domain":"espresso-registration.app","tld":""},"ip":{"addr":"172.67.201.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0731dc266a43636b0e166275728b329f","sha1":"10ab55c566941fe6319681ccaa36e6313c7336e6","sha256":"c8a7922f93eb75f4329d4576efd7cba8a84cd888cf80856fa42dd171a4efe22f","sha512":"01ad04b1d570264819d09409aa94fec0af2f32c2b00dd96d76d8ed616b8293dbbe912e60cbb42a144ee4c665be0039f0f6036ee1ba7c3e682e0fa22066c7a744","ssdeep":"98304:dml/voXqyL4cDRxWyeI4vWSuyZXJPcrnE:dq/gXqyL4cDRxWyeI4vWSuyZXJPcrnE","tlshash":"3ef57c8073b1a079439741e4947b1501f238a85a7408c0acfbecd9f7af999c9897bf79","size":3556158,"data":"","first_seen":"2025-12-02T13:22:34.804996Z","last_seen":"2026-08-09T03:42:01.548401Z","times_seen":522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/x.icon-B-1mXS8R.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"1d5ca9fc89a2b58de61c6ba3a8015341","sha1":"4f9b82272ee87342d81ad7a16cca024e1497f46d","sha256":"b66026f6ab26a0bae77a8273ef7e0d683ea316fc428046769b85195eb0891a85","sha512":"046d9b41904af8361c3556e13c1206f2bbde3a741ea0a53fedcb231c9c1238a3c7cb7a73ad3bd9f3208625338cb44fd494226e47014d2993ef099462a9940e96","ssdeep":"","tlshash":"80f097ff83c1609848595fa62ab23c251177e5f993a409a0c54449619d2d0f6731ee82","size":458,"data":"","first_seen":"2026-01-14T14:06:39.448198Z","last_seen":"2026-02-05T00:02:23.668402Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/entry.client-BZGv0Dvy.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"87a49d9268a02072448fe90645ec8ee8","sha1":"6f47ea6e5aa317783a433be74b71ad388759eb75","sha256":"290c74c185aa9ba110d382b5d82955fe0790544a4240a6e7193378b6d3ccd80e","sha512":"2396514b1d8b13a4bdbcd51debb7d35bb4a302de33837d4e8a777dd7df862882315438c4878ddbd7aede573c8a955575beba655df11d745c191eaa46968b156e","ssdeep":"3072:IO8GfDyHDZubrIrn6BEnaE2CmfnoSA016Un/m:RvL4VunIz64eoSvL/m","tlshash":"07041bec32bea7566eb245e6109f1503727c28232c0c4c70a151fe9d66b844a51fbfee","size":189577,"data":"","first_seen":"2026-01-14T14:06:39.454737Z","last_seen":"2026-02-05T00:02:23.563885Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/hiunicornstudio/unicornstudio.js@v1.4.33/dist/unicornStudio.umd.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6dd0e8b7b5f75a6501cb1509c0087c63","sha1":"352eb297aea0ef2d48479b77e1bc78dabad7f2b1","sha256":"6d507e9c4cf82bd660de8f12d86283a38740c2f500fe4c1a8c1df706ccf00d77","sha512":"32a94d7f7781075c5f7b2a41cadbe467aa590b4bd1a52200ebef56b9b12669b06e4575e9a4415c0955e94135debc968d7f2a6846a9d6093a901b0807ec8673b3","ssdeep":"3072:tf+dkdy/deokCY3V6dLmRe+H4l5SQEePPEZLDoPhMbnrmLmit7W7ttQwdi:cdkdy/dJkCY32LjkIui","tlshash":"34e30ae6716b682e4981c247f0350e07a226a45c340dc46d7a7cb9ff64ecd5931bdb3a","size":156833,"data":"","first_seen":"2025-10-17T10:36:32.745395Z","last_seen":"2026-07-04T17:49:12.163175Z","times_seen":101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/index.es-CK5AZ3iz.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c9fae6b30b705b037706f1e0cfdeefd","sha1":"60a0aa774bd02f60ff0413c9b22c5f2a374268af","sha256":"f1fbc4c7ac0d2870cf3b6fedccb5b2ccd48cacdf1dac9deaea57f4eb3799fbc4","sha512":"fadfd761373d916fcd239c65badf3af6f9b147120b4a905f48a14ff6f8c0aafe7d05ad4dee1abd4ec99d513aa67bc584bd1cebd02e21ab6efa154752a1ca5149","ssdeep":"6144:sKozfkuuo9pepoE4y4++7o8IR4zHVwSbZnECpGNJ6NokB:sRhnep4y4+kO4pwSbZnE6NXB","tlshash":"be742b8473b6a47603ea95d9a8352201f23458683049d46cffbc6defae844854b3ff76","size":346003,"data":"","first_seen":"2026-01-14T14:06:39.489893Z","last_seen":"2026-01-14T14:06:39.489893Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-LBSJK40LXZ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5295c8813404e77254626025d489ecdb","sha1":"833c20f87db515e72e2e9512764d0ca2cfa14590","sha256":"a1431388301019ca9f406f69c6848eafc5b518106853cae40668e6b15047b320","sha512":"6ad865111f2a134ef59d86d40c99cc3f1d41772a2234f00ef129d9af5c99d7ccb1c6b27460987110e01abc6aa0f6f6cf14c53b6c0af136ec0af823e2bb138f13","ssdeep":"6144:v9f73C/F/SkJfU8FY4A9OyrlNcNS5CdOYatoKMEEQh7w:Vj2SkKgYnedOYltr","tlshash":"19942ace73d674269396f078503f018ba57b29a2b45cc896f189cce02e74a9a4177f7c","size":434580,"data":"","first_seen":"2026-01-14T14:06:39.511645Z","last_seen":"2026-01-14T14:06:39.511645Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/vstack-BSrJ3UrJ.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"6567d103159cb41aa99592d17d711d7c","sha1":"54ee8a139b74f9de41a70b6d34c429f533e3b438","sha256":"049eee56858a0fd2ac719573e418576cfeb9dca4fdefd2f5d5a0a7d9fbf6b7be","sha512":"c3ef5287e4d9192c6a9e4c18c66cbb1c93450e0f3379f6a46e23da268a548ef7511fa872ff4bb22c8577c2a36dd7db39f30505fab1fd85557c34541b3e83a132","ssdeep":"768:DsHWUpDTugn4fMqCgSknl5Qn1upQLpOFZDPTKyPZmZA5J4hdrW:Q2bC1YczpOb2Z0J4i","tlshash":"e0e2f9a132541408f6afc7aef8c61f48c13916335413fccab67c8aa8d1517b91b6bb6d","size":32755,"data":"","first_seen":"2026-01-14T14:06:39.505387Z","last_seen":"2026-02-05T00:02:23.617042Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/rainbowWallet-2SR6TVBF-kimcGeuf.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a0e974aa17cd852cfd0a349aa6cde2a","sha1":"3e83142c11e9b7a57432123b72457ff579f8bcb8","sha256":"0813cf58d2da41c33e74c0fb7e5a9671020dc397611becaacd42e1f6ae5b30a4","sha512":"28eac8d72b65f6e1cd4f0ac75cfe58a515be407e04b12aea7a90a8056018133d9f4de319843eb5238f465a23d817971dbd945e4fdbfc59fca26b823efd59a601","ssdeep":"","tlshash":"c071ca958a3dac3be52dc18cee411420710daabfdc894a5272639fef9d784c6ac4c660","size":3646,"data":"","first_seen":"2024-12-25T05:30:42.549882Z","last_seen":"2026-07-19T05:50:19.559502Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"00933d3d76fccf8f1d330b001b6dc118","sha1":"72a3f9f693a7d05bb6f1b38fd381a0f4e8bb5c7a","sha256":"4009527b06902e2fcd3c2ce78c0652caf43bda1783d1577198d0c3919782c607","sha512":"8fce1ced1efcaf7f17f0fbc71664f0ca59f5f7bddc682fdbc8b9ef3862def740a845bc3cd5cc3926c09b98782296d14c9b38d50b2dd6cb53b296ec76ba558602","ssdeep":"","tlshash":"090156a9f328199a66d92fbfa06a570c7460603e380600319507edfa1700de021cbd8e","size":845,"data":"","first_seen":"2025-08-20T23:30:20.291724Z","last_seen":"2026-08-11T19:53:41.409122Z","times_seen":51229,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/walletConnectWallet-FNSU4KNU-B0ci71fU.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"05a8359b297686a38136a26a10311301","sha1":"5d995f91f19bdd38e876708ea756b76ad53ce55c","sha256":"ff6da22ac4da1356c60264b8a4ca0e3bf79b026e16220dfac81cf1058e40160d","sha512":"28ffda0d4b0fcf35ec80c90c3bfc90103685a5220858159a9016588568e808550fb18e8b2d8ee45f72817087723c842ad4f3872adf933ef1da6267d6cef4fdbb","ssdeep":"","tlshash":"1a3115ef6be412f4d017e3a3d01590267ddb24ba7729ef44421b4ae0ae0149d64c8d78","size":1513,"data":"","first_seen":"2024-12-25T05:30:42.591141Z","last_seen":"2026-07-19T05:50:19.560139Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/injectedWallet-H7LYKTQS-CAHJNGc-.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d15e27dd16cca201d14667c3af8cb320","sha1":"a2a412c0b28c967d51856bd18a3f5b1a039cbf94","sha256":"db58171c5bda95e8016d892b4692c77c4f7644fe1fd3ee9b6ac1f561e867aec0","sha512":"20a745ee7cfac75a1160058128403ca4639ca13460191bceb426a295e6ad64e72d63343c73565dff68a719fb7590fe12853a1b213c9a1e0d33a24d2e0937225a","ssdeep":"","tlshash":"fc01f476d22cd45dc91dc36cfd6e68f3234961e6611f4328755c0f2ea2194cbec1e264","size":685,"data":"","first_seen":"2025-04-01T04:17:39.059491Z","last_seen":"2026-07-13T09:43:22.188229Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/hstack-D7BEHBmh.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"cd9c658e6acbaf903d31abcbdcd0a9f0","sha1":"f362d682440d6a4bee383672635f146a50f63d7c","sha256":"cf95ee78b7c72e64f9703177d7e45438f08f4024a14d6530ab92c62efb9ba853","sha512":"5a1869e999538136ef20e5328ffbba297e465bdba6ece9169fee1c6e96b5fad2554200d67a3f8887950ff287851411c368f04e2152b090ddcbd3c69645b6a695","ssdeep":"","tlshash":"96f0d4a7644171b403e5cc5462e5535941de5f9cb67155c890ce880e3a141c5539be49","size":473,"data":"","first_seen":"2026-01-14T14:06:39.493632Z","last_seen":"2026-02-05T00:02:23.609983Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/config-uZ4fvpPM.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"67213f0aa557fdfcd5241078979fe495","sha1":"8a47398f33b1602977d1ebcd3dde8dc60a5efb43","sha256":"491a084aad0861ecbd5d0109d5e44769497fe0b5854e77a25f289b78357a29cf","sha512":"f0de27ceb4f2dcaac56b27cc1893b6206b7d970708b984665befca71efdd1e36d966aa60e0f6e1b44b45b566cfff06740f842bff53eae6ce7365824e47d4828b","ssdeep":"768:vzlHMGUyZBymwaJ2+d3EfZ56gNjwWghktt55HRTrhD1841Mzq2yS6Iv4Gx5U4KMh:vzlHfL2p6lhi9Wq2tHhC9V48pc","tlshash":"6c23a7ca7186b2162be2d1a4483f4015e2396954780e846cb5bdddd3bd72c8ee17bf38","size":47282,"data":"","first_seen":"2026-01-14T14:06:39.497988Z","last_seen":"2026-02-05T00:02:23.640577Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/root-CEa_1vcz.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"f5f16b93bf7c380a604739ed0320eb34","sha1":"1374794a960e10feba056ece07ac2ac6aebed5a5","sha256":"169e6e0907b1e5a7d1485acb0e2bb066dd21718c650c9abd49efd5646cb1287c","sha512":"995185ab0e94e0a330a301f1b7fd0562d203277bbdb24005a238cad821d72f74aced1309fc8a2370df89b9ca41df9946cf3f04733860f091b30f1fe036b4a00d","ssdeep":"49152:i3sEdHzfDarJhYTNeuFBMIP6mzUjqqQfWlsHS5d7QfXWl+PZ061eTaBsFlcyZyLJ:iFTfD2QT+lHyLlzypshTJRm2+W","tlshash":"75f56c8073a6b072439764e4543b1406f2399954304984acfeecdbf77fa948a867bf39","size":3513685,"data":"","first_seen":"2026-01-14T14:06:39.527724Z","last_seen":"2026-01-14T14:06:39.527724Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/coinbaseWallet-WWX6LF36-BMRj6mTC.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"694e1f6dd72af86c8c477f9608975a74","sha1":"3b0def5280cfb0e2cb76b3a039bf7e26986a7f92","sha256":"4a238a92bd23caf58037a8423adebebfc6a84b6762f033bc7e6ebf8741ca1e41","sha512":"7290b10e41ef6e0d7bc27cb24d75327c1493f0d2ae961fb89bf1bb387659a9bc14681b66dbe754722c5f2ea5a98b6cc76c2ca9cde9406de0062262f6f056003f","ssdeep":"","tlshash":"64f022a1a2dcb411186ad336513c5ad4bcd7128cae2e621c32801f1af82009a98c8a79","size":598,"data":"","first_seen":"2024-12-25T05:30:42.515918Z","last_seen":"2026-07-19T05:50:19.546591Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/ledgerWallet-KZKJ5Q2S-DdZeAsds.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"717b03058e9eccce29ae3a8f15544b1a","sha1":"c2b626e64489c6f9084d3bad64c5fb73df88d797","sha256":"59642a8a9d30d9684f1aa6b4c8ca8886bf9a53491a3e238ad3aadac36f1917d9","sha512":"d339c57445af528cd655bad29dc18dbbf61ef6c5a8f6541b4735e8ef7ed872dbf173d22e3c67f976eb78bd25eb8b30a40b2613698d6ef9f24a485a61c7e9f6ee","ssdeep":"","tlshash":"b7f0abe64b508d00874a03b1cabc94c8313775eea758239cb2720619bd420afb90cbb0","size":443,"data":"","first_seen":"2025-09-05T14:38:20.777264Z","last_seen":"2026-07-13T09:43:22.19955Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/bitgetWallet-CLYTW54T-Wwn2QYd0.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c209ae7e667ef953a67fd9e02e026122","sha1":"263c559b9b3d0aa0da8a7ea36790983dc7a0821f","sha256":"1f5ce5ae5b81eeeb68a411dc27cbdeadab04eecff9fca4447d20755e6b770e46","sha512":"6daddffb9e9d093649df98bcb5d7737e9fa7687dac1308a4710689c88076d5dc81b7de5bbfe7abf7a3910d9f53c331207b153b9f582c2eafa4717e553cc07f58","ssdeep":"","tlshash":"2571a791d7f5e09f6b1803b6ff9a14e79432f4e641140b9de55e3361200ee23e91f554","size":3493,"data":"","first_seen":"2025-04-09T07:08:13.379631Z","last_seen":"2026-06-19T04:51:30.570199Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e0699d9362a4e2603cb8ff2bd6ddd2f4","sha1":"5a735efe15b3ec9246eb2ea710a664e7c850190c","sha256":"44164d886dd9b5bdba5e2ffaf7e55179c53804f86b7f172fb292d7311aeb08d1","sha512":"6a7de46450e6dbba8903543d163632bb33c985f7d5e2a61cd8c22781f9487d01dc468174af39aaf2a7e421f9efd29a80c2c3ff347805331254865fd9c357fa2d","ssdeep":"","tlshash":"c8900220542902aa5ae2815d5612fe3977441985110984620154d60b24d20d690369e4","size":53,"data":"","first_seen":"2025-01-19T19:20:19.81482Z","last_seen":"2026-08-11T18:48:32.451392Z","times_seen":10669,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4533235bc340f56829dea0a7d50f01e1","sha1":"57e36d2d5ea0be6ffc8e6001b28f5b4f3b865a43","sha256":"a7b184efc6db3070eb138216ce988c4adb40b13a54bbbc308b9ff0be71f9e0eb","sha512":"dd0bfc5260b16d9a9b387ef134ba454aa5ed7636fab9b79e5034e229418ca5f0e6fd99dca3c881fa091df55204dfaf7e77e4526050a60e8110ed49b41ea4e831","ssdeep":"","tlshash":"1c60000000c000ff0000f0c03ccf0c000c0cf000300c00000003c3000000000030300c","size":16,"data":"","first_seen":"2023-03-08T20:20:25Z","last_seen":"2026-08-11T19:53:41.409806Z","times_seen":29300,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://espresso-registration.app/","date":"2026-01-14T14:06:02.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://espresso-registration.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 10 Jan 2026 18:23:53 GMT\r\nexpires: Sun, 10 Jan 2027 18:23:53 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nage: 330129\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72964,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72964, version 1.0","md5":"91247c94dcda6ff52b445d71d6bbfb81","sha1":"ad2f62363ed047b430b91f32afa31df51fcd7c5e","sha256":"6a3c3e024b31eeacbf1f19c3c7be78612d91c623186f64035a50038241dad4f9","sha512":"a12dcac84e9f9ae02df3aabe29d76994281cd1005edca471194605cfcd6a0456eec872fd28c63c72ae124804d0b47d8377048caae49c40b0a18b5d6be4d6213f","ssdeep":"768:zbw+rLBkMxbCkupj4Y69/Yr71+j9pWiKahMM6+AWEqXB0oGuNGku+QCcIKE205C7:zbw+iwuS/iZWeaO1zP1/9Esvf8fXnm1","tlshash":"8f6302244e3c50c2a54d33aa286940f6f6e79c75b2b79ba4a69c589cd410f329cdfdc4","first_seen":"2025-05-29T18:51:13.223047Z","last_seen":"2026-08-11T19:31:02.532542Z","times_seen":31786,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":87,"dns":1,"connect":8,"send":0,"wait":9,"receive":14,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/okxWallet-GJMKZIND-Ctk5JsJ6.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-14T14:06:02.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/okxWallet-GJMKZIND-Ctk5JsJ6.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-CEa_1vcz.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 30847\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"okxWallet-GJMKZIND-Ctk5JsJ6.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 14 Jan 2026 14:06:02 GMT\r\netag: \"f4c59e31efbcd88c687fc0a977d992ca\"\r\nlast-modified: Wed, 14 Jan 2026 05:31:55 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::896pm-1768399562975-3f94e9693d8b\r\ncontent-length: 898\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":898,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (897)","md5":"f4c59e31efbcd88c687fc0a977d992ca","sha1":"486cb19e8e6498704d418690e59128ebf9a02c6e","sha256":"92b49f1aed987eee109fd98567002c0420d85c602003e003b0f2ad3513c41f15","sha512":"01d94e855345137a19596757a9b585c74536b3c847f6c34ce07e2890fc4536375a159870aa1c88ff8a9b24f94c3cfee0eac0998d73170b52c9887080dff1ec54","ssdeep":"","tlshash":"8e115b9600ad4ddecc5da1eb937ca4aa573d2df8763881352f4c8b5020aacf8f44ad5c","first_seen":"2025-04-09T07:08:13.428855Z","last_seen":"2026-06-19T04:51:30.55393Z","times_seen":48,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"claim.espresso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espresso-registration.app/assets/eleven.js","fqdn":"espresso-registration.app","domain":"espresso-registration.app","tld":""},"ip":{"addr":"172.67.201.