{"report_id":"89927026-7aa5-4b96-9767-fa6cb8e3a06f","version":6,"status":"done","tags":[],"date":"2026-01-10T17:57:13Z","url":{"schema":"https","addr":"claim-windheaven.lol/","fqdn":"claim-windheaven.lol","domain":"claim-windheaven.lol","tld":"lol"},"ip":{"addr":"178.208.83.16","port":0,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"claim-windheaven.lol/","fqdn":"claim-windheaven.lol","domain":"claim-windheaven.lol","tld":"lol"},"title":"Union","dom":{"size":7938,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (500)","md5":"ba263a4a99cfffdbffc20f2800538e2d","sha1":"4aa18248fc77b4c46e18406c987b845f66dba668","sha256":"939f1f4440f59ca7dc383dbeb5251654474a67ab64dbdae8253e83b11a912751","sha512":"bb74877f37e843332588643030b0454bd25e46f4ae7f373c73c88cdd6324bcf701f8ce9cbbda9157b325300c265dab94cc63e29fa710a368f66641538fb83eee","ssdeep":"96:rIPfVVVtARPy48S8k45USz+45RaIkata89+RzydNAYt9+kex8KdRonI7B1g/M:rIl7eRPyfS8LUSZRa2b9wmtI98IT","tlshash":"fff152a862fa0d2b819386e938db7409bd01d297d35c24e5bf6d44f10fc7da1980f19b","dom_hash":"domhashc59d69afccb598c37df8c553a509577e","first_seen":"2026-01-10T17:57:22.684539Z","last_seen":"2026-01-10T17:57:22.684539Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"claim-windheaven.lol/","fqdn":"claim-windheaven.lol","domain":"claim-windheaven.lol","tld":"lol"},"ip":{"addr":"178.208.83.16","port":0,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-14T17:57:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"videos.cdn.union.build","ip":{"addr":"104.20.36.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-06-12","domain_rank":0,"first_seen":"2025-06-04T08:48:16.217913Z","last_seen":"2025-06-04T08:48:16.217913Z","alert_count":0,"request_count":2,"received_data":9827273,"sent_data":1039,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-01-04T22:21:06.427471Z","alert_count":0,"request_count":4,"received_data":207440,"sent_data":1959,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"union.build","ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2023-06-12","domain_rank":100440,"first_seen":"2025-09-03T17:53:03.696971Z","last_seen":"2025-09-03T17:53:03.696971Z","alert_count":0,"request_count":1,"received_data":8021,"sent_data":446,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-01-04T22:18:41.67311Z","alert_count":0,"request_count":1,"received_data":435375,"sent_data":441,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"d3e54v103j8qbb.cloudfront.net","ip":{"addr":"54.192.209.44","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2016-03-11T23:08:14Z","last_seen":"2026-01-05T03:47:56.567776Z","alert_count":0,"request_count":1,"received_data":90093,"sent_data":521,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"claim-windheaven.lol","ip":{"addr":"178.208.83.16","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":35,"received_data":2615865,"sent_data":16662,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"SweetAlert2:11.7.10","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]},{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"assets-global.website-files.com","ip":{"addr":"172.64.153.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-01-23","domain_rank":265625,"first_seen":"2020-11-01T15:14:58Z","last_seen":"2026-01-07T08:23:24.128352Z","alert_count":0,"request_count":2,"received_data":666395,"sent_data":946,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"renzo.one","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":0,"sent_data":516,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-01-04T22:27:18.120727Z","alert_count":0,"request_count":3,"received_data":710807,"sent_data":1374,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-16T13:35:57.98683Z","times_seen":186175,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/sweetalert2@11.7.10/dist/sweetalert2.all.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"32666d8f807a08ad6062e4b764b5dc72","sha1":"3ae90468e266b136f98964fb71c7b5b5baac1408","sha256":"79e73978bcd7f26338951da2ec7417b2303cc0542ff82023adae6d075a74db7d","sha512":"86a8f7b91720ea96147768491c8d64d6a2b27fc3c0fd831670457d853943fa6a6750a7b69a9cd2ec4a69f05090ac61badf64c4a76067d7de1237af40bb291c76","ssdeep":"768:2UgzbBDqSZLI+9BuNF5qa8/NQhpQQQe3FqxU1WGqMcLDxFXJhIVnqzeeMOodgA2I:6Yo8BxwTjI3RQAGJnuyzfQjgcYAkq","tlshash":"9863fa626a04f033f6bb05ae64d0e104b9a99519fcb30c54f46cc9504ee7d4f26b7bba","size":68818,"data":"","first_seen":"2023-06-01T03:00:02Z","last_seen":"2026-05-26T02:27:22.10901Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-windheaven.lol/_astro/page.DVT0Mg3q.js","fqdn":"claim-windheaven.lol","domain":"claim-windheaven.lol","tld":"lol"},"ip":{"addr":"178.208.83.16","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"229c77db745d1a2795f5051668aba306","sha1":"933652c4f64c19d90e2c81b4baaf65535131766e","sha256":"82d3a33398e8f3c71ae775a707d99e8d44e12f058145842e5962f00b8f162777","sha512":"26a4f9fec0fb7ec2e033b59611cbe6f033c3901c595e73362ab53f0cbb3b774c51b0a9cacc310225e0a09fc877a8e728eeac1a023175d5b40a99e6b855a650a7","ssdeep":"","tlshash":"c3900447075115c444f00cc55514cc005ff503553dc34c01017c577df1f50c4d74d104","size":46,"data":"","first_seen":"2026-01-10T17:57:22.699729Z","last_seen":"2026-01-10T17:57:22.699729Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-windheaven.lol/_astro/index.D_76QRnP.js","fqdn":"claim-windheaven.lol","domain":"claim-windheaven.lol","tld":"lol"},"ip":{"addr":"178.208.83.16","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"introduction_type":"importedModule","is_inline":false,"md5":"f6bc84994a6e182690bcb5a510f44b7d","sha1":"96dc53653fd92a7d43ae27099304b72a26ade538","sha256":"e83170ad86b455d9e9b8414b4fb5553d851aeeb5f9d5e85d32ee7e32639519b0","sha512":"32e881a8530e8ef97d8e5d4fab00201c80cd234573431cfb9c0193a7be44a1b40ca94540c478ace47e273f3696e09aae6644244fce66d912d3f63121bce5b9f7","ssdeep":"","tlshash":"f371de9b26f414365267b2396a1fd2593d36410f3449ed41396c46c4af58b3863b3ecf","size":3531,"data":"","first_seen":"2026-01-10T17:57:22.787981Z","last_seen":"2026-01-10T17:57:22.787981Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-windheaven.lol/_astro/AnimationLayout.astro_astro_type_script_index_0_lang.BTbZULwu.js","fqdn":"claim-windheaven.lol","domain":"claim-windheaven.lol","tld":"lol"},"ip":{"addr":"178.208.83.16","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"5036973dc3474f58f761f8bb4ad941e4","sha1":"54d0fa4725f2991b689e4c5568b4eae4a718fe00","sha256":"c8caea8acb174328b4ec478282321668e80b293beef15dc714bdab7b6a41cb97","sha512":"96e1e7a5e73954dda78fcea2878bae93c41bb89f8d34816d9cdf9adb8f161caa50ef5782d4c8bad0a275f42e29c48b56b74d0767df648ac1bd8815ea7b2c6eaa","ssdeep":"","tlshash":"2b61a57511a00c341037225a6b0beba43e761097ad05ba85789c4a810facc7ed3b9fea","size":3310,"data":"","first_seen":"2026-01-10T17:57:22.783061Z","last_seen":"2026-01-10T17:57:22.783061Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-windheaven.lol/","fqdn":"claim-windheaven.lol","domain":"claim-windheaven.lol","tld":"lol"},"ip":{"addr":"178.208.83.16","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"070abec95d755e87f05687a99fd320fe","sha1":"6ffe55b03eab2d6ed4c711c559d146625f705595","sha256":"dad9b559cbdb35114f161f21bce8aadd6bfb0454dbc209ab1c13fe38713fa006","sha512":"e8cd4a06c77d9f8544002be5150f79f2618cf7c8f3d1edfc05bd565b0109dc1fb7421b4620cf6de225853aa4a0ae6f5b4b8d66675da10aaa653f1bad4f6d0832","ssdeep":"","tlshash":"18f0dc3e420713350c93e7e017cd7171b5b2642cb5a3908822ffe2f900c226a0a2bcee","size":456,"data":"","first_seen":"2026-01-10T17:57:22.818491Z","last_seen":"2026-01-10T17:57:22.818491Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-windheaven.lol/","fqdn":"claim-windheaven.lol","domain":"claim-windheaven.lol","tld":"lol"},"ip":{"addr":"178.208.83.16","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"10ca52a9ce134a6e17d77597af41451f","sha1":"f4eadfd9900ae61f3f0c330fc2891baf4ac26606","sha256":"9f2fa97358f8b4bd5f68325cbee60ddc8f707c3ac6ee1c7c601b49304152d1c3","sha512":"a8fc5d1a415c90b4da91cd18ba1ceb9d4c968d4fd0940048bd34513b33f7c236a395786bdd601e455b8a76013eacaebbaba83a36e6f8676a182c0564ed0bb715","ssdeep":"","tlshash":"5fc08c88210b1c7040e73b455f3fa102f006721250d0d832291b63048f31e27a748804","size":166,"data":"","first_seen":"2025-06-26T11:09:56.591333Z","last_seen":"2026-01-10T17:57:22.82026Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"claim-windheaven.lol/_next/static/css/aa85c18504c9176d.css","fqdn":"claim-windheaven.lol","domain":"claim-windheaven.lol","tld":"lol"},"ip":{"addr":"178.208.83.16","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-windheaven.lol/","date":"2026-01-10T17:56:51.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim-windheaven.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Nov 2025 19:45:14 GMT","end":"Fri, 20 Feb 2026 19:45:13 GMT"},"fingerprint":{"sha1":"8B:F4:96:64:18:F7:74:15:ED:3D:9E:69:56:C7:C0:8F:12:11:A7:40","sha256":"30:58:69:DB:5C:4F:DF:E6:A0:B9:FD:07:C7:A3:46:7E:28:0D:F8:C5:4A:5F:86:A6:E6:6B:A2:58:39:9D:60:A5"}}},"request":{"raw":"GET /_next/static/css/aa85c18504c9176d.css HTTP/1.1\r\nHost: claim-windheaven.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-windheaven.lol/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 10 Jan 2026 17:56:51 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 02 Jan 2018 12:36:34 GMT\r\netag: W/\"2e80108-56e-561ca595b5880\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1390,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"97ef46701fbde80e1e483403273444a7","sha1":"bb5fc9fcda936357fb4d4c97c3a0cb62b37b3d1e","sha256":"8d9697b813a73597c0c846d0e1d7298b09f63e2feefef5e623a2b26ac2bd5cb4","sha512":"15d2e19d79843b4f4e40ea79cb6847ee20b303d78c18df4c489b9a2c20f6b5026b307d6b5dcdfc730b0e38bb024532766f39f59a1df1c14f7a6e612bd0fada51","ssdeep":"","tlshash":"9231326ba8c54a6d17020262b54a3144c9369b2ddd533cb5d0c8927a6f7fba0853d3c5","first_seen":"2025-06-26T11:09:56.545037Z","last_seen":"2026-05-07T05:43:32.234219Z","times_seen":17,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/sweetalert2@11.7.10/dist/sweetalert2.all.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-windheaven.lol/","date":"2026-01-10T17:56:51.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/sweetalert2@11.7.10/dist/sweetalert2.all.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-windheaven.lol/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 17:56:51 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 18936\r\ncf-ray: 9bbe0daeea207131-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 11.7.10\r\nx-jsd-version-type: version\r\netag: W/\"10cd2-OukEaOJmsTb5iWT7cce1tbqsFAg\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220145-FRA, cache-bma-essb1270027-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Iov4PVM%2FXl2MnA24HsDNwGgDtRo9n87YewXPx1YAQh7DPfxXiAcLQTV%2FuY8hug%2FyJYlzMSo3qqYrW2uL9LH9DEPEzmTqC480aUw9rn766Km2zuSVgrn2eqOLRb1bxhJuTUU%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68818,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (43806)","md5":"32666d8f807a08ad6062e4b764b5dc72","sha1":"3ae90468e266b136f98964fb71c7b5b5baac1408","sha256":"79e73978bcd7f26338951da2ec7417b2303cc0542ff82023adae6d075a74db7d","sha512":"86a8f7b91720ea96147768491c8d64d6a2b27fc3c0fd831670457d853943fa6a6750a7b69a9cd2ec4a69f05090ac61badf64c4a76067d7de1237af40bb291c76","ssdeep":"768:2UgzbBDqSZLI+9BuNF5qa8/NQhpQQQe3FqxU1WGqMcLDxFXJhIVnqzeeMOodgA2I:6Yo8BxwTjI3RQAGJnuyzfQjgcYAkq","tlshash":"9863fa626a04f033f6bb05ae64d0e104b9a99519fcb30c54f46cc9504ee7d4f26b7bba","first_seen":"2023-06-01T03:00:02Z","last_seen":"2026-05-26T02:27:22.10901Z","times_seen":24,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":32,"dns":4,"connect":4,"send":0,"wait":65,"receive":1,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets-global.website-files.com/64c26cc84790d118b80c38b6/js/webflow.9e6e739fb.js","fqdn":"assets-global.website-files.com","domain":"website-files.com","tld":"com"},"ip":{"addr":"172.64.153.