{"report_id":"a2038f66-1f97-4ed1-b200-667e3c303513","version":6,"status":"done","tags":[],"date":"2026-02-17T15:15:23Z","url":{"schema":"https","addr":"claim.esperesso.foundation/","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"claim.esperesso.foundation/","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"title":"Espresso Claim Portal","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"claim.esperesso.foundation/","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-24T15:15:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.esperesso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-02-15T22:20:44.607116Z","alert_count":0,"request_count":1,"received_data":450818,"sent_data":447,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"claim.esperesso.foundation","ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-10","domain_rank":0,"first_seen":"2026-02-17T15:13:56.422517Z","last_seen":"2026-02-17T15:13:56.422517Z","alert_count":49,"request_count":49,"received_data":10252383,"sent_data":32579,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"us-assets.i.posthog.com","ip":{"addr":"104.20.17.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-01-23","domain_rank":57965,"first_seen":"2024-02-22T12:48:35Z","last_seen":"2026-02-11T15:03:50.639135Z","alert_count":0,"request_count":4,"received_data":114216,"sent_data":2018,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"magna-public-assets-prod.s3.amazonaws.com","ip":{"addr":"16.15.183.229","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2005-08-18","domain_rank":0,"first_seen":"2025-12-28T18:47:20.473023Z","last_seen":"2026-02-11T03:00:08.681455Z","alert_count":0,"request_count":5,"received_data":23280,"sent_data":2477,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"us.i.posthog.com","ip":{"addr":"52.3.30.168","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2020-01-23","domain_rank":42193,"first_seen":"2024-02-22T12:48:36Z","last_seen":"2026-02-11T12:26:23.737Z","alert_count":0,"request_count":2,"received_data":1682,"sent_data":1160,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-02-15T22:32:42.929582Z","alert_count":0,"request_count":1,"received_data":164385,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"magna-public-assets-prod.s3.us-east-1.amazonaws.com","ip":{"addr":"16.15.199.246","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2005-08-18","domain_rank":0,"first_seen":"2025-12-31T12:33:52.777756Z","last_seen":"2026-02-12T20:37:38.413763Z","alert_count":0,"request_count":1,"received_data":57085,"sent_data":536,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"assets.unicorn.studio","ip":{"addr":"34.120.54.136","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2020-08-17","domain_rank":3759026,"first_seen":"2024-10-30T11:09:32Z","last_seen":"2026-02-14T01:27:30.076707Z","alert_count":0,"request_count":1,"received_data":77130,"sent_data":527,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/use-on-connect.hook-B9Vb195z.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"5dddc34bc306e93857c0a0501f507ab4","sha1":"71f4b9fe8ed412a4300d6667888a8894b6110a1c","sha256":"1beb9af3345660f681b9316277dc9908a3a06e0a0cc29d1eb8efba5e026fbe27","sha512":"b7a566f2bb49ae583ad997f7380e6f8e871a2a7a0e7dac0e9af5a1d8d460b7ad254cc51dec92034739723fdb261482655a6782f0302a4e12b4bc05550223e378","ssdeep":"","tlshash":"f2f0dda5d0c0d6f8d317cce9d438eb7e0a312ad8b189c2c4dcae49631291ec0802aa07","size":654,"data":"","first_seen":"2026-02-12T20:37:44.939654Z","last_seen":"2026-02-17T15:15:31.667925Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/login-CWDTIDNK-DhDUYE4b.