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espresso-registration.app/","date":"2026-01-14T14:06:00.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso-registration.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 19:34:04 GMT","end":"Mon, 06 Apr 2026 20:31:40 GMT"},"fingerprint":{"sha1":"5E:5E:BE:43:A1:6D:1C:E7:1A:DB:40:EF:93:B0:94:1D:E6:63:6A:AC","sha256":"F0:38:23:0C:D4:93:76:0B:12:DF:DA:C6:EB:96:B1:42:9D:35:F3:4C:5B:1D:C3:67:9F:A1:68:E1:98:49:08:7B"}}},"request":{"raw":"GET /assets/eleven.js HTTP/1.1\r\nHost: espresso-registration.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso-registration.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 14 Jan 2026 14:06:00 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 20:29:38 GMT\r\netag: W/\"695d70b2-36433e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4yYR1NWKY4pAaIuEt%2Frkjc%2Bkar164pakTV67Xgqy9k5KARyuvMYV3CvqnEBnSow41MX9csTqHEFnDxxIdxJRN2bAjgetpBi53N3PclXNLFGIofnd0ym6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bddb1049fc3712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3556158,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"e60d780300a74c70dc6418ea19873295","sha1":"74001d33824730e25d3d840e0c642f9f986015d7","sha256":"dcb99cd44bfd05f2cfc3c04527f35accfdd3df490666015cbafc125c4b368250","sha512":"617f21408d485ed842373a7c935208431b033f279973a23752599f44a0f4b4f1b125068a3ad244650a5c24d9859d2b9702998c1d415b43eb801bfd6d9b5b2ade","ssdeep":"24576:dmNHxkmMEWI2xMrvZKhch+k+ub6BqyxRz:dmNHKmME32xohKhcoGGBqyLz","tlshash":"a1254c9073a5b06243da14e4187b1006f279bc68744d80acf69cecfb7da9d84963bf79","first_seen":"2025-12-02T13:22:34.735267Z","last_seen":"2026-08-09T03:42:01.52773Z","times_seen":518,"resource_available":false,"data":null}},"time_used":623,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":338,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"espresso-registration.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/proxy-BxNtYgHi.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-14T14:06:00.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/proxy-BxNtYgHi.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/home.page-Cy6bEmwx.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 30846\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"proxy-BxNtYgHi.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 14 Jan 2026 14:06:00 GMT\r\netag: \"1647f85dd2c80272643bc412761a9485\"\r\nlast-modified: Wed, 14 Jan 2026 05:31:54 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::nlfjg-1768399560960-491e7dd87076\r\ncontent-length: 40243\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":115479,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (39601)","md5":"a188ac03d4411288331db31b156b9740","sha1":"903b0d6abca85e595c5a77140ffb19f5c070a844","sha256":"516b51b06f3ce73f9cb3f0f783c4c38831cee5663854b3b620e2f830ac1fea4f","sha512":"06d0c03e5abfe1a5e7c0c3c1a4b89160139debeb6b329d8e7e313a846474c77172d38033de7b9899948be555ad3ce8b4e7605de2f30cc5c75c2a0bc823971275","ssdeep":"1536:t+2TsGd6fOmBgDHte9/Q3t/v5ScoeyUK8wlZWJDFV8lovCt5VyF6Puktr/:t+2Tdd6WFteRQ3t/vscoJUxwlMIwqr/","tlshash":"44b307c572917561d3d685e9c0bf0b41b73718983009c0bcb63dadcb6d2240aa6bbb7e","first_seen":"2026-01-14T14:06:39.428949Z","last_seen":"2026-02-05T00:02:23.57415Z","times_seen":10,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"claim.espresso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/mewWallet-6V4UZOQC-B0qJRky8.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-14T14:06:02.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/mewWallet-6V4UZOQC-B0qJRky8.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-CEa_1vcz.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 30847\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"mewWallet-6V4UZOQC-B0qJRky8.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 14 Jan 2026 14:06:02 GMT\r\netag: \"c9c90c8982869b7541a9ce55464ff15c\"\r\nlast-modified: Wed, 14 Jan 2026 05:31:55 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hxmw8-1768399562975-a6ffe41effba\r\ncontent-length: 4231\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12987,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (12986)","md5":"0ba9b4ec5d6e0138fdc7dcea74d719b1","sha1":"7e9a5254388ae9b05ccab215bcadfda7cbb92178","sha256":"cabb87e570e8e5c15a34eeb5c010a7651a3e878e76568fa8f274903a86c23047","sha512":"8bbc357ee098b1666e94e09a19e0b9711acc240227e819daa87a564a6a0ff456a338c4b61d83f68344063ce6c0ac09d7ef5e9ccb4c711aefc103562691a600de","ssdeep":"192:vSL2IcUA1oFBu/kyilFZl1s7tWld8YgsII9P3cO6+fzRXygn3IJigNnvMqDCdFIZ:vSL2IcUm/XwZvw0IGrCgivRhilI","tlshash":"9742c5d0332c53f9f507c3a9a7aaa0569a7c30da3daf5158f64f05256b144fa883f843","first_seen":"2025-12-31T12:33:59.905722Z","last_seen":"2026-04-08T12:13:16.929881Z","times_seen":17,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"claim.espresso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/roninWallet-SAB5ESVK-fW2QoTxP.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-14T14:06:02.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/roninWallet-SAB5ESVK-fW2QoTxP.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-CEa_1vcz.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 27032\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"roninWallet-SAB5ESVK-fW2QoTxP.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 14 Jan 2026 14:06:02 GMT\r\netag: \"68f97b0ae9e3156ac22560e59bd69d4e\"\r\nlast-modified: Wed, 14 Jan 2026 06:35:30 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vp5wx-1768399562976-edde1d3ef53b\r\ncontent-length: 975\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":975,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (974)","md5":"68f97b0ae9e3156ac22560e59bd69d4e","sha1":"9809da0a9ae9c30ab42202c55b07eef3acd8d1fb","sha256":"8959d6d3640f29ffad2fcde3305042bd42df292e2059935d19d5227dbe809290","sha512":"d9d8677af4e67b9e869da5a01e783a25305798a87461bc1915b6f9c200ec06c5b44b79758c89ecfbc6324647893faa387e3f594b71729f0d7beb1a457370cf2b","ssdeep":"","tlshash":"36119ce5910889aec51fc22cdd109462231f24e67acac697a7fd4f393147443fc07a59","first_seen":"2025-12-31T12:33:59.906467Z","last_seen":"2026-07-09T03:01:17.40461Z","times_seen":18,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"claim.espresso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"magna-public-assets-prod.s3.us-east-1.amazonaws.com/portal-assets/espresso/unicorn-animation.json","fqdn":"magna-public-assets-prod.s3.us-east-1.amazonaws.com","domain":"magna-public-assets-prod.s3.us-east-1.amazonaws.com","tld":"s3.us-east-1.amazonaws.com"},"ip":{"addr":"52.216.222.162","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim.espresso.foundation/","date":"2026-01-14T14:06:03.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 20 Jul 2025 00:00:00 GMT","end":"Thu, 25 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"16:D2:7A:E0:6B:B2:6D:C0:8F:8C:4E:E5:2B:1F:47:F3:EF:60:7F:68","sha256":"EF:42:24:62:84:5D:EF:F9:AE:18:7F:85:D7:C7:56:73:2D:8B:30:D2:CD:83:77:3B:45:EF:24:B2:93:43:99:33"}}},"request":{"raw":"GET /portal-assets/espresso/unicorn-animation.json HTTP/1.1\r\nHost: magna-public-assets-prod.s3.us-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim.espresso.foundation/\r\nOrigin: https://claim.espresso.foundation\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: hgHYVPwLkaoBsjvBXG99LY3soi0Ulx0N1PdE+4MnUyljVwOH29kxQQb420QUeyKHIx0IfctXbn8=\r\nx-amz-request-id: ERGWN87HFCFS9VB8\r\nDate: Wed, 14 Jan 2026 14:06:04 GMT\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, HEAD\r\nVary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-amz-replication-status: COMPLETED\r\nLast-Modified: Wed, 03 Dec 2025 11:21:14 GMT\r\nETag: \"b3f66fc4d3e9820babd7546caea53f82\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 8s1Yib8qGWdWHbdhGKhnL4H4DaIKEmVY\r\nAccept-Ranges: bytes\r\nContent-Type: application/json\r\nContent-Length: 50590\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":50590,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b3f66fc4d3e9820babd7546caea53f82","sha1":"b384b3ed99fd621ab4bbfdb62845ee482aa07e77","sha256":"3d894cae0ee21d03ba335518b3398a8547952ac243ffd122acb3295c718d50f5","sha512":"c3a1eae228f6669d326698763b0246cf80c0d0f6da369c3bc65cde4902d4f27e7addb0d8cc20cc6ee9fdeb7c5c826713221e9b6468720d864f63d74b9190bdc3","ssdeep":"1536:4NJLpOMOrSrGcNXZF6pDyzCnCFUCbCFiCbCT7U7soaX:4NJLpjOGrGcNXVz0QUOQi0s7U7stX","tlshash":"6533b6b464dad024df07ac59dc130688e37e70f91844e6e79e1ec885d087398e77aadb","first_seen":"2025-12-31T12:33:59.91506Z","last_seen":"2026-01-14T14:06:39.433204Z","times_seen":3,"resource_available":false,"data":null}},"time_used":906,"timings":{"blocked":323,"dns":8,"connect":95,"send":0,"wait":130,"receive":95,"ssl":251},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Pixelify+Sans:wght@400..700\u0026family=Press+Start+2P\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://espresso-registration.app/","date":"2026-01-14T14:06:01.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"43:D3:3F:93:6C:4F:F7:67:58:9D:D5:48:20:4C:74:A2:69:DB:13:9F","sha256":"8C:DB:D2:85:E1:AB:12:7B:1D:5A:65:A7:EC:22:67:6F:B3:A6:65:01:28:29:FA:D2:3B:01:8D:10:7E:4D:09:52"}}},"request":{"raw":"GET /css2?family=Pixelify+Sans:wght@400..700\u0026family=Press+Start+2P\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso-registration.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 14 Jan 2026 14:06:02 GMT\r\ndate: Wed, 14 Jan 2026 14:06:02 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3080,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"d4e6d79c776bf8fc41c61de47e83d957","sha1":"8bc1ade7d4f4e91f3caa6d459dc1c6e3c0b05528","sha256":"fdaed61fd01a57851820b356beb641c643c8b4e699faddae0b72fa64c5d20bad","sha512":"7044230275f8f8d2e4725a69add094387aea08d50c588f7026b9c1aa00f4e576abae59e8bc05b3eb58f8601bcdee55a9ca9508200e51f6121b8a577bac04c82b","ssdeep":"","tlshash":"1851ddd5052bd040eb931cc233cf7e36ee0f21266495d8699efe18d4acbad664351b4e","first_seen":"2025-09-17T03:18:47.287526Z","last_seen":"2026-08-09T03:42:01.518115Z","times_seen":758,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":97,"dns":1,"connect":16,"send":0,"wait":94,"receive":0,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/rainbowWallet-2SR6TVBF-kimcGeuf.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-14T14:06:02.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/rainbowWallet-2SR6TVBF-kimcGeuf.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-CEa_1vcz.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 79033\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"rainbowWallet-2SR6TVBF-kimcGeuf.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 14 Jan 2026 14:06:02 GMT\r\netag: \"1dfeaa46d390c3e839db0407f735db86\"\r\nlast-modified: Tue, 13 Jan 2026 16:08:49 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::458p4-1768399562971-11170f7aa800\r\ncontent-length: 900\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3646,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3645)","md5":"8a0e974aa17cd852cfd0a349aa6cde2a","sha1":"3e83142c11e9b7a57432123b72457ff579f8bcb8","sha256":"0813cf58d2da41c33e74c0fb7e5a9671020dc397611becaacd42e1f6ae5b30a4","sha512":"28eac8d72b65f6e1cd4f0ac75cfe58a515be407e04b12aea7a90a8056018133d9f4de319843eb5238f465a23d817971dbd945e4fdbfc59fca26b823efd59a601","ssdeep":"","tlshash":"c071ca958a3dac3be52dc18cee411420710daabfdc894a5272639fef9d784c6ac4c660","first_seen":"2024-12-25T05:30:42.549882Z","last_seen":"2026-07-19T05:50:19.559502Z","times_seen":64,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"claim.espresso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/assets-NU2OP443-COMs-Mo6.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-14T14:06:03.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/assets-NU2OP443-COMs-Mo6.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/en_US-762U7H2X-yyzeC1pM.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 55422\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"assets-NU2OP443-COMs-Mo6.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 14 Jan 2026 14:06:02 GMT\r\netag: \"34655b758c0c687593438afead60111e\"\r\nlast-modified: Tue, 13 Jan 2026 22:42:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vp5wx-1768399562985-28b826f97e55\r\ncontent-length: 3960\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":17965,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (17964)","md5":"33ae24799663e13f83cee5987fa8f728","sha1":"2309fcbf480ac447c060a427f2a6cd24974dfa30","sha256":"aac5c0d81b97b3892fafba21cdf014c77be385f12d7b1f525dc3f79d0cb2ede5","sha512":"f576ef24f5393cb38276b01c0aaa4d41c56a04d9bd0b82c8e04202949fe343407f12514560fe743af27fbff37a401bcff5c38a25ed66cecdd581c265ab9ad58d","ssdeep":"384:LOr2OrPR1YS2qj0FNwZe7QnBZ4pFSMLYp9uVEK:LOCO11D2qYzdyzK","tlshash":"2c82fd9b8728d94e6e6b8ff8ffdcb4d9332c30e5222e04d4115e616291a359feb41d81","first_seen":"2024-12-25T05:30:42.584192Z","last_seen":"2026-07-19T05:50:19.550396Z","times_seen":89,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"claim.espresso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/metaMaskWallet-YFHEHW7V-BggUDXad.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-14T14:06:02.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/metaMaskWallet-YFHEHW7V-BggUDXad.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-CEa_1vcz.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 24162\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"metaMaskWallet-YFHEHW7V-BggUDXad.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 14 Jan 2026 14:06:02 GMT\r\netag: \"cd224897b488e3c58bcb44d3799d7877\"\r\nlast-modified: Wed, 14 Jan 2026 07:23:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vtvmx-1768399562969-68c69dcc4035\r\ncontent-length: 1181\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6516,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (6515)","md5":"c9faabc0cac059efd75278832f35fba0","sha1":"75a665ec82b0dd2ccab406db25ed49f69ba40931","sha256":"748a6c743322ec0b319bf361b84e929e5099721824636f5a4befd8e0ff8ab826","sha512":"7ab0d0071f01aad00b47c9fd55ef2748c61eeeb46b3abfb66afdae61970d62a77a0f643be0c95cab9a778d28a816b75fbb5c4667be6b794d97cec3937d0b5eec","ssdeep":"192:M1vaqYOX292169AY32zqzKHio+21BZBTibnKCU+jpBxMCXV:my933BU+V","tlshash":"17d15deb67488cbcb8271f24e34a3271613836d7692ee6594c738a79090519dbb7fcc4","first_seen":"2024-12-25T05:30:42.586528Z","last_seen":"2026-07-19T05:50:19.564637Z","times_seen":78,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"claim.espresso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espresso-registration.app/","fqdn":"espresso-registration.app","domain":"espresso-registration.app","tld":""},"ip":{"addr":"172.67.201.