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-windheaven.lol/","date":"2026-01-10T17:56:51.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"website-files.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 21:08:31 GMT","end":"Sat, 28 Mar 2026 22:08:19 GMT"},"fingerprint":{"sha1":"84:D1:97:4C:25:7C:6D:B2:C3:CB:F3:0A:63:EC:40:7A:22:D9:A3:83","sha256":"C8:C5:EA:3D:39:AD:98:07:59:D6:02:35:EC:72:E0:87:50:93:9F:91:AB:C7:2D:10:BC:C5:D7:CA:D8:12:98:5A"}}},"request":{"raw":"GET /64c26cc84790d118b80c38b6/js/webflow.9e6e739fb.js HTTP/1.1\r\nHost: assets-global.website-files.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-windheaven.lol/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 17:56:51 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 76769\r\ncf-ray: 9bbe0daf0defb28a-OSL\r\nx-amz-id-2: 7s8x9RCw2G6XRsOF3cwBRWkuGsRFNgBMJPmSE6MVJusFSUC0JpYm7qeGSEkK2D9/CdESDpycdX8=\r\nx-amz-request-id: ZG8T6JEJMSY9EKND\r\nlast-modified: Tue, 14 May 2024 21:48:28 GMT\r\netag: \"b426aff6b8404961dbc4740043025861\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=84600, must-revalidate\r\ncontent-encoding: gzip\r\nx-amz-version-id: ouyNEDkMOzh7vPJ0OtaiDUvkkruaWgmy\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nage: 16111\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":332491,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (42447)","md5":"9e6e739fb6329c86888dd97eb7ea078f","sha1":"a4c22119854efdb077c7258acfc70884f92e446e","sha256":"85ae4bbefc8ac2b8730423336fd9f9e66d46717bbf309b0dabbc642b5bba3f10","sha512":"bd21d5904788b22ed5846fa0b4611a768a98ec5f931841a6f7dc907a7afc67e4c029d2ae0bd202158a885ef5e0f9b7642251d2c0cf8421b53b0149f6530c10ad","ssdeep":"3072:+dfvC+zNPtR7yrbnbTRlkEy1GDYPDndT66i1DpabOT8Q1GZHfU4kNKe24fBGJylL:0KrLk9U1erBfU4Q9syR","tlshash":"23640946325630f642af035af81b5c01b3b911e5c60dca6cd8a6cde92ead9dc0717b7b","first_seen":"2025-02-26T17:21:45.470079Z","last_seen":"2026-03-29T12:23:37.924908Z","times_seen":7,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":45,"dns":21,"connect":9,"send":0,"wait":47,"receive":3,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-windheaven.lol/_astro/page.DVT0Mg3q.js","fqdn":"claim-windheaven.lol","domain":"claim-windheaven.lol","tld":"lol"},"ip":{"addr":"178.208.83.16","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-windheaven.lol/","date":"2026-01-10T17:56:51.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim-windheaven.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Nov 2025 19:45:14 GMT","end":"Fri, 20 Feb 2026 19:45:13 GMT"},"fingerprint":{"sha1":"8B:F4:96:64:18:F7:74:15:ED:3D:9E:69:56:C7:C0:8F:12:11:A7:40","sha256":"30:58:69:DB:5C:4F:DF:E6:A0:B9:FD:07:C7:A3:46:7E:28:0D:F8:C5:4A:5F:86:A6:E6:6B:A2:58:39:9D:60:A5"}}},"request":{"raw":"GET /_astro/page.DVT0Mg3q.js HTTP/1.1\r\nHost: claim-windheaven.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-windheaven.lol/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 10 Jan 2026 17:56:51 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Sat, 16 Aug 2025 14:48:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68a09a46-2e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"229c77db745d1a2795f5051668aba306","sha1":"933652c4f64c19d90e2c81b4baaf65535131766e","sha256":"82d3a33398e8f3c71ae775a707d99e8d44e12f058145842e5962f00b8f162777","sha512":"26a4f9fec0fb7ec2e033b59611cbe6f033c3901c595e73362ab53f0cbb3b774c51b0a9cacc310225e0a09fc877a8e728eeac1a023175d5b40a99e6b855a650a7","ssdeep":"","tlshash":"c3900447075115c444f00cc55514cc005ff503553dc34c01017c577df1f50c4d74d104","first_seen":"2026-01-10T17:57:22.699729Z","last_seen":"2026-01-10T17:57:22.699729Z","times_seen":1,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-windheaven.lol/_astro/stargaze.CJb5EaM5.png","fqdn":"claim-windheaven.lol","domain":"claim-windheaven.lol","tld":"lol"},"ip":{"addr":"178.208.83.16","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-windheaven.lol/","date":"2026-01-10T17:56:51.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim-windheaven.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Nov 2025 19:45:14 GMT","end":"Fri, 20 Feb 2026 19:45:13 GMT"},"fingerprint":{"sha1":"8B:F4:96:64:18:F7:74:15:ED:3D:9E:69:56:C7:C0:8F:12:11:A7:40","sha256":"30:58:69:DB:5C:4F:DF:E6:A0:B9:FD:07:C7:A3:46:7E:28:0D:F8:C5:4A:5F:86:A6:E6:6B:A2:58:39:9D:60:A5"}}},"request":{"raw":"GET /_astro/stargaze.CJb5EaM5.png HTTP/1.1\r\nHost: claim-windheaven.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-windheaven.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 10 Jan 2026 17:56:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 4012\r\nlast-modified: Sat, 16 Aug 2025 14:48:38 GMT\r\nvary: Accept-Encoding\r\netag: \"68a09a46-fac\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4012,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 536 x 108, 8-bit/color RGBA, non-interlaced","md5":"9600845a9e2795a8c50c0fdaaf37ae7c","sha1":"bb4b4c73ce970b9233665d4a6603aacb45877626","sha256":"602768763ebe721f9d0e73e262ecc4e7812dc3d748bf46d0c77de11640c5da87","sha512":"dd4f1d0fab980b0ff0724c4d8013869c257a5fb105fd25752de20d7cecc49c58d478f113b47d937476e65b5b5a8c1d69ee1f15e63932baf6e673e3b68a2b0868","ssdeep":"","tlshash":"7a815bcf88f33d1e5344663782154588b5b5268ce3f523531677a429cb1816a43998ca","first_seen":"2025-09-03T17:53:08.269619Z","last_seen":"2026-01-10T17:57:22.702741Z","times_seen":2,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-windheaven.lol/_astro/secret.BB9DkM4G.png","fqdn":"claim-windheaven.lol","domain":"claim-windheaven.lol","tld":"lol"},"ip":{"addr":"178.208.83.16","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-windheaven.lol/","date":"2026-01-10T17:56:51.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim-windheaven.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Nov 2025 19:45:14 GMT","end":"Fri, 20 Feb 2026 19:45:13 GMT"},"fingerprint":{"sha1":"8B:F4:96:64:18:F7:74:15:ED:3D:9E:69:56:C7:C0:8F:12:11:A7:40","sha256":"30:58:69:DB:5C:4F:DF:E6:A0:B9:FD:07:C7:A3:46:7E:28:0D:F8:C5:4A:5F:86:A6:E6:6B:A2:58:39:9D:60:A5"}}},"request":{"raw":"GET /_astro/secret.BB9DkM4G.png HTTP/1.1\r\nHost: claim-windheaven.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-windheaven.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 10 Jan 2026 17:56:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 8594\r\nlast-modified: Sat, 16 Aug 2025 14:48:38 GMT\r\nvary: Accept-Encoding\r\netag: \"68a09a46-2192\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8594,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 556 x 158, 8-bit/color RGBA, non-interlaced","md5":"bfd37d99fee465edc6fac41c6beb06b9","sha1":"4a6e61f8c5f11e6a42451ddbd018fbdec2116e5e","sha256":"46ea308eb8d9774487aefb37c16ae36408f3ab56ce159e90b45c1bcd9cabda99","sha512":"7a462f08e04a2773116e0d63e2862755ce62805080617c95668fd8ef3bbe841c08d15e0796ace2988455fa5fcfb6e26354e8cc7a96486718f53d1f8f219f1406","ssdeep":"192:ZSxSwKZ+5Li1mmkMwVCEiOfZNkjTEJtUZQg5hdPHsdah:AxSYLakML7ORNkj0tkhFM0h","tlshash":"cf02c0c4e555ed1102d3683e2369bd01bc00683f8ab2ceb2fb4e19cbb354c12ad6eb15","first_seen":"2025-09-03T17:53:08.230398Z","last_seen":"2026-01-10T17:57:22.70572Z","times_seen":2,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/web3@4.6.0/dist/web3.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-windheaven.lol/","date":"2026-01-10T17:56:51.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/web3@4.6.0/dist/web3.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-windheaven.lol/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 17:56:51 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 154143\r\ncf-ray: 9bbe0daeb9ff7131-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 4.6.0\r\nx-jsd-version-type: version\r\netag: W/\"95e08-2kcIk1gG9wTNu6gZ7WW5aaXCBOw\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230059-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=H4PxfYmw%2FwgqnQ%2BLLVkZ5yqJDrLPaZ5rgmCFh65brjabnTnmnRytwG%2BXd%2FnC5im%2BvRMQgHnYd%2FqLPAHcM70ZFWzjJ%2F7ZXs7GzkRP6%2FCGSPB8VA6HVfeuZHNe3nMZNZYsPgs%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":613896,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65470)","md5":"c0dc531e4db4e01f76600a0698320a5e","sha1":"da4708935806f704cdbba819ed65b969a5c204ec","sha256":"3eb129a9bcc2e31546330ee4fef04ef23c74f05fd33cce9d54b2f065d5128d37","sha512":"0d34949c1e28c0fc7be0ac909c12fe5cf48223c7a56698d1d1d9c79929c79264e2ac8cc8ffd00d631b8367ced356c43513ef2b401fd5e0401a51f28dfa1e36fb","ssdeep":"6144:cNllVHSLedqCH2dPB8E1vCXNUnFrd9CdFccX6gGAI9lbPYIvrxUq34pf6RP:c/ucob6UAIyF69","tlshash":"52d44c847690f0a10bdb50e544b70002f234b965705d94e4b7be9cebaea9ecda177f38","first_seen":"2024-03-08T19:21:29Z","last_seen":"2026-03-29T12:23:37.900189Z","times_seen":19,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":8,"dns":0,"connect":1,"send":0,"wait":82,"receive":8,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-windheaven.lol/css/bootstrap-grid.min.css","fqdn":"claim-windheaven.lol","domain":"claim-windheaven.lol","tld":"lol"},"ip":{"addr":"178.208.83.16","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-windheaven.lol/","date":"2026-01-10T17:56:51.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim-windheaven.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Nov 2025 19:45:14 GMT","end":"Fri, 20 Feb 2026 19:45:13 GMT"},"fingerprint":{"sha1":"8B:F4:96:64:18:F7:74:15:ED:3D:9E:69:56:C7:C0:8F:12:11:A7:40","sha256":"30:58:69:DB:5C:4F:DF:E6:A0:B9:FD:07:C7:A3:46:7E:28:0D:F8:C5:4A:5F:86:A6:E6:6B:A2:58:39:9D:60:A5"}}},"request":{"raw":"GET /css/bootstrap-grid.min.css HTTP/1.1\r\nHost: claim-windheaven.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-windheaven.lol/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 10 Jan 2026 17:56:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 24 Apr 2024 07:19:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6628b266-ce45\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52805,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (52539)","md5":"a92ffe0efac491b009a7c8e4e15b6861","sha1":"1b3c1e334bb8687f5fcbdcdebc2255d2a462964a","sha256":"9abd3f5a7973251d6b17cccd16652859f722a145f3e74272a5d31923c18f22c7","sha512":"ab42e92a710a1bfa407f5aa2d520325f4942367ae52438c0becc9aca0bb4ef1f0e1780843a9421067622156e980d49ce39cc80122118955e12f6f11ce9a91313","ssdeep":"384:CoGnlptoCygtFymx/G1NfCpz600I4Lh7GzcX:CfnlptoCygtomx/G1NfCpz600I4gcX","tlshash":"6f33a8c7f9d2284cc592c245c0923fbc5dbf9949a352ac9ba0177fba4b457cb08a2d4d","first_seen":"2023-04-06T12:44:20Z","last_seen":"2026-08-12T04:52:11.138234Z","times_seen":250,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":344,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-windheaven.lol/total.png","fqdn":"claim-windheaven.lol","domain":"claim-windheaven.lol","tld":"lol"},"ip":{"addr":"178.208.83.16","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-windheaven.lol/","date":"2026-01-10T17:56:51.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim-windheaven.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Nov 2025 19:45:14 GMT","end":"Fri, 20 Feb 2026 19:45:13 GMT"},"fingerprint":{"sha1":"8B:F4:96:64:18:F7:74:15:ED:3D:9E:69:56:C7:C0:8F:12:11:A7:40","sha256":"30:58:69:DB:5C:4F:DF:E6:A0:B9:FD:07:C7:A3:46:7E:28:0D:F8:C5:4A:5F:86:A6:E6:6B:A2:58:39:9D:60:A5"}}},"request":{"raw":"GET /total.png HTTP/1.1\r\nHost: claim-windheaven.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-windheaven.