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"baa5f0f7116deb709bd4b3a54c31eaff","sha1":"10c4efb11b9c1bcdd87aca0c0443f636c8d29b39","sha256":"63a8daf7039c537fe8d7ff88c50a6b8022e74f447d5df3ffcd6a515723252c33","sha512":"8d534b9541eb5d33576b4a5a2dbd28aadc57c01fc91ea3644bcfb13ad76470288c9ac8228a1fc8d6f30ca5873abb0c3b20136d5377bdb9923c3ff6665542b4bc","ssdeep":"192:dyAYirZ2ixxPjwzSFW5xrsRo3/58dmho4x7MV:EiN2Qjw+FWjARaidSpx7MV","tlshash":"261283ea5768627ed89bce6cdf668840130d70fd35b8c8e49a9ecf686057c89fd87010","size":9275,"data":"","first_seen":"2024-12-25T05:30:42.593071Z","last_seen":"2026-04-18T12:51:34.197248Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"60c015abbebdef5f5eed83d09fa8f4a7","sha1":"eeb4be7fcbf0208e6a744fc26568b41a92bff1ed","sha256":"b46055bcacb2f76be3fe286349c483b9244db0b4c08d5f75404c499060ca6f34","sha512":"3390f34feef48549ba58eb17bafd2d5ffeb4944e401f8d03fde5d6970fc8a8a45f041acf8c9e26f810731382308520052d8803cfcf57e09f504b49f960d44af9","ssdeep":"","tlshash":"e611280f859102314db7a1692e96a6117076a09f294a4a0439ad45187f6ed2b47c6bd0","size":870,"data":"","first_seen":"2026-02-17T15:14:02.881946Z","last_seen":"2026-02-17T15:15:31.67509Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/config-BBCuuyHT.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2659ce7411e25b3d5645e8b9e7481b22","sha1":"1386224bd903186c8f26dbcf6b16b4bac52fe189","sha256":"3640abc74fa3ee2f91ed70d2d775e9394c102e19d824f29c7be284c9cde5fd06","sha512":"ea3c6acc6b8bad14675569407fd59965170a30c28148b9ed577e693dc286e0dd86f0adc998cbd80e5e80889309bd3b46751a48341eddc0c771c0545c03a9d0b4","ssdeep":"768:WzlHMGUyZBymwaJ2+d3EfZ56gNjwWghktt55HRTrhD1841Mzq2yS6Iv4Gx5U4KMA:WzlHfL2p6lhi9Wq2tHhC9V48pd","tlshash":"f523a7ca7186b2162be2d1a4483f4015e2396954780e846cb5bdddd3bd72c8ee17bf38","size":47290,"data":"","first_seen":"2026-02-12T20:37:44.856378Z","last_seen":"2026-02-17T15:15:31.641748Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/warning.icon-DZMR3VcF.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"35d0183119e310f97da036fc8d8c531f","sha1":"0f26d787dae1ac05c33174884d6288fe2b486f9e","sha256":"4ba7eab091a2f52849ef6820a64f8141bf491465cd22f2b45fa495edd19ff74e","sha512":"1945bbdc8bc075a6e1fe00fff2cd2217bd0431c9eb485a5a0b5f591a397c1493ee36f86301415502c9046d4bb7b539ea6efc3b75cc7cf33bbf0ca2ede0446d12","ssdeep":"","tlshash":"4ef0fe67e3b428b87505cea8b38f7936317760e4b3014641a35e680513600c5b46d992","size":655,"data":"","first_seen":"2026-02-12T20:37:44.938743Z","last_seen":"2026-02-17T15:15:31.673806Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/loader.component-MQ1Ecw-o.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"69f34b5b165315b71333d0e6a7295fa3","sha1":"9b6e351669e11739c8bd9e39df9509b790fe24b5","sha256":"d0649f242ceef1251752ba00284bf8a0a01f66898d17d12e7026c1140b275f2f","sha512":"fbf030d996874ea4427f2180b55b4e43847cd90c862fc82690ead75728acbe61b41ec33d054831a04a433b6dff3ee909d47cc2c4f12c989bd50b422e8a6bcc70","ssdeep":"1536:IRK0GSaGlSaeey2MZ+40INYm1C5XeJP2CprtD2zj7br:IRcSllS3e070Bm1jrQ","tlshash":"b0b3c79c7882b8a5539b45a590ff010bf27d6c4b700c84a0f268ddaf79738695263fbd","size":117949,"data":"","first_seen":"2026-