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-14T14:05:59.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso-registration.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 19:34:04 GMT","end":"Mon, 06 Apr 2026 20:31:40 GMT"},"fingerprint":{"sha1":"5E:5E:BE:43:A1:6D:1C:E7:1A:DB:40:EF:93:B0:94:1D:E6:63:6A:AC","sha256":"F0:38:23:0C:D4:93:76:0B:12:DF:DA:C6:EB:96:B1:42:9D:35:F3:4C:5B:1D:C3:67:9F:A1:68:E1:98:49:08:7B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: espresso-registration.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 14 Jan 2026 14:06:00 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 20:29:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UvT3TbXjQG0D0q7Gp0%2BY6GiGP3XC%2Bo9%2FyVpTT1dXk6fsP13SpI06l4G%2BrETP%2F%2FZy%2BlP7m5WLR3N3emhmxRCrNf2yyxAnes8cE%2FB6ntlsqiNhtM4it7lB\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bddb100e83a712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":744,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"e20e07478d13693175c9687188a7fb2d","sha1":"57937bcaa6df884341168df1921330418a34e1b3","sha256":"0e5b6056296c8c82684d7482a27205344c4cceeafa4ae6855f2bf8dfa0ca4120","sha512":"73dc52469a705c9d75976f39b946d9e6161c4a1ed3353b6d52bd20268df5302aa97ec497871c50b9f107df7e3564349d51dd77c12400acedc375704d10e96bcc","ssdeep":"","tlshash":"1701fea228d08c0981b48379bdf0a24cde83468357456850badd31632ff4a438ce37ec","first_seen":"2025-12-31T12:33:59.877053Z","last_seen":"2026-02-14T01:27:34.016745Z","times_seen":15,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":56,"dns":42,"connect":1,"send":0,"wait":297,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"espresso-registration.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://espresso-registration.app/","date":"2026-01-14T14:06:01.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"43:D3:3F:93:6C:4F:F7:67:58:9D:D5:48:20:4C:74:A2:69:DB:13:9F","sha256":"8C:DB:D2:85:E1:AB:12:7B:1D:5A:65:A7:EC:22:67:6F:B3:A6:65:01:28:29:FA:D2:3B:01:8D:10:7E:4D:09:52"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso-registration.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 14 Jan 2026 14:06:02 GMT\r\ndate: Wed, 14 Jan 2026 14:06:02 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4887,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3fd96ba77783845730c343cf00ac7a93","sha1":"bc4f7f4f71aeae387232155c55c4f031c5f3f769","sha256":"27b95b2fcbc857ba25f7e5a707c5c4c06c5cf93415519b7669c19f4045edca37","sha512":"20b137cf9c61842c7bad62dd6c36125833022552379ad97324dbee2c2e9cb0303b17a9aee813ea2bcdbb68541c8c6edbfecfcfb2858cf27c2cff480d756d80cd","ssdeep":"96:aYg4aMzqYg4aybFZHYg4agkYg4aUJ3vYg4aERYg4aYGJc+uTYg4aR6NDO4a3qO4L:vywfydyGy63gy/yFVyR73xpmj3U8fHN","tlshash":"37a1ed91006f9104ea431dd627cf7e32ad8e51956082e27d6ffd2dca6cdbd23122874c","first_seen":"2025-09-10T21:50:06.177565Z","last_seen":"2026-08-11T19:31:02.55576Z","times_seen":20713,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":86,"dns":1,"connect":15,"send":0,"wait":111,"receive":0,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rpc.walletconnect.org/v1/supported-chains?st=appkit\u0026sv=html-ethers-1.6.9\u0026projectId=2e149567ef86e6af702071858dad334d","fqdn":"rpc.walletconnect.org","domain":"walletconnect.org","tld":"org"},"ip":{"addr":"3.69.205.134","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://espresso-registration.app/","date":"2026-01-14T14:06:02.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rpc.walletconnect.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 16 Oct 2025 00:00:00 GMT","end":"Sat, 14 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"38:E6:43:A0:F8:F2:8D:21:9C:36:21:F5:DB:3B:F9:93:F7:7B:C4:8B","sha256":"09:1F:96:1E:4B:E3:8B:06:C3:8F:0A:2E:0F:79:E7:43:9C:B4:45:CC:26:0C:77:C5:50:CD:15:A8:7D:1D:83:DB"}}},"request":{"raw":"GET /v1/supported-chains?st=appkit\u0026sv=html-ethers-1.6.9\u0026projectId=2e149567ef86e6af702071858dad334d HTTP/1.1\r\nHost: rpc.walletconnect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://espresso-registration.app/\r\nOrigin: https://espresso-registration.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 14 Jan 2026 14:06:02 GMT\r\ncontent-type: application/json\r\ncontent-length: 1310\r\ncache-control: public, max-age=86400, s-maxage=86400\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\nx-request-id: 0e5a981f-6c0a-4284-be72-f16926ea6d82\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1310,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"86f32e81e8daaccf1edad77f39a79ec1","sha1":"a66637e002ace852399a08df1e1d4a20c359c61f","sha256":"43ac9a21359e217b50a1149527000febc6b64db47d8028eaaea0bd3c0190e48a","sha512":"f92814ca4411b69599a926d2f0ecaf0e9855292904bf0d17e47fc4e7fd76e0726c84d6140a7684f1df258f0d993cad93d9275c2d5c9b089a9b2b5c603dbe0a1a","ssdeep":"","tlshash":"2221368c84800844dcb4d398dbbce8db946ef01399cd289999f41cb155fd6b3355276e","first_seen":"2026-01-14T14:06:39.438745Z","last_seen":"2026-01-14T14:06:39.438745Z","times_seen":1,"resource_available":false,"data":null}},"time_used":532,"timings":{"blocked":253,"dns":4,"connect":21,"send":0,"wait":25,"receive":0,"ssl":226},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/hiunicornstudio/unicornstudio.js@v1.4.33/dist/unicornStudio.umd.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-14T14:06:02.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /gh/hiunicornstudio/unicornstudio.js@v1.4.33/dist/unicornStudio.umd.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 14 Jan 2026 14:06:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 40135\r\ncf-ray: 9bddb1129bb41525-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.4.33\r\nx-jsd-version-type: version\r\netag: W/\"264a1-NS6yl66g7y1IR5t34bx42rrX8rE\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230027-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 3228518\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=FjX8KxY4AI4EtIvsBvU%2FcE4P7B%2F40s%2BiUrZVWN7hmHlwAgyjXAJWm5yEm7B5RLvYa3EqP%2BqMA99XYQWlG8RM9N7ZiO0g6yfCgGkO3cPfa5qeWrMaSr4hjJEgcdGc8dJstBQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":156833,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (30260)","md5":"6dd0e8b7b5f75a6501cb1509c0087c63","sha1":"352eb297aea0ef2d48479b77e1bc78dabad7f2b1","sha256":"6d507e9c4cf82bd660de8f12d86283a38740c2f500fe4c1a8c1df706ccf00d77","sha512":"32a94d7f7781075c5f7b2a41cadbe467aa590b4bd1a52200ebef56b9b12669b06e4575e9a4415c0955e94135debc968d7f2a6846a9d6093a901b0807ec8673b3","ssdeep":"3072:tf+dkdy/deokCY3V6dLmRe+H4l5SQEePPEZLDoPhMbnrmLmit7W7ttQwdi:cdkdy/dJkCY32LjkIui","tlshash":"34e30ae6716b682e4981c247f0350e07a226a45c340dc46d7a7cb9ff64ecd5931bdb3a","first_seen":"2025-10-17T10:36:32.745395Z","last_seen":"2026-07-04T17:49:12.163175Z","times_seen":101,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":17,"dns":1,"connect":1,"send":0,"wait":9,"receive":2,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/bitgetWallet-CLYTW54T-Wwn2QYd0.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-14T14:06:02.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/bitgetWallet-CLYTW54T-Wwn2QYd0.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-CEa_1vcz.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 27032\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"bitgetWallet-CLYTW54T-Wwn2QYd0.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 14 Jan 2026 14:06:02 GMT\r\netag: \"0d3fcd1494db0e6f08944e18e1dab82e\"\r\nlast-modified: Wed, 14 Jan 2026 06:35:30 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::458p4-1768399562980-c057954611e8\r\ncontent-length: 1320\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3493,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3492)","md5":"c209ae7e667ef953a67fd9e02e026122","sha1":"263c559b9b3d0aa0da8a7ea36790983dc7a0821f","sha256":"1f5ce5ae5b81eeeb68a411dc27cbdeadab04eecff9fca4447d20755e6b770e46","sha512":"6daddffb9e9d093649df98bcb5d7737e9fa7687dac1308a4710689c88076d5dc81b7de5bbfe7abf7a3910d9f53c331207b153b9f582c2eafa4717e553cc07f58","ssdeep":"","tlshash":"2571a791d7f5e09f6b1803b6ff9a14e79432f4e641140b9de55e3361200ee23e91f554","first_seen":"2025-04-09T07:08:13.379631Z","last_seen":"2026-06-19T04:51:30.570199Z","times_seen":33,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"claim.espresso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/login-CWDTIDNK-DhDUYE4b.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-14T14:06:03.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/login-CWDTIDNK-DhDUYE4b.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/en_US-762U7H2X-yyzeC1pM.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 28301\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"login-CWDTIDNK-DhDUYE4b.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 14 Jan 2026 14:06:02 GMT\r\netag: \"0d95c7b76de7398234f93d6201b6706c\"\r\nlast-modified: Wed, 14 Jan 2026 06:14:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vtvmx-1768399562983-9d8766f273ef\r\ncontent-length: 2843\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":9275,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (9274)","md5":"baa5f0f7116deb709bd4b3a54c31eaff","sha1":"10c4efb11b9c1bcdd87aca0c0443f636c8d29b39","sha256":"63a8daf7039c537fe8d7ff88c50a6b8022e74f447d5df3ffcd6a515723252c33","sha512":"8d534b9541eb5d33576b4a5a2dbd28aadc57c01fc91ea3644bcfb13ad76470288c9ac8228a1fc8d6f30ca5873abb0c3b20136d5377bdb9923c3ff6665542b4bc","ssdeep":"192:dyAYirZ2ixxPjwzSFW5xrsRo3/58dmho4x7MV:EiN2Qjw+FWjARaidSpx7MV","tlshash":"261283ea5768627ed89bce6cdf668840130d70fd35b8c8e49a9ecf686057c89fd87010","first_seen":"2024-12-25T05:30:42.593071Z","last_seen":"2026-07-19T05:50:19.57153Z","times_seen":89,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"claim.espresso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://espresso-registration.app/","date":"2026-01-14T14:06:00.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso-registration.app/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: text/html\r\ndate: Wed, 14 Jan 2026 14:06:00 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::c7tlw-1768399560485-1e6f3e54854e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35690,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14560)","md5":"d1fc055fed7f23522dc70443d75e5911","sha1":"7d680ff6cfafa327a5d8fd1b3eacff776966079f","sha256":"78d6fa47d79cfd093c47c511854c779458f5240b689d24afe4d68e5fd744b5aa","sha512":"b3d39b5f540ac9c176b3a102a1106004c82b8ddbaa91938a5382ed641420de8f6cae805ef4a8e867faca5cd47f7355384066dbed0d6c42a24e21ff1f6b820c57","ssdeep":"384:BAIGYz3rv77fMarMvem9W9arne8pT75+BoF+Z8F6ST8ItIV1L4qqYSCsByTCxoF8:BAIGuT7fMoMmh8pv5uoF+ZkD3tIgPVh","tlshash":"44f228f2d120c9b606632f58f6323d99626320da4f55949cf16cc16c2b40df78eb79ea","first_seen":"2026-01-14T14:06:39.441632Z","last_seen":"2026-01-14T14:06:39.441632Z","times_seen":1,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":62,"dns":40,"connect":1,"send":0,"wait":10,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"claim.espresso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/fonts/pp-neue-montreal/pp-neue-montreal-regular.woff2","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim.espresso.foundation/","date":"2026-01-14T14:06:00.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /fonts/pp-neue-montreal/pp-neue-montreal-regular.woff2 HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/fonts/pp-neue-montreal/font.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 27032\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"pp-neue-montreal-regular.woff2\"\r\ncontent-type: font/woff2\r\ndate: Wed, 14 Jan 2026 14:06:00 GMT\r\netag: \"9f495aeb5f20fa526a69654c7a1af5e7\"\r\nlast-modified: Wed, 14 Jan 2026 06:35:28 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::kbxc9-1768399560852-2cf8bf81b578\r\ncontent-length: 47564\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47564,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 47564, version 1.0","md5":"9f495aeb5f20fa526a69654c7a1af5e7","sha1":"5456093ac2a3210ebea9ea6fec4faed78cfbf4c1","sha256":"1a020a0ccc2b29ad091b713864b135d9f7fb6d3114e69620f6d56eeb9abefbcc","sha512":"0de585585140f263fb24e97236052ecf380c92b75c724fe3fe99c966ca90a53c6eeea812081e89850ca9c1d343c70ba967dd3f666a437f9b8237e49a5a6ad711","ssdeep":"768:L1MGt41Apz7bVFaRdg9IwhVyuCaMC4C0nRprwgT7XRgLyp2:OGG1AV7bX8g9IpuXtsjrw4up","tlshash":"b323029700fe4ff5c9adb0e81523fa130529898c59a73b7743a32da4a76d7f8ca06107","first_seen":"2023-11-11T04:34:18Z","last_seen":"2026-08-10T18:02:30.834118Z","times_seen":449,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"claim.espresso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/chunk-EPOLDU6W-DGaTw-IN.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-14T14:06:00.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/chunk-EPOLDU6W-DGaTw-IN.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-Bty4uRgF.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 20924\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"chunk-EPOLDU6W-DGaTw-IN.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 14 Jan 2026 14:06:00 GMT\r\netag: \"14db290fb017567c6c72437dafb1d3ec\"\r\nlast-modified: Wed, 14 Jan 2026 08:17:16 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::dqmkz-1768399560916-a49b029ea849\r\ncontent-length: 43638\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":125122,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (46949)","md5":"c6abfd9f96d5722cdb6157b22e513600","sha1":"67ca400bde56b3d399c8f9cdd1d303ecd24b5111","sha256":"5918ef25bf99e2b2850ab7532eebabdc1df17a7e0d1bcb041a2f3f5ba6a02fad","sha512":"273eac63aa5f47dec6979994ad74e3d461e96ca383d190cf521500d729b39b45d2da1f6a1a21a56a8debae5f7ee7712c9891df97d3a21c0e6f782173460a82fa","ssdeep":"1536:YZe4IJi0G4pPj0hsIkZxr5bRRvMViduOZgVI/rYWYYKyWXML:Ge4IoMaUZxr/RvMVid1GVI/rYWYYLW6","tlshash":"63c33bf9729270794bef13f180bb0015b3b92ca9246d8015b2acc99e35b5c4c967bf79","first_seen":"2026-01-14T14:06:39.446125Z","last_seen":"2026-02-05T00:02:23.601915Z","times_seen":10,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"claim.espresso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/root-xUBic4Hn.css","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim.espresso.foundation/","date":"2026-01-14T14:06:00.