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 10 Jan 2026 17:56:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 333459\r\nlast-modified: Mon, 23 Dec 2024 19:12:42 GMT\r\nvary: Accept-Encoding\r\netag: \"6769b62a-51693\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":333459,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1262 x 1052, 8-bit/color RGB, non-interlaced","md5":"a6346c1f31c77fbf566d71e64e54e98f","sha1":"cbca5cad1b85c49ae14e2db8be55593e4d979186","sha256":"0c8b9e6baa7342078111c300031d4f09bf7b77649433abd24121ef75a05f1846","sha512":"3eaa18ba7aad57b85d01a81e3d8f1657b235359e410cc92fc8f2d1d16900a35e93d04add997634a2e345697c3948cb8f434b979071abdf13baf3e3e5e008885a","ssdeep":"6144:/uF/kAVj6mRcPPt/hJy2PiKv3v0urvU+w5wOQJaBgZURqofgF/e+mpl1Aq:/Q//Zgt/hJniK325gJ8MmqoI4pj","tlshash":"4f64234b40b472a1b9221ff3a5963f4a4776d4b358be532e3cf0f8a0a055e7eb650907","first_seen":"2026-01-10T17:57:22.713861Z","last_seen":"2026-01-10T17:57:22.713861Z","times_seen":1,"resource_available":false,"data":null}},"time_used":576,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":236,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-windheaven.lol/bio.svg","fqdn":"claim-windheaven.lol","domain":"claim-windheaven.lol","tld":"lol"},"ip":{"addr":"178.208.83.16","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-windheaven.lol/","date":"2026-01-10T17:56:51.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim-windheaven.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Nov 2025 19:45:14 GMT","end":"Fri, 20 Feb 2026 19:45:13 GMT"},"fingerprint":{"sha1":"8B:F4:96:64:18:F7:74:15:ED:3D:9E:69:56:C7:C0:8F:12:11:A7:40","sha256":"30:58:69:DB:5C:4F:DF:E6:A0:B9:FD:07:C7:A3:46:7E:28:0D:F8:C5:4A:5F:86:A6:E6:6B:A2:58:39:9D:60:A5"}}},"request":{"raw":"GET /bio.svg HTTP/1.1\r\nHost: claim-windheaven.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-windheaven.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 10 Jan 2026 17:56:51 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 23 Dec 2024 18:34:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6769ad2a-bc1\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3009,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"66a97bbaccc4b7d9e987d98b9d0eca2b","sha1":"b9785bf7129382a43da07c26deae17f024677bce","sha256":"e5928d0c702d3fee8cfb5228e231bcedb387eb10ead4132793979c2e18b16967","sha512":"b46a81112a9d8a71172bd213db50ef46011742485c60e798d41e096ae6bf24de8c6c81e946a94520338cbb062a343a17c954c5e5080f9ce8e1838fffdcca0339","ssdeep":"","tlshash":"355164ce07719ccb07ccabde3f1121dd596b8498da551ce9d01a9f780c4a87e9c0a1b3","first_seen":"2026-01-10T17:57:22.71642Z","last_seen":"2026-01-10T17:57:22.71642Z","times_seen":1,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-windheaven.lol/_astro/arbitrum.DXluhhfo.png","fqdn":"claim-windheaven.lol","domain":"claim-windheaven.lol","tld":"lol"},"ip":{"addr":"178.208.83.16","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-windheaven.lol/","date":"2026-01-10T17:56:51.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim-windheaven.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Nov 2025 19:45:14 GMT","end":"Fri, 20 Feb 2026 19:45:13 GMT"},"fingerprint":{"sha1":"8B:F4:96:64:18:F7:74:15:ED:3D:9E:69:56:C7:C0:8F:12:11:A7:40","sha256":"30:58:69:DB:5C:4F:DF:E6:A0:B9:FD:07:C7:A3:46:7E:28:0D:F8:C5:4A:5F:86:A6:E6:6B:A2:58:39:9D:60:A5"}}},"request":{"raw":"GET /_astro/arbitrum.DXluhhfo.png HTTP/1.1\r\nHost: claim-windheaven.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-windheaven.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 10 Jan 2026 17:56:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 7670\r\nlast-modified: Sat, 16 Aug 2025 14:48:38 GMT\r\nvary: Accept-Encoding\r\netag: \"68a09a46-1df6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7670,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 670 x 171, 8-bit/color RGBA, non-interlaced","md5":"72fe6891df8800006b364eea5b03e5a5","sha1":"77fd1d89d59128c7b7414a4f2bdae87974480f1c","sha256":"e4ed5e6c3973ebb901e2ea73b292b0a85bf3f3c0483639714701b34b3c3daff4","sha512":"7cebe15bb4e7fe3e05a1a3b2bdc98b5d65915fd8ca4daaaa35109b5593a892e17b44de0cd66fc40b2e931f55975df6420177ae57824ff477dbafa46331fee583","ssdeep":"192:fSIMuCRq4Tq9gYUUV2eEOAYysIWA0YlxNCfJ1ZbwOZ+Xt6xAi3H:K6I69YUV2FOzkgJ1Ct6Oi3H","tlshash":"5ff1afe17ccffd6c967d552213f366f8291fd41b3907758200926432241f75ad826747","first_seen":"2025-09-03T17:53:08.233446Z","last_seen":"2026-01-10T17:57:22.718532Z","times_seen":2,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-windheaven.lol/js/script.js","fqdn":"claim-windheaven.lol","domain":"claim-windheaven.lol","tld":"lol"},"ip":{"addr":"178.208.83.16","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-windheaven.lol/","date":"2026-01-10T17:56:51.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim-windheaven.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Nov 2025 19:45:14 GMT","end":"Fri, 20 Feb 2026 19:45:13 GMT"},"fingerprint":{"sha1":"8B:F4:96:64:18:F7:74:15:ED:3D:9E:69:56:C7:C0:8F:12:11:A7:40","sha256":"30:58:69:DB:5C:4F:DF:E6:A0:B9:FD:07:C7:A3:46:7E:28:0D:F8:C5:4A:5F:86:A6:E6:6B:A2:58:39:9D:60:A5"}}},"request":{"raw":"GET /js/script.js HTTP/1.1\r\nHost: claim-windheaven.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-windheaven.lol/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 10 Jan 2026 17:56:51 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Fri, 13 Jun 2025 12:07:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"684c149e-213\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":531,"size_decoded":0,"mime_type":"application/x-javascript","magic":"ASCII text, with CRLF line terminators","md5":"77c328c3b05c8f70cffb4aaac0b477f8","sha1":"79d5c7e8565009774a8d8dbb41a0f2295bf876ee","sha256":"dba74aed083ceaae7320574eebb1c6d7a2c2c107ae7653017cc0dfc8080ed55b","sha512":"b8197c9333a30d577d5077b375b4df05a0beb380ccd24be9045d246296813f03e8782f5b46123635a8ec25da43af10491a38ec395c704d14a7d38a62a542b8ed","ssdeep":"","tlshash":"15f0b4673346066007bf676698714b457c709224591252cabd3c54b09b35e4774affa4","first_seen":"2026-01-10T17:57:22.720824Z","last_seen":"2026-01-10T17:57:22.720824Z","times_seen":1,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":344,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-windheaven.lol/logo-full.svg","fqdn":"claim-windheaven.lol","domain":"claim-windheaven.lol","tld":"lol"},"ip":{"addr":"178.208.83.16","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-windheaven.lol/","date":"2026-01-10T17:56:51.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim-windheaven.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Nov 2025 19:45:14 GMT","end":"Fri, 20 Feb 2026 19:45:13 GMT"},"fingerprint":{"sha1":"8B:F4:96:64:18:F7:74:15:ED:3D:9E:69:56:C7:C0:8F:12:11:A7:40","sha256":"30:58:69:DB:5C:4F:DF:E6:A0:B9:FD:07:C7:A3:46:7E:28:0D:F8:C5:4A:5F:86:A6:E6:6B:A2:58:39:9D:60:A5"}}},"request":{"raw":"GET /logo-full.svg HTTP/1.1\r\nHost: claim-windheaven.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-windheaven.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 10 Jan 2026 17:56:51 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 16 Aug 2025 14:48:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68a09a46-58a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1418,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e41b86b2d362ac89d7e0da4be7ddc089","sha1":"f714f4337b89cb5956785bef74928db148295a30","sha256":"96c2acaad7045bc47f741d298f8ba4daf249fae1c62a1f08aca9ae3d036d98c3","sha512":"fb8feef7aef68a211d649f1a36ee3cc527951d0af8654e96bb30e75ffb1408be24dde8b60bb7f01d45fd4958a88cb431c7ecb5b2946400d40588c4ca612b5a6b","ssdeep":"","tlshash":"1d21e2bc961c8cdcc8078a34db3d25f5655d6affb0e04344977cd05164615e8e16fca2","first_seen":"2025-09-03T17:53:08.265331Z","last_seen":"2026-01-10T17:57:22.726832Z","times_seen":2,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":341,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-windheaven.lol/fonts/JetBrainsMono[wght].woff2","fqdn":"claim-windheaven.lol","domain":"claim-windheaven.lol","tld":"lol"},"ip":{"addr":"178.208.83.16","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-windheaven.lol/","date":"2026-01-10T17:56:52.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim-windheaven.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Nov 2025 19:45:14 GMT","end":"Fri, 20 Feb 2026 19:45:13 GMT"},"fingerprint":{"sha1":"8B:F4:96:64:18:F7:74:15:ED:3D:9E:69:56:C7:C0:8F:12:11:A7:40","sha256":"30:58:69:DB:5C:4F:DF:E6:A0:B9:FD:07:C7:A3:46:7E:28:0D:F8:C5:4A:5F:86:A6:E6:6B:A2:58:39:9D:60:A5"}}},"request":{"raw":"GET /fonts/JetBrainsMono[wght].woff2 HTTP/1.1\r\nHost: claim-windheaven.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-windheaven.lol/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 10 Jan 2026 17:56:52 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 114020\r\nlast-modified: Sat, 16 Aug 2025 14:48:38 GMT\r\nvary: Accept-Encoding\r\netag: \"68a09a46-1bd64\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":114020,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 114020, version 2.19988","md5":"aac0d356bc8119aaba375427edb06b52","sha1":"fe9ebea34f41bab1908b1671212cad028fb006d4","sha256":"d83ad59c4993be97522e002df1e2881459472310e216ad0500e32f22b0044b63","sha512":"046fbae0cc4e21fcaf206c5e8c3be367e49590904492f8726a8b1085dcd91a206806b21f87cb4d07142baf05d61fcd77a7d0976379c618bd7e655d7b8d57e976","ssdeep":"3072:I99Fk5x0VjuCq3AfqqDU02Je3PFnaCMdLdjQwzYg2:IHFyxkg/qDse/5X+ZjLsg2","tlshash":"18b3124677bca75d1225d33294d362e073a47c92cc4d2721849b8b871faeb81bab614b","first_seen":"2025-09-03T17:53:08.249586Z","last_seen":"2026-03-28T13:00:08.902007Z","times_seen":4,"resource_available":false,"data":null}},"time_used":702,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":510,"receive":192,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-windheaven.lol/fonts/JetBrainsMono[wght].woff2","fqdn":"claim-windheaven.lol","domain":"claim-windheaven.lol","tld":"lol"},"ip":{"addr":"178.208.83.16","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-windheaven.lol/","date":"2026-01-10T17:56:52.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim-windheaven.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Nov 2025 19:45:14 GMT","end":"Fri, 20 Feb 2026 19:45:13 GMT"},"fingerprint":{"sha1":"8B:F4:96:64:18:F7:74:15:ED:3D:9E:69:56:C7:C0:8F:12:11:A7:40","sha256":"30:58:69:DB:5C:4F:DF:E6:A0:B9:FD:07:C7:A3:46:7E:28:0D:F8:C5:4A:5F:86:A6:E6:6B:A2:58:39:9D:60:A5"}}},"request":{"raw":"GET /fonts/JetBrainsMono[wght].woff2 HTTP/1.1\r\nHost: claim-windheaven.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-windheaven.lol/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 10 Jan 2026 17:56:52 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 114020\r\nlast-modified: Sat, 16 Aug 2025 14:48:38 GMT\r\nvary: Accept-Encoding\r\netag: \"68a09a46-1bd64\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":114020,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 114020, version 2.19988","md5":"aac0d356bc8119aaba375427edb06b52","sha1":"fe9ebea34f41bab1908b1671212cad028fb006d4","sha256":"d83ad59c4993be97522e002df1e2881459472310e216ad0500e32f22b0044b63","sha512":"046fbae0cc4e21fcaf206c5e8c3be367e49590904492f8726a8b1085dcd91a206806b21f87cb4d07142baf05d61fcd77a7d0976379c618bd7e655d7b8d57e976","ssdeep":"3072:I99Fk5x0VjuCq3AfqqDU02Je3PFnaCMdLdjQwzYg2:IHFyxkg/qDse/5X+ZjLsg2","tlshash":"18b3124677bca75d1225d33294d362e073a47c92cc4d2721849b8b871faeb81bab614b","first_seen":"2025-09-03T17:53:08.249586Z","last_seen":"2026-03-28T13:00:08.902007Z","times_seen":4,"resource_available":false,"data":null}},"time_used":689,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":492,"receive":197,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"videos.cdn.union.build/radial-glass-v8.mp4","fqdn":"videos.cdn.union.build","domain":"union.build","tld":"build"},"ip":{"addr":"104.20.36.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://claim-windheaven.lol/","date":"2026-01-10T17:56:52.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dab1d3c6.