{"report_id":"8426c8e4-d497-40db-8538-ff52061ee59b","version":6,"status":"done","tags":[],"date":"2026-03-30T15:54:45Z","url":{"schema":"https","addr":"jup.ag-claim.xyz/","fqdn":"jup.ag-claim.xyz","domain":"ag-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.230","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"jup.ag-claim.xyz/","fqdn":"jup.ag-claim.xyz","domain":"ag-claim.xyz","tld":"xyz"},"title":"JUP — Unlock Your Allocation","dom":{"size":344,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (344), with no line terminators","md5":"14523a9335c5a08bcadd27c49252bb1b","sha1":"5681e89e5b14c80682693fd5bd208998851b0b0d","sha256":"5de5016a905c6b325592d539aae85ff546c26df7a9833cf7d9b91b45fb0f758e","sha512":"af9ab8419a40fa5dbde2302f64d981ff0d1b63500f2416e7145f0ec668bf4cc4b44b6f73135549edaebe135685bd620634fbfae12a168262450fe0ae18e0d75f","ssdeep":"","tlshash":"71e026e9ad7ac93568b4128620f5e29c1620a1a0b611e60482d8d87bae10fd74ca2988","dom_hash":"domhashfa92bf49a0529f3ae8099507699ba65b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"jup.ag-claim.xyz/","fqdn":"jup.ag-claim.xyz","domain":"ag-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.230","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-04T15:54:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"jup.ag-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"jup.ag-claim.xyz","ip":{"addr":"172.67.147.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-28","domain_rank":0,"first_seen":"2026-03-30T15:54:45.883042Z","last_seen":"2026-03-30T15:54:45.883042Z","alert_count":13,"request_count":13,"received_data":907028,"sent_data":7217,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"jup.ag-claim.xyz/","fqdn":"jup.ag-claim.xyz","domain":"ag-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"43025f76ca8a517a820fd011744e7a30","sha1":"c8b781c38b4115c6d86bd312e0def1eeaae32a94","sha256":"104562a1fd84a5f3d76a159947a13e1ad060ce6bab325a365973b7d94790c9af","sha512":"a32e799afc39a01394666a72ed608365c7e81f07ac02552ff2b9a8d005a519041f537d2ccbf8896590b5f9a7cde510b62ad6659692fe5cce3368983489c0ca1c","ssdeep":"","tlshash":"82c0c07482704da0030c08ab3178df8074e0286d118120cfc3fc4eca45acd81df05014","size":186,"data":"","first_seen":"2026-03-28T05:59:38.816759Z","last_seen":"2026-03-30T19:02:45.741444Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jup.ag-claim.xyz/","fqdn":"jup.ag-claim.xyz","domain":"ag-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f42e41967cb95cedbb38d354f8f0b5df","sha1":"4a247927420bfdb6c941ff616e0951ec75db77d5","sha256":"97a92973b3d42d54e4cd8c3716f4922d529baccfc974ae9262deb50f25d6bfca","sha512":"a47803194317b29f67f64346163c38a514b8234f15f555a21f755411e18320a336b8e6c7306faaa5f2b8b3b41862aa553eb41d1d0444e7e5a70064b5232643e3","ssdeep":"","tlshash":"3d21eeab7eb608f212eb15af16bf8700353091432c0ae5b03f7e64a64f50e8863557e5","size":1172,"data":"","first_seen":"2026-03-15T01:05:53.931356Z","last_seen":"2026-03-30T19:02:45.742029Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a647664696eaa5fadc96a63dd280da55","sha1":"7d46a7547cbf02115ad2aec02da4711960d72c48","sha256":"09b385dae4eb4c819a9c4027c75c39c8de5e4385340f67bd09f71b7f37d88675","sha512":"b8a31012087d8042188aaff83a8e14e411c4faca1c9284c8e849d4cd36fec3b1c11bbaa26ff935583485c26bf1aa29e9561cb2988909a4672dbb8f6fd448bb15","ssdeep":"","tlshash":"69d023556975c93155b9014750b6e7d8366071d07711b204c1dccc6fbe11dd314f5598","size":217,"data":"","first_seen":"2026-03-30T15:54:48.737447Z","last_seen":"2026-03-30T15:54:48.737447Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jup.ag-claim.xyz/","fqdn":"jup.ag-claim.xyz","domain":"ag-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b635fa06f04e3bb625eee0e6179d5c66","sha1":"2eecaaade3c8af84f7955b2ee702c1eb7befce04","sha256":"a72674f4f33e0c2b380a2af2cd7dc11245282aaa43f33b8c521e1d619e3df88b","sha512":"04defcda65b1e163a19b8ee0cd4655988c031b344ba761c00ff35f5d5eb8ee4f2fa8b2471b922967f0d232ebc4b3cb284fc1df00734adcbc5a440fbbd7577e4b","ssdeep":"","tlshash":"9111e7757b1a5534c5d54187317ef7a93d3260717a02a144c36ccc299d18d8714efcbe","size":902,"data":"","first_seen":"2026-03-30T15:54:48.738385Z","last_seen":"2026-03-30T15:54:48.738385Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jup.ag-claim.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"jup.ag-claim.xyz","domain":"ag-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"715438a936900d1516cca0f87b6ae399","sha1":"de50c4edb62a309c1df14528fb1471deb7b3c327","sha256":"17603fa41e1e2d07039f0b83879a49a2b2b144aa20affc4cc491aa02f8355b76","sha512":"33eb3d7b25b57d645afb59f659666cc9420f23b9c1abc2b5b600298f473c5908b8b1aede1b59fe7e2558a9173b781782e62aa64c4e69c3a9ab4812c8614b96cc","ssdeep":"384:u1zPyTTIaItJpQaPywHzmR6vsJIPIYgwt4Y4sOrLD8VpfxVJxPhoERu3KXkODMj5:u1DyIaIrpQaRSIaI4Y4l8/xrx2H3KX9S","tlshash":"12c2b4cb7acb7c3bd3766478407778cbe2addc50a0889504d1109de9b97238ca697e9c","size":27283,"data":"","first_seen":"2026-03-25T07:50:24.028468Z","last_seen":"2026-04-12T22:47:37.628499Z","times_seen":553,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jup.ag-claim.xyz/secureproxy?s=%2Fipfs%2FGk25KayUk6Tun-KZbgrXIQ346dc8860efc802cf91442054d90d358%3Ft%3D1774886063994","fqdn":"jup.ag-claim.xyz","domain":"ag-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"73d4daf421747d589c779d857c10612e","sha1":"1a82d6431a0026415f39dca5e54f6d953d03c048","sha256":"44b64b76fa32e213451774e84c5a496e32dc75f447d838ba451a1ca6d729bef0","sha512":"805a244de8e38e656f93edb1cd6a9aaa331182473bcc68aa436fb5b4fcb726c1d8352551c546efb60b46791ccfbe38b2d78cd580f1f60e54316a31e6c05fc75f","ssdeep":"6144:qh5gD8A6Euno4xvlISDhTl0WHvfUp+v+9J87XGQOwOyyGpMy:qs8AZunzvlzSWP8p0Q+Bz","tlshash":"8dd499c08b4c357364802aea15fb446fdfdc0de82e4be8536bd09ca5e379b8351e5998","size":634340,"data":"","first_seen":"2026-03-30T15:54:48.733444Z","last_seen":"2026-03-30T15:54:48.733444Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"jup.ag-claim.xyz/assets/x.jpg","fqdn":"jup.ag-claim.xyz","domain":"ag-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jup.ag-claim.xyz/","date":"2026-03-30T15:54:24.