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/root-xUBic4Hn.css HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 25167\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"root-xUBic4Hn.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Wed, 14 Jan 2026 14:06:00 GMT\r\netag: \"88d9636b024941894745a79fb35a84d3\"\r\nlast-modified: Wed, 14 Jan 2026 07:06:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::kbxc9-1768399560805-2954ec10b976\r\ncontent-length: 4341\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":28032,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (28031)","md5":"b791fa2cfe8eea5dc35ba023b26bf0cb","sha1":"12f5d243511c0b9273162b3018d0dd57ccea4f1f","sha256":"6dc4c7194a918e7786fa782145e281df7b49fad5e2a449716bde8a904e07e0d4","sha512":"8d059d197b5ef2bd53175dc7f2092ddfb74d73c124965b15dc92600efb15e2bfc7efd6622e6e90f9a8513a817cbb9876588cf43f97478a5df12879b9aa71220c","ssdeep":"384:P56ed283ZcW23qWF7O36YBzQ4JYf1ojPFEINi:P56UJoYBzQmSojPFEwi","tlshash":"73c2c9093e2d3f38ba13a32440c0949c620b775feebd8797acd1265d9d9d78431aca79","first_seen":"2025-12-28T18:47:24.374234Z","last_seen":"2026-04-08T12:13:16.905421Z","times_seen":25,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"claim.espresso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/x.icon-B-1mXS8R.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-14T14:06:00.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/x.icon-B-1mXS8R.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-Bty4uRgF.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 25166\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"x.icon-B-1mXS8R.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 14 Jan 2026 14:06:00 GMT\r\netag: \"1d5ca9fc89a2b58de61c6ba3a8015341\"\r\nlast-modified: Wed, 14 Jan 2026 07:06:34 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vtvmx-1768399560916-29bc8622d0aa\r\ncontent-length: 458\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":458,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (457)","md5":"1d5ca9fc89a2b58de61c6ba3a8015341","sha1":"4f9b82272ee87342d81ad7a16cca024e1497f46d","sha256":"b66026f6ab26a0bae77a8273ef7e0d683ea316fc428046769b85195eb0891a85","sha512":"046d9b41904af8361c3556e13c1206f2bbde3a741ea0a53fedcb231c9c1238a3c7cb7a73ad3bd9f3208625338cb44fd494226e47014d2993ef099462a9940e96","ssdeep":"","tlshash":"80f097ff83c1609848595fa62ab23c251177e5f993a409a0c54449619d2d0f6731ee82","first_seen":"2026-01-14T14:06:39.448198Z","last_seen":"2026-02-05T00:02:23.668402Z","times_seen":10,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"claim.espresso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/portal-config.context-Coov9jKr.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-14T14:06:00.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/portal-config.context-Coov9jKr.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-Bty4uRgF.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 7093\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"portal-config.context-Coov9jKr.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 14 Jan 2026 14:06:00 GMT\r\netag: \"ffee77eb572ae052d4463c4fb50f9573\"\r\nlast-modified: Wed, 14 Jan 2026 12:07:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::mk7xf-1768399560924-d4bc9b970996\r\ncontent-length: 351\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":351,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (350)","md5":"ffee77eb572ae052d4463c4fb50f9573","sha1":"58dbb86bbcef2da3911a2dc3326837e4f082a620","sha256":"1bd503503f94dfc63c388e86bb8039e7e457410197d6d74554fbf4f372826b09","sha512":"ce9bcb1a4e691ccaacf586f5c0e20bcda1d59bbecc66799fba8c0181d7daa95e8e6b5c1fac48ec9a1f2334268865397f5e3606570ffceeb6636041b7fc052aaa","ssdeep":"","tlshash":"14e0c09b6040f67277034ce119208534d333246b30258f70c01c852bbec40f6233f8d5","first_seen":"2026-01-14T14:06:39.450428Z","last_seen":"2026-02-05T00:02:23.583077Z","times_seen":10,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"claim.espresso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espresso-registration.app/favicon.svg","fqdn":"espresso-registration.app","domain":"espresso-registration.app","tld":""},"ip":{"addr":"172.67.201.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://espresso-registration.app/","date":"2026-01-14T14:06:01.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso-registration.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 19:34:04 GMT","end":"Mon, 06 Apr 2026 20:31:40 GMT"},"fingerprint":{"sha1":"5E:5E:BE:43:A1:6D:1C:E7:1A:DB:40:EF:93:B0:94:1D:E6:63:6A:AC","sha256":"F0:38:23:0C:D4:93:76:0B:12:DF:DA:C6:EB:96:B1:42:9D:35:F3:4C:5B:1D:C3:67:9F:A1:68:E1:98:49:08:7B"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: espresso-registration.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso-registration.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 14 Jan 2026 14:06:01 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 20:29:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"695d70b2-a64\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FnqPrDlceN7%2F6Xb0Xiqoa1GQ6e%2FDds57sYpQw%2BcdZ3Xc6bUogC%2Bg2AGhCq9sYH5atCKik3MoQnUKQJCTtrfAxwJrNSMbtxLGqXUHY2ANIeaeDbhLlZdl\"}]}\r\npriority: u=6,i=?0\r\ncf-ray: 9bddb10c5ffd712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2660,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0e5690d3b329d727d3beebed48d6c2d8","sha1":"46b9b822697390227617c5ae61b21db0bd9674cd","sha256":"99b5446fdb0675412588659f6eacf34bd66b95ddb4d340801d98d6b8f297a149","sha512":"bd902ea28f21257e5cecaf6d06b6a2585b0b937a8815b357b170f618e575343710c9a741c267176410640221cead59ad991db5e9e32b0ae74245618a29eea20e","ssdeep":"","tlshash":"3451ffdc361cd1854a5c6bcb9f5aa0791c26e1e0de8e8509ea442e1f38c5c6f6c393c5","first_seen":"2025-12-28T18:47:24.367929Z","last_seen":"2026-04-08T12:13:16.913402Z","times_seen":28,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"espresso-registration.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/entry.client-BZGv0Dvy.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-14T14:06:02.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/entry.client-BZGv0Dvy.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 24187\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"entry.client-BZGv0Dvy.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 14 Jan 2026 14:06:02 GMT\r\netag: \"4e6ff072e92c8fa3ac5a1e4d283660d8\"\r\nlast-modified: Wed, 14 Jan 2026 07:22:55 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qsh28-1768399562437-6a64f350f34f\r\ncontent-length: 61663\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":189577,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (54963)","md5":"87a49d9268a02072448fe90645ec8ee8","sha1":"6f47ea6e5aa317783a433be74b71ad388759eb75","sha256":"290c74c185aa9ba110d382b5d82955fe0790544a4240a6e7193378b6d3ccd80e","sha512":"2396514b1d8b13a4bdbcd51debb7d35bb4a302de33837d4e8a777dd7df862882315438c4878ddbd7aede573c8a955575beba655df11d745c191eaa46968b156e","ssdeep":"3072:IO8GfDyHDZubrIrn6BEnaE2CmfnoSA016Un/m:RvL4VunIz64eoSvL/m","tlshash":"07041bec32bea7566eb245e6109f1503727c28232c0c4c70a151fe9d66b844a51fbfee","first_seen":"2026-01-14T14:06:39.454737Z","last_seen":"2026-02-05T00:02:23.563885Z","times_seen":10,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"claim.espresso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"public-bsc.nownodes.io/","fqdn":"public-bsc.nownodes.io","domain":"nownodes.io","tld":"io"},"ip":{"addr":"172.66.145.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://espresso-registration.app/","date":"2026-01-14T14:06:02.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nownodes.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 23:24:15 GMT","end":"Sun, 12 Apr 2026 00:24:07 GMT"},"fingerprint":{"sha1":"EC:BA:9B:AB:CB:AC:F0:50:15:55:17:89:D4:5F:52:04:A6:2E:C8:1F","sha256":"43:C6:97:66:EC:F0:C7:EB:3D:64:36:C1:2D:53:6A:54:A0:BC:D0:0A:21:A3:CD:D9:75:A0:F7:5E:15:04:A5:18"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: public-bsc.nownodes.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://espresso-registration.app/\r\nOrigin: https://espresso-registration.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 14 Jan 2026 14:06:02 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Authorization,DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,api-key\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9bddb113195c5689-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T19:57:32.423433Z","times_seen":17842444,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":32,"dns":6,"connect":1,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/safeWallet-VUYZPLY4-CXnodgMs.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-14T14:06:02.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/safeWallet-VUYZPLY4-CXnodgMs.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-CEa_1vcz.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 25149\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"safeWallet-VUYZPLY4-CXnodgMs.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 14 Jan 2026 14:06:02 GMT\r\netag: \"88dc16e86969db1d05c7274f714816d0\"\r\nlast-modified: Wed, 14 Jan 2026 07:06:53 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::lz9h2-1768399562980-57770c1d4187\r\ncontent-length: 689\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1449,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1448)","md5":"9a09d06d29fe2837adda28d773f8d6e5","sha1":"93c50ca2782f3f0b4c1f6d48c9fa33476f772ac0","sha256":"aaaf8c1f6acc96bda06bfc1e526611b918cd12021d54b15cce8fef605554938e","sha512":"7c181bd28ffca7872846372455d30661b0b89069cc473f94ac177247350091749470603dbf2827abc14eee65d5f98c37664defe6105075889415cee5bc3ac9dd","ssdeep":"","tlshash":"c531229136cca6e0770ae321cd04c166f85528effd66e35c6a015862bd0846d758cdfd","first_seen":"2024-12-25T05:30:42.588753Z","last_seen":"2026-07-19T05:50:19.558096Z","times_seen":44,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"claim.espresso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espresso-registration.app/","fqdn":"espresso-registration.app","domain":"espresso-registration.app","tld":""},"ip":{"addr":"172.67.201.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://espresso-registration.app/","date":"2026-01-14T14:06:02.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso-registration.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 19:34:04 GMT","end":"Mon, 06 Apr 2026 20:31:40 GMT"},"fingerprint":{"sha1":"5E:5E:BE:43:A1:6D:1C:E7:1A:DB:40:EF:93:B0:94:1D:E6:63:6A:AC","sha256":"F0:38:23:0C:D4:93:76:0B:12:DF:DA:C6:EB:96:B1:42:9D:35:F3:4C:5B:1D:C3:67:9F:A1:68:E1:98:49:08:7B"}}},"request":{"raw":"HEAD / HTTP/1.1\r\nHost: espresso-registration.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://espresso-registration.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 14 Jan 2026 14:06:02 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 20:29:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nage: 2\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AXG4Rqw0d5FAjo50vvo0JZ78x47y2DX9iEdszGQBCp9mBpnqTlf3s0s%2BU5rhep4N8SWQc%2BjGzDFzVgw5zuCWIZf%2B28IGtKhyxcQBgsUhhT2LBkTI5Gf7\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: 9bddb1115826712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T19:57:32.423433Z","times_seen":17842444,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"espresso-registration.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/injectedWallet-H7LYKTQS-CAHJNGc-.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-14T14:06:03.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/injectedWallet-H7LYKTQS-CAHJNGc-.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-CEa_1vcz.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 22896\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"injectedWallet-H7LYKTQS-CAHJNGc-.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 14 Jan 2026 14:06:02 GMT\r\netag: \"d15e27dd16cca201d14667c3af8cb320\"\r\nlast-modified: Wed, 14 Jan 2026 07:44:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::896pm-1768399562981-14785c1cab8c\r\ncontent-length: 685\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":685,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (684)","md5":"d15e27dd16cca201d14667c3af8cb320","sha1":"a2a412c0b28c967d51856bd18a3f5b1a039cbf94","sha256":"db58171c5bda95e8016d892b4692c77c4f7644fe1fd3ee9b6ac1f561e867aec0","sha512":"20a745ee7cfac75a1160058128403ca4639ca13460191bceb426a295e6ad64e72d63343c73565dff68a719fb7590fe12853a1b213c9a1e0d33a24d2e0937225a","ssdeep":"","tlshash":"fc01f476d22cd45dc91dc36cfd6e68f3234961e6611f4328755c0f2ea2194cbec1e264","first_seen":"2025-04-01T04:17:39.059491Z","last_seen":"2026-07-13T09:43:22.188229Z","times_seen":37,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"claim.espresso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/en_US-762U7H2X-yyzeC1pM.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-14T14:06:00.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/en_US-762U7H2X-yyzeC1pM.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-Bty4uRgF.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 79472\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"en_US-762U7H2X-yyzeC1pM.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 14 Jan 2026 14:06:00 GMT\r\netag: \"06dd9b8704986e408216d793fcb220b5\"\r\nlast-modified: Tue, 13 Jan 2026 16:01:28 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::t225h-1768399560928-efebdced252e\r\ncontent-length: 171564\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":562283,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (7497)","md5":"4ad68365e553aceebe0d223a03bc55f8","sha1":"419cc457624395a6dc80cd5e0e2684d445eee636","sha256":"eb7fc9d5aa807fa55616a01a775b95438820fb6c676824af978a725a66f3a44c","sha512":"1f75ce5b98f521665052f3257ad38535d7d09bcc33ef4bdda6cefb6f8f1c68c6a10e54a1c2a02f7522658d78ec9ec7362a2ea21998127a975010bd18ed68a986","ssdeep":"12288:+d/7EPwzWIKWTHoX2f+ozuNqxl+SNa45IVWdyq:IzEIzWIKYIXQ2qx8SR0q","tlshash":"a6c46c44b2a0b565439740e914eb1000f1346e9db50c58a876ecd9be3fbaec885fbf6d","first_seen":"2026-01-14T14:06:39.458644Z","last_seen":"2026-02-05T00:02:23.649201Z","times_seen":10,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"claim.espresso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/background-music.context-CLvEvnk8.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-14T14:06:00.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/background-music.context-CLvEvnk8.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-Bty4uRgF.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 29117\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"background-music.context-CLvEvnk8.