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 15:56:08 GMT","end":"Tue, 31 Mar 2026 16:56:02 GMT"},"fingerprint":{"sha1":"99:7B:D2:23:69:8A:26:4E:08:F9:43:C7:6F:52:12:7F:41:82:15:97","sha256":"23:85:6C:72:35:AF:5D:DE:73:75:C1:ED:D8:AF:39:8A:A1:53:EF:89:65:FA:54:8D:F9:F9:59:70:C0:0B:44:DA"}}},"request":{"raw":"GET /radial-glass-v8.mp4 HTTP/1.1\r\nHost: videos.cdn.union.build\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-windheaven.lol/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Sat, 10 Jan 2026 17:56:53 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 874636\r\ncache-control: max-age=14400\r\ncontent-range: bytes 0-874635/874636\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\netag: \"4f6ba812e2298a0e4fb40cd52115d91f\"\r\nlast-modified: Tue, 08 Oct 2024 16:11:54 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9bbe0db73d7556c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":874636,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"4f6ba812e2298a0e4fb40cd52115d91f","sha1":"b28483467d8e23dae6b89fc6eb9f2296dee860ca","sha256":"e3f5f90b00fcb34a9ad9fb2eba5c69085519cd63fdcd9e6d9509eae447348a01","sha512":"60f1e2295afe15c3c53838012da083031125d8b5f32c11eb41848a460c2c9820c16f0fd929bfa4b22b93f6e45160b3b08cd5bfcf86138c56a7bdf8b605f72714","ssdeep":"24576:tS0CiO9/APdoJ9UesJIgNuZqeh5sAy12QCUEKENfygZSY6L:tb6tAPdoAp0ZqejTyjv2fyg8f","tlshash":"4e1523367c652c42f5074b77ece2659ada2b88c202f91fa0b4dcfb874f5936cac15851","first_seen":"2025-09-03T17:53:08.257882Z","last_seen":"2026-01-10T17:57:22.732035Z","times_seen":2,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":59,"dns":36,"connect":1,"send":0,"wait":184,"receive":50,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-windheaven.lol/_nuxt/entry.css","fqdn":"claim-windheaven.lol","domain":"claim-windheaven.lol","tld":"lol"},"ip":{"addr":"178.208.83.16","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-windheaven.lol/","date":"2026-01-10T17:56:51.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim-windheaven.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Nov 2025 19:45:14 GMT","end":"Fri, 20 Feb 2026 19:45:13 GMT"},"fingerprint":{"sha1":"8B:F4:96:64:18:F7:74:15:ED:3D:9E:69:56:C7:C0:8F:12:11:A7:40","sha256":"30:58:69:DB:5C:4F:DF:E6:A0:B9:FD:07:C7:A3:46:7E:28:0D:F8:C5:4A:5F:86:A6:E6:6B:A2:58:39:9D:60:A5"}}},"request":{"raw":"GET /_nuxt/entry.css HTTP/1.1\r\nHost: claim-windheaven.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-windheaven.lol/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 10 Jan 2026 17:56:51 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 02 Jan 2018 12:36:34 GMT\r\netag: W/\"2e80108-56e-561ca595b5880\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1390,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"97ef46701fbde80e1e483403273444a7","sha1":"bb5fc9fcda936357fb4d4c97c3a0cb62b37b3d1e","sha256":"8d9697b813a73597c0c846d0e1d7298b09f63e2feefef5e623a2b26ac2bd5cb4","sha512":"15d2e19d79843b4f4e40ea79cb6847ee20b303d78c18df4c489b9a2c20f6b5026b307d6b5dcdfc730b0e38bb024532766f39f59a1df1c14f7a6e612bd0fada51","ssdeep":"","tlshash":"9231326ba8c54a6d17020262b54a3144c9369b2ddd533cb5d0c8927a6f7fba0853d3c5","first_seen":"2025-06-26T11:09:56.545037Z","last_seen":"2026-05-07T05:43:32.234219Z","times_seen":17,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":358,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-windheaven.lol/","date":"2026-01-10T17:56:51.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/jquery/3.7.1/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-windheaven.lol/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 17:56:51 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 27446\r\ncf-ray: 9bbe0daee97b56b9-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"64ed75bb-6b36\"\r\nlast-modified: Tue, 29 Aug 2023 04:36:11 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1880324\r\nexpires: Thu, 31 Dec 2026 17:56:51 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=kiAg7F9IdY8Kw5pLyUhAifWfJC4%2FuBIK8mYgs%2F4epueTSRpzNs0vpQzhvRE2zNEwdF4qwTOty%2Bm2MMjTEg%2BfBshVnLjkVt6oOuJRejKcBV%2BEPvtl99bU4Gu0As4oTqU6asilxZ3i\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87533,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-16T13:35:57.98683Z","times_seen":186175,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":39,"dns":4,"connect":4,"send":0,"wait":13,"receive":1,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"videos.cdn.union.build/modular-stack-v2.mp4","fqdn":"videos.cdn.union.build","domain":"union.build","tld":"build"},"ip":{"addr":"104.20.36.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://claim-windheaven.lol/","date":"2026-01-10T17:56:52.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dab1d3c6.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 15:56:08 GMT","end":"Tue, 31 Mar 2026 16:56:02 GMT"},"fingerprint":{"sha1":"99:7B:D2:23:69:8A:26:4E:08:F9:43:C7:6F:52:12:7F:41:82:15:97","sha256":"23:85:6C:72:35:AF:5D:DE:73:75:C1:ED:D8:AF:39:8A:A1:53:EF:89:65:FA:54:8D:F9:F9:59:70:C0:0B:44:DA"}}},"request":{"raw":"GET /modular-stack-v2.mp4 HTTP/1.1\r\nHost: videos.cdn.union.build\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-windheaven.lol/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Sat, 10 Jan 2026 17:56:53 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 8951860\r\ncache-control: max-age=14400\r\ncontent-range: bytes 0-8951859/8951860\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\netag: \"68ad3028577337cdc4094c237761b97c\"\r\nlast-modified: Tue, 08 Oct 2024 16:35:12 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9bbe0db74d7d56c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8951860,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"09dd57c3695e4195d9fc1cebe626a7e8","sha1":"1e0d59161bb93cca09109d48a680930c2b012599","sha256":"ed8aaf05539f81637b34d6a119e71f1a47456af0567cfbca7e71d59c49a7dc7d","sha512":"8fbd44ed43354ec53905edb94965ff59f3c06bd8b9ad1b394502c8cf5842372cf167e6303c3c6071deded2ecc4bbeeb635f85fea4f503d9d5713560668950d86","ssdeep":"24576:SkvWo+NRU8uoPbskKM0rkxuaI+8OM1ok5za+XTYYDSXj:SSW1ZPbVKM0rkxuaqO65zaWTY4K","tlshash":"26252362b3d005b3f8c77f3e98e7107b024561bd74ab8713391f85a2aba12e51f06d99","first_seen":"2025-09-03T17:53:08.247144Z","last_seen":"2026-01-10T17:57:22.749686Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1453,"timings":{"blocked":60,"dns":31,"connect":3,"send":0,"wait":166,"receive":1165,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-windheaven.lol/learn","fqdn":"claim-windheaven.lol","domain":"claim-windheaven.lol","tld":"lol"},"ip":{"addr":"178.208.83.16","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://claim-windheaven.lol/","date":"2026-01-10T17:56:54.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim-windheaven.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Nov 2025 19:45:14 GMT","end":"Fri, 20 Feb 2026 19:45:13 GMT"},"fingerprint":{"sha1":"8B:F4:96:64:18:F7:74:15:ED:3D:9E:69:56:C7:C0:8F:12:11:A7:40","sha256":"30:58:69:DB:5C:4F:DF:E6:A0:B9:FD:07:C7:A3:46:7E:28:0D:F8:C5:4A:5F:86:A6:E6:6B:A2:58:39:9D:60:A5"}}},"request":{"raw":"GET /learn HTTP/1.1\r\nHost: claim-windheaven.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-windheaven.lol/\r\nCookie: _ga_NK9V3KPEY4=GS2.1.s1768067814$o1$g0$t1768067814$j60$l0$h0; _ga=GA1.1.1047813126.1768067814\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 10 Jan 2026 17:56:54 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 02 Jan 2018 12:36:34 GMT\r\netag: W/\"2e80108-56e-561ca595b5880\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1390,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"97ef46701fbde80e1e483403273444a7","sha1":"bb5fc9fcda936357fb4d4c97c3a0cb62b37b3d1e","sha256":"8d9697b813a73597c0c846d0e1d7298b09f63e2feefef5e623a2b26ac2bd5cb4","sha512":"15d2e19d79843b4f4e40ea79cb6847ee20b303d78c18df4c489b9a2c20f6b5026b307d6b5dcdfc730b0e38bb024532766f39f59a1df1c14f7a6e612bd0fada51","ssdeep":"","tlshash":"9231326ba8c54a6d17020262b54a3144c9369b2ddd533cb5d0c8927a6f7fba0853d3c5","first_seen":"2025-06-26T11:09:56.545037Z","last_seen":"2026-05-07T05:43:32.234219Z","times_seen":17,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":236,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-windheaven.lol/","date":"2026-01-10T17:56:51.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-windheaven.lol/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 17:56:51 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 5631\r\ncf-ray: 9bbe0daed96f56b9-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03e5f-7918\"\r\nlast-modified: Mon, 04 May 2020 16:10:07 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1869806\r\nexpires: Thu, 31 Dec 2026 17:56:51 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=FEm3QyFtUOD1q%2B1w7b0G9MaRqJWshKwtvjuoIPSYMyy98poj3Gm9CDlQi39bTsdJ6OI1OsLuP%2BH8EqmSVbIrZoWca%2FXqqAyA9m4O0Qtg%2FB7w398H%2BLeJxUM7DoxJONVMGa9WC72p\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31000,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-08-16T13:52:11.386809Z","times_seen":309194,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":28,"dns":1,"connect":5,"send":0,"wait":19,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets-global.website-files.com/64c26cc84790d118b80c38b6/js/webflow.9e6e739fb.js","fqdn":"assets-global.website-files.com","domain":"website-files.com","tld":"com"},"ip":{"addr":"172.64.153.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-windheaven.lol/","date":"2026-01-10T17:56:52.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"website-files.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 21:08:31 GMT","end":"Sat, 28 Mar 2026 22:08:19 GMT"},"fingerprint":{"sha1":"84:D1:97:4C:25:7C:6D:B2:C3:CB:F3:0A:63:EC:40:7A:22:D9:A3:83","sha256":"C8:C5:EA:3D:39:AD:98:07:59:D6:02:35:EC:72:E0:87:50:93:9F:91:AB:C7:2D:10:BC:C5:D7:CA:D8:12:98:5A"}}},"request":{"raw":"GET /64c26cc84790d118b80c38b6/js/webflow.9e6e739fb.js HTTP/1.1\r\nHost: assets-global.website-files.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-windheaven.lol/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 17:56:52 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 76769\r\ncf-ray: 9bbe0db65d72b4fa-OSL\r\nx-amz-id-2: 7s8x9RCw2G6XRsOF3cwBRWkuGsRFNgBMJPmSE6MVJusFSUC0JpYm7qeGSEkK2D9/CdESDpycdX8=\r\nx-amz-request-id: ZG8T6JEJMSY9EKND\r\nlast-modified: Tue, 14 May 2024 21:48:28 GMT\r\netag: \"b426aff6b8404961dbc4740043025861\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=84600, must-revalidate\r\ncontent-encoding: gzip\r\nx-amz-version-id: ouyNEDkMOzh7vPJ0OtaiDUvkkruaWgmy\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nage: 16112\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":332491,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (42447)","md5":"9e6e739fb6329c86888dd97eb7ea078f","sha1":"a4c22119854efdb077c7258acfc70884f92e446e","sha256":"85ae4bbefc8ac2b8730423336fd9f9e66d46717bbf309b0dabbc642b5bba3f10","sha512":"bd21d5904788b22ed5846fa0b4611a768a98ec5f931841a6f7dc907a7afc67e4c029d2ae0bd202158a885ef5e0f9b7642251d2c0cf8421b53b0149f6530c10ad","ssdeep":"3072:+dfvC+zNPtR7yrbnbTRlkEy1GDYPDndT66i1DpabOT8Q1GZHfU4kNKe24fBGJylL:0KrLk9U1erBfU4Q9syR","tlshash":"23640946325630f642af035af81b5c01b3b911e5c60dca6cd8a6cde92ead9dc0717b7b","first_seen":"2025-02-26T17:21:45.470079Z","last_seen":"2026-03-29T12:23:37.924908Z","times_seen":7,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-windheaven.lol/team","fqdn":"claim-windheaven.lol","domain":"claim-windheaven.lol","tld":"lol"},"ip":{"addr":"178.208.83.16","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://claim-windheaven.lol/","date":"2026-01-10T17:56:54.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim-windheaven.