02-12T20:37:44.897315Z","last_seen":"2026-02-17T15:15:31.651856Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"106fc5497d1e40d91e33392c80dca104","sha1":"0fd9eebcb1048de308388b689b22585d1f5ab48a","sha256":"9d36697757d6273c4c79629d2016f951e39da9f02d6368b9010f94b69409cfc8","sha512":"728e0b05a815ba70a948c9a6067b2ded925b6d1f2ace49a60b1d41cc3cf87bd83a51d5db450629cbbd741ca061afc56f2d61e584c957aa2fc2c86fd504c2631f","ssdeep":"","tlshash":"70d0a76928758930759c024a20b5d39566616090b761e10481cccc2b6a21dd308a1568","size":217,"data":"","first_seen":"2026-02-17T15:15:31.676077Z","last_seen":"2026-02-17T15:15:31.676077Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/hstack-CUgmLe_w.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"b7eee23af1a11018eccb2f03f433479e","sha1":"26a85d0dfade6f1936bf0536ff7552cafb10eddf","sha256":"be84c6b2df189dee15f38c7cac639297e122f25960e6ecf27b842b497f34a032","sha512":"be66625d268bd7860953531aeecb3af8281ddbb7a4a506ae6f087dd003d425c40ce907773581b62ccd8cad76d8897a7b90594afdb5467e21acced2a78344ca91","ssdeep":"","tlshash":"a5f0dcaba44171b003e5cc68b1e6526951de6fd8f67195c4a0cf884f26202c682aba4a","size":473,"data":"","first_seen":"2026-02-12T20:37:44.860275Z","last_seen":"2026-02-17T15:15:31.648865Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/proxy-CbI-37ef.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a8609175f8d1090ccbfe6916a99abd31","sha1":"10b93318b1038161f4761f5f8b90d9ac2b10b38d","sha256":"9e0bf1425dd94af34dd3687c495430fc8f88005699cd827bd33a7c436d7c480a","sha512":"e8068f907bd69118366fb331a51b0f140e41c520d602b18986c0580fbace7fbefbf6c967a73f5f9de7b88578a5bb053b07289fc12ef59f40449775ad1cf71f28","ssdeep":"1536:H+2TsGd6fOmBgDHte9/Q3t/v5ScoeyUK8wlZWJDFV8lovCt5VyF6Puktr/:H+2Tdd6WFteRQ3t/vscoJUxwlMIwqr/","tlshash":"6bb307c572917561d3d685e9c0bf0b41b73718983009c0bcb63dadcb6d2250aa6bbb7e","size":115479,"data":"","first_seen":"2026-02-12T20:37:44.911871Z","last_seen":"2026-02-17T15:15:31.660652Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-assets.i.posthog.com/static/dead-clicks-autocapture.js?v=1.332.0","fqdn":"us-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"104.20.17.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f069936d3c6e9665eb0c1bd0a1eee52","sha1":"72a7c9d52a688ac11597fe487ae0551ba16949ca","sha256":"266da4f4ca773c693c9b32dd0554b8efcb493097ccaf70dbc05712df6f11487a","sha512":"f454c439e3294e18a75be8bd13f601336a589c57de078389e16b60b0148dd381e6ea88c3578bf28320c3f7d676303bf4ed20ef0369ac90673e3fa47ec43fbba2","ssdeep":"","tlshash":"3011ce90ac60f0260e721cf4843f8a0bf215253fa1eea0768554cdb15ae125da21ff1a","size":1000,"data":"","first_seen":"2025-12-04T15:44:22.653632Z","last_seen":"2026-03-23T17:15:23.204986Z","times_seen":129,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/trustWallet-E2GVGE4U-CcH50yxW.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a25b589fc633676b9a58fa384f2d0334","sha1":"119f38e7d9e19f351e022c5fa0f537f15ea3f933","sha256":"7edbc680126336b8db68846c0b688c957b60afd953859b06ca9dfd6a74a54f02","sha512":"ad917ac1bc65cbd0d55a05d5e39241f3badda088e0a56bf1d332a82c1df6d46e706c54bf3f9ddf22c75c3e754a33d6c3c03b2e6138720a09e85e0ce96cd9dc9b","ssdeep":"","tlshash":"3c01c0dbdb29dc77c85f83bced08a4a3521876db60c8436ee6554f1f25a808b1c0db60","size":760,"data":"","first_seen":"2025-06-03T09:03:10.609568Z","last_seen":"2026-04-17T09:09:52.485468Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