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 14 Jan 2026 14:06:00 GMT\r\netag: \"539b8d3b438e9e5122cc1310fbdd3771\"\r\nlast-modified: Wed, 14 Jan 2026 06:00:42 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::dqmkz-1768399560932-bb7a4c8a2664\r\ncontent-length: 927\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":927,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (926)","md5":"539b8d3b438e9e5122cc1310fbdd3771","sha1":"7f2521651189d41ed321a31cf99c063a5bbf628b","sha256":"501e9100bd864055d1ae3587f8be02d8f88d0b8c61f371b82e3d54aab2c04a98","sha512":"73a3f33902ebb1792bd396c8def7fe0800151657852638543e843bac76ee6f96d93df212d6709540000b1c1d817aa3c6122c7fe351f42730eae7f7ff3b88ff96","ssdeep":"","tlshash":"6111dcb7a8a4907afb8e09a409b1917937333755304a40f1e03ca4ab49d2582d67b7d9","first_seen":"2026-01-14T14:06:39.459677Z","last_seen":"2026-02-05T00:02:23.573049Z","times_seen":10,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"claim.espresso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/page-meta.component-CRUC77sT.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-14T14:06:00.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/page-meta.component-CRUC77sT.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/home.page-Cy6bEmwx.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 27112\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"page-meta.component-CRUC77sT.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 14 Jan 2026 14:06:00 GMT\r\netag: \"3d9812f9914e954f5ccd021a8dd4255c\"\r\nlast-modified: Wed, 14 Jan 2026 06:34:08 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::nlfjg-1768399560942-780bf055a56a\r\ncontent-length: 803\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":803,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (802)","md5":"3d9812f9914e954f5ccd021a8dd4255c","sha1":"f6a397af2900a8933a65b8233db006d5c806f3dd","sha256":"e35ebeca2eda50c4f5894c03217e7f8bfbe0c0a1640480eec6ec34992b92adee","sha512":"e38cf96ae5765c7116eeb9477189c8a6015f38b2eb2d4e6009df0ba8f46b13fee98aabc3af86285a34d1fdc9763e0757dd18af465afbf140970865366aee94cb","ssdeep":"","tlshash":"0b014969a510685b1766ce011d5af24db17687bfc038c9a1b1a448390ff1fe7c07277d","first_seen":"2026-01-14T14:06:39.46073Z","last_seen":"2026-02-05T00:02:23.611711Z","times_seen":10,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"claim.espresso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Press+Start+2P\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://espresso-registration.app/","date":"2026-01-14T14:06:01.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"43:D3:3F:93:6C:4F:F7:67:58:9D:D5:48:20:4C:74:A2:69:DB:13:9F","sha256":"8C:DB:D2:85:E1:AB:12:7B:1D:5A:65:A7:EC:22:67:6F:B3:A6:65:01:28:29:FA:D2:3B:01:8D:10:7E:4D:09:52"}}},"request":{"raw":"GET /css2?family=Press+Start+2P\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso-registration.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 14 Jan 2026 14:06:02 GMT\r\ndate: Wed, 14 Jan 2026 14:06:02 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1860,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"b7cad844ac5ba76f2eaa0a5f19927973","sha1":"0f619ace2a91abd4ba25e81b02b34e50708501aa","sha256":"c432858c887f02896894b1e44507b18fa1d22287d3bac0c1da9883849c63a118","sha512":"1056d64979f32cc0013a2564c64a6142439088d81b298c3da42cbd73ac308a5e0622cb5fee52c560d6e993e35eaaaea05d10226b42c65379b22a5c4252d1e632","ssdeep":"","tlshash":"043167e6052b94409b931cd373cf7e36de0e2125649184699efe1c84acbaca60391b5e","first_seen":"2025-09-17T02:54:26.564123Z","last_seen":"2026-08-11T19:05:20.565073Z","times_seen":1513,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":114,"dns":1,"connect":14,"send":0,"wait":107,"receive":0,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso-registration.app/settings.json","fqdn":"espresso-registration.app","domain":"espresso-registration.app","tld":""},"ip":{"addr":"172.67.201.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://espresso-registration.app/","date":"2026-01-14T14:06:02.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso-registration.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 19:34:04 GMT","end":"Mon, 06 Apr 2026 20:31:40 GMT"},"fingerprint":{"sha1":"5E:5E:BE:43:A1:6D:1C:E7:1A:DB:40:EF:93:B0:94:1D:E6:63:6A:AC","sha256":"F0:38:23:0C:D4:93:76:0B:12:DF:DA:C6:EB:96:B1:42:9D:35:F3:4C:5B:1D:C3:67:9F:A1:68:E1:98:49:08:7B"}}},"request":{"raw":"GET /settings.json HTTP/1.1\r\nHost: espresso-registration.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://espresso-registration.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 14 Jan 2026 14:06:02 GMT\r\ncontent-type: application/json\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 20:29:38 GMT\r\netag: W/\"695d70b2-351\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=COHYDjaX08mI7K%2B%2BCpY5CZbX6Cq3HH1lxEgocMDReOGRKIwaaT6z0yuL4MhWYsJtpnZT1Y7QbXgLmcNEIxxrLp84uZkhA%2FQrJH3EdZFPc%2BS0wPKZwf2H\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bddb1114825712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":849,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0edafa242f1339b9a891df5a4c30004d","sha1":"b320b528447ea4a19d07c7deba2ea3edfeb02dea","sha256":"37ea153ecb40aa932c3d34bc9f28c7b344ebf9f4972016d45ed603ad3388bfd3","sha512":"f4fadbc36c9129b0d0729032397855e52180821c4f36524bcc6948212a89d4e970bbf172403572ded86342f7cccab59b1da2615fa571a09da797992dd3b4bb12","ssdeep":"","tlshash":"b6011e45dc21486be2c90628b54e720809167d2742c43c406f1b9019af7e76b4f727cd","first_seen":"2025-12-31T12:33:59.897048Z","last_seen":"2026-02-14T01:27:34.021047Z","times_seen":5,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"espresso-registration.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"magna-public-assets-prod.s3.amazonaws.com/portal-assets/espresso/logo.svg","fqdn":"magna-public-assets-prod.s3.amazonaws.com","domain":"magna-public-assets-prod.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.216.38.177","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.espresso.foundation/","date":"2026-01-14T14:06:00.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /portal-assets/espresso/logo.svg HTTP/1.1\r\nHost: magna-public-assets-prod.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: uNSDB3ZTzwzst7dFxuoXP22dyRk4/cL4Anf9UbPf+hiFMoUOA2Vq+G+8hW1X3bt/IkNod0TS+bQ=\r\nx-amz-request-id: QKQCSRDGT3QZQBRQ\r\nDate: Wed, 14 Jan 2026 14:06:02 GMT\r\nx-amz-replication-status: COMPLETED\r\nLast-Modified: Wed, 12 Nov 2025 16:32:20 GMT\r\nETag: \"e7d57d12734f150bf16762985f60e68f\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: TqihulMH7zzidS_xLcOiP5lydJnvVth2\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 10123\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":10123,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e7d57d12734f150bf16762985f60e68f","sha1":"8b9e922d3d6cb0e595f06f9be854993143e08c39","sha256":"fff37441b6ebebe425ac73d7370e23f99ef080363dde784aed0d5ab0d2f6d67e","sha512":"c3e6515d8895a288314112f2e450bbac693526a28f7bd3aaeb993e2cb6c387e15b6ae1a666e4c91db478c84ae041786c517745a1f58a7bbf618ddcc14661660c","ssdeep":"192:8+g/3Z39WicEGuje62Ar97zpAa2OiVv4218mT5Uq/ww1y:ng/3xQieuD2AZBAPPy2FTfBy","tlshash":"0d2296da6be8f3f1d506f3e2c65a4078ba2b70f56d66cb18cba52d55aa1045fc884cc0","first_seen":"2025-12-28T18:47:24.370223Z","last_seen":"2026-04-08T12:13:16.923463Z","times_seen":27,"resource_available":false,"data":null}},"time_used":1080,"timings":{"blocked":478,"dns":15,"connect":93,"send":0,"wait":121,"receive":1,"ssl":369},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/use-is-client.hook-BMJdPNxQ.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-14T14:06:00.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/use-is-client.hook-BMJdPNxQ.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-Bty4uRgF.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 25157\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"use-is-client.hook-BMJdPNxQ.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 14 Jan 2026 14:06:00 GMT\r\netag: \"b3a048544d438ace2c64e19b485cf63c\"\r\nlast-modified: Wed, 14 Jan 2026 07:06:43 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vtvmx-1768399560923-17f358f1130e\r\ncontent-length: 141\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":141,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"b3a048544d438ace2c64e19b485cf63c","sha1":"b30ddfa1e937e309283ab7b78a38ab1ba78cce36","sha256":"a6fe5ab77e4bf7d2430db49370055ae2773cbdedcf19c6f8e8faada9308d1ccc","sha512":"c0e16664e5a29f1969c30430988cfe93c2d286f5e55300c1ec276f183ac2d2cbfd4fe0813f072c56e5c79f7b33b6f1b33461cbcd85c5f54eaab44e653f182e77","ssdeep":"","tlshash":"7fc02b561082ac7487004ce00377ddb0953284dc22e51fa0b0254c161f490f74bafc0b","first_seen":"2026-01-14T14:06:39.476463Z","last_seen":"2026-02-05T00:02:23.648243Z","times_seen":10,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"claim.espresso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espresso-registration.app/settings.json","fqdn":"espresso-registration.app","domain":"espresso-registration.app","tld":""},"ip":{"addr":"172.67.201.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://espresso-registration.app/","date":"2026-01-14T14:06:01.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso-registration.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 19:34:04 GMT","end":"Mon, 06 Apr 2026 20:31:40 GMT"},"fingerprint":{"sha1":"5E:5E:BE:43:A1:6D:1C:E7:1A:DB:40:EF:93:B0:94:1D:E6:63:6A:AC","sha256":"F0:38:23:0C:D4:93:76:0B:12:DF:DA:C6:EB:96:B1:42:9D:35:F3:4C:5B:1D:C3:67:9F:A1:68:E1:98:49:08:7B"}}},"request":{"raw":"GET /settings.json HTTP/1.1\r\nHost: espresso-registration.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://espresso-registration.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 14 Jan 2026 14:06:02 GMT\r\ncontent-type: application/json\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 20:29:38 GMT\r\netag: W/\"695d70b2-351\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JECvyOz%2F9Re8z9UVoXiBMzC94nDZuev3nCi7drzSZlLDytP7xEeDSazl2iwgYEpNmas%2BPXm0WjyC6LVnPAyuLAcTqWkJdrXwtU4e1jV9edkjZSlTJqrq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bddb10e0809712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":849,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0edafa242f1339b9a891df5a4c30004d","sha1":"b320b528447ea4a19d07c7deba2ea3edfeb02dea","sha256":"37ea153ecb40aa932c3d34bc9f28c7b344ebf9f4972016d45ed603ad3388bfd3","sha512":"f4fadbc36c9129b0d0729032397855e52180821c4f36524bcc6948212a89d4e970bbf172403572ded86342f7cccab59b1da2615fa571a09da797992dd3b4bb12","ssdeep":"","tlshash":"b6011e45dc21486be2c90628b54e720809167d2742c43c406f1b9019af7e76b4f727cd","first_seen":"2025-12-31T12:33:59.897048Z","last_seen":"2026-02-14T01:27:34.021047Z","times_seen":5,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"espresso-registration.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"public-bsc.nownodes.io/","fqdn":"public-bsc.nownodes.io","domain":"nownodes.io","tld":"io"},"ip":{"addr":"172.66.145.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://espresso-registration.app/","date":"2026-01-14T14:06:02.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nownodes.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 23:24:15 GMT","end":"Sun, 12 Apr 2026 00:24:07 GMT"},"fingerprint":{"sha1":"EC:BA:9B:AB:CB:AC:F0:50:15:55:17:89:D4:5F:52:04:A6:2E:C8:1F","sha256":"43:C6:97:66:EC:F0:C7:EB:3D:64:36:C1:2D:53:6A:54:A0:BC:D0:0A:21:A3:CD:D9:75:A0:F7:5E:15:04:A5:18"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: public-bsc.nownodes.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://espresso-registration.app/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://espresso-registration.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x6981E9EA7023a8407E4B08ad97f186A5CBDaFCf5\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 14 Jan 2026 14:06:03 GMT\r\ncontent-type: application/json\r\ncontent-length: 194\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: Origin, accept-encoding\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9bddb1143a745689-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":807,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d2d64c5f9293eb3ef064b089af272cf3","sha1":"9087ac99c5049ae550deb6681558d2b36c367d36","sha256":"1298242b7d0d06fa652c31118aca2012644308584d15fd18ddf0acac54153be3","sha512":"85f143037c6f65aa56187e7181381ce7a2d6f528f01af6f4ef61383c977e2d4600bcf204dbcc0add7b68945fb6c8f61523a3d8f0b1ce8cbc52916dc24a8462be","ssdeep":"","tlshash":"40018cf006978e60d0f89c8ab116be8562107c87f8cb2e430d084dc02af9485f734463","first_seen":"2025-11-30T01:31:11.661996Z","last_seen":"2026-02-07T14:06:38.452246Z","times_seen":39,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/sound-button.component-DqN7VKJb.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-14T14:06:00.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/sound-button.component-DqN7VKJb.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/home.page-Cy6bEmwx.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 48042\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"sound-button.component-DqN7VKJb.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 14 Jan 2026 14:06:00 GMT\r\netag: \"e9dad0f26074ccd39ca69d70818b940d\"\r\nlast-modified: Wed, 14 Jan 2026 00:45:18 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::nlfjg-1768399560946-92694ecd9d28\r\ncontent-length: 947\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2189,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (2188)","md5":"7bfe75236ff0c1135dee7963c01e15d7","sha1":"7dda9a80b1eddf4f81cf5916065009883ee2ed04","sha256":"cdb2474a889013e5a0b6638c62b3e7b6ef7a75a979643ed427adbb095458283b","sha512":"ecd42a553e011d043c6746ada325f7f664cc056f0bf6732161b31629b8ae7958309463ef0e4d322c935be9a3e458d3527c2829a2704b26de0bcef52604696b24","ssdeep":"","tlshash":"924174edc70035ac640e9b30fd177812b1be04fe8ba557d0818c653c6a368e3eb69ac5","first_seen":"2026-01-14T14:06:39.481157Z","last_seen":"2026-02-05T00:02:23.641485Z","times_seen":10,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"claim.espresso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/fonts/pp-neue-montreal/pp-neue-montreal-medium.woff2","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim.espresso.foundation/","date":"2026-01-14T14:06:00.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /fonts/pp-neue-montreal/pp-neue-montreal-medium.woff2 HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/fonts/pp-neue-montreal/font.