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Nov 2025 19:45:14 GMT","end":"Fri, 20 Feb 2026 19:45:13 GMT"},"fingerprint":{"sha1":"8B:F4:96:64:18:F7:74:15:ED:3D:9E:69:56:C7:C0:8F:12:11:A7:40","sha256":"30:58:69:DB:5C:4F:DF:E6:A0:B9:FD:07:C7:A3:46:7E:28:0D:F8:C5:4A:5F:86:A6:E6:6B:A2:58:39:9D:60:A5"}}},"request":{"raw":"GET /team HTTP/1.1\r\nHost: claim-windheaven.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-windheaven.lol/\r\nCookie: _ga_NK9V3KPEY4=GS2.1.s1768067814$o1$g0$t1768067814$j60$l0$h0; _ga=GA1.1.1047813126.1768067814\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 10 Jan 2026 17:56:54 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 02 Jan 2018 12:36:34 GMT\r\netag: W/\"2e80108-56e-561ca595b5880\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1390,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"97ef46701fbde80e1e483403273444a7","sha1":"bb5fc9fcda936357fb4d4c97c3a0cb62b37b3d1e","sha256":"8d9697b813a73597c0c846d0e1d7298b09f63e2feefef5e623a2b26ac2bd5cb4","sha512":"15d2e19d79843b4f4e40ea79cb6847ee20b303d78c18df4c489b9a2c20f6b5026b307d6b5dcdfc730b0e38bb024532766f39f59a1df1c14f7a6e612bd0fada51","ssdeep":"","tlshash":"9231326ba8c54a6d17020262b54a3144c9369b2ddd533cb5d0c8927a6f7fba0853d3c5","first_seen":"2025-06-26T11:09:56.545037Z","last_seen":"2026-05-07T05:43:32.234219Z","times_seen":17,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":232,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-windheaven.lol/_astro/index.Dxbs1Knj.css","fqdn":"claim-windheaven.lol","domain":"claim-windheaven.lol","tld":"lol"},"ip":{"addr":"178.208.83.16","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-windheaven.lol/","date":"2026-01-10T17:56:51.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim-windheaven.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Nov 2025 19:45:14 GMT","end":"Fri, 20 Feb 2026 19:45:13 GMT"},"fingerprint":{"sha1":"8B:F4:96:64:18:F7:74:15:ED:3D:9E:69:56:C7:C0:8F:12:11:A7:40","sha256":"30:58:69:DB:5C:4F:DF:E6:A0:B9:FD:07:C7:A3:46:7E:28:0D:F8:C5:4A:5F:86:A6:E6:6B:A2:58:39:9D:60:A5"}}},"request":{"raw":"GET /_astro/index.Dxbs1Knj.css HTTP/1.1\r\nHost: claim-windheaven.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-windheaven.lol/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 10 Jan 2026 17:56:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 16 Aug 2025 14:48:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68a09a46-9f14\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40724,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"dbe49cdc2d276c36794b4c8e6df4edbe","sha1":"1b869c1c07ad4f75a1b464098be0b77da01d569d","sha256":"263e113931c5cfebbcc1f2d3cc61b62ea3f76989242190ecf279b3a3359aba77","sha512":"a3d2b9a212b3fc55bfc45bfa4aef6761cf9163ed00637639bbf9e7c5b7c2e963446d0621008d3eade4389b68ddf693ebf706ac2feb98ea210d3d30fcb8a91298","ssdeep":"384:C4hQ/QR0HzuZ6kK1KoKhKMKcGowM1rkuTUNgzrpWSA:oQN2I9URcGowArRrpWv","tlshash":"0503ed57fde244243d2690a9a15737bcbf3e50459b2eacb56fd432309fc63e388a1618","first_seen":"2026-01-10T17:57:22.755859Z","last_seen":"2026-01-10T17:57:22.755859Z","times_seen":1,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-windheaven.lol/img/user.svg","fqdn":"claim-windheaven.lol","domain":"claim-windheaven.lol","tld":"lol"},"ip":{"addr":"178.208.83.16","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-windheaven.lol/","date":"2026-01-10T17:56:51.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim-windheaven.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Nov 2025 19:45:14 GMT","end":"Fri, 20 Feb 2026 19:45:13 GMT"},"fingerprint":{"sha1":"8B:F4:96:64:18:F7:74:15:ED:3D:9E:69:56:C7:C0:8F:12:11:A7:40","sha256":"30:58:69:DB:5C:4F:DF:E6:A0:B9:FD:07:C7:A3:46:7E:28:0D:F8:C5:4A:5F:86:A6:E6:6B:A2:58:39:9D:60:A5"}}},"request":{"raw":"GET /img/user.svg HTTP/1.1\r\nHost: claim-windheaven.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-windheaven.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 10 Jan 2026 17:56:51 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 10 Aug 2024 19:33:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66b7c08c-3e0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":992,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"73b713d8b82879ac6b8d6ca3d05245e3","sha1":"ad0b1e0f3b9e4bd2a14b8adb5316161bf886a788","sha256":"55d6bcc40ebb3151e8d4306be224d8beb11afef5b9969a76d42e4d6f8be4b373","sha512":"18c47d91b05ef26cf38e7a015bd9e191c230b72008e2442e61ba4fb6602eeaf0c1515df97fec3046cf5cc15abb54d615fb0ea16b5bf012f920c441305a46aaf8","ssdeep":"","tlshash":"471125899324d66c85f8e3d75564d49dc07ae18681c5141cd0465929c773e93d74924c","first_seen":"2025-02-26T17:21:45.466714Z","last_seen":"2026-03-29T12:23:37.927207Z","times_seen":10,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":336,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-windheaven.lol/_astro/polygon.mZ2DWSAn.png","fqdn":"claim-windheaven.lol","domain":"claim-windheaven.lol","tld":"lol"},"ip":{"addr":"178.208.83.16","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-windheaven.lol/","date":"2026-01-10T17:56:51.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim-windheaven.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Nov 2025 19:45:14 GMT","end":"Fri, 20 Feb 2026 19:45:13 GMT"},"fingerprint":{"sha1":"8B:F4:96:64:18:F7:74:15:ED:3D:9E:69:56:C7:C0:8F:12:11:A7:40","sha256":"30:58:69:DB:5C:4F:DF:E6:A0:B9:FD:07:C7:A3:46:7E:28:0D:F8:C5:4A:5F:86:A6:E6:6B:A2:58:39:9D:60:A5"}}},"request":{"raw":"GET /_astro/polygon.mZ2DWSAn.png HTTP/1.1\r\nHost: claim-windheaven.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-windheaven.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 10 Jan 2026 17:56:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 9930\r\nlast-modified: Sat, 16 Aug 2025 14:48:38 GMT\r\nvary: Accept-Encoding\r\netag: \"68a09a46-26ca\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9930,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 744 x 145, 8-bit/color RGBA, non-interlaced","md5":"19e6741dd66606cb8c44b1e78011acec","sha1":"59ff1dfb907d20d001fbf1db081483e8778f44db","sha256":"65238b33b80a75c43e1ce16e4d0b3282a368c9066eb03ce1d7ce59bd43d15aa3","sha512":"ca43626e580efd2c20c63b8436afd7eb17864f514c47473e8bd3a57802789253703109138e9c32f6fd6370bdf908e7a85c4223ac3879af677d05f82af1dcb733","ssdeep":"192:sSHJIFXc61VK7Jpnd8bXaxrzcc/rUXO6ds+W2RkJeV/QuddD6uDAY:rpIJo7JtdXtYuAROeFNddDBl","tlshash":"82229ec22487943d2f8a03d9b21dcd4d3111b69c1a76a5fc9b38bf6600e9d4678e4e95","first_seen":"2025-09-03T17:53:08.218576Z","last_seen":"2026-01-10T17:57:22.760848Z","times_seen":2,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"renzo.one/","fqdn":"renzo.one","domain":"renzo.one","tld":"one"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://claim-windheaven.lol/","date":"2026-01-10T17:56:52.829Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: renzo.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-windheaven.lol/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T14:31:06.635903Z","times_seen":17919590,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-windheaven.lol/","date":"2026-01-10T17:56:53.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://claim-windheaven.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 17:56:53 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 77160\r\ncf-ray: 9bbe0dba1857b505-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"5eb03e5f-12d68\"\r\nlast-modified: Mon, 04 May 2020 16:10:07 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1871241\r\nexpires: Thu, 31 Dec 2026 17:56:53 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ib5yVUgUcE5ICSj6vxqgoIS8aX72Ed2UiRYi1fvXakORA0Y%2FZlNXUwcYUaEyLBrtAB%2Fq0LUxrfo7I8Q5vKsoypK0uEatp0PkIp%2BsplERdwlT49LtnQxKmJLaFatahvtuCyU4T7dd\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-08-16T13:52:05.112312Z","times_seen":531953,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":19,"dns":1,"connect":0,"send":0,"wait":54,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-windheaven.lol/_astro/scroll.BtPplHJP.png","fqdn":"claim-windheaven.lol","domain":"claim-windheaven.lol","tld":"lol"},"ip":{"addr":"178.208.83.16","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-windheaven.lol/","date":"2026-01-10T17:56:51.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim-windheaven.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Nov 2025 19:45:14 GMT","end":"Fri, 20 Feb 2026 19:45:13 GMT"},"fingerprint":{"sha1":"8B:F4:96:64:18:F7:74:15:ED:3D:9E:69:56:C7:C0:8F:12:11:A7:40","sha256":"30:58:69:DB:5C:4F:DF:E6:A0:B9:FD:07:C7:A3:46:7E:28:0D:F8:C5:4A:5F:86:A6:E6:6B:A2:58:39:9D:60:A5"}}},"request":{"raw":"GET /_astro/scroll.BtPplHJP.png HTTP/1.1\r\nHost: claim-windheaven.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-windheaven.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 10 Jan 2026 17:56:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 8665\r\nlast-modified: Sat, 16 Aug 2025 14:48:38 GMT\r\nvary: Accept-Encoding\r\netag: \"68a09a46-21d9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8665,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 622 x 170, 8-bit/color RGBA, non-interlaced","md5":"54b0cbebafe6c1e5e830e511c42f771e","sha1":"322a0c2c320768766ce13c6d6229c9dc21565d48","sha256":"f941273b676acc63af798435b7b6bfaaf197bb4bae47606c9af8aea34b1398e8","sha512":"7743812e39d26f7a69ff93e2c458d54b5cbe28009562ded927fe0bdf07253b11da3ff436f2f419e21d87dae8f8c74f961b543a92aafa6f190b98367cd290340b","ssdeep":"192:AS2MeW4Jkc8S4XP/uq2+EtQ76NfiF8RvHIfVnfnO4sYcg1s/b:nN//uq1+fJIfVnfnEUk","tlshash":"4402bf5a0ad91d1c6f0b800c3dd1d10aa78c7c599f12a9b7cf0a6d36e8c75ba2447389","first_seen":"2025-09-03T17:53:08.260485Z","last_seen":"2026-01-10T17:57:22.766396Z","times_seen":2,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":324,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"union.build/apple-touch-icon.png","fqdn":"union.build","domain":"union.build","tld":"build"},"ip":{"addr":"76.76.21.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-windheaven.lol/","date":"2026-01-10T17:56:52.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"union.build","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Dec 2025 17:57:51 GMT","end":"Sun, 08 Mar 2026 17:57:50 GMT"},"fingerprint":{"sha1":"3B:F5:B1:0A:A4:10:77:EE:17:E8:A8:93:33:AF:1C:4D:FB:8F:22:B4","sha256":"94:74:4E:75:D8:B7:31:50:38:A1:E7:90:8F:7E:D6:88:05:21:E2:B5:36:0A:48:FB:BF:36:99:AF:6A:02:86:F2"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: union.build\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-windheaven.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 4106\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"apple-touch-icon.png\"\r\ncontent-type: image/png\r\ndate: Sat, 10 Jan 2026 17:56:52 GMT\r\netag: \"3b76e6e84f7dba052a73012ea4adabca\"\r\nlast-modified: Sat, 10 Jan 2026 16:48:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::h8xmk-1768067812843-ad2a761b74a4\r\ncontent-length: 7499\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7499,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"3b76e6e84f7dba052a73012ea4adabca","sha1":"3725b3c07bca6293fbda36de1f4434a641d895c5","sha256":"f3e9e6dca84dc507fa0706681e8a26e95ad299af13ac0a3286322527aa83fd43","sha512":"ea996247720f8ae1f73c1a514bd9d7d86ba42136f45d95023e547aa06027a199c642324baee06c60b193f02d7a658b99eae82a225d2725ce08d5b722eb814a66","ssdeep":"192:TMi3UjlCc5y3bEWLKeHISVQXsjgyKVgj/D2wMeCUFw0qqCbkr1A:TwYcPWF7VQcjvxj/D2wMQDu","tlshash":"59f19e7a7e19c10ec64077f232403fb7f169e8a34b234918989d5a07ce9e708b460bd6","first_seen":"2025-09-03T17:53:08.227295Z","last_seen":"2026-01-10T17:57:22.768557Z","times_seen":2,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":33,"connect":1,"send":0,"wait":20,"receive":1,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-windheaven.lol/fonts/TT-Supermolot-Neue-Variable.ttf","fqdn":"claim-windheaven.lol","domain":"claim-windheaven.lol","tld":"lol"},"ip":{"addr":"178.208.83.16","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-windheaven.lol/","date":"2026-01-10T17:56:52.