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ag-claim.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:14:53 GMT","end":"Fri, 26 Jun 2026 09:14:52 GMT"},"fingerprint":{"sha1":"FD:43:6C:58:7B:C7:7C:82:84:ED:6C:9B:65:DB:80:93:90:E7:7B:F2","sha256":"41:89:2E:60:B5:28:6D:55:12:9C:D2:46:F5:7C:F0:6E:D3:00:3E:7D:57:F0:A7:53:E2:F9:0D:B3:13:21:F8:9E"}}},"request":{"raw":"GET /assets/x.jpg HTTP/1.1\r\nHost: jup.ag-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jup.ag-claim.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 30 Mar 2026 15:54:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15694\r\ncast-mode: default\r\nlast-modified: Mon, 30 Mar 2026 14:17:14 GMT\r\netag: \"69ca85ea-3d4e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YkAzhnoKKsW4fvJSAipx7Wyurq7EJe4PZDOp%2F%2FBMlxYNoTfYgd4gjsD3ohg2JY%2BHCV3aqEg4mOHJuxtfK96wnBa3TN8KTak%2FJ9sC7hqV1Hh2DeZt%2FH7c60ZteUDhY6t0BYmH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e484aec087b0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15694,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"5c473c3296e6d13f08ea957fc5f819c3","sha1":"26e1694313853a622bf8907839a37046a4763c3c","sha256":"8b147b438b4a9c40e5a040c858499448796c82566bf1aaa60b3faebcd7d0d865","sha512":"3be5cab0226646fc460e7c13ace2f4c42a87d1fc848c3d417a80f2b83dca232744bfc11517eb6be9ae5d069bd9b4ff4feb180a4163d43bdb96608446a5614d44","ssdeep":"384:s0emrI20bna5yckVfOg/SNQW0fd6QQeBA3noob:w+I20bnQl6fdUiMePob","tlshash":"c362c09e335009e3cf5d637827453ab1f6722e68b585ab86404c9c0e5b7ec70ecac663","first_seen":"2025-10-11T14:49:46.845595Z","last_seen":"2026-03-30T19:02:45.731964Z","times_seen":31,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"jup.ag-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jup.ag-claim.xyz/assets/KHTeka-Medium.woff2","fqdn":"jup.ag-claim.xyz","domain":"ag-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jup.ag-claim.xyz/","date":"2026-03-30T15:54:24.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ag-claim.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:14:53 GMT","end":"Fri, 26 Jun 2026 09:14:52 GMT"},"fingerprint":{"sha1":"FD:43:6C:58:7B:C7:7C:82:84:ED:6C:9B:65:DB:80:93:90:E7:7B:F2","sha256":"41:89:2E:60:B5:28:6D:55:12:9C:D2:46:F5:7C:F0:6E:D3:00:3E:7D:57:F0:A7:53:E2:F9:0D:B3:13:21:F8:9E"}}},"request":{"raw":"GET /assets/KHTeka-Medium.woff2 HTTP/1.1\r\nHost: jup.ag-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jup.ag-claim.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 30 Mar 2026 15:54:24 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 42388\r\ncast-mode: default\r\nlast-modified: Mon, 30 Mar 2026 14:17:14 GMT\r\netag: \"69ca85ea-a594\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iwlmbzpI%2Fmbgd0X7kk5hqC%2BuLY1PkQaZlb%2Bu47YUaIyfUzmqzJN1sgbAwF2DtG3eLxEZ%2F2%2FlxaIKbYdyZe2BJiVZR1cESub7FHuNmThLhV51tsKGl1%2BCeYWWItGZPuAFdFY5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e484aec38840883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42388,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 42388, version 1.0","md5":"b4654ab0ae548e33ee07aa61dcffc61a","sha1":"a76a9e6e214dbb1442d49384ddc04ab15f646f8c","sha256":"72b1a6bb274ab9bec5b0c7ffa3294d57aeb40e5e1ddcd636608f7b303a5a188a","sha512":"b4c066a098813b2c9ece27477bea99378b5e228b466c19175a01f75a324f3a28d8003b50ac4202263774492d90c7c32f3911987b79816eec3e86f146a4c703ce","ssdeep":"768:lvEK+O85aFN+GawIrhD6BC07w+/m29yWiaZMPhpEqAJhxyCd9/xk7VremoV:qK+O2aD8hD6BC07w+xqPEtJhxyCdxxks","tlshash":"2313e002c08249d79ed6913b3232aa1b3ab1b6d8d634e5fc42349df824e6c1f989d324","first_seen":"2025-09-26T22:05:13.166396Z","last_seen":"2026-06-08T16:15:26.088301Z","times_seen":367,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":196,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"jup.ag-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jup.ag-claim.xyz/cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js?","fqdn":"jup.ag-claim.xyz","domain":"ag-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jup.ag-claim.xyz/","date":"2026-03-30T15:54:24.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ag-claim.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:14:53 GMT","end":"Fri, 26 Jun 2026 09:14:52 GMT"},"fingerprint":{"sha1":"FD:43:6C:58:7B:C7:7C:82:84:ED:6C:9B:65:DB:80:93:90:E7:7B:F2","sha256":"41:89:2E:60:B5:28:6D:55:12:9C:D2:46:F5:7C:F0:6E:D3:00:3E:7D:57:F0:A7:53:E2:F9:0D:B3:13:21:F8:9E"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js? HTTP/1.1\r\nHost: jup.ag-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ndate: Mon, 30 Mar 2026 15:54:24 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9e484aecf8a00883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27283,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (27283), with no line terminators","md5":"715438a936900d1516cca0f87b6ae399","sha1":"de50c4edb62a309c1df14528fb1471deb7b3c327","sha256":"17603fa41e1e2d07039f0b83879a49a2b2b144aa20affc4cc491aa02f8355b76","sha512":"33eb3d7b25b57d645afb59f659666cc9420f23b9c1abc2b5b600298f473c5908b8b1aede1b59fe7e2558a9173b781782e62aa64c4e69c3a9ab4812c8614b96cc","ssdeep":"384:u1zPyTTIaItJpQaPywHzmR6vsJIPIYgwt4Y4sOrLD8VpfxVJxPhoERu3KXkODMj5:u1DyIaIrpQaRSIaI4Y4l8/xrx2H3KX9S","tlshash":"12c2b4cb7acb7c3bd3766478407778cbe2addc50a0889504d1109de9b97238ca697e9c","first_seen":"2026-03-25T07:50:24.028468Z","last_seen":"2026-04-12T22:47:37.628499Z","times_seen":553,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"jup.ag-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jup.ag-claim.xyz/assets/favicon-96x96.png","fqdn":"jup.ag-claim.xyz","domain":"ag-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jup.ag-claim.xyz/","date":"2026-03-30T15:54:24.