2380d391cf784bce2f77e0e16fa2268b","sha1":"2b88cb08e3d7f56772d46fe1a10d84774e8728d5","sha256":"e65fcff70fe965f3d1878fe515a7ebcd265dfe61b15461521450c882e8d081d7","sha512":"0f3264af3a045928be20d2ee1ef3af905571d07e3fc25eaeda22199baca89b8c9bff94d90d81124ff45b16c5e40df291c2f49d9464ba901d2d961f6fd1196f1f","ssdeep":"","tlshash":"e6411b1e00aa0aa31ba3054333ce846d0956c2cedcc73534d3b27f8134c67832a93bea","size":2254,"data":"","first_seen":"2025-08-01T04:17:54.882582Z","last_seen":"2026-04-22T22:33:43.28578Z","times_seen":2679,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f6ecb0d195a6ee8c511ac09ed327451f","sha1":"aaba5828ae7be7775dd352f82505b08cfe82c12d","sha256":"8b707b922494db542dfe7ae74ed21ffae327254b7b3c4aa9fbefc50d3e5169ff","sha512":"61fd41dd7d26c457391cf4820184c9de2e07ff83f8b4bf202577ac929784b88334261ecc9a329ce5f4d5e429727e809d297a206d4948cc2151c2721ecadc01af","ssdeep":"","tlshash":"c4110e323d0a582c8757134a7b876956047ed161c6abcc96f38cdfa06588e5250432a8","size":1000,"data":"","first_seen":"2026-02-17T15:15:31.678461Z","last_seen":"2026-02-17T15:15:31.678461Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/bitgetWallet-CLYTW54T-Wwn2QYd0.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c209ae7e667ef953a67fd9e02e026122","sha1":"263c559b9b3d0aa0da8a7ea36790983dc7a0821f","sha256":"1f5ce5ae5b81eeeb68a411dc27cbdeadab04eecff9fca4447d20755e6b770e46","sha512":"6daddffb9e9d093649df98bcb5d7737e9fa7687dac1308a4710689c88076d5dc81b7de5bbfe7abf7a3910d9f53c331207b153b9f582c2eafa4717e553cc07f58","ssdeep":"","tlshash":"2571a791d7f5e09f6b1803b6ff9a14e79432f4e641140b9de55e3361200ee23e91f554","size":3493,"data":"","first_seen":"2025-04-09T07:08:13.379631Z","last_seen":"2026-04-08T12:13:16.922421Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-assets.i.posthog.com/array/phc_9Cg41wNBIXNBnxyvzsD9AC6UT5KSjNjTR4SSnj4uH4/config.js","fqdn":"us-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"104.20.17.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"981e456b5f0f9fa545898be7ae986a32","sha1":"61dcc85f58ddf340c9490ba8b01173493bccc7f4","sha256":"c17c6f43b9a8f9b7535546fecd667d535187206451b090938ed3e103727eb01d","sha512":"4d781cd94fedc54061436fa0024116fe16bc551895d0c10d794bece2537ed19ad70c0d410fa61da1662225a3e4ab282d510b7a29117428d63b3619960723b813","ssdeep":"","tlshash":"19115929f89008be00e6b51aab97e0436f7b80db92484c1de9c441567b1d83b9987fc5","size":892,"data":"","first_seen":"2026-02-17T15:15:31.637512Z","last_seen":"2026-02-17T15:15:31.637512Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/en_US-762U7H2X-CbWPluA0.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ab77e7bb06e8a53a96edfabd2d0d74bd","sha1":"16818df2860db67a613a6184df0ab64ed98eef13","sha256":"07ea399345a1745d599d73d9a42ac99c0fd510efd8a873e889bb38bd3b2bb7ff","sha512":"044e171fc117eb365dfc8d0be32b29ce957ec302f04fea98bcb2df715b58691256bb0f8978f59fda3115ef3bc62f23907b6c737a32515074372a984897bb2d32","ssdeep":"6144:4iEX0PUqHiHvJYj8BMveljqhpSoMu3T2LpLARIAFmRvXxGZTVuVxQa9eaNtlyj:kTPlxqh7SLpLAR34M5uVxQa9Tzlyj","tlshash":"0205b60956f220718247f079096f9815b230a64f6e5dbc683f8c92ac2f1d47c9af6bdd","size":863830,"data":"","first_seen":"2026-02-17T15:14:02.839855Z","last_seen":"2026-02-17T15:15:31.667082Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/metaMaskWallet-YFHEHW7V-BggUDXad.