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim-windheaven.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Nov 2025 19:45:14 GMT","end":"Fri, 20 Feb 2026 19:45:13 GMT"},"fingerprint":{"sha1":"8B:F4:96:64:18:F7:74:15:ED:3D:9E:69:56:C7:C0:8F:12:11:A7:40","sha256":"30:58:69:DB:5C:4F:DF:E6:A0:B9:FD:07:C7:A3:46:7E:28:0D:F8:C5:4A:5F:86:A6:E6:6B:A2:58:39:9D:60:A5"}}},"request":{"raw":"GET /fonts/TT-Supermolot-Neue-Variable.ttf HTTP/1.1\r\nHost: claim-windheaven.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-windheaven.lol/_astro/index.Dxbs1Knj.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 10 Jan 2026 17:56:52 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1233404\r\nlast-modified: Sat, 16 Aug 2025 14:48:38 GMT\r\nvary: Accept-Encoding\r\netag: \"68a09a46-12d1fc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1233404,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 23 tables, 1st \"DSIG\", 120 names, Macintosh, Copyright (c) 2019�2023 by TypeType. All rights reserved. Special version for behance.TT Supermo","md5":"7dbb24be3708936e1b050bad053ced04","sha1":"060562b6f29aedfb5f18724ce6ad529380153772","sha256":"834434ed9dda427f8dcd010ce7d9febc921688f1b3ba0267729a552bed5b6ae6","sha512":"f36b2a7533bcca444ccc789ffcd95558b9863e03512ec73e998ade6b1d3c71c54552f7c7773df72cdf00ac0f7fc91c34982ae845850b275a408ecb2e289b3e0f","ssdeep":"12288:YuoM0NNWlnRgUAJo/7qX03gxtrlUVbUphBlImAb1vn/VwpdzOdzITB1Y:8syo/e03gr+BAIb1K4WV1Y","tlshash":"6c25f8efd387dcc1c44123b1e2b25adc96376a74ae5a12be5c0cb630e7b6685acd4470","first_seen":"2025-09-03T17:53:08.255253Z","last_seen":"2026-03-28T13:00:08.871248Z","times_seen":4,"resource_available":false,"data":null}},"time_used":783,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":724,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-windheaven.lol/css/style.css","fqdn":"claim-windheaven.lol","domain":"claim-windheaven.lol","tld":"lol"},"ip":{"addr":"178.208.83.16","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-windheaven.lol/","date":"2026-01-10T17:56:51.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim-windheaven.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Nov 2025 19:45:14 GMT","end":"Fri, 20 Feb 2026 19:45:13 GMT"},"fingerprint":{"sha1":"8B:F4:96:64:18:F7:74:15:ED:3D:9E:69:56:C7:C0:8F:12:11:A7:40","sha256":"30:58:69:DB:5C:4F:DF:E6:A0:B9:FD:07:C7:A3:46:7E:28:0D:F8:C5:4A:5F:86:A6:E6:6B:A2:58:39:9D:60:A5"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: claim-windheaven.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-windheaven.lol/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 10 Jan 2026 17:56:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 18 Aug 2025 11:46:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68a312a6-755e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30046,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with CRLF line terminators","md5":"428a0221171112b331c8c830376fec66","sha1":"eb2073c74bd9b544189610ddc76e94d9c71ac2d8","sha256":"74350dfa17c9b2c994adbded766f18796a6d1c978e62e6b300a5d6e6c9c2f711","sha512":"541efec442f203abd046c66d4ef159c579fa33cccb0a2d68c68b3776ce880f7bdb23fe0d74c132672483ec3532287b6d38f94a9dd377346955c2d643b8efac28","ssdeep":"384:fhtPEIJ1SRdRc7yDEjlmbARvcvI/FVaUJnWlkgNzr:fhtZ17a0nWlkgNzr","tlshash":"94d2655996415004b237ebb87ba20e15fbd841179b0742a4fff2603cd7c96a8b625fec","first_seen":"2026-01-10T17:57:22.772836Z","last_seen":"2026-01-10T17:57:22.772836Z","times_seen":1,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":344,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-NK9V3KPEY4","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-windheaven.lol/","date":"2026-01-10T17:56:51.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:40 GMT","end":"Wed, 25 Feb 2026 15:49:39 GMT"},"fingerprint":{"sha1":"A1:49:37:FE:E0:3E:26:88:A3:64:37:DC:04:D7:8D:D1:D3:F3:91:75","sha256":"BB:61:22:1A:6C:67:5D:C0:C8:A6:73:93:B9:53:82:98:95:54:B5:52:8B:33:FC:08:58:01:D2:3B:FF:E6:35:12"}}},"request":{"raw":"GET /gtag/js?id=G-NK9V3KPEY4 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-windheaven.lol/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 10 Jan 2026 17:56:51 GMT\r\nexpires: Sat, 10 Jan 2026 17:56:51 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 143891\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":434771,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"bcac76cd678bd119d28b3edcc868e1df","sha1":"fd1e278ef4655a0b8912b895af1c5b02259a9cb3","sha256":"b1b1ae6429eff7de1b3635925bf0bd123eb7dacc58185c76a6bb0bd067506059","sha512":"196777b8f79f4f6e6c0e49f8ea75ba7e23536d1627236ecefd9c8fe05aa60c70a7affc6391f1eaf06da8ee9d5d8fa4f4dd47e20b54110b51cf6287ea14cbba68","ssdeep":"6144:fCrVfsMxo6qWroAizhQkc1/po7YA+TkIzvovBQVnFRA:2BrqLAi1C7TkI0t","tlshash":"89941ace73d670269396f078503f018ba57b29a2b45dc896f189cce02d74a9a4277f7c","first_seen":"2026-01-10T17:57:22.774617Z","last_seen":"2026-01-10T17:57:22.774617Z","times_seen":1,"resource_available":false,"data":null}},"time_used":791,"timings":{"blocked":329,"dns":3,"connect":23,"send":0,"wait":46,"receive":43,"ssl":336},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=64c26cc84790d118b80c38b6","fqdn":"d3e54v103j8qbb.cloudfront.net","domain":"d3e54v103j8qbb.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.44","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-windheaven.lol/","date":"2026-01-10T17:56:51.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /js/jquery-3.5.1.min.dc5e7f18c8.js?site=64c26cc84790d118b80c38b6 HTTP/1.1\r\nHost: d3e54v103j8qbb.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://claim-windheaven.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-windheaven.lol/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Mon, 20 Jul 2020 17:53:02 GMT\r\nserver: AmazonS3\r\ncontent-encoding: br\r\ndate: Sat, 10 Jan 2026 07:22:57 GMT\r\ncache-control: max-age=84600, must-revalidate\r\netag: W/\"dc5e7f18c8d36ac1d3d4753a87c98d0a\"\r\nvary: accept-encoding\r\nvia: 1.1 d5fd4f36a8dc316ac9f65d9c9b60260e.cloudfront.net (CloudFront)\r\nage: 38035\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: cioAVqTVDIjri70Jy8N7EkDg4LwFuThQatQKISfRHoK1-e1RBzf9MA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":89476,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-08-16T13:51:01.315256Z","times_seen":267168,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":19,"dns":32,"connect":1,"send":0,"wait":3,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-windheaven.lol/ecosystem","fqdn":"claim-windheaven.lol","domain":"claim-windheaven.lol","tld":"lol"},"ip":{"addr":"178.208.83.16","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://claim-windheaven.lol/","date":"2026-01-10T17:56:54.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim-windheaven.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Nov 2025 19:45:14 GMT","end":"Fri, 20 Feb 2026 19:45:13 GMT"},"fingerprint":{"sha1":"8B:F4:96:64:18:F7:74:15:ED:3D:9E:69:56:C7:C0:8F:12:11:A7:40","sha256":"30:58:69:DB:5C:4F:DF:E6:A0:B9:FD:07:C7:A3:46:7E:28:0D:F8:C5:4A:5F:86:A6:E6:6B:A2:58:39:9D:60:A5"}}},"request":{"raw":"GET /ecosystem HTTP/1.1\r\nHost: claim-windheaven.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-windheaven.lol/\r\nCookie: _ga_NK9V3KPEY4=GS2.1.s1768067814$o1$g0$t1768067814$j60$l0$h0; _ga=GA1.1.1047813126.1768067814\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 10 Jan 2026 17:56:54 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 02 Jan 2018 12:36:34 GMT\r\netag: W/\"2e80108-56e-561ca595b5880\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1390,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"97ef46701fbde80e1e483403273444a7","sha1":"bb5fc9fcda936357fb4d4c97c3a0cb62b37b3d1e","sha256":"8d9697b813a73597c0c846d0e1d7298b09f63e2feefef5e623a2b26ac2bd5cb4","sha512":"15d2e19d79843b4f4e40ea79cb6847ee20b303d78c18df4c489b9a2c20f6b5026b307d6b5dcdfc730b0e38bb024532766f39f59a1df1c14f7a6e612bd0fada51","ssdeep":"","tlshash":"9231326ba8c54a6d17020262b54a3144c9369b2ddd533cb5d0c8927a6f7fba0853d3c5","first_seen":"2025-06-26T11:09:56.545037Z","last_seen":"2026-05-07T05:43:32.234219Z","times_seen":17,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":235,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-windheaven.lol/_astro/stride.CK254s_0.png","fqdn":"claim-windheaven.lol","domain":"claim-windheaven.lol","tld":"lol"},"ip":{"addr":"178.208.83.16","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-windheaven.lol/","date":"2026-01-10T17:56:51.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim-windheaven.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Nov 2025 19:45:14 GMT","end":"Fri, 20 Feb 2026 19:45:13 GMT"},"fingerprint":{"sha1":"8B:F4:96:64:18:F7:74:15:ED:3D:9E:69:56:C7:C0:8F:12:11:A7:40","sha256":"30:58:69:DB:5C:4F:DF:E6:A0:B9:FD:07:C7:A3:46:7E:28:0D:F8:C5:4A:5F:86:A6:E6:6B:A2:58:39:9D:60:A5"}}},"request":{"raw":"GET /_astro/stride.CK254s_0.png HTTP/1.1\r\nHost: claim-windheaven.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-windheaven.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 10 Jan 2026 17:56:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 4515\r\nlast-modified: Sat, 16 Aug 2025 14:48:38 GMT\r\nvary: Accept-Encoding\r\netag: \"68a09a46-11a3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4515,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 392 x 128, 8-bit/color RGBA, non-interlaced","md5":"373213caccea3cf7d6cc3a3503f097bc","sha1":"ca5129757e16479d000dfc27997c3230ab21cefa","sha256":"3165ad90560fc4d3f331d7cace4e8cd46eb455e321e1f7b346e01e914f273882","sha512":"1402e5f6008c000574bbcb3ff2d10f3397c40c0850341ca9ae2533b9ab0f01db2e376e36e8d3edef113364daa2693471e37480eaaeaa6bd91a88461a3c202b79","ssdeep":"96:isSVUq8O2sQYhGNmDQXnqaMk8B4ElKsswm1z3M7H4hUrVToMSQ0:isSV92sNe7M/4Ela9a7Hzr1fF0","tlshash":"12916cd1a17aedbafa272f95a254570d04f2c6180921234986ec18cc2c7e7d27bed51f","first_seen":"2025-09-03T17:53:08.236482Z","last_seen":"2026-01-10T17:57:22.777249Z","times_seen":2,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":336,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-windheaven.lol/_astro/ClientRouter.astro_astro_type_script_index_0_lang.DUdaqf2m.js","fqdn":"claim-windheaven.lol","domain":"claim-windheaven.lol","tld":"lol"},"ip":{"addr":"178.208.83.16","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-windheaven.lol/","date":"2026-01-10T17:56:51.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim-windheaven.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Nov 2025 19:45:14 GMT","end":"Fri, 20 Feb 2026 19:45:13 GMT"},"fingerprint":{"sha1":"8B:F4:96:64:18:F7:74:15:ED:3D:9E:69:56:C7:C0:8F:12:11:A7:40","sha256":"30:58:69:DB:5C:4F:DF:E6:A0:B9:FD:07:C7:A3:46:7E:28:0D:F8:C5:4A:5F:86:A6:E6:6B:A2:58:39:9D:60:A5"}}},"request":{"raw":"GET /_astro/ClientRouter.astro_astro_type_script_index_0_lang.DUdaqf2m.js HTTP/1.1\r\nHost: claim-windheaven.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-windheaven.lol/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 10 Jan 2026 17:56:51 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Sat, 16 Aug 2025 14:48:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68a09a46-4137\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16695,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"2fd66de8bc6846b8a2a626fbcc0485a9","sha1":"bbfe9bd59066166089f925ff07e36acce7adef58","sha256":"9f64e633a67b9c95cd9ab35367909c6956250780e2540c6de6eba78c138220b0","sha512":"99affc8c7bf9839ba72edad2bd516cb8f92627760628571c61f5540ad509b404914a60489b9dd05520cb90c8b62ff91a9a4fbde87bc8601d356bbce355628acc","ssdeep":"384:VJQTNhKo6nTK1KGnvnEnHK4nRRyn9KCnWnpKpcw2iZCeTZU0lWh:VqTNhKhnTK1KGnvnEnHK4nHyn9KCnWnj","tlshash":"8d7283aa23f23031099bf0bd9a5bd5503931605b394bec963a8c45685f5ee3c47f2f89","first_seen":"2026-01-10T17:57:22.779649Z","last_seen":"2026-01-10T17:57:22.779649Z","times_seen":1,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-windheaven.lol/fonts/JetBrainsMono[wght].woff2","fqdn":"claim-windheaven.lol","domain":"claim-windheaven.lol","tld":"lol"},"ip":{"addr":"178.208.83.16","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-windheaven.lol/","date":"2026-01-10T17:56:51.