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ag-claim.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:14:53 GMT","end":"Fri, 26 Jun 2026 09:14:52 GMT"},"fingerprint":{"sha1":"FD:43:6C:58:7B:C7:7C:82:84:ED:6C:9B:65:DB:80:93:90:E7:7B:F2","sha256":"41:89:2E:60:B5:28:6D:55:12:9C:D2:46:F5:7C:F0:6E:D3:00:3E:7D:57:F0:A7:53:E2:F9:0D:B3:13:21:F8:9E"}}},"request":{"raw":"GET /assets/favicon-96x96.png HTTP/1.1\r\nHost: jup.ag-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jup.ag-claim.xyz/\r\nCookie: cf_clearance=8tbqaix9A75lIsR1nYGmNFCDvzRhpmoeAOnNIgNoVPc-1774886064-1.2.1.1-3mXA4QmF5TU_8IB6t40Hdfkd_hdvfjaXzCfMLL22Tq_ZIAYO6lDQRMoadPPYI823n3x7r4bYXnxs82n7HzSaGkhPPbrkK.jWEfazjrlfjlwlBD6jTu4ocUaF4WHPo_esDx8Qk73vFeFMGtq.lawP2zQWJhE1OUxnb4B5rk4wyvWP8vfmiOAEIpW7_mak4LEf37sgPAVreD46_0Ez_o2bARLeP7YcagVZJiW5fcf_cY4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 30 Mar 2026 15:54:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 11348\r\ncast-mode: default\r\nlast-modified: Mon, 30 Mar 2026 14:17:14 GMT\r\netag: \"69ca85ea-2c54\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9e1Oml6gCEk1A%2ByZQaUDc5IGVlQAck1EdrrrpgcKfKqDq7xi13uqwhgTduTgN9st2Dyk3JnaqcBhGu56GpB60mWEE%2FTxWNzLl%2FPOe%2F8nvzZTvYdADT%2FYfwoFq8dX2A1YHsYz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9e484aeec8f90883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11348,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"7c0b6ba49c75cdbd3e6f0c4e42ae830a","sha1":"0a8964a5b1ae2c6087ea46e4a117fa3dde6f03d0","sha256":"6d18cee31f3539885f84e635b88b690954f193e35eb4ecff7e991163c00308fa","sha512":"69c8f55f386c3566362fadd11124065552c29cb104b4ba56244c5edb6d9e48d0a64478afc761c60ba632536ed1f3d73fbac09d91c1960f3f54b02769a8df5e2f","ssdeep":"192:A9QyVqCp0LuOHPF5PFW+XgMi2kvMoykgRQXPewzBjwmXg1Qw:AxL0KONW+XgBvSkgRQXvKmRw","tlshash":"e632d0fb6d955b8afa8331e2005815b1f166cd1990befafc612b34189f2c187524e3c3","first_seen":"2025-10-18T17:47:24.924043Z","last_seen":"2026-04-28T19:19:51.404514Z","times_seen":46,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"jup.ag-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jup.ag-claim.xyz/secureproxy?s=%2Fjmpd%2F","fqdn":"jup.ag-claim.xyz","domain":"ag-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://jup.ag-claim.xyz/","date":"2026-03-30T15:54:25.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ag-claim.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:14:53 GMT","end":"Fri, 26 Jun 2026 09:14:52 GMT"},"fingerprint":{"sha1":"FD:43:6C:58:7B:C7:7C:82:84:ED:6C:9B:65:DB:80:93:90:E7:7B:F2","sha256":"41:89:2E:60:B5:28:6D:55:12:9C:D2:46:F5:7C:F0:6E:D3:00:3E:7D:57:F0:A7:53:E2:F9:0D:B3:13:21:F8:9E"}}},"request":{"raw":"POST /secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: jup.ag-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jup.ag-claim.xyz/\r\ncontent-type: application/json\r\nContent-Length: 1428\r\nOrigin: https://jup.ag-claim.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=8tbqaix9A75lIsR1nYGmNFCDvzRhpmoeAOnNIgNoVPc-1774886064-1.2.1.1-3mXA4QmF5TU_8IB6t40Hdfkd_hdvfjaXzCfMLL22Tq_ZIAYO6lDQRMoadPPYI823n3x7r4bYXnxs82n7HzSaGkhPPbrkK.jWEfazjrlfjlwlBD6jTu4ocUaF4WHPo_esDx8Qk73vFeFMGtq.lawP2zQWJhE1OUxnb4B5rk4wyvWP8vfmiOAEIpW7_mak4LEf37sgPAVreD46_0Ez_o2bARLeP7YcagVZJiW5fcf_cY4\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1428,"data":"{\"route\":\"n9POyFeFG1tUtiSU-z9JOx3n\",\"payload\":\"0hqM-6_N52QB9gIcAyIADwDSAisDJgCwAiQAAgEANwMAAO8nhn2XtsKCAaOZsVm8FcG0VYngZWcCAACbaBtJADDnbScaIaydfccHaaYmZlcalzneoPwZOrA-d3k3wo7mqqndfDeT0i1xgbsHBL3nD1aLt_xJMmlBOUgYLSonUUd99g6r1AAYtlzUjsV5QNnQyeHNMZzU__W-iP747sHMM-veT69oZqKvUearZe1ePveIg76QJUMkjA-gNEXWCyoj90DErWfRsnuRCmLo5NVpdqtsyYrSW-XhL1GEaMsO73IDtOkKBFTc0GpTD3cTtqzwXSB2mCDOtHd-dxf76QrlUyPIpiO-UJ-HNLmmiJadoZPKKo7XQYuoW0TDe_TS0mUFn3acwmQ3zojDfh6S09Qt4EaCzOL2MiUiEn-rDmmFr0aaMZKVCNi5zRjxIfNmYc6Ho6VqrM-cZjynPw1JHRZEhX40YEiKWUcAP-T9B2K9uIiB-NZorf-UD6wzQHRPeSpBF_r1HjhKSiKH3M_dEArQelLa2vdzDW-2_ZET1cptkLAv5x8BUQM2Dq2zDCk1RHA6cbhnJMrqrzp2yU9McH42nbYZHQr6fCgxgTlvWbfPo2IJOuojJ2UHOE0EqBM1p9R-AfW-Qrle_Nq0xC4vEttpGYGvNkDTbdduae5jXhiN_Nl8uYuSOg59qBKgRDyjzWa6DUMN-UZTL-AUSojogBFsdA3Fnm1ngV7Vve6nFaSMtST_38sLM9dx-tSv3knVcuXjYRSmyd2pZjhB3LUIOZ70jbHHDG5vk34kf7YgJRcSfk6uUqBf3GmmzaKTnZ8N6CqwGx_MGiU8flJrynXikBM1eHhBS8eeooRa54XnbUz0NqleV_UeG_bGJBxVNfl_Xz-6mfeMXha0kjsf0_kSRtSzx7qUtXAhucBtYE5N3T4ug41FaCddYbJlT5zqT38jpjqRNIq_SX4S1-rhx9pkUKXKlhnftlVHhij5N4U-WYoChswZJVy4O8YXjnHQbd4eRnbADB-G772pm7AdXlxY9wtzkdIxaatmKky2BJ377EOuJaEiFvJau75W34T4nmy6NoXq9zIbAxvBDwgMgYzVX9KG1OFI6Nz9JjMhtDK-qoEmMWlB_bJ7jxU957fDoRkflmgk1nZRWmNEXiKCItqyxRHABXNYKoxE7_9i-fd504eRycMhzklEk03lI2gQ\",\"challenge\":\"eyJpZCI6Ii1uc1FpVVhKNjIyc3QySXhfS0RlOUEiLCJub25jZSI6NjY2LCJoYXNoIjoiMDBkNmRkNzdkM2E3YzJlYzllYzQ3MzA5NmJiMjk5NmVmYjU3ZTkwYjhlNDY2MGRiNjYwMjFlNjNmZGVkOWJjYSJ9\"}"}},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Mon, 30 Mar 2026 15:54:26 GMT\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"a-bAsFyilMr4Ra1hIU5PyoyFRunpI\"\r\nx-ratelimit-limit: 10000\r\nx-ratelimit-remaining: 9999\r\nx-ratelimit-reset: 1774886125883\r\ncdn-proxyver: 1.49\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 03/30/2026 15:54:26\r\ncdn-edgestorageid: 883\r\ncdn-requestid: 6634f08325ae30c4e49cf45c29dd7915\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g5aElr%2FQcOv9JyN6c3CYcLS50hcLmMbDDZaIYdetcM21nqh4ut3mDpFLwOhXGocrn0Wi0RC8eV1XJCBNteus2WO4ifyFBE1PzDtv%2Fv4qd8JNl%2FnCG80mnhOO5UsuLXFTwgKn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e484af6fa310883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T20:34:26.488801Z","times_seen":16249334,"resource_available":true,"data":null}},"time_used":775,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":774,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"jup.ag-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jup.ag-claim.xyz/","fqdn":"jup.ag-claim.xyz","domain":"ag-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-30T15:54:23.