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 79472\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"pp-neue-montreal-medium.woff2\"\r\ncontent-type: font/woff2\r\ndate: Wed, 14 Jan 2026 14:06:00 GMT\r\netag: \"b36caee87073c28b3f64d07e13d86b2a\"\r\nlast-modified: Tue, 13 Jan 2026 16:01:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::z5lf7-1768399560847-160cd0b8e91e\r\ncontent-length: 51980\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":51980,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 51980, version 1.0","md5":"b36caee87073c28b3f64d07e13d86b2a","sha1":"5f77698d1e7c61ee9dbeda0774b7227c0e3ebf3a","sha256":"11a1b227a4f432bdc5587a529d34a46abbed7067b6e1fb913db0c489c7175828","sha512":"4d868669f739643351e9d2d6ec442fce5db761eb35f48e855deb755529556b28bf55adbd1eb4d25b34478efb35cc34662ead7af40342f365f6082b11f337ad38","ssdeep":"1536:mfOh/to3MFPyrfkIsvSfkMmIxH1S0VSIw6b:mfOh/+cJmpOYI0cIXb","tlshash":"f933f254a314656ed906ef65c95c2ba363bd33dae801e84f303d3bdbf91aa312790057","first_seen":"2023-11-11T04:34:18Z","last_seen":"2026-08-10T18:02:30.833602Z","times_seen":448,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"claim.espresso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/index-CohomkmQ.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-14T14:06:00.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/index-CohomkmQ.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-Bty4uRgF.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 29123\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"index-CohomkmQ.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 14 Jan 2026 14:06:00 GMT\r\netag: \"38514b0faeeb3504a155360cde8c8c6f\"\r\nlast-modified: Wed, 14 Jan 2026 06:00:37 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::z5lf7-1768399560930-24be570a3648\r\ncontent-length: 1466\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3680,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3679)","md5":"57559ef8dee80a764111f5419139d290","sha1":"f6cd028022423a4169c8c4a571312073ba311412","sha256":"1d2b088ad5c6feb20999d1ded453af513b3348430db3848a6af0807af2fcac80","sha512":"e4eb88ea0b0b1739ee0f6516eb6da5b4feedbca421f81724268d8dcaae23c8b55b68a2950dbc20f25c18600a28474055593dd8b22dda5961e7680151b6bab641","ssdeep":"","tlshash":"b571128db7c4f04249c6a960037ba317b2a9377328bec2a593ee95b012675594227f74","first_seen":"2026-01-14T14:06:39.487256Z","last_seen":"2026-02-05T00:02:23.592968Z","times_seen":10,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"claim.espresso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/index.es-CK5AZ3iz.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-14T14:06:02.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/index.es-CK5AZ3iz.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-CEa_1vcz.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 22897\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"index.es-CK5AZ3iz.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 14 Jan 2026 14:06:02 GMT\r\netag: \"312c4f2e3e81493b79cfbc3770b4ec65\"\r\nlast-modified: Wed, 14 Jan 2026 07:44:25 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::t225h-1768399562835-6386ae441b27\r\ncontent-length: 84114\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":346003,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (53177)","md5":"3c9fae6b30b705b037706f1e0cfdeefd","sha1":"60a0aa774bd02f60ff0413c9b22c5f2a374268af","sha256":"f1fbc4c7ac0d2870cf3b6fedccb5b2ccd48cacdf1dac9deaea57f4eb3799fbc4","sha512":"fadfd761373d916fcd239c65badf3af6f9b147120b4a905f48a14ff6f8c0aafe7d05ad4dee1abd4ec99d513aa67bc584bd1cebd02e21ab6efa154752a1ca5149","ssdeep":"6144:sKozfkuuo9pepoE4y4++7o8IR4zHVwSbZnECpGNJ6NokB:sRhnep4y4+kO4pwSbZnE6NXB","tlshash":"be742b8473b6a47603ea95d9a8352201f23458683049d46cffbc6defae844854b3ff76","first_seen":"2026-01-14T14:06:39.489893Z","last_seen":"2026-01-14T14:06:39.489893Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"claim.espresso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/coinbaseWallet-WWX6LF36-BMRj6mTC.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-14T14:06:02.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/coinbaseWallet-WWX6LF36-BMRj6mTC.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-CEa_1vcz.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 79034\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"coinbaseWallet-WWX6LF36-BMRj6mTC.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 14 Jan 2026 14:06:02 GMT\r\netag: \"694e1f6dd72af86c8c477f9608975a74\"\r\nlast-modified: Tue, 13 Jan 2026 16:08:48 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::lz9h2-1768399562971-95c44d7551ae\r\ncontent-length: 598\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":598,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (597)","md5":"694e1f6dd72af86c8c477f9608975a74","sha1":"3b0def5280cfb0e2cb76b3a039bf7e26986a7f92","sha256":"4a238a92bd23caf58037a8423adebebfc6a84b6762f033bc7e6ebf8741ca1e41","sha512":"7290b10e41ef6e0d7bc27cb24d75327c1493f0d2ae961fb89bf1bb387659a9bc14681b66dbe754722c5f2ea5a98b6cc76c2ca9cde9406de0062262f6f056003f","ssdeep":"","tlshash":"64f022a1a2dcb411186ad336513c5ad4bcd7128cae2e621c32801f1af82009a98c8a79","first_seen":"2024-12-25T05:30:42.515918Z","last_seen":"2026-07-19T05:50:19.546591Z","times_seen":68,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"claim.espresso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.unicorn.studio/images/hK13GObf5rZ2ZBOA1482Q9StWR73/coin.png","fqdn":"assets.unicorn.studio","domain":"unicorn.studio","tld":"studio"},"ip":{"addr":"34.120.54.136","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.espresso.foundation/","date":"2026-01-14T14:06:03.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.unicorn.studio","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 01:15:17 GMT","end":"Sat, 11 Apr 2026 02:09:11 GMT"},"fingerprint":{"sha1":"DE:FB:B9:C7:64:66:73:ED:A0:17:64:C3:90:DC:C4:DA:51:F9:1E:8A","sha256":"1B:C6:C2:0F:6E:57:8E:65:50:70:81:13:33:ED:B6:62:DE:B7:E4:60:18:5C:4C:BC:E8:0B:86:F9:84:5D:74:88"}}},"request":{"raw":"GET /images/hK13GObf5rZ2ZBOA1482Q9StWR73/coin.png HTTP/1.1\r\nHost: assets.unicorn.studio\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://claim.espresso.foundation\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5XgtFcO4eWUdYhFPQVIym7s-s2YnvPzkHTcjccpzY9Rev96HLDZK4_ykDiWloHQetGXAcCySzo\r\nx-goog-generation: 1762861129615574\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 76234\r\nx-goog-hash: crc32c=s/wkUw==, md5=VUPxydD/UXnXMiBrkbzzgw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 76234\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, Content-Type, Date, ETag, If-None-Match, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Wed, 14 Jan 2026 13:09:01 GMT\r\nage: 3422\r\nlast-modified: Tue, 11 Nov 2025 11:38:49 GMT\r\netag: \"5543f1c9d0ff5179d732206b91bcf383\"\r\ncontent-type: image/png\r\ncache-control: public,max-age=3600\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":76234,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 404 x 408, 8-bit colormap, non-interlaced","md5":"5543f1c9d0ff5179d732206b91bcf383","sha1":"7405c218b26efc284452c6f39c8522148667c4e5","sha256":"5b0b5b3c7175810ea204b14934608e55218c4a9326bdfa23c4c8a1ff4038063b","sha512":"578b57a63cf1cc650711f5525b08259affa1d722374a1cdfdde8c1f7282f315d444be30e134c361e34cce6bedd57f52c4fbde79b70ce3839fcd76c04c29d0fa9","ssdeep":"1536:ub3pH4uPjKs/YvPbs2vYdmUqNcD+LZoQdi+iL:w3pH4uPjKs/kAnqNS+LZoAAL","tlshash":"107302a84b7f871a9400a786a5a688b6e999fc3711b05a3dfdc403787c1c3d0c376da8","first_seen":"2025-12-31T12:33:59.890405Z","last_seen":"2026-04-08T12:13:16.930494Z","times_seen":19,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":82,"dns":28,"connect":12,"send":0,"wait":13,"receive":22,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/hstack-D7BEHBmh.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-14T14:06:00.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/hstack-D7BEHBmh.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-Bty4uRgF.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 28304\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"hstack-D7BEHBmh.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 14 Jan 2026 14:06:00 GMT\r\netag: \"cd9c658e6acbaf903d31abcbdcd0a9f0\"\r\nlast-modified: Wed, 14 Jan 2026 06:14:16 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::nlfjg-1768399560920-44f549745050\r\ncontent-length: 473\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":473,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (472)","md5":"cd9c658e6acbaf903d31abcbdcd0a9f0","sha1":"f362d682440d6a4bee383672635f146a50f63d7c","sha256":"cf95ee78b7c72e64f9703177d7e45438f08f4024a14d6530ab92c62efb9ba853","sha512":"5a1869e999538136ef20e5328ffbba297e465bdba6ece9169fee1c6e96b5fad2554200d67a3f8887950ff287851411c368f04e2152b090ddcbd3c69645b6a695","ssdeep":"","tlshash":"96f0d4a7644171b403e5cc5462e5535941de5f9cb67155c890ce880e3a141c5539be49","first_seen":"2026-01-14T14:06:39.493632Z","last_seen":"2026-02-05T00:02:23.609983Z","times_seen":10,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"claim.espresso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Fira+Code:wght@300..700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://espresso-registration.app/","date":"2026-01-14T14:06:01.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"43:D3:3F:93:6C:4F:F7:67:58:9D:D5:48:20:4C:74:A2:69:DB:13:9F","sha256":"8C:DB:D2:85:E1:AB:12:7B:1D:5A:65:A7:EC:22:67:6F:B3:A6:65:01:28:29:FA:D2:3B:01:8D:10:7E:4D:09:52"}}},"request":{"raw":"GET /css2?family=Fira+Code:wght@300..700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso-registration.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 14 Jan 2026 14:06:02 GMT\r\ndate: Wed, 14 Jan 2026 14:06:02 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2425,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"364d80757a1c7c81dccbf8d6caeb7ae7","sha1":"abf8e3b38eb2295c6378231fb2ecabae5ecd4b2f","sha256":"17babf90f4bae4a92ef7f4f24552b88b41c391b89328f46faa49286f5c2c2c6a","sha512":"6a0c6519a03917cedd40ecfe91e6cb8d30a42a61c005244bf8c09934a12132ba0fe963dd6e5c77a9baa19944cadb274ecf81e1780697acc5f3e22ae85b02c131","ssdeep":"","tlshash":"1c41aaa601a79400afa30cc177cebe779e1e2198b041c6b95efd08989ce7d32435472e","first_seen":"2025-09-17T03:18:47.282954Z","last_seen":"2026-08-09T03:42:01.541041Z","times_seen":905,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":112,"dns":1,"connect":29,"send":0,"wait":96,"receive":0,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/ledgerWallet-KZKJ5Q2S-DdZeAsds.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-14T14:06:02.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/ledgerWallet-KZKJ5Q2S-DdZeAsds.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-CEa_1vcz.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 28302\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"ledgerWallet-KZKJ5Q2S-DdZeAsds.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 14 Jan 2026 14:06:02 GMT\r\netag: \"717b03058e9eccce29ae3a8f15544b1a\"\r\nlast-modified: Wed, 14 Jan 2026 06:14:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vp5wx-1768399562970-31727ebd76a2\r\ncontent-length: 443\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":443,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (442)","md5":"717b03058e9eccce29ae3a8f15544b1a","sha1":"c2b626e64489c6f9084d3bad64c5fb73df88d797","sha256":"59642a8a9d30d9684f1aa6b4c8ca8886bf9a53491a3e238ad3aadac36f1917d9","sha512":"d339c57445af528cd655bad29dc18dbbf61ef6c5a8f6541b4735e8ef7ed872dbf173d22e3c67f976eb78bd25eb8b30a40b2613698d6ef9f24a485a61c7e9f6ee","ssdeep":"","tlshash":"b7f0abe64b508d00874a03b1cabc94c8313775eea758239cb2720619bd420afb90cbb0","first_seen":"2025-09-05T14:38:20.777264Z","last_seen":"2026-07-13T09:43:22.19955Z","times_seen":22,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"claim.espresso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/trustWallet-E2GVGE4U-CcH50yxW.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-14T14:06:02.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/trustWallet-E2GVGE4U-CcH50yxW.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-CEa_1vcz.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 7068\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"trustWallet-E2GVGE4U-CcH50yxW.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 14 Jan 2026 14:06:02 GMT\r\netag: \"a25b589fc633676b9a58fa384f2d0334\"\r\nlast-modified: Wed, 14 Jan 2026 12:08:14 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vtvmx-1768399562973-ddc75c7faf6c\r\ncontent-length: 760\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":760,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (759)","md5":"a25b589fc633676b9a58fa384f2d0334","sha1":"119f38e7d9e19f351e022c5fa0f537f15ea3f933","sha256":"7edbc680126336b8db68846c0b688c957b60afd953859b06ca9dfd6a74a54f02","sha512":"ad917ac1bc65cbd0d55a05d5e39241f3badda088e0a56bf1d332a82c1df6d46e706c54bf3f9ddf22c75c3e754a33d6c3c03b2e6138720a09e85e0ce96cd9dc9b","ssdeep":"","tlshash":"3c01c0dbdb29dc77c85f83bced08a4a3521876db60c8436ee6554f1f25a808b1c0db60","first_seen":"2025-06-03T09:03:10.609568Z","last_seen":"2026-07-13T09:43:22.197199Z","times_seen":37,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"claim.espresso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/fonts/pp-neue-montreal/font.css","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim.espresso.foundation/","date":"2026-01-14T14:06:00.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /fonts/pp-neue-montreal/font.css HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 7093\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"font.css\"\r\ncontent-type: text/css; charset=utf-8\r\ndate: Wed, 14 Jan 2026 14:06:00 GMT\r\netag: \"a6a6e32dbe741d171e83cee23cf2248a\"\r\nlast-modified: Wed, 14 Jan 2026 12:07:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::mk7xf-1768399560803-17b23f1d6765\r\ncontent-length: 400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":400,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a6a6e32dbe741d171e83cee23cf2248a","sha1":"b89b8228695b1b63c2abdb052b48dbbbd19a2528","sha256":"91fafc1905bf8c2ed7d8d91ee2c57deea7a7f886c4b8d9f1a6544f7fd9c08589","sha512":"39e9abd765670064d807e614cfa029e1b368beaa357afb935f88837d838c5bee37cfcd3285731fe84c825282bda9ac5a93c14238e28e6d4ea1f47e463382717f","ssdeep":"","tlshash":"d4e0228008aaa600d2290c46b38f8f272d1d48062002c4ae5b7b78489de38b173c0b0f","first_seen":"2025-12-31T12:33:59.892068Z","last_seen":"2026-02-17T15:15:31.670744Z","times_seen":16,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"claim.espresso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/home.page-Cy6bEmwx.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-14T14:06:00.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/home.page-Cy6bEmwx.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 13811\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"home.page-Cy6bEmwx.