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim-windheaven.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Nov 2025 19:45:14 GMT","end":"Fri, 20 Feb 2026 19:45:13 GMT"},"fingerprint":{"sha1":"8B:F4:96:64:18:F7:74:15:ED:3D:9E:69:56:C7:C0:8F:12:11:A7:40","sha256":"30:58:69:DB:5C:4F:DF:E6:A0:B9:FD:07:C7:A3:46:7E:28:0D:F8:C5:4A:5F:86:A6:E6:6B:A2:58:39:9D:60:A5"}}},"request":{"raw":"GET /fonts/JetBrainsMono[wght].woff2 HTTP/1.1\r\nHost: claim-windheaven.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-windheaven.lol/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 10 Jan 2026 17:56:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 114020\r\nlast-modified: Sat, 16 Aug 2025 14:48:38 GMT\r\nvary: Accept-Encoding\r\netag: \"68a09a46-1bd64\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":114020,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 114020, version 2.19988","md5":"aac0d356bc8119aaba375427edb06b52","sha1":"fe9ebea34f41bab1908b1671212cad028fb006d4","sha256":"d83ad59c4993be97522e002df1e2881459472310e216ad0500e32f22b0044b63","sha512":"046fbae0cc4e21fcaf206c5e8c3be367e49590904492f8726a8b1085dcd91a206806b21f87cb4d07142baf05d61fcd77a7d0976379c618bd7e655d7b8d57e976","ssdeep":"3072:I99Fk5x0VjuCq3AfqqDU02Je3PFnaCMdLdjQwzYg2:IHFyxkg/qDse/5X+ZjLsg2","tlshash":"18b3124677bca75d1225d33294d362e073a47c92cc4d2721849b8b871faeb81bab614b","first_seen":"2025-09-03T17:53:08.249586Z","last_seen":"2026-03-28T13:00:08.902007Z","times_seen":4,"resource_available":false,"data":null}},"time_used":410,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":199,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-windheaven.lol/_astro/MatrixCover.astro_astro_type_script_index_0_lang.C9xCc0Fy.js","fqdn":"claim-windheaven.lol","domain":"claim-windheaven.lol","tld":"lol"},"ip":{"addr":"178.208.83.16","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-windheaven.lol/","date":"2026-01-10T17:56:51.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim-windheaven.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Nov 2025 19:45:14 GMT","end":"Fri, 20 Feb 2026 19:45:13 GMT"},"fingerprint":{"sha1":"8B:F4:96:64:18:F7:74:15:ED:3D:9E:69:56:C7:C0:8F:12:11:A7:40","sha256":"30:58:69:DB:5C:4F:DF:E6:A0:B9:FD:07:C7:A3:46:7E:28:0D:F8:C5:4A:5F:86:A6:E6:6B:A2:58:39:9D:60:A5"}}},"request":{"raw":"GET /_astro/MatrixCover.astro_astro_type_script_index_0_lang.C9xCc0Fy.js HTTP/1.1\r\nHost: claim-windheaven.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-windheaven.lol/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 10 Jan 2026 17:56:51 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Sat, 16 Aug 2025 14:48:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68a09a46-4556\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17750,"size_decoded":0,"mime_type":"application/x-javascript","magic":"C++ source, ASCII text","md5":"59caea385f356b2f18b533dc9a72555d","sha1":"8070bbc829d4db1e4d89779ce3c11bdae5180f20","sha256":"9088522ebd4fa6618be5ebc2804626778cf9660f4de711d4d2cfa3a2e363657d","sha512":"032e6d47efdbf0a7b4abe8965677ea6d3934f0b5632b45bd109e203d435824e708a975fa5f92b2aaadf58ae988cdd52d54f9816630e0732e2af84a23aa883081","ssdeep":"384:YkwMf8uLYG3pf2HYwjjmdi/MKIe+njGnypVuLFLL9rgM9wAdITZw:6u0OfSDjQi/LUpaFtwA+G","tlshash":"3982ea8007d22638c253f13e9e9799006a25a41f7d1efd4a352c43901f5e35e8bf6faa","first_seen":"2026-01-10T17:57:22.781172Z","last_seen":"2026-01-10T17:57:22.781172Z","times_seen":1,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":341,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-windheaven.lol/_astro/AnimationLayout.astro_astro_type_script_index_0_lang.BTbZULwu.js","fqdn":"claim-windheaven.lol","domain":"claim-windheaven.lol","tld":"lol"},"ip":{"addr":"178.208.83.16","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-windheaven.lol/","date":"2026-01-10T17:56:51.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim-windheaven.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Nov 2025 19:45:14 GMT","end":"Fri, 20 Feb 2026 19:45:13 GMT"},"fingerprint":{"sha1":"8B:F4:96:64:18:F7:74:15:ED:3D:9E:69:56:C7:C0:8F:12:11:A7:40","sha256":"30:58:69:DB:5C:4F:DF:E6:A0:B9:FD:07:C7:A3:46:7E:28:0D:F8:C5:4A:5F:86:A6:E6:6B:A2:58:39:9D:60:A5"}}},"request":{"raw":"GET /_astro/AnimationLayout.astro_astro_type_script_index_0_lang.BTbZULwu.js HTTP/1.1\r\nHost: claim-windheaven.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-windheaven.lol/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 10 Jan 2026 17:56:51 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Sat, 16 Aug 2025 14:48:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68a09a46-cee\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3310,"size_decoded":0,"mime_type":"application/x-javascript","magic":"ASCII text","md5":"5036973dc3474f58f761f8bb4ad941e4","sha1":"54d0fa4725f2991b689e4c5568b4eae4a718fe00","sha256":"c8caea8acb174328b4ec478282321668e80b293beef15dc714bdab7b6a41cb97","sha512":"96e1e7a5e73954dda78fcea2878bae93c41bb89f8d34816d9cdf9adb8f161caa50ef5782d4c8bad0a275f42e29c48b56b74d0767df648ac1bd8815ea7b2c6eaa","ssdeep":"","tlshash":"2b61a57511a00c341037225a6b0beba43e761097ad05ba85789c4a810facc7ed3b9fea","first_seen":"2026-01-10T17:57:22.783061Z","last_seen":"2026-01-10T17:57:22.783061Z","times_seen":1,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-windheaven.lol/_astro/index.D_76QRnP.js","fqdn":"claim-windheaven.lol","domain":"claim-windheaven.lol","tld":"lol"},"ip":{"addr":"178.208.83.16","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-windheaven.lol/","date":"2026-01-10T17:56:51.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim-windheaven.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Nov 2025 19:45:14 GMT","end":"Fri, 20 Feb 2026 19:45:13 GMT"},"fingerprint":{"sha1":"8B:F4:96:64:18:F7:74:15:ED:3D:9E:69:56:C7:C0:8F:12:11:A7:40","sha256":"30:58:69:DB:5C:4F:DF:E6:A0:B9:FD:07:C7:A3:46:7E:28:0D:F8:C5:4A:5F:86:A6:E6:6B:A2:58:39:9D:60:A5"}}},"request":{"raw":"GET /_astro/index.D_76QRnP.js HTTP/1.1\r\nHost: claim-windheaven.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-windheaven.lol/_astro/ClientRouter.astro_astro_type_script_index_0_lang.DUdaqf2m.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 10 Jan 2026 17:56:51 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Sat, 16 Aug 2025 14:48:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68a09a46-dcb\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3531,"size_decoded":0,"mime_type":"application/x-javascript","magic":"ASCII text","md5":"f6bc84994a6e182690bcb5a510f44b7d","sha1":"96dc53653fd92a7d43ae27099304b72a26ade538","sha256":"e83170ad86b455d9e9b8414b4fb5553d851aeeb5f9d5e85d32ee7e32639519b0","sha512":"32e881a8530e8ef97d8e5d4fab00201c80cd234573431cfb9c0193a7be44a1b40ca94540c478ace47e273f3696e09aae6644244fce66d912d3f63121bce5b9f7","ssdeep":"","tlshash":"f371de9b26f414365267b2396a1fd2593d36410f3449ed41396c46c4af58b3863b3ecf","first_seen":"2026-01-10T17:57:22.787981Z","last_seen":"2026-01-10T17:57:22.787981Z","times_seen":1,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/clipboard.js/1.4.0/clipboard.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-windheaven.lol/","date":"2026-01-10T17:56:51.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/clipboard.js/1.4.0/clipboard.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-windheaven.lol/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 17:56:51 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 2289\r\ncf-ray: 9bbe0daec95a56b9-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03e29-1dfb\"\r\nlast-modified: Mon, 04 May 2020 16:09:13 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 8670772\r\nexpires: Thu, 31 Dec 2026 17:56:51 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=O5b9IBF5pMCUvapshNMldbP1qposGqcboGRDBEFpR%2FyKVmAgKv3VTPE8ITDFH2ejuQTkQxqY%2BsNWkqu4XyzkcwYf9t1L32Q2BDmE0a4vcma9Lnd6afiCh6yB%2F%2B41c65yXxmPVREr\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7675,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7675), with no line terminators","md5":"d63683e6bde459c35383d7e4460e23ea","sha1":"44b8f593799e51c3a1d0d957f6f9ea4283b6458a","sha256":"e72deae400013e9f9159c9c194c5366240f728bcb9c1a57d52307aea1ad08563","sha512":"889874175d1b96bf520b77743b0d592878bd92dd763586be21296609d94274d6731708c7d49a694537809f2a6f51ecf4d47ae86610263f8ae8e00bd9feb1b451","ssdeep":"192:o0M5tjXDMronMAQGLyBBz4vlfn0CK5013FH:JM5uIW7zAlPBKK135","tlshash":"d3f1b588b38071b2c167b5b7423f42476232d4fdb42888787549d9f12e7caa9616bf39","first_seen":"2023-03-12T23:52:56Z","last_seen":"2026-08-09T23:33:37.624509Z","times_seen":164,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":13,"dns":0,"connect":4,"send":0,"wait":21,"receive":1,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-windheaven.lol/_astro/movement.i0s6NE35.png","fqdn":"claim-windheaven.lol","domain":"claim-windheaven.lol","tld":"lol"},"ip":{"addr":"178.208.83.16","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-windheaven.lol/","date":"2026-01-10T17:56:51.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim-windheaven.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Nov 2025 19:45:14 GMT","end":"Fri, 20 Feb 2026 19:45:13 GMT"},"fingerprint":{"sha1":"8B:F4:96:64:18:F7:74:15:ED:3D:9E:69:56:C7:C0:8F:12:11:A7:40","sha256":"30:58:69:DB:5C:4F:DF:E6:A0:B9:FD:07:C7:A3:46:7E:28:0D:F8:C5:4A:5F:86:A6:E6:6B:A2:58:39:9D:60:A5"}}},"request":{"raw":"GET /_astro/movement.i0s6NE35.png HTTP/1.1\r\nHost: claim-windheaven.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-windheaven.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 10 Jan 2026 17:56:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 16132\r\nlast-modified: Sat, 16 Aug 2025 14:48:38 GMT\r\nvary: Accept-Encoding\r\netag: \"68a09a46-3f04\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16132,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 877 x 112, 8-bit/color RGBA, non-interlaced","md5":"9b58767772d0355afd8a3f3bc19a888e","sha1":"368fb7a8f0e16aa12eeac462ac62abc1535220b1","sha256":"d6e34a68f8cd5283647d3849d10e98ee5bd4a10b7604cb0b4d24028bb666e158","sha512":"e0679c156273309a56a1933335e5d45d97dc2fc676e1437cd2a7c2eba9135b219e29b6a7fbcdbcdc4c8cb99878efe7442b028b0c754cc3a99cbf8c2b8cb89ccf","ssdeep":"384:pGytIuqocx4kkAemMtOphHEjMlHrarYQtJ4OsxLvDrcpDFNd:wR7ocx4kGRSPHraUOdsxLvDrwDbd","tlshash":"6572d04deaf61a64558a829384913f5c1f61f3894556120beee23203b3ec4e96e8a1cf","first_seen":"2025-09-03T17:53:08.272384Z","last_seen":"2026-01-10T17:57:22.790714Z","times_seen":2,"resource_available":false,"data":null}},"time_used":427,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/sweetalert2@11.7.10/dist/sweetalert2.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-windheaven.lol/","date":"2026-01-10T17:56:51.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/sweetalert2@11.7.10/dist/sweetalert2.