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ag-claim.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:14:53 GMT","end":"Fri, 26 Jun 2026 09:14:52 GMT"},"fingerprint":{"sha1":"FD:43:6C:58:7B:C7:7C:82:84:ED:6C:9B:65:DB:80:93:90:E7:7B:F2","sha256":"41:89:2E:60:B5:28:6D:55:12:9C:D2:46:F5:7C:F0:6E:D3:00:3E:7D:57:F0:A7:53:E2:F9:0D:B3:13:21:F8:9E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: jup.ag-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 30 Mar 2026 15:54:23 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 30 Mar 2026 14:17:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S%2Bu17fXyFcCFufINhM2hDp81HpOG%2BQTyksxrF%2Bq48DhdhEE2hJhiG26zsloGHqI3std6kHQlH%2FUicsAv1ZrM3OP6z2umfdGhASzMComsrSvAsxlZ4Oy2eE6xe1BuHE%2Fa7f8Y\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9e484aea0d3756ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36008,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1439)","md5":"3976014f79d28ccafad763000a81c490","sha1":"940c32a7185538633cfa13f93419d22e7cb5fb41","sha256":"6dd69c09e302f874ab344408c1f2bfe36a4393e8953bc2b7b218c4760795d2e2","sha512":"c62027e92fc6059128d967d2c055fc423239df6f9dd9243f7dc571a3815d110832420d8b69752dd25edf09bbb9442c3c9c57a1037fc568c0602b0e59a316653a","ssdeep":"384:gYrl0mbz3F8uB9R+i2shwLEMilP2moOAgNIJxdwqLllhj1aTnx/k:gLm/3F8uB9RX2shjMilumzIThRaLx/k","tlshash":"0bf2c63713671436b863d4ad7bba9b5b2274b003f505c8247add3248cfcd9d89993ab8","first_seen":"2026-03-30T15:54:48.732271Z","last_seen":"2026-03-30T15:54:48.732271Z","times_seen":1,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":84,"dns":78,"connect":1,"send":0,"wait":165,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"jup.ag-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jup.ag-claim.xyz/assets/favicon-96x96.png","fqdn":"jup.ag-claim.xyz","domain":"ag-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jup.ag-claim.xyz/","date":"2026-03-30T15:54:24.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ag-claim.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:14:53 GMT","end":"Fri, 26 Jun 2026 09:14:52 GMT"},"fingerprint":{"sha1":"FD:43:6C:58:7B:C7:7C:82:84:ED:6C:9B:65:DB:80:93:90:E7:7B:F2","sha256":"41:89:2E:60:B5:28:6D:55:12:9C:D2:46:F5:7C:F0:6E:D3:00:3E:7D:57:F0:A7:53:E2:F9:0D:B3:13:21:F8:9E"}}},"request":{"raw":"GET /assets/favicon-96x96.png HTTP/1.1\r\nHost: jup.ag-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jup.ag-claim.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 30 Mar 2026 15:54:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 11348\r\ncast-mode: default\r\nlast-modified: Mon, 30 Mar 2026 14:17:14 GMT\r\netag: \"69ca85ea-2c54\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XyNNP3Cs0ltetFzSqGC1j3VXsZkgVboeRf8kPTYHRKiLaQCEG%2BNikmvGvnoXtZ8x6JShkQpOFQCAHYe5IQO7crqEXT72GCLn9%2FXBsTRm%2B45cpddMli6obln7Fba%2B5wILWAlp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e484aec087a0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11348,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"7c0b6ba49c75cdbd3e6f0c4e42ae830a","sha1":"0a8964a5b1ae2c6087ea46e4a117fa3dde6f03d0","sha256":"6d18cee31f3539885f84e635b88b690954f193e35eb4ecff7e991163c00308fa","sha512":"69c8f55f386c3566362fadd11124065552c29cb104b4ba56244c5edb6d9e48d0a64478afc761c60ba632536ed1f3d73fbac09d91c1960f3f54b02769a8df5e2f","ssdeep":"192:A9QyVqCp0LuOHPF5PFW+XgMi2kvMoykgRQXPewzBjwmXg1Qw:AxL0KONW+XgBvSkgRQXvKmRw","tlshash":"e632d0fb6d955b8afa8331e2005815b1f166cd1990befafc612b34189f2c187524e3c3","first_seen":"2025-10-18T17:47:24.924043Z","last_seen":"2026-04-28T19:19:51.404514Z","times_seen":46,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"jup.ag-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jup.ag-claim.xyz/secureproxy?s=%2Fipfs%2FGk25KayUk6Tun-KZbgrXIQ346dc8860efc802cf91442054d90d358%3Ft%3D1774886063994","fqdn":"jup.ag-claim.xyz","domain":"ag-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jup.ag-claim.xyz/","date":"2026-03-30T15:54:24.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ag-claim.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:14:53 GMT","end":"Fri, 26 Jun 2026 09:14:52 GMT"},"fingerprint":{"sha1":"FD:43:6C:58:7B:C7:7C:82:84:ED:6C:9B:65:DB:80:93:90:E7:7B:F2","sha256":"41:89:2E:60:B5:28:6D:55:12:9C:D2:46:F5:7C:F0:6E:D3:00:3E:7D:57:F0:A7:53:E2:F9:0D:B3:13:21:F8:9E"}}},"request":{"raw":"GET /secureproxy?s=%2Fipfs%2FGk25KayUk6Tun-KZbgrXIQ346dc8860efc802cf91442054d90d358%3Ft%3D1774886063994 HTTP/1.1\r\nHost: jup.ag-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jup.ag-claim.