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 14 Jan 2026 14:06:00 GMT\r\netag: \"040a7792b4647032a4d56798b64e5afd\"\r\nlast-modified: Wed, 14 Jan 2026 10:15:49 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::dqmkz-1768399560870-6a581dc21615\r\ncontent-length: 5309\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":12777,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12348)","md5":"b31499f120cb6e3060bc5ae2050cc5d5","sha1":"d8cdc6abc8362591de59ca50af649bc6559ae9b8","sha256":"07c0e99ae69e2e48260bbc65a24cb92c31f7efeec267d1f66d494b5d2eacdbb8","sha512":"cd363c9d1c0c44528f4ea8498975de5fa01dabca34a8d112751d3c241866c778dba15035122bcd4c8609c4a67eb93a48bddbb99927bb6295f8265d7ec9f65b16","ssdeep":"384:cKydpb9xLuXa/pgf0breOHKPJ6bEOSBEw/Pvhy:cKydpb9x6Xa/yf0breO8Ew/Pvhy","tlshash":"e6423c4cd295a57ee2d24599257bd118b33a0698b27780a0d37e68360370dc2b937fdb","first_seen":"2026-01-14T14:06:39.496726Z","last_seen":"2026-01-14T14:06:39.496726Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"claim.espresso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/config-uZ4fvpPM.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-14T14:06:00.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/config-uZ4fvpPM.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-Bty4uRgF.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 79473\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"config-uZ4fvpPM.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 14 Jan 2026 14:06:00 GMT\r\netag: \"dc454468c652df3fd023455b21ef7b58\"\r\nlast-modified: Tue, 13 Jan 2026 16:01:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::dqmkz-1768399560919-1ae319447b02\r\ncontent-length: 16775\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":47282,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (47281)","md5":"67213f0aa557fdfcd5241078979fe495","sha1":"8a47398f33b1602977d1ebcd3dde8dc60a5efb43","sha256":"491a084aad0861ecbd5d0109d5e44769497fe0b5854e77a25f289b78357a29cf","sha512":"f0de27ceb4f2dcaac56b27cc1893b6206b7d970708b984665befca71efdd1e36d966aa60e0f6e1b44b45b566cfff06740f842bff53eae6ce7365824e47d4828b","ssdeep":"768:vzlHMGUyZBymwaJ2+d3EfZ56gNjwWghktt55HRTrhD1841Mzq2yS6Iv4Gx5U4KMh:vzlHfL2p6lhi9Wq2tHhC9V48pc","tlshash":"6c23a7ca7186b2162be2d1a4483f4015e2396954780e846cb5bdddd3bd72c8ee17bf38","first_seen":"2026-01-14T14:06:39.497988Z","last_seen":"2026-02-05T00:02:23.640577Z","times_seen":10,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"claim.espresso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/?format=json","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://espresso-registration.app/","date":"2026-01-14T14:06:02.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 12:15:50 GMT","end":"Wed, 01 Apr 2026 13:15:39 GMT"},"fingerprint":{"sha1":"E8:04:3F:4D:91:E2:52:D3:E0:EA:F7:1A:C8:8C:94:50:7C:2E:FF:FF","sha256":"A1:8E:F1:BF:52:25:E4:EE:2D:91:8B:1E:0B:E7:A1:C3:B9:7D:DF:7D:D1:57:11:6A:14:CF:F2:A6:DF:D1:B0:18"}}},"request":{"raw":"GET /?format=json HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://espresso-registration.app/\r\nOrigin: https://espresso-registration.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 14 Jan 2026 14:06:02 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9bddb1116df25695-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7d69c71af0f191e9a72db6153f8018d1","sha1":"f67c5f2887bc05654b47f76e9621e53a4091aed1","sha256":"5bac6e06cf0e1ad38c55f9f9d12122272bf4b8157877629fe68cd33fe2133c65","sha512":"fdf43a8f3d843fe9008949d6709c8e2a5cd640f6101522319745f0a829f21dc8f4bd4d70ff3e2f6e1fd53ca0d2dd872bf3588c593a403071102ab28763cbdba5","ssdeep":"","tlshash":"b8700022000000208c80800eca0a032223a0000ac20a00088e800b2288a0b380282032","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-07T07:51:18.251001Z","times_seen":93313,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":20,"dns":1,"connect":1,"send":0,"wait":105,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/rabbyWallet-FLVUU35F-BZrp4syk.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-14T14:06:02.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/rabbyWallet-FLVUU35F-BZrp4syk.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-CEa_1vcz.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 78568\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"rabbyWallet-FLVUU35F-BZrp4syk.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 14 Jan 2026 14:06:02 GMT\r\netag: \"7529aec7bfab7dad9c01256a12151e9e\"\r\nlast-modified: Tue, 13 Jan 2026 16:16:34 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::lz9h2-1768399562975-6dd76fb87a1b\r\ncontent-length: 1125\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2370,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2369)","md5":"174b08de1e202256a72f7663e79b8461","sha1":"602e294d94f061211502895741144c4320248855","sha256":"0767c9b588d0ab9b532619b26d91fe6e5163f541bcc2d6a9e9adae18f670dc8d","sha512":"640ce4e8d836b4ea90ace61f30c3cbe697e7d9a7d6d04c4b4a4e0f1845f850754434d0415ee9f3a7ec0856d679fe14679d1548d99385bb887a205fb0ab6d3b1f","ssdeep":"","tlshash":"594183e8eb38e993edadc67cdf19a475310e30ff909441a551d65b1e30646d33e0a650","first_seen":"2025-04-01T04:17:39.073172Z","last_seen":"2026-04-10T09:11:01.513661Z","times_seen":32,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"claim.espresso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/walletConnectWallet-FNSU4KNU-B0ci71fU.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-14T14:06:03.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/walletConnectWallet-FNSU4KNU-B0ci71fU.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-CEa_1vcz.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 7068\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"walletConnectWallet-FNSU4KNU-B0ci71fU.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 14 Jan 2026 14:06:02 GMT\r\netag: \"c54691e324f11158e160ac01cf110898\"\r\nlast-modified: Wed, 14 Jan 2026 12:08:14 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vtvmx-1768399562980-d3fa086618a1\r\ncontent-length: 655\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1513,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1512)","md5":"05a8359b297686a38136a26a10311301","sha1":"5d995f91f19bdd38e876708ea756b76ad53ce55c","sha256":"ff6da22ac4da1356c60264b8a4ca0e3bf79b026e16220dfac81cf1058e40160d","sha512":"28ffda0d4b0fcf35ec80c90c3bfc90103685a5220858159a9016588568e808550fb18e8b2d8ee45f72817087723c842ad4f3872adf933ef1da6267d6cef4fdbb","ssdeep":"","tlshash":"1a3115ef6be412f4d017e3a3d01590267ddb24ba7729ef44421b4ae0ae0149d64c8d78","first_seen":"2024-12-25T05:30:42.591141Z","last_seen":"2026-07-19T05:50:19.560139Z","times_seen":81,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"claim.espresso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/warning.icon-Dc0zRbzu.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-14T14:06:00.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/warning.icon-Dc0zRbzu.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/home.page-Cy6bEmwx.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 25152\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"warning.icon-Dc0zRbzu.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 14 Jan 2026 14:06:00 GMT\r\netag: \"33a0fd88bdb5a9129d1f5c0403d5831d\"\r\nlast-modified: Wed, 14 Jan 2026 07:06:48 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::nlfjg-1768399560952-be49e24391c4\r\ncontent-length: 655\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":655,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (654)","md5":"33a0fd88bdb5a9129d1f5c0403d5831d","sha1":"1ffd6e76124807003f116afe62d3073497f5ae0e","sha256":"9d91956b4453121641b232044a10f3e736d188267a7929c93f3be18013191a02","sha512":"396413eb088130483f66ed12031cdce4cdf3e43d4532fae0d150efe53c732eaf301e77c55d6c2f2b50099ebdbd592be1e7de6310c91b1b5b880bc421449aa55c","ssdeep":"","tlshash":"e4f02377e3f428b87505cee8634f7d363177a0a9b3014645a39e581427a40c5b5ad9d2","first_seen":"2026-01-14T14:06:39.501511Z","last_seen":"2026-02-05T00:02:23.653333Z","times_seen":10,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"claim.espresso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/app-BoJG5GEb.css","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim.espresso.foundation/","date":"2026-01-14T14:06:00.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/app-BoJG5GEb.css HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 65263\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"app-BoJG5GEb.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Wed, 14 Jan 2026 14:06:00 GMT\r\netag: \"e2d43e4c4393f24c4e2f0646133a1b92\"\r\nlast-modified: Tue, 13 Jan 2026 16:01:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::tp7tf-1768399560806-4d7ba06d433a\r\ncontent-length: 6444\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25217,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (25213)","md5":"db7e37814916724f657616c3b81d530b","sha1":"2299f8ad0285cc88c922f72de1572adcc442c9f7","sha256":"f41f9a8741dd6b6b26bdb8490caa550f38433565a111a76a8f5499f44aebb66d","sha512":"3dcddda05b8c2b4dff146f0c085195487965a359cf4ec7f5eb4d14bb569486cd879549f59876952b2d74f133d389b1a980cbdbe748709e7fa04e180e7576a816","ssdeep":"768:DvylfX3HpL1YkPjTem0rRkuyS59ByUYHbTcf02Jko0Aoi9KckbFiH5TRIZU:cfX3HpL1YkPjTem0rmuyS59ByUYHbTc5","tlshash":"87b2a685b6008abe7c3be56a976dea0c6309be12ec100eeff91835121be7ff615d1504","first_seen":"2026-01-14T14:06:39.502596Z","last_seen":"2026-01-14T14:06:39.502596Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"claim.espresso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/root-CEa_1vcz.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-14T14:06:00.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/root-CEa_1vcz.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-Bty4uRgF.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 29118\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"root-CEa_1vcz.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 14 Jan 2026 14:06:00 GMT\r\netag: \"369413320a0cf48edf0e6b74bcf81035\"\r\nlast-modified: Wed, 14 Jan 2026 06:00:42 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::kbxc9-1768399560915-9ba0e9f92fd6\r\ncontent-length: 1224695\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3513685,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62089)","md5":"b0e8ca23275943154ce2101f4bdcdba6","sha1":"c02713362af9e1cca57520322e55d0bebe06bd5f","sha256":"f7e0b9cacc4a26845d9d53a095c85b2a5c9ddbf454f622612274c60f55907670","sha512":"3b34e2966ed684e3a97febdcd36c9b2886d5d39a53d32e4db95dc0e10570445179cb31b915e9d0b8e6647390b778be7115c4ca137cf24b6688bf972d862d6ca7","ssdeep":"24576:i3sEdHzfDkdrJhYTNeuFBMOa2P6mzUjqqQfWlsHS5Mql7U4V1:i3sEdHzfDarJhYTNeuFBMIP6mzUjqqQ8","tlshash":"20255c9032e2b1a243d264d4587b0406f1399c65745c44a8ffacdbf77ea68da81b7f38","first_seen":"2026-01-14T14:06:39.503826Z","last_seen":"2026-01-14T14:06:39.503826Z","times_seen":1,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"claim.espresso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/vstack-BSrJ3UrJ.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-14T14:06:00.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/vstack-BSrJ3UrJ.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-Bty4uRgF.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 18675\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"vstack-BSrJ3UrJ.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 14 Jan 2026 14:06:00 GMT\r\netag: \"6a2f9c4d534af73c81c7b38ccfa6d8a7\"\r\nlast-modified: Wed, 14 Jan 2026 08:54:45 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::z5lf7-1768399560921-abc066d754a9\r\ncontent-length: 10826\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":32755,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32754)","md5":"6567d103159cb41aa99592d17d711d7c","sha1":"54ee8a139b74f9de41a70b6d34c429f533e3b438","sha256":"049eee56858a0fd2ac719573e418576cfeb9dca4fdefd2f5d5a0a7d9fbf6b7be","sha512":"c3ef5287e4d9192c6a9e4c18c66cbb1c93450e0f3379f6a46e23da268a548ef7511fa872ff4bb22c8577c2a36dd7db39f30505fab1fd85557c34541b3e83a132","ssdeep":"768:DsHWUpDTugn4fMqCgSknl5Qn1upQLpOFZDPTKyPZmZA5J4hdrW:Q2bC1YczpOb2Z0J4i","tlshash":"e0e2f9a132541408f6afc7aef8c61f48c13916335413fccab67c8aa8d1517b91b6bb6d","first_seen":"2026-01-14T14:06:39.505387Z","last_seen":"2026-02-05T00:02:23.617042Z","times_seen":10,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"claim.espresso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/magna-decimal-CGNfJiea.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-14T14:06:00.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/magna-decimal-CGNfJiea.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-Bty4uRgF.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 79472\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"magna-decimal-CGNfJiea.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 14 Jan 2026 14:06:00 GMT\r\netag: \"9a46f42293f49a1583d9ad49cacb8f7d\"\r\nlast-modified: Tue, 13 Jan 2026 16:01:28 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::kbxc9-1768399560930-8443c666f79f\r\ncontent-length: 13337\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":31987,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (31986)","md5":"afd2475ce68b29ee23de7afa5ac6589c","sha1":"cb9d723e3b31fba7e3997f22395c5e03722bbb91","sha256":"b0a3a3a26b8ae838e55c6bd74555a177c829958f42f5b8fa0456931a64bc6df9","sha512":"1a9295e6e5a086ef4df8b740e23631b281240ca411d66f74fbd4e4e3bfb3b494ab4166ed67767956f3a2cedd62066bd217c1d777eae1526c43957f0975ae7aa2","ssdeep":"768:G6sjMlJ+Yo/2vqciEry53DiyfrgxlNTQamsZ:G6scMJ2vqVNE8rk1L","tlshash":"27e2c6e972a1f18663e734f201fb9406f23a7d44990d05b1f20886f93cb1686b36af75","first_seen":"2026-01-14T14:06:39.506799Z","last_seen":"2026-02-05T00:02:23.560291Z","times_seen":10,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"claim.espresso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/phantomWallet-IPGVKCAB-BGoqRxdn.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-14T14:06:02.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/phantomWallet-IPGVKCAB-BGoqRxdn.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-CEa_1vcz.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 79033\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"phantomWallet-IPGVKCAB-BGoqRxdn.