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-windheaven.lol/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 17:56:51 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 4363\r\ncf-ray: 9bbe0daeea247131-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 11.7.10\r\nx-jsd-version-type: version\r\netag: W/\"6073-/pqhOxRTs64S3cJCfOyK3p6RRlU\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-etou8220178-FRA, cache-bma-essb1270031-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 10635399\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=jsEL7KHbvltmPOuGNBH%2FNHJX7EIcB75vP%2FTocbKn5WvzTpA9yeMSm5glX5Vr%2FbPCie3YqxUIYvm2XPER8kWjO0WPLHdkFMxXpxDhwbmM4LOTPCD1RDFqV5ZTMmI0EOz0MTc%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24691,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (24690)","md5":"354a21425af110e5fe69c3eae4c4d479","sha1":"fe9aa13b1453b3ae12ddc2427cec8ade9e914655","sha256":"dd1729d5211e0b85de86d6c7e54859da560c94f7da9cc02385cca1fc3c2ed407","sha512":"b74d14a5288e4aafe8feb5a433416ff9a0fd16394ecc411ce2a2eabc6aa1d03a35460bcc10a994618a3961bf137bbeeec7dc244dda03543d2fc102c93112d909","ssdeep":"192:CBh5Cif2Ib/m3ozgBVdX+LZDcFPAtmFaZ9y3epAd/34JpG:CB72IrjgIFAFPAtmsO3Mu/ofG","tlshash":"e9b2d891aa88e017f67a822f59c0f50875dae60bfdf3089df454d1008ed7e5e3a792e4","first_seen":"2023-10-25T18:30:32Z","last_seen":"2026-07-09T13:20:01.191407Z","times_seen":27,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":34,"dns":4,"connect":8,"send":0,"wait":11,"receive":1,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-windheaven.lol/blog","fqdn":"claim-windheaven.lol","domain":"claim-windheaven.lol","tld":"lol"},"ip":{"addr":"178.208.83.16","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://claim-windheaven.lol/","date":"2026-01-10T17:56:54.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim-windheaven.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Nov 2025 19:45:14 GMT","end":"Fri, 20 Feb 2026 19:45:13 GMT"},"fingerprint":{"sha1":"8B:F4:96:64:18:F7:74:15:ED:3D:9E:69:56:C7:C0:8F:12:11:A7:40","sha256":"30:58:69:DB:5C:4F:DF:E6:A0:B9:FD:07:C7:A3:46:7E:28:0D:F8:C5:4A:5F:86:A6:E6:6B:A2:58:39:9D:60:A5"}}},"request":{"raw":"GET /blog HTTP/1.1\r\nHost: claim-windheaven.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-windheaven.lol/\r\nCookie: _ga_NK9V3KPEY4=GS2.1.s1768067814$o1$g0$t1768067814$j60$l0$h0; _ga=GA1.1.1047813126.1768067814\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sat, 10 Jan 2026 17:56:54 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 02 Jan 2018 12:36:34 GMT\r\netag: W/\"2e80108-56e-561ca595b5880\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1390,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"97ef46701fbde80e1e483403273444a7","sha1":"bb5fc9fcda936357fb4d4c97c3a0cb62b37b3d1e","sha256":"8d9697b813a73597c0c846d0e1d7298b09f63e2feefef5e623a2b26ac2bd5cb4","sha512":"15d2e19d79843b4f4e40ea79cb6847ee20b303d78c18df4c489b9a2c20f6b5026b307d6b5dcdfc730b0e38bb024532766f39f59a1df1c14f7a6e612bd0fada51","ssdeep":"","tlshash":"9231326ba8c54a6d17020262b54a3144c9369b2ddd533cb5d0c8927a6f7fba0853d3c5","first_seen":"2025-06-26T11:09:56.545037Z","last_seen":"2026-05-07T05:43:32.234219Z","times_seen":17,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":233,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-windheaven.lol/_next/static/css/941553ed6caf5c7e.css","fqdn":"claim-windheaven.lol","domain":"claim-windheaven.lol","tld":"lol"},"ip":{"addr":"178.208.83.16","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-windheaven.lol/","date":"2026-01-10T17:56:51.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim-windheaven.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Nov 2025 19:45:14 GMT","end":"Fri, 20 Feb 2026 19:45:13 GMT"},"fingerprint":{"sha1":"8B:F4:96:64:18:F7:74:15:ED:3D:9E:69:56:C7:C0:8F:12:11:A7:40","sha256":"30:58:69:DB:5C:4F:DF:E6:A0:B9:FD:07:C7:A3:46:7E:28:0D:F8:C5:4A:5F:86:A6:E6:6B:A2:58:39:9D:60:A5"}}},"request":{"raw":"GET /_next/static/css/941553ed6caf5c7e.css HTTP/1.1\r\nHost: claim-windheaven.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-windheaven.lol/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 10 Jan 2026 17:56:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 23 Apr 2024 17:21:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6627ee30-4bc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1212,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1212), with no line terminators","md5":"3353dc648fed2c154868094c430a3533","sha1":"9f5793050e753935a812a1693f51049875ccc274","sha256":"e7f41ac5b915a3336ffea0dffc9b971e933be418e183d160e5ea085688407ffc","sha512":"d004a549273550f057a7acde111a16dbf7518f3e30fd2d860da5f0e00910175cf26df0c973db1da011f1a5c5cdd0e64e58d9d5379cf6a2caeaac2df7a64b7d5d","ssdeep":"","tlshash":"c7217831042ad421c4b7cdf37ace7e03165c941aaaf55637bb1d469d0f9692b13e4f24","first_seen":"2025-02-26T17:21:45.476535Z","last_seen":"2026-03-29T12:23:37.908875Z","times_seen":7,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-windheaven.lol/_astro/bera.CfU5-FH_.png","fqdn":"claim-windheaven.lol","domain":"claim-windheaven.lol","tld":"lol"},"ip":{"addr":"178.208.83.16","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-windheaven.lol/","date":"2026-01-10T17:56:51.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim-windheaven.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Nov 2025 19:45:14 GMT","end":"Fri, 20 Feb 2026 19:45:13 GMT"},"fingerprint":{"sha1":"8B:F4:96:64:18:F7:74:15:ED:3D:9E:69:56:C7:C0:8F:12:11:A7:40","sha256":"30:58:69:DB:5C:4F:DF:E6:A0:B9:FD:07:C7:A3:46:7E:28:0D:F8:C5:4A:5F:86:A6:E6:6B:A2:58:39:9D:60:A5"}}},"request":{"raw":"GET /_astro/bera.CfU5-FH_.png HTTP/1.1\r\nHost: claim-windheaven.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-windheaven.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 10 Jan 2026 17:56:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 17358\r\nlast-modified: Sat, 16 Aug 2025 14:48:38 GMT\r\nvary: Accept-Encoding\r\netag: \"68a09a46-43ce\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17358,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1043 x 193, 8-bit/color RGBA, non-interlaced","md5":"a74ec79770b0169e9010e85d125445f1","sha1":"ff33288c6d9025d3e5d63751d4cc181c25b22f38","sha256":"d7daf3d227c15fd0a23129a74c16d6dfd1871e576ef1acb4e10265a5259069f4","sha512":"9543770a291c1f7299bcf1fc798b3de153baa790c505fd8ddff8fad125fb83363b703b9e65b8858255b2f3c7fae9b7b8c91ee9bcd567b37bec95506e6a644abe","ssdeep":"384:EOM+lKBcHcRkoBHKtMzZ1Bz+lPAxV3tuyVxkNQ3:rxKBc8FV3BCPAgExkNQ","tlshash":"2772d09ad235bea2c30061fb5b1ceca328335414a9a3411d4b256fdaec1c77ba58f6c1","first_seen":"2025-09-03T17:53:08.26732Z","last_seen":"2026-01-10T17:57:22.802446Z","times_seen":2,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-windheaven.lol/","fqdn":"claim-windheaven.lol","domain":"claim-windheaven.lol","tld":"lol"},"ip":{"addr":"178.208.83.16","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-10T17:56:50.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim-windheaven.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Nov 2025 19:45:14 GMT","end":"Fri, 20 Feb 2026 19:45:13 GMT"},"fingerprint":{"sha1":"8B:F4:96:64:18:F7:74:15:ED:3D:9E:69:56:C7:C0:8F:12:11:A7:40","sha256":"30:58:69:DB:5C:4F:DF:E6:A0:B9:FD:07:C7:A3:46:7E:28:0D:F8:C5:4A:5F:86:A6:E6:6B:A2:58:39:9D:60:A5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: claim-windheaven.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 10 Jan 2026 17:56:51 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 18 Aug 2025 12:23:10 GMT\r\netag: W/\"48e0f89-160a8-63ca2cd7aa780\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"SweetAlert2:11.7.10","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]},{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":90280,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1325)","md5":"0517b2cab57346b6bd35aaaa6dc2b652","sha1":"b1bcfa4811fe786c2ab2d1b5ce549a7b2acac969","sha256":"61182d5cddda22f3420eb3c9695182730575a4b73519e562018532dd13795a4d","sha512":"025e1188b0ca28d40e876cbda90512f0c6dbbc55cff926b73d06248b1ba0aab44716a7edbe72c82ec0560724531652f5b24ccca5140d106aeeb866e034141e21","ssdeep":"1536:8WC40UgYhC6XbnrbXIeIW/tllg6FUhClm:GgrbXIeIW7lg6Flm","tlshash":"bc93d91122f20065415388be2bf7672daea8e103e60bcd147bbd03d55fcae52d6a379d","first_seen":"2026-01-10T17:57:22.804559Z","last_seen":"2026-01-10T17:57:22.804559Z","times_seen":1,"resource_available":false,"data":null}},"time_used":690,"timings":{"blocked":271,"dns":93,"connect":57,"send":0,"wait":143,"receive":0,"ssl":123},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-windheaven.lol/img/bonus.svg","fqdn":"claim-windheaven.lol","domain":"claim-windheaven.lol","tld":"lol"},"ip":{"addr":"178.208.83.16","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-windheaven.lol/","date":"2026-01-10T17:56:51.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim-windheaven.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Nov 2025 19:45:14 GMT","end":"Fri, 20 Feb 2026 19:45:13 GMT"},"fingerprint":{"sha1":"8B:F4:96:64:18:F7:74:15:ED:3D:9E:69:56:C7:C0:8F:12:11:A7:40","sha256":"30:58:69:DB:5C:4F:DF:E6:A0:B9:FD:07:C7:A3:46:7E:28:0D:F8:C5:4A:5F:86:A6:E6:6B:A2:58:39:9D:60:A5"}}},"request":{"raw":"GET /img/bonus.svg HTTP/1.1\r\nHost: claim-windheaven.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim-windheaven.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 10 Jan 2026 17:56:51 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 10 Aug 2024 19:33:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66b7c08c-bff\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3071,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3d52d55e89257adb227dde85c6f96544","sha1":"dce655b252c68081bfe28cb618bda7ac7072444a","sha256":"71d5ce44fcc273e800d50a32820e7485a80c2843f722892cac3a28feb4ae2edc","sha512":"6b4e3a024d83fa62281286f958689022728bddc7f661158ff5d808e887ffe14b4431c5a538d0e86e5733e55721af95a38f364b9be9a4f16ba0dcfd1bcec7f5e6","ssdeep":"","tlshash":"9f51d6d6f7bca1bc829fdbe0ef364719960b28b7bf9052784890d1d181550a5cf0a88c","first_seen":"2025-02-26T17:21:45.481445Z","last_seen":"2026-03-29T12:23:37.911656Z","times_seen":10,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":336,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-windheaven.lol/fonts/InterVariable.woff2","fqdn":"claim-windheaven.lol","domain":"claim-windheaven.lol","tld":"lol"},"ip":{"addr":"178.208.83.16","port":443,"asn":216139,"as":"Iron Hosting Centre LTD","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-windheaven.lol/","date":"2026-01-10T17:56:51.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim-windheaven.lol","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Nov 2025 19:45:14 GMT","end":"Fri, 20 Feb 2026 19:45:13 GMT"},"fingerprint":{"sha1":"8B:F4:96:64:18:F7:74:15:ED:3D:9E:69:56:C7:C0:8F:12:11:A7:40","sha256":"30:58:69:DB:5C:4F:DF:E6:A0:B9:FD:07:C7:A3:46:7E:28:0D:F8:C5:4A:5F:86:A6:E6:6B:A2:58:39:9D:60:A5"}}},"request":{"raw":"GET /fonts/InterVariable.woff2 HTTP/1.1\r\nHost: claim-windheaven.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-windheaven.lol/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 10 Jan 2026 17:56:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 345588\r\nlast-modified: Sat, 16 Aug 2025 14:48:38 GMT\r\nvary: Accept-Encoding\r\netag: \"68a09a46-545f4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":345588,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 345588, version 4.0","md5":"499fcada6ddb2c38718c2c16a190d639","sha1":"9ef5d7d28925b9e0213f67b8105870e0afade711","sha256":"8af7bd5b545567adffb3dfceb5bedb353a522d7bf1b3a2b8af7b6064156babc0","sha512":"87a11b8a8cf75924370985a9975f88e427eff4550ed8d88fcb9fc69d294cb7320f216cc72748742705779be516cac02e57f5c4423d8e486612f657636dcac4ea","ssdeep":"6144:JnKViLt/6nunnpMQzXmL3QY5kpTL6/5JHXLZgK5isueYDoZmy+nTPvQAZKCyomgM:hfZ/HWEXI7kt6hJ3NgxsunDR7vQXomgM","tlshash":"d874239b7b7e4ccf443bb638d549c34660221333c5df9a1e5b60f2f79b82b6265481a2","first_seen":"2023-11-20T04:53:45Z","last_seen":"2026-08-16T12:28:00.458879Z","times_seen":12241,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":335,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