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 30 Mar 2026 15:54:24 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"9ade4-GoLWQxoAJkFfOdyl5U9tlT0DwEg\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=f2oOg0xsXxeh8VgHWK2vjw.js\r\ncdn-proxyver: 1.49\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 03/30/2026 15:54:24\r\ncdn-edgestorageid: 1056\r\ncdn-requestid: a3cb1192fed11aa64b9b580e1434d685\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F4KdhaKtVJhHpl1bhHvADpGzPKqn14yAaQ444AY2pbDxjVYWXtvCqDJJMj%2BdHq93N0FJSZ5et%2F%2B%2F2YI62uXcl0VNYDCAvLD2Bxw3zAdyZ88rDz9x5hlvd7EtxyQH7c7B2ZzT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e484aec087c0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":634340,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"73d4daf421747d589c779d857c10612e","sha1":"1a82d6431a0026415f39dca5e54f6d953d03c048","sha256":"44b64b76fa32e213451774e84c5a496e32dc75f447d838ba451a1ca6d729bef0","sha512":"805a244de8e38e656f93edb1cd6a9aaa331182473bcc68aa436fb5b4fcb726c1d8352551c546efb60b46791ccfbe38b2d78cd580f1f60e54316a31e6c05fc75f","ssdeep":"6144:qh5gD8A6Euno4xvlISDhTl0WHvfUp+v+9J87XGQOwOyyGpMy:qs8AZunzvlzSWP8p0Q+Bz","tlshash":"8dd499c08b4c357364802aea15fb446fdfdc0de82e4be8536bd09ca5e379b8351e5998","first_seen":"2026-03-30T15:54:48.733444Z","last_seen":"2026-03-30T15:54:48.733444Z","times_seen":1,"resource_available":true,"data":null}},"time_used":836,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":701,"receive":135,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"jup.ag-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jup.ag-claim.xyz/assets/KHTeka-Regular.woff2","fqdn":"jup.ag-claim.xyz","domain":"ag-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jup.ag-claim.xyz/","date":"2026-03-30T15:54:24.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ag-claim.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:14:53 GMT","end":"Fri, 26 Jun 2026 09:14:52 GMT"},"fingerprint":{"sha1":"FD:43:6C:58:7B:C7:7C:82:84:ED:6C:9B:65:DB:80:93:90:E7:7B:F2","sha256":"41:89:2E:60:B5:28:6D:55:12:9C:D2:46:F5:7C:F0:6E:D3:00:3E:7D:57:F0:A7:53:E2:F9:0D:B3:13:21:F8:9E"}}},"request":{"raw":"GET /assets/KHTeka-Regular.woff2 HTTP/1.1\r\nHost: jup.ag-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jup.ag-claim.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 30 Mar 2026 15:54:24 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 42188\r\ncast-mode: default\r\nlast-modified: Mon, 30 Mar 2026 14:17:14 GMT\r\netag: \"69ca85ea-a4cc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ajbe%2Fl58psW3Y8YvjFy%2FlCgZ4906ztRTRmoXh7wXeqf5Tg1OnK31q%2BuXA6rHMU96M35yKB4UZnj3JE53JWYRStIe25eIjG1Cr3i6p1oJVkiUFCiX2%2BtZFZ9aFvwgxAsJR3Id\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e484aec38830883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42188,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 42188, version 1.0","md5":"a918aa94460a2a95ccfffcf7224df6e4","sha1":"9c690a4d67ca4f8fa4295524af06b4d061f8c8f0","sha256":"1491e6d9a713e703891bb7cff67f2f785c9616df0b81504a37be6c15a4706bc3","sha512":"7859869f84323541884bd97b25c2a8bb60af834457f17ef41ac12669fce15e442a5212acbc00a4f28fd6eb7bd2ea148f45de3b7195edc4b4f066f0a4e541fb39","ssdeep":"768:oIKoK4lzWnuGeZ660HRzqx1V13F3Eej9qtLzoq9Yps4me3Jw/GW6Pf:xKD+yu63ZqLV1V3ut/ENkGW6n","tlshash":"1c13f1a0590670217d2f91784a67d8cfbcb0b47e1e4a774f6c7cab5c0930916fcae585","first_seen":"2025-09-26T22:05:13.153365Z","last_seen":"2026-06-08T16:15:26.075709Z","times_seen":365,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":238,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"jup.ag-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jup.ag-claim.xyz/assets/KHTekaMono-Regular.woff2","fqdn":"jup.ag-claim.xyz","domain":"ag-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jup.ag-claim.xyz/","date":"2026-03-30T15:54:24.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ag-claim.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:14:53 GMT","end":"Fri, 26 Jun 2026 09:14:52 GMT"},"fingerprint":{"sha1":"FD:43:6C:58:7B:C7:7C:82:84:ED:6C:9B:65:DB:80:93:90:E7:7B:F2","sha256":"41:89:2E:60:B5:28:6D:55:12:9C:D2:46:F5:7C:F0:6E:D3:00:3E:7D:57:F0:A7:53:E2:F9:0D:B3:13:21:F8:9E"}}},"request":{"raw":"GET /assets/KHTekaMono-Regular.woff2 HTTP/1.1\r\nHost: jup.ag-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jup.ag-claim.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 30 Mar 2026 15:54:24 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 35836\r\ncast-mode: default\r\nlast-modified: Mon, 30 Mar 2026 14:17:14 GMT\r\netag: \"69ca85ea-8bfc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PDuZlShy8ghajgc1QINB6ztC3pm8yUIs6wOLCm6hhsFba6T6nZ8MxkSB9bbv9%2FpFC4UaVqWznndPZ0jqG%2BwiAvFDwbdRc3U7M%2ByEavHoVs3RQQH%2BW4BiNSqVrHiWMyPpSOlh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e484aec688b0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35836,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 35836, version 1.0","md5":"d9f04a87559c7cb8fd4dc85e16f292c6","sha1":"b1c409b4512757654e78381b461e4eae303bd5c3","sha256":"6f0fb7a71d24385e53113fd29c812c8923649e3063e12f8465d3e45a1b183457","sha512":"ee5be9d9cb4ac195c35f0285e971c4db7a6d0c26852ffc7d2c4eaf4c3b3ea311ffed98a20c1afbaf57c6159224cb108d9894a07c999b2f59615397040a28ef2d","ssdeep":"768:rhftQee8/9NOz7HTIMqJVDQtFDGHR91lSIO960XN1zu+aXw:DHe8VNOnzqV8GHj3S5XzubXw","tlshash":"bdf2e16bd8194560f9fcc87a0d8520ca2d81197635738d77f3999342bb9e33b21c789b","first_seen":"2025-09-26T22:05:13.133134Z","last_seen":"2026-06-08T16:15:26.108042Z","times_seen":364,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"jup.ag-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jup.ag-claim.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"jup.ag-claim.xyz","domain":"ag-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jup.ag-claim.xyz/","date":"2026-03-30T15:54:24.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ag-claim.