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 14 Jan 2026 14:06:02 GMT\r\netag: \"d8d3e122c71dad3b911494fe2c10c5f8\"\r\nlast-modified: Tue, 13 Jan 2026 16:08:49 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::jq449-1768399562972-10b4e5ab497d\r\ncontent-length: 919\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":919,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (918)","md5":"d8d3e122c71dad3b911494fe2c10c5f8","sha1":"1b78a2cd20efa5bf8974c3f1d828585a4dec9961","sha256":"074e942e3627e6929f68a9f298e84f7ca26788c12c1dfc6caf7dc90473303910","sha512":"cf37e331c970b63ce5d64b41b174e697175c73e2d942534a7b77daac130ca72233a08809240204283a3bf66bc52c73846ed55ba5add6302341688d4714158d22","ssdeep":"","tlshash":"e411dcd20f3080e50e9aae39ad3878e416b171af737826841349cf34ea83dc74508a50","first_seen":"2025-05-30T14:20:20.549969Z","last_seen":"2026-04-17T09:09:52.493057Z","times_seen":22,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"claim.espresso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/loader.component-C8VnobGF.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-14T14:06:00.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/loader.component-C8VnobGF.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/home.page-Cy6bEmwx.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 22896\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"loader.component-C8VnobGF.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 14 Jan 2026 14:06:00 GMT\r\netag: \"a35b82037f2a03e431a30bf64c578a6d\"\r\nlast-modified: Wed, 14 Jan 2026 07:44:24 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::nlfjg-1768399560958-2f9b7cfa9f94\r\ncontent-length: 38026\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":117949,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (46483)","md5":"871e5ca8610b62744f94ab5d315e51cf","sha1":"bbfcd4d8c18dd07c05af0d515582b50c291b8660","sha256":"1a6ecc655e049dccc6fd54d4893698c563ee6fab64b240368c5a47c2c245aa0c","sha512":"d8dd6684f7e1268f1be89e22d03261c8cded2552c664d91640acf06e17eab4ea50339b07ee8270cf2e5b765990bd30a700195c5df2212853da9bd492eb124207","ssdeep":"1536:3RK0GSaGlSaeey2MZ+40INYm1C5XeJP2CprtD2zj7br:3RcSllS3e070Bm1jrQ","tlshash":"d0b3c79c7882b8a5539b45a590ff010bf27d6c4b700c84a0f268ddaf79738695263fbd","first_seen":"2026-01-14T14:06:39.510059Z","last_seen":"2026-02-05T00:02:23.617986Z","times_seen":10,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"claim.espresso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-LBSJK40LXZ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-14T14:06:02.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 17:08:49 GMT","end":"Tue, 03 Mar 2026 17:08:48 GMT"},"fingerprint":{"sha1":"70:99:EB:7E:36:F3:5D:44:AF:03:0A:9C:2D:A0:5C:8C:AC:4C:A2:FE","sha256":"03:A4:44:57:D2:2E:70:9C:3B:54:B3:2C:77:CA:EF:E7:05:21:C8:E9:8E:61:6C:BB:7C:D0:43:3C:42:75:EC:06"}}},"request":{"raw":"GET /gtag/js?id=G-LBSJK40LXZ HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 14 Jan 2026 14:06:02 GMT\r\nexpires: Wed, 14 Jan 2026 14:06:02 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 143921\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":434580,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"5295c8813404e77254626025d489ecdb","sha1":"833c20f87db515e72e2e9512764d0ca2cfa14590","sha256":"a1431388301019ca9f406f69c6848eafc5b518106853cae40668e6b15047b320","sha512":"6ad865111f2a134ef59d86d40c99cc3f1d41772a2234f00ef129d9af5c99d7ccb1c6b27460987110e01abc6aa0f6f6cf14c53b6c0af136ec0af823e2bb138f13","ssdeep":"6144:v9f73C/F/SkJfU8FY4A9OyrlNcNS5CdOYatoKMEEQh7w:Vj2SkKgYnedOYltr","tlshash":"19942ace73d674269396f078503f018ba57b29a2b45cc896f189cce02e74a9a4177f7c","first_seen":"2026-01-14T14:06:39.511645Z","last_seen":"2026-01-14T14:06:39.511645Z","times_seen":1,"resource_available":true,"data":null}},"time_used":357,"timings":{"blocked":129,"dns":1,"connect":20,"send":0,"wait":39,"receive":58,"ssl":106},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/base-modal.component-DNLaO0Ly.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-14T14:06:00.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/base-modal.component-DNLaO0Ly.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/home.page-Cy6bEmwx.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 79471\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"base-modal.component-DNLaO0Ly.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 14 Jan 2026 14:06:00 GMT\r\netag: \"ade59fbe1c570a7c5a60599ff2371d31\"\r\nlast-modified: Tue, 13 Jan 2026 16:01:29 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::kbxc9-1768399560952-6e1548e7ab57\r\ncontent-length: 3105\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":7997,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (7996)","md5":"f6516df5515afc0b4e81d172b81c3193","sha1":"577432a90dc12274b62341681e9177bd5a8b916f","sha256":"d64ed03a3e8fe31e329d14407885df3780d2ffb770e59e57dbc7f24172a04fbc","sha512":"192e50bd57714685deb8e20dbda5493f1ad906af07727ef39a55919c23be533624c39da333e55cc47a8e428b63dac24c7a839a416efaab0e7c3e19a8559a1622","ssdeep":"192:8OKunyDzs+Is14d5BI8KBB+Wmui1Y4CtZAanHa:jZyDzs+Is1cBI8iBjmuiYa","tlshash":"36f1b81ca38ab568fc2fc589e0fdd64aa56b102cf3360991b1bd952e01d4e52722bfd4","first_seen":"2026-01-14T14:06:39.513163Z","last_seen":"2026-01-14T14:06:39.513163Z","times_seen":1,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"claim.espresso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/user.context-Cpjw0NH7.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-14T14:06:00.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/user.context-Cpjw0NH7.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-Bty4uRgF.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 13812\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"user.context-Cpjw0NH7.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 14 Jan 2026 14:06:00 GMT\r\netag: \"543b1b44a035ee51f97b8ad64d6cc82a\"\r\nlast-modified: Wed, 14 Jan 2026 10:15:47 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::dqmkz-1768399560922-10519118c2bb\r\ncontent-length: 8556\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":23804,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12049)","md5":"56e6c445b75ce1de2ab55147eeaefa07","sha1":"b568d4cf801a8548fae32bb4b4a2029391d1b466","sha256":"b9e495a35a7a9c2a7b0806ea33a1a19ba8654b09b0dedd03f56a075996b8df37","sha512":"42db848fedc0f6ad3441206bf8c50c1219be7b7a6cd8bc6d2bb36276e3058791d569866784041f84c9c8a85b6ec3c79654633136b28a3f627a1b0625a901b6d5","ssdeep":"384:wPQJMJF7sMqTKP/bSZu/dcLgl1lkkObqtrC8CmUZr8sEo2M48/DFYREV7J/RC5AU:wPQJMJFITKP/b24dcC1lkMtrC8CBl8uM","tlshash":"5bb2f75831d9e0b142e750a0947f620bf17819a0e05ca4a4e2aafdf439f8d97817bf36","first_seen":"2026-01-14T14:06:39.514611Z","last_seen":"2026-02-05T00:02:23.65945Z","times_seen":10,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"claim.espresso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/use-on-connect.hook-DznTLjDH.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-14T14:06:00.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/use-on-connect.hook-DznTLjDH.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/home.page-Cy6bEmwx.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 24174\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"use-on-connect.hook-DznTLjDH.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 14 Jan 2026 14:06:00 GMT\r\netag: \"7c326e4d2b8e5921313c85e10ae1d7eb\"\r\nlast-modified: Wed, 14 Jan 2026 07:23:06 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::nlfjg-1768399560955-9967406af475\r\ncontent-length: 654\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":654,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (653)","md5":"7c326e4d2b8e5921313c85e10ae1d7eb","sha1":"f189396287a4e6484ae199a6970393881f551f91","sha256":"46ce22c2ef89425b3534058ea3b5ee819d7fba30b311c8c485e14b7436b2598e","sha512":"be3d258eb481f16e1f2ea453902c42796f786a5dd2cf3185c4321e78f0ee43f7954f0595594da20275e250994332c7aab621629a667f53bad17e97446c7ed13f","ssdeep":"","tlshash":"81f0dd9690c5c1fc931b9ce9c539a77e0a311a997189c2c4ecae58271695d80802ba4b","first_seen":"2026-01-14T14:06:39.516233Z","last_seen":"2026-01-14T14:06:39.516233Z","times_seen":1,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"claim.espresso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espresso-registration.app/assets/secure.php?req=ping","fqdn":"espresso-registration.app","domain":"espresso-registration.app","tld":""},"ip":{"addr":"172.67.201.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://espresso-registration.app/","date":"2026-01-14T14:06:02.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso-registration.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 19:34:04 GMT","end":"Mon, 06 Apr 2026 20:31:40 GMT"},"fingerprint":{"sha1":"5E:5E:BE:43:A1:6D:1C:E7:1A:DB:40:EF:93:B0:94:1D:E6:63:6A:AC","sha256":"F0:38:23:0C:D4:93:76:0B:12:DF:DA:C6:EB:96:B1:42:9D:35:F3:4C:5B:1D:C3:67:9F:A1:68:E1:98:49:08:7B"}}},"request":{"raw":"GET /assets/secure.php?req=ping HTTP/1.1\r\nHost: espresso-registration.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://espresso-registration.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 14 Jan 2026 14:06:02 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 13263\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 20:29:39 GMT\r\netag: \"695d70b3-33cf\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3gmID93U%2FdhQ3nYZ2sEJKbA7OUN5RJWWN6VyTxC07JiC1Rs514ICgeJcV6%2FI2k3kNMpv4nubaix8DtGpSMSYjwqqSKzcTCfgdq2dscYfsMsUzXnldeUL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bddb1114824712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13263,"size_decoded":0,"mime_type":"application/octet-stream","magic":"PHP script, ASCII text, with very long lines (13257)","md5":"1c925167dc939ba7920a7b978a42b65d","sha1":"9b4d27462d3d897552a996e85fde3fbf24283df2","sha256":"0da07b458e6aeb7e396730ce0272d86319a458189810252b1a99ca689f765dac","sha512":"f09322f748a40ff5aa579399a7a7fef8eeca5c81c193eab15cea18d0c3ae30ad34719cd9aad64674575ef05cb185087dd43ab9a9a38340ce1295255a34188101","ssdeep":"384:CLpx+D3MQZuRAxe+0A0C2A6VR0NBfAqRq:CLpxQMnRQt0C2A6VR0NdAqRq","tlshash":"735230702582559b789e0dc7afd32a8e71b042e74e0f7a8f8e3839d9249c259c14dfe4","first_seen":"2025-11-08T08:53:34.56198Z","last_seen":"2026-08-09T03:42:01.535546Z","times_seen":120,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-01-14","alert":"PHP webshell obfuscated by encoding of mixed hex and dec","trigger":"espresso-registration.app/assets/secure.php?req=ping","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/04/18","description":"PHP webshell obfuscated by encoding of mixed hex and dec","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_obfuscated_encoding_mixed_dec_and_hex"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-01-14","alert":"Known PHP Webshells which contain unique strings, lousy rule for low hanging fruits. Most are catched by other rules in here but maybe these catch different versions.","trigger":"espresso-registration.app/assets/secure.php?req=ping","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/01/09","description":"Known PHP Webshells which contain unique strings, lousy rule for low hanging fruits. Most are catched by other rules in here but maybe these catch different versions.","hash":"7b6471774d14510cf6fa312a496eed72b614f6fc","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_by_string_known_webshell"}},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"espresso-registration.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fbsfoewlknwkpew111.live/api/ping","fqdn":"fbsfoewlknwkpew111.live","domain":"fbsfoewlknwkpew111.live","tld":"live"},"ip":{"addr":"172.67.212.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://espresso-registration.app/","date":"2026-01-14T14:06:03.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fbsfoewlknwkpew111.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Nov 2025 22:49:41 GMT","end":"Tue, 24 Feb 2026 23:47:08 GMT"},"fingerprint":{"sha1":"8B:06:BF:16:01:0F:0A:41:6D:7C:CF:78:E3:46:DF:24:5E:81:58:20","sha256":"8E:85:DB:B1:9B:14:B0:64:07:51:E4:3A:AE:86:2B:EE:EC:79:3E:B6:FD:F5:37:9C:5A:CC:B3:ED:26:AE:FF:B8"}}},"request":{"raw":"GET /api/ping HTTP/1.1\r\nHost: fbsfoewlknwkpew111.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://espresso-registration.app/\r\nOrigin: https://espresso-registration.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 14 Jan 2026 14:06:03 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1SrAjQ8csSas%2BNrCR%2B2qPlsFzKoXweH8Ct8nyl7j0wCq9h7uodltV7vGbqmty8A2%2BxwxK0wGNgp628GypWM%2FxbX3FWfUgvokQgFAinbPTBQoDuVw3g%3D%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9bddb115cba2b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"594d96ea0628a6a87187b8e17a7fa4b0","sha1":"5fbf4e5362196240e62d4e192bd93777898755b2","sha256":"cb100e693b55b36a08dc2b04eb312835069a4f2fc406ff374b21313b1f56b5cd","sha512":"c92fac11849dbd07dd610982d2d2e49f7aa59ec6048782145992bed639b1a518c539d9603bea6b79e4f29aa745e301923edaa9d96e1dec3ce27a8a2f4c2f2f4c","ssdeep":"","tlshash":"d96000330c0c0330030c0cc0300fcf030cc0c0c00000fcc000000300c300c000c00300","first_seen":"2025-10-03T14:25:47.505502Z","last_seen":"2026-08-09T23:31:15.864162Z","times_seen":842,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":97,"dns":74,"connect":1,"send":0,"wait":221,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"fbsfoewlknwkpew111.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/root-Bty4uRgF.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"216.150.16.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-01-14T14:06:00.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 10:58:26 GMT","end":"Sun, 22 Mar 2026 10:58:25 GMT"},"fingerprint":{"sha1":"3A:DF:FB:31:20:7D:75:5E:6D:B4:34:BF:46:CD:7C:A1:BD:FE:61:C5","sha256":"B7:0A:F4:AB:AF:BC:1E:28:63:AF:BC:A3:F3:B2:4B:F7:DF:BF:52:5D:EC:F7:83:CA:85:BF:20:27:9E:84:02:F7"}}},"request":{"raw":"GET /assets/root-Bty4uRgF.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 28312\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"root-Bty4uRgF.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 14 Jan 2026 14:06:00 GMT\r\netag: \"18c0e04be38679876f76c316116385b9\"\r\nlast-modified: Wed, 14 Jan 2026 06:14:08 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::z5lf7-1768399560869-39be99baf00c\r\ncontent-length: 549\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":549,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (548)","md5":"18c0e04be38679876f76c316116385b9","sha1":"4c0b70f071d0ad70ff5dc26bd17b8432ae36c9ef","sha256":"a4b163fdc770b2502b1de6e0ecd5210770ef479e912460fac204ea56c96b834a","sha512":"95c560d06ff4903c6ca1c0a096f30f354a03509cc879c3f99ea14be439b30dfe90eb8774c4d9fbbe77e9aa025763b0285ac7b748d48289dd38c191d86c658ae4","ssdeep":"","tlshash":"72f0be1bd54546b663d1ccf1c1a0e2b06233826787d3e3b0d0df2b3693e48bac6c6602","first_seen":"2026-01-14T14:06:39.519139Z","last_seen":"2026-01-14T14:06:39.519139Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"claim.espresso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}