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:14:53 GMT","end":"Fri, 26 Jun 2026 09:14:52 GMT"},"fingerprint":{"sha1":"FD:43:6C:58:7B:C7:7C:82:84:ED:6C:9B:65:DB:80:93:90:E7:7B:F2","sha256":"41:89:2E:60:B5:28:6D:55:12:9C:D2:46:F5:7C:F0:6E:D3:00:3E:7D:57:F0:A7:53:E2:F9:0D:B3:13:21:F8:9E"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: jup.ag-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\ndate: Mon, 30 Mar 2026 15:54:24 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9e484aec888e0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27283,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T20:34:26.488801Z","times_seen":16249334,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"jup.ag-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jup.ag-claim.xyz/cdn-cgi/challenge-platform/h/g/jsd/oneshot/ea2d291c0fdc/0.36707159097325237:1774424211:9_pSV23kWGmNtldQToc5YDBzJFUfKD8QS_h75YB-Zx0/9e484aea0d3756ba","fqdn":"jup.ag-claim.xyz","domain":"ag-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jup.ag-claim.xyz/","date":"2026-03-30T15:54:24.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ag-claim.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:14:53 GMT","end":"Fri, 26 Jun 2026 09:14:52 GMT"},"fingerprint":{"sha1":"FD:43:6C:58:7B:C7:7C:82:84:ED:6C:9B:65:DB:80:93:90:E7:7B:F2","sha256":"41:89:2E:60:B5:28:6D:55:12:9C:D2:46:F5:7C:F0:6E:D3:00:3E:7D:57:F0:A7:53:E2:F9:0D:B3:13:21:F8:9E"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/ea2d291c0fdc/0.36707159097325237:1774424211:9_pSV23kWGmNtldQToc5YDBzJFUfKD8QS_h75YB-Zx0/9e484aea0d3756ba HTTP/1.1\r\nHost: jup.ag-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12158\r\nOrigin: https://jup.ag-claim.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jup.ag-claim.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12158,"data":"y6B0QdM7VrkNNMYu7KMNumTMPuyVuy0MYMtaBu$0fYkGuvPllq83AYkDBWhuk0lS3uc7Z0ktuacoM137eUh8hulbhghuVSn3R+umjVY50Aro$4dU6NDY60ATW2sGYO9duV4mzk$VA$m4dLe16uMXPVHSdo3kJu0QdedMwuafuPPAsfKsC7DBlKDBmuklduiiwMKou+O47SZsmHxb5MP56uQxauU6usXxDurvyQBj0A4LzCBefU2GlFHA6uQQsuM61K3ZQ+brNuAnOgzDjsH3uVO3DYVB0uQX6jQH02PBuxvJKYgWE+GQ6ufvsrVE2$PyKbfREqMguVdwkfx3rYuuoi3Duso-kVOkUOVuA+TukR8+duMUH2k-dKHsdu+H6Fffjhnqv-Kv-++60ssbvzlf7pA3XmT2fsGh6uMr1cMufU+XaFOjufBj6TfjisZM0gPjwPfXsNOs7C5F3adbg60kdYXuDV58GUoalCQlLH3-gnly5jHlFaU$NhcHL4jXLQXWQLcySbrhukfHHTV5fxt2v973uMDtp$LsXusPPe3sG6XA3Oa8OtHQe6iy5E5XGMGjhF2i3FHNJjfEpzWajH9nGZDXk8g+Q9akca$i9$CPnFjfZi6RT-Rju41OQmHcjgdP6Y0XGvkkrkL80Gs0WdLHxA5nKXLQCb4juWhwkMbArxwjHOY6qzj5QbMY5+55qOqCu2M+ouJ-ko1uLwo9YkcnUu5U4KyrNAFVzHQAqaHJyxXU5tQU-nuHLw1ZlU8$1xHsT-B79cG3$JmBy3uA-PQfUfDfsD$dmPx1UMe-MC4-UERku2CpfExo4pUluccj74vkNMC4k49UAssUnCkgru21rungM6R6EVY9dcMguocmf2ofss20Duf9$dk2rBu12x0fP6Y$Q1V20nkunYCMff3r1p+3Wku9dCm$UhfnrsMX1$7$CUdw+cudrMw5wrnlVMMJrOJUfeeHr3LARrM5AVjSuntB+LU670cuRtQgP2R06NT3KEmPfnWfRr3GXR6QwvfQgRiPBBl8Kqu$vPmxCvo4+Kn+7$2AoSUgM+d4JNg8UXHDQvV0NY+kgVQv41V$+wHmRH8BsOfcUHx0LfM4dOHtU0LuKXJZOMD0eQg9BF$mcHgAG62uf-2mVNM81atfsDfqM+ABK3tudb1qi$CAs-nzmcmP2AYW5U$Wutq+DM1Y$JunrClUYkhEUlEiuDM+P2xX6x8mHY0om$e1WxrK0z+2v0zrHBmofg7PCAfwis8BmDf95pC75RV4dMWY3UxfSdyWNx9EkrYPY7D-6u1uU+rSu7Hp8Ru6BsT90outDXqkuY$1ddRYLVnU3vurpB4PNO3Y4dOU1HV0CvflwftXddtoV1$bYEL90nuaru41KCREfT2$u1L50cMlyRcUCuA+k4su+XEHocMMoCHnD-G3uU0lKkoupdMYY3tRUZMXar3CXsryRMRbz817iCZDudDWEMM0nvurkhUzvC3jTDkqOLpkW23TkqX46XnUTHDB26LXu4hXbg3MXK6xzewwyY0Gw5krnwj9q5wcuL1VAzbbqcuBuZwWuYogfMmu8wS$Bmgku+0Mu3VZhepzv49720aAhjEMvlMGV3ktjrVuFM6kVm6Qcdua6u3T1pCNAvy0JoGbS3Km9+GuuL90Y$DlPARBHyHyM1S6AHW3y0QVcka+G$i2grYQkVARPcMJ47rRWcH3ohW40nV6iBMXeum-SUsos8sY06$6muPrWBkDS$0HrLpfz+oq0WkTDWeSS6$z81Dt6X8r3b13KhDEW66gervVaQ90f$a3KA+B1r+6KHdCVd8U-Z0DfElH56Udqfss+7asBsHqTngmErPUARuHU0tKjs0V+qsE0h4+AzAYn2qHvf9Yhc$Qs$Bn4+$dMDmufwWO2slmJe0fRjX2uyDHff8f5y76lmVefClYM8u0Gl0Uml74V0sP7v5eKCMUukQrlamPQunVmn7i9eDvsEVimNmjktqaABl3g5TqH$uV1lCaDNclZu91beKWNPrZrGdFlufdyN+l2MH0mAOr3qCLvTDg3u24fBHM+n4U3XndPjdXonQHPMxOhY+zJKh9tN+7cRAoHdaAfUvm8n49uPdCS3w$5uQKUA8OjFPK7cuNoX8cmSS0sKwjnBLa3zLJuiKiZaCX8n09-MlBgK5uuvxSUTWxT4P7aRoBvnX4LMDG2UQJpPyGVNfiKqc6P9ahNVowPvPBifOx4M+TlVQrDX3+$hTNj4zkHr3k68lZmEB24JOR8LRRmfkYjcGU$kuXjwnNsTLMPRrHKU+smWT09+C$qeaR3ECiuiz7EVysK3iKJtK7RorYBTh4h7Pb5YMeYKeUDdSSryT56uOQ4r3V0Lkipv3Teugg2Ynu1W7K6NxcaxyJt+j3oQPDN85yD8+ZnkQ7vc-3moZrGM4BQ-TeTu+jK9KPnl-$o$DGoH$due653en0UfB7L0P-WYXH2xtN3QQV1NyNOjHMKvOsnHOAQMfg10T9gny7Ro9fvkTZbx9D0BOf2brEdV+hy3+H4Jh3tHySr+SdfDy32SO2EMbH7PumrWNqSdMeq0rz7+cuGABAUUh41dubHUnCruhowgao19o0n0n09bOBG12gag8szr6Jb-Pjx09TBuBHoLGWtsuNd6nEt1sVOf8cFjjo2HdYU0C95gk$Tea-sQdkENoC2uNl4EeAKEec31Ho8d0WJdU-P+jsdEfE8cuhLOwdWkbsBG8kKVCMDBMfA-o+yasdr0kVXA2f4-N6zTuk031++lYMlb1WMf9Bv3LUf34V+6r7EBV3WB+GJ93dtWRgv0TmEpZHNtTpnc$Ec1-44OQVH86NBVkf3RjaLkU64NN+UP3kt8gmoBHAJ7O5a2ORpdAoRyZOSWqKwsgmPTM+2oq48TWB8jat7YSs$UV7rVM5Nxn4zyY-S1Ou8n-DV5CAVGGmfx50dkYeXgG3lluudrQTzSb$LkK77Ja0HlowUH5W9LTURcqpXN7p+CaKlWBdUhiYfoTmYSe7DmPNuByLMnMYe0WwLJ9lpeSZ5G01J3OgHVFk$cgKRsyQCc1w4R$F6BcfVO-3ocuRDYQlfv1P+P7lVHFYubw9-Lr4Re0fXocRpDUYjn1RUKXaUsTAVQRNvAYd7GCJ6UHcCiNXR29QWOyp0dVVxLyAQmuGhZm3RJhTkKDuNSPBx+y+5xsG1nBzJjd3x+80Ga1k54L5-BENoVKLpZcrKPwSCcTKkVjUqWwN4UmcVXSaucKPDDwDVJiOa0SnZ03Q-zDBS9BM78+kaClyHVRe0$3s-nooU0VATQ4xcS6hPVz1SpaX54A8aTLhNkh+G4uCVkFtx4Vyo2-vp8tDK0qsBnyo-8SJdXFNZrjmY$HeucgRbngaG4N5bZQg9mTvbZuRqbpHCnGBl4KrDk2CfVkQRDg1uPbut+aafRH1WYWnnVVmGnEppLdp24p$sn9Lvp$mDpq9sGNAZsR9M$$DHUY$1C55ZnUp24rUY1q4YM-$O3U4xMgJao9J6chTkJgapMscPpBVn0afHf$fsGVP9D3ogpRMgLQ5WAWUopojHBgK2Ghf0CuB71mcRLmsXDX4dsPUm0vPEDRfL1+Ji5uGRuwVqo25Wdr30D0tAp$U7UYVho194pS4nU5954YKHuC3sT-C7i-GDmBMOddkEf$V1LhsvcLKnaauffhPVd6Bi9spoGorfy5s0excHB3raCa4mJicjQ2fGDPkJ02or+w0ZKcpKjX$nVbcs3s5$pdKVdO$1oQfvD60OM1L$mmD6UKs7CZCX1ZGCoiTb4j1+anp5aFnr9SdnM5o95kGgDiG-JEr8pkC3tMaNeBl9PBfae$VaJ+91mdr4pkcgrwoDBODY0JMXP6fBUm+GKK+jJBcxVElErb9EluAY45man0J5nXmgyUCNlEspAWAHcd56nz3wkDoPeF5LG-5-$6kqGbG1KFot3hnD57K$DPMijNcic+P$MYkdCXPJckpdaTuST8Bi9RMafSColJpHuJjbCY59a-cDQ2V+j$toCkav0fDNfqGjs41TCVG$u-5mj7GDMrAdDMD3BiGJPkpSewK6K$VRj7cia+AUkwBFjrfMyPo2iBVE+V$V5mLkcipS5tmYfaACswLkcLK602sX$tQLKW4$Mt++4Qp9sUlDG+KpPskul600y51hGgdUyUtBfHuZ0wBUG$M+rsm5mMa69RGff6D6nh12j5r20+eafMkUPVJNCUucP6mYuwA2KYDMaUnpkjPBtbkQasC0JpG6MpCY1mJ5K$lhedD5VVVuQ$mkL6TpUJsBf$CrMm$fAY38VDGkeBARlQGHuEJMkbsXsvJ+a6DWmHAjLWQm$-+XlPj1emrM44rTl0LRm6AHAcl8Lh4frUrpnv1BjMmddtpWUtGMV1pS$MskQuuQ1aAZixBpa7+PTiclBssil7$1LTD6U4LS9Ruo4$uGJ1rGTdmXoqGsdb+4Tnrnr+VwkJPd0qt$3fLjeaoKtG32olGbc4BbLHGfTWTwkmpn9fAxB5+uNoQ$UmeurnuRjrVC+HaMfBMFc1agM3BYBBjuZKlcLu+uXXAYupUY$2rugqCqCH8d1Rrz08aveMCv+p1vl$j9BOUlsruZK5DtdNmY0OMjJ64rlgtOi8$Pi9+0vvC0OGQGajpZP-TSpGeRAsvHk6VrfyeDaSB95MjPPSiMefQL5W0iJR0siRyaHDMv0sBmdsry$v$itlnum5MHkh178uyLTYMqps8MogTPeHAirCBgnec-JC$PaZoxd907X3eRQ4tj3nfcPfCt+gjm0ctPKHeDa4r7LuJnUN56V7$cGgdnLRmWMDkrmvL7Jl9-DqjVMsybQ$jEPr8WPM3KJb3hJ9PZ42Z7CNnE0ueENt3+AHpoA1c03jZ$fAC$ya4rftyEt$fZ1J11aNtJa7cENc4OB13QMluVm6VYcak3BcT51mJm8bD5MDuc1ocddmeda+VHk3OMJ9lk3y0dViP-3-51yUoJJMyycoMJv+$pnlBq1wf+MdnKsBVRtc4mGJAgMYf6XK$2Nl4V52oKU6ZMQ2UZpTtdZDns8Drug+9xluoJNhQ6OX53ddmnB7Xv5AC-sJHSZdyD0mpSNL0t4Q4l9RlDdfumCVZqytN$fL5mlAfeJrU$g5KPVEpdvJD2L5yV$RBgaTM+kTDYg09k0gnlvfXSlEP2gBcn5WaA4ViMNV5JMEssuK$Wcxn-GBUeJCPEgzcDgdt-gEycByNH3MAm9bpA+U+8Xvd5TCaLiYXBg5adNGrOC1JtjafrM9+X8mBiJulscHAfVPuDAWN+VHdGXwHOUrGq3OuXtvdidyB0N7j+uJrYOgQn1YMPeDneQGa7cmUupuGBMfBveppkemtNVPt-G-nx0wmPO6KY5z0ZrDNNC-4CDSQHeRQmomnbsVcJr+fcnuGZaNlnO5CCg5QCB3XJG2JdUdZHkYCtkLJ1l51oOyeqasTA0$l-v-HwUKZkDbi59ForA5K-HR4+8YPlPVrHnD$TrvGvopdUjclkoKXgmWsLJrdPpzHKuzVzVhBneM4nu3yHm14v1WsrAZ5deajACK+rQ-+uyh$y8wV+e-+vnnlBgUBRonm-eDc1aqXOCsG2oxjl4GZktM4vZnPDkb0MOtOHW6sTf4vBX1J$QamHDV$E85fcPG3MAJsxPZ4wfDDJiqJi1ttZ32ex5bLRlCrX0zXsQrMCKs2y5Hmal282cieHU$NU4+PUnL1nlJ0njuZ4C$yM+iPRmRkwMajLsvjxHl$oD$iafV2TpOJu8$fXl$f7cLawNaV$4Wi2ntyuClkdn1VjWeXuUkgYPbcs7suciS0M4NBKUtk0GtJE+7WWknMUnOXMtEKiixeWBmmAeu-CNLNHK+3QOXvkeXglgSXSXD4Q8+VrMrVajN8hpkyfq0nHBgvm8wLqJbKqacjbDb9c+vB$Gf8$ocsi1mJnCnCr9+cLDMgqntBQlZQ+imWrUrfrZLthLJPYA$rYg+nXutNuHg59PHf80PuE+ivnsLsNQ0aMaNecvs2Qr+ffjyc9ablJeSsvjb8Z4ar6sreNAQ$xBY+HmY+MMcaBnaf5dAdVgJ0VL771+ztQ8NLpM6$WxNGEMMjugfeSAeNV$6mrrUNMnxZd9FLHXBNKvN+CdV$KPd1a2UVDQfOVLhsGQKoBWsW8xaU87PqA+CXff18NAEZ0NhglXUvD0Gi0HE8ZDbObNX5nxmcRrlaYgnC1VMY2cru37HM9g4PyeOQytYXgghqvX0Lh7Y8-KHxyHVv9n4$1$2x9asaxcRdrkmG-TQvHcAGLY8TLxUXBcagvNMo78ODRkmoL3DKD4fUmSK8YsJ594vegScLh1RLyK0ByySNQcHlD1WuwkYyf7gU6P-+LCyQ4Zd4+x2MVgOp7vbN1Q+tQXsYvvSvyQZQ2kBc+1Tl6CqT2lm-xn4DG2fg$pvlXfTJtDxr1ls8uYlZvS6rxc8yqHvC+pAsXiq8yn81fUrWNVzg3elvfudmLj7GTyHUxpEZTG$ubDXcR5YfLL6$H26$WVROojMUy8pgnujxcYwmw9kZXyQZXSTHg-YM7Ubyv7WKmVdMEsnkMHA9EmTZk7l97tdW7Hqork8Wo-o7zioqZ5fohnRJ4l5JNVDmNuMNvpY7l9cgYxpWy3m-aJhg4YGiUZ0FQgv1At-g5nUXfV4tXcjdMD4Da3V1GemoANUOEZHUW4QWat5fToV5Cly3WDZgTq82uvQyfeEZeGx9c292aob3NfvpnDBfs4xsDmrYf+S4yr-BMlBohTf7G9jE11F+4QxkojRMdGOrnMttSqN-YaeSZSowp$+HgDPWwQ-$O8EW22JNrvU359Kqa7D9By0br7NJ4vOl5OCGGKachH4WqgHHwGHDMkAjakp8RYKmSDz9n5JmZy8c+0r8acM-P-mHzVJWgVNU2zXrH4LtWdeyqG3ZmCAAzq0glClcU-p8Yb3HTlZQhnGOP9P9v4c-mSXU1yakpcrFVXK$1GPWM3Uqlnd5jv1Tl$tUhd$2HHcOwmKDQNkXUadOjJaNuNV8aRMxwGA3A3+x3QwfQ0KuMDr1fXsYsHZ9xQrufSO$noVdGiy-VlpAgZ59B+M7YgOHdVfxV5ExrpfmkLZx4qJyJkZqZHnn-1L9zWmGWT3Hg-NQ8wj4WAeYl62Tk+jlgDQHEjsMHqnX5KXWCkYz6wb1l6NEXFZ-MxnMOYwMY4vZakfgnm7djd5RvGcNP6KuWZaurtEjzyuXNqpCAUQ8DwlcerVCnKd7QnjQ$VaJQG6s3CGs57UVGPVanfAH4o6vxAUM7wgZCqtHJkmpbQ5PT+akTeSoTpZsTuVAauS0V1pXYhQ2jhwCjhVPggaarwtTp4-wHVElATR0a2axJ$aWMme2KHwkRGArZWfapKZlxQxQ9n-7vpxBrc+1$9+0RWdSpad-kqm422idmnm49DoXMwg5H+5eRllNbbb6-huAngmUTWEEFLEhR3HHiTdFrrTVE+i619ze3lDr+kR3URS29ghXlv4rfJTh$9Pwg4N6GqaV2Qfy+ZdKTNE5HQ5BdU4zwVQKTUmt1PtFNlifKmasPL0MM81MtQMMw0PzB1dUA+C9UkfsMM+B0r12mMW0JixGu4p7YBseKVlMiyYdy$PMVG6DxvNB0Nk9aWfsy2l$UcdozyLskusd1rsoS9uDgbQf5+bnvb4z3EWoy6l3A$QT3z0dgM1ka1b046c8Wo4+uxGw$Puz0nrl-NJG6Sy6EuWorYuM1uk9UvuLKM3xNAfMqnO22rmkBHlNRoCDg7nT335MsmhMnsWsDrsHmpBiSzMYEUnyYfsnRnbBwua$$Q9ambuvY5omfd04th0$rHuJf3ULVHgmuH2UB7B7Psdm+MH$ay9fejkdUdzn7d3zMVUUdf4$6$H8QgekuXMGCHE1PrfVaQp2Xkd$6lVKVorBXkHK+h3PHYyuhKT6P$hm-Rmjf2A0$P$muRyy0rzd6VYrYB7PfW42mbMLuy3rutrBgU1SG$xj3F$tugfbHXdEl7veryZQ4uCuELDWNmugmHy0BRknd$NQfVR7HjcXx3iNt2UiVqBUodZmsQJfSkGsd3pB7mfN1wTJ$ylVs+CkActl-0eo5GQEuwmbuPBB0mAO40Xk-l7HCa4R+fyGkfC-srBooNf+sfa0fnQ9kRBYa2HjE9B2B$4Md+RmmfX7WBCusd+w1zuS84RrgVKrnmYdZHDte6a5kL1dM8+joVsmrMY497J$6BnDrard$0as6VarffJBC3cB$n8oxXVbfvnMur2bBvHfFdS1Kdh73GV7l+B6o9ucr+eKfSBBf6NEpsYBpPtuQGANYEEks2PUOU1Y4$jnGa7N1N$XfLhEMZrfNsU1VmhuxnUiVs+VrlRiklufxVsfHy$1W1vMsBhyt2Q2VD10otaS6DmB1m81WsGpMhtsteQauT0btW3aNB70Jfou2YNr4rrcmG3E78YRl8aecUECKRnYXqPVulKb0FHf6A0kDQ$A4MAMR$30lVkakEng$A3FUkxPtfzVt$g38ZZ0M+RndvmPQYrl5f$b6SC$HBvHPGlp4ddQuL+YE1v4SUL18ukYG7TVAzU-H6JifTNT8Bik4uDHW6ONnKupMGU$sujYH3AuvcU1-0m7TE0dAmAbyoPwuernhu6$LVkjFs2MNalBCyXCn+020momW$JriBuxrffMlui7uH2WTk6Q60iuSo$tjocOAMQwAgMsmoxUoy8tefcBNly7rfuLkJvSoOd9+yrVVMqkdMEuu0ro+Gen6g-1BEiVBDYmcoSSaYaE9lAMPY$$Mvu2t3QtCQt0HC9a8s47dBuf56uzB037KKuVt+hT1fUKDK-vcb$7EcWONYSBdkYQ5ym+A+kT8KL5AJMGWb8romEUzQ6M1wnhWPB9cguvO2JWcM++CQ5o1S3Wh0-FkEkakJXRYUOqUi6frcmY0YxPMJyRyoQaVjVHBudX35YsBsAMma35NBfgMjKcuuu+9Ru7$tM1029vWPy3VMxn-2+nub40++yCuudTxHS9X0eBd6V0pBB61N4wk-ohtu+77ijmpBf32uF3xm9q2QdPX-MxUso3TC7BxMwouzHGpCSbMJ0-4BfQBAjU2nOEg0qfZ6BnVczQDX0pYyi1Yuk4RlLOV7lUybm1ksjWAYry-adbF-8$yuaEXRB7Ha$DYf37aqVmv1X10oba1zHMBNMvK+3S+7aShsE1d1i0HOk2rqoXVrCVuZr7aqD+P3qKkaveU$MzlNgrO8$3BMfV-4vmQXOWYBu+Ag+g5ZKKr6HdfUVubf40iBldSkX8Q$AruuHuJYP7aepUgMhCxjhJViJXsa$KSJBMPDPM1V232KSpWYVUmoRWuQup3yAUAPXAwVEV5u-N9MJi$00MuRja3VgtkM1u5naoVHlReNMLyv3Oun6+Eug33HqXljk3mPm2Xd32Cy7MJrEmms-ufKlNwQvcfavqSm+5N62-xyoRaoguuNjgMSfsUvrEuksrJUeu7dmn1BbNO2VNmPP$r3upN57n6MYMCTpSkr+tKgn1PNMAMd0foufAq2P7ABloxykAttoGorh9ovGT6s$3zltlr7PHequcsoCrhFGmtnq3Q5guPuB7ptTzVA48cGCYaDNDAtxiOcw2-7H-r5mW+zJr0V79GTprrkR70Ji7zNqXkvPE3rNT7hJTf0E$6Nc8aK-FVZr7duXwWbNdoyABQsDu1Yz0-GTysaujkF+ksYw3K1am-c1hcj-Gqv4ZPi7JHDE08qv4+$uYoJTNMwWHAAsluABA3AEgqe-iFcCudBYGKomuah3mrLaewxvGeUuQ-WgN48nu8Aio+qJOE082CU3XMYABV02ttbBauF5EUE708ai+ZJ-cZBd2mptbtfAccHUQuaZvFeHD0oRUmo+2u9yYT2hLhheqxlTMh1ASUuxo7bMxechdusmbNsM334Kg-JglqR-$ndTH9d+vYoMQ$DZ$-1dQg7kYzGqkQfke3OV-VskOn0nu++rU6gqE8BZofFccUOHzPrYNb5R3n6URAMngrLdCJPYwVhC-Yfuas+eU9Ny8f6N8upBf6bd0l2irYaEo35+VbCKfOua1co5SPq893X4gQBqUOdkeVFeE1l+35gKjT09QmMKJSn3oDC4uNRkh+SSDo5olpfksl18Bb8xM9pmgamMLhvuDbUldaQVQP5JhYhUxuisXNAjjkTC3uBQsj-1sjknXTH8+vNoZYSEc4AjNXdD+rUwMkP0jHbst3nSMM4LVjH7du19PrmTSYNHGD-Qh5i7OSKbmmaaUThRERolaHQisMK0L0xJQhuQiTC4s92W8Bo8WTgHBazE082VrBMUQd7EE2C$fAwDhay2-VjUDUV895YABLuDBB1rbstn6TtVN++G+9bBvvX3rG0W3XgkR-Q$ks2YfAsX0J6879VXJ93H$4fg63bYN3BKvOPo5d7Xp-GWefKClEABamA2fJXqh$or6zseHA5VUsAK1BZVZ6qdH7vk6pHOdNftAlWDqKlBeoAdl7+5Tzob5ldu1XhV$f+gF$efedBdVFbH0l$xVO6Yhm5sYLlT8oeGK2gmM3glShggt46OD5PvFUEKCMO2HXVSdKPZa0bm2gSPeykaxHJ07muVk6S0aTYiCK1CkDbMK5myVyqQt5P+Jkuf2$JU3fz5mgqSxg1W3ABiMlv2uo7itWPHw94u-hO7HLxA+4iXvKL+XUt93VEk5v8dBgbdAPgcayvFBz2p59+O-1lhJLS7EOS9QvazvzTlN$8YGgyTOJeRBRH-mrgxD1gY5R2j-3sOiTkXB56R1Bf7gTT4JG62RGWS4f-TDu5h9Vtfn7HUT+gJacEHLaDHATsCiEEduzWomnnW+1TUEg$aGXZsxvxTpJHL2FQk$k7eL1EO3tFyeT+vz2gRGLnuZZT+gBUrRXOnuZiT3xYU3KGk4wa3902fUo6hkD0OqDv+NUR2pMYgOOaf+cangNOaGOBTK+5TUVjWkoJxaj+wLTmwn$WOR$JfPLAVzynoNiTmv8Uc9e$48af9b5$$OgdnaWZ6jUMlUYRXT4BOGXrxhUymz1aHgXaNxTUURFvfHob5+vOU8dN7agHrTCY-LbfK4+ngfGG10yni2CnitsGgxfjs5WO9fX7DLQNyedNk9$XE9HQVyed8M7nXETBxAyfKLkThvrJ329yBKPka2gK9DxvuGKL74wHVd$xqaFBdQ7$X+DDvJ5tRZlY5HgV8gPLAK8WxSHJpQ+xLPDJPyNZG5+vEObrBc4rXm9xvNOngNh2rXaGGg2O5r+SWPH2G5x85URsh37HJCN25TADsvTNv2Dzdz55u-S9LgR9rnGOwJ5vn7Z49X2p$xU2oUweLa+MwBjo8E7Ovjc7dVa0dRiehdYMs+o3T0AXQOvhJdx-0m6S6uJBXkOv4VfuyrlafWV5Q6LF5ME9OPPkYaz0Qju3rqcZYRdMTHjo8u3986$kzMks9-PzyKjlvqO7BGyafVWjHdhydfFOiJHhTX$ZudJf3luuukjPtCTrzuPmmuuuOUXAUnOM-0OV4HBEmOsqOv3hBUEV0ia0RlA0GdkKmPm93DukN1oyiYYsf$X0S+t20uu3vujuMBlMBEkGkwnluEh2jmUL7ly3mBfoz7KdmWVCkLBTaGCA8A5pLdT-Wu-rQNA3kERuuUrfVquuM+r93v86kOUGg2YtoVouo1PbAMYur5yQgRVJbr-88F93xOOjjVnuFtFfecOeMRRuupecOOLBB3z+o7eqcgL0ouNuVue9KxZhjuSjYLu4AW+A3Vi0rzmWFixBPPVm3T0PtRuAAvLpPRqJCuYWyf14klRGuUfZ3MzHVMmS-g2Yuou4XXMXkh-cuBofVvpkyRDuvWFHk0VN0-buTTj2jrPZHVrMtzAu+Vf33iVA4mMG0$ay2Annp6ZWhd+VeSuFmM3uj2YUakmulpj3NBP78HXvVyA5VXRE3KRTAB9lWBmHk7yrtGNCpWuG0CNkqxhcnV3Uv38tb0e1glprMJYStC3M4g019ak0U02jy7kqpuK8fLH-uU0fCLYMju2W6K+0ukpX$BuRYMuluMf$G0PSWmMgfhmXUX0Babtd2SWtXU3noKXhYsWnydMG$i0qa3oVoAorzREulsp0Me1OkNAeT5am0p0kOV4kLT8j-mnoQ4uuMdWq40K01ix4G-rTA3-oCpYbZzZw6i3uqlGYRb3gr73Q6$8uuMq93juu"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-out-s: yK/AK89ZuXN0L0zSs1k72A==$gInXZa1/2jqN+4HZGnXsTw==\r\nset-cookie: cf_clearance=8tbqaix9A75lIsR1nYGmNFCDvzRhpmoeAOnNIgNoVPc-1774886064-1.2.1.1-3mXA4QmF5TU_8IB6t40Hdfkd_hdvfjaXzCfMLL22Tq_ZIAYO6lDQRMoadPPYI823n3x7r4bYXnxs82n7HzSaGkhPPbrkK.jWEfazjrlfjlwlBD6jTu4ocUaF4WHPo_esDx8Qk73vFeFMGtq.lawP2zQWJhE1OUxnb4B5rk4wyvWP8vfmiOAEIpW7_mak4LEf37sgPAVreD46_0Ez_o2bARLeP7YcagVZJiW5fcf_cY4; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=ag-claim.xyz; Expires=Tue, 30 Mar 2027 15:54:24 GMT\r\ntiming-allow-origin: https://jup.ag-claim.xyz\r\ndate: Mon, 30 Mar 2026 15:54:24 GMT\r\ncontent-length: 0\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9e484aeda8d70883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T20:34:26.488801Z","times_seen":16249334,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"jup.ag-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jup.ag-claim.xyz/assets/favicon-96x96.png","fqdn":"jup.ag-claim.xyz","domain":"ag-claim.xyz","tld":"xyz"},"ip":{"addr":"172.67.147.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jup.ag-claim.xyz/","date":"2026-03-30T15:54:24.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ag-claim.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 09:14:53 GMT","end":"Fri, 26 Jun 2026 09:14:52 GMT"},"fingerprint":{"sha1":"FD:43:6C:58:7B:C7:7C:82:84:ED:6C:9B:65:DB:80:93:90:E7:7B:F2","sha256":"41:89:2E:60:B5:28:6D:55:12:9C:D2:46:F5:7C:F0:6E:D3:00:3E:7D:57:F0:A7:53:E2:F9:0D:B3:13:21:F8:9E"}}},"request":{"raw":"GET /assets/favicon-96x96.png HTTP/1.1\r\nHost: jup.ag-claim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jup.ag-claim.xyz/\r\nCookie: cf_clearance=8tbqaix9A75lIsR1nYGmNFCDvzRhpmoeAOnNIgNoVPc-1774886064-1.2.1.1-3mXA4QmF5TU_8IB6t40Hdfkd_hdvfjaXzCfMLL22Tq_ZIAYO6lDQRMoadPPYI823n3x7r4bYXnxs82n7HzSaGkhPPbrkK.jWEfazjrlfjlwlBD6jTu4ocUaF4WHPo_esDx8Qk73vFeFMGtq.lawP2zQWJhE1OUxnb4B5rk4wyvWP8vfmiOAEIpW7_mak4LEf37sgPAVreD46_0Ez_o2bARLeP7YcagVZJiW5fcf_cY4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 30 Mar 2026 15:54:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 11348\r\ncast-mode: default\r\nlast-modified: Mon, 30 Mar 2026 14:17:14 GMT\r\netag: \"69ca85ea-2c54\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T1MbcP544nlNrvMQWKh8bT7T94QQI382kfSCqxKka9ej9I5NDaSAAaAvlUZC6m5NCXuq3o5IY3oE03S2UCYcQoex8HfConXeSIHK8knNT3p%2BgYzWYOdsqdMLdJoKiZpM3Zos\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9e484aeec8fa0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11348,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"7c0b6ba49c75cdbd3e6f0c4e42ae830a","sha1":"0a8964a5b1ae2c6087ea46e4a117fa3dde6f03d0","sha256":"6d18cee31f3539885f84e635b88b690954f193e35eb4ecff7e991163c00308fa","sha512":"69c8f55f386c3566362fadd11124065552c29cb104b4ba56244c5edb6d9e48d0a64478afc761c60ba632536ed1f3d73fbac09d91c1960f3f54b02769a8df5e2f","ssdeep":"192:A9QyVqCp0LuOHPF5PFW+XgMi2kvMoykgRQXPewzBjwmXg1Qw:AxL0KONW+XgBvSkgRQXvKmRw","tlshash":"e632d0fb6d955b8afa8331e2005815b1f166cd1990befafc612b34189f2c187524e3c3","first_seen":"2025-10-18T17:47:24.924043Z","last_seen":"2026-04-28T19:19:51.404514Z","times_seen":46,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"jup.ag-claim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}