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9faabc0cac059efd75278832f35fba0","sha1":"75a665ec82b0dd2ccab406db25ed49f69ba40931","sha256":"748a6c743322ec0b319bf361b84e929e5099721824636f5a4befd8e0ff8ab826","sha512":"7ab0d0071f01aad00b47c9fd55ef2748c61eeeb46b3abfb66afdae61970d62a77a0f643be0c95cab9a778d28a816b75fbb5c4667be6b794d97cec3937d0b5eec","ssdeep":"192:M1vaqYOX292169AY32zqzKHio+21BZBTibnKCU+jpBxMCXV:my933BU+V","tlshash":"17d15deb67488cbcb8271f24e34a3271613836d7692ee6594c738a79090519dbb7fcc4","size":6516,"data":"","first_seen":"2024-12-25T05:30:42.586528Z","last_seen":"2026-04-18T12:51:34.183552Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/entry.client-Bv3K-XV0.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea90ebb2c0a9bda9658b8eb254b09e09","sha1":"4bc2cae557e90d63d4bfd15d5d90452b0e57ca60","sha256":"0140eab84177fcb22e827368c499794ece7e7d21204b44971d2e9c51c3a46e49","sha512":"5ed8fc3903da8c1454b9357681cc9d830e0ba865ba32ef0b8ab55d53b0db2f88210231e0a3eac15710f4cc8de6edbafae2bbfa6bebba8dd6ad4c9bacae7d826c","ssdeep":"3072:XO8GfDyHDZubrIrn6BEnaE2CmfnoSA016Un/m:evL4VunIz64eoSvL/m","tlshash":"10041bec32bea7566eb245e6109f1503727c28236c0c4c70a151fe9d66b844a51fbfee","size":189577,"data":"","first_seen":"2026-02-12T20:37:44.912773Z","last_seen":"2026-02-17T15:15:31.640008Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3d502edfb6c440e3b62d568d87ebb009","sha1":"94ac694520f0063eef69a4b6f5e7a69d33bb70c1","sha256":"70df3f85dc8c0402cec421a213bf940e91e4499ee1af197c69203b1f3cb399c9","sha512":"d6ca55f02325e507823d29286e29767ab47d5902f1b5eefa2c66ff2cea876f6f9ed4a0f31fa565efa2485472ae700b468056b5a51fd05104d2601d0647537aaf","ssdeep":"","tlshash":"eb112834d4750efa069221bc5a1bb5067310401348086d31be9cd29c2fdaabe6073fe8","size":867,"data":"","first_seen":"2026-02-17T15:14:02.889581Z","last_seen":"2026-02-17T15:15:31.679525Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/root-W8lXAx1b.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"8daea6b355ac65463f1bd3063b9029ef","sha1":"836def8415437e6274e6e6a55e8a391bb6741916","sha256":"f539b7a402e078bd4b121e892a9790444c9b31bffb9ae3ef4ef580ad98e7b04e","sha512":"5bc8fdf0f3c17ba85106e32d3a66e2e815f99e4433f1eeab4e117fbb298f03e6fc7416e2a8bd72b56e65674c399730e0141dd3eeca83a75a8bc1e791c34d54a6","ssdeep":"","tlshash":"f8f0be27d91046b552d2ccf1d1a0f571263342a3d3e1e7b1e4ef277a03d14a9c545553","size":539,"data":"","first_seen":"2026-02-12T20:37:44.891053Z","last_seen":"2026-02-17T15:15:31.672303Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a5564bdb5385785599bb09a6c86113a0","sha1":"2f6937392c48342c2cb618d1d7e80d6b03cc3245","sha256":"47c05f0222def21f2a0a37341a0a3a2131b0d43ed879230b815071bd4cdf2461","sha512":"033681f59301dc44a2a135cf3a4204d640b6f49c84659343af5935395cf3285e0fe9f053bf907b4f17f848eafdcc9a705512e9cc9d2c15797416b5b61ce44bee","ssdeep":"","tlshash":"d5b0124af4a010121227221d051e01043031510720044814762c20c50f41050034368c","size":112,"data":"","first_seen":"2025-11-07T13:50:46.17952Z","last_seen":"2026-04-11T17:53:03.122963Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/base-modal.component-B_TnXego.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d8d308403b95f92748e1675665c7c997","sha1":"087fdbf4e6c73c4b95c1667dcae52ff5bd7175c4","sha256":"5a8ba25a6f724cf84177b9fe507e0b761a7275763228d146e88613153a03ea5d","sha512":"71122f70aefbe546c2e6474d82f06f8df21c9e29a7a190ded3c868fd73a489467b22f9223bba2a244c9a252b2870fdfe4caa31592338938eab612645096d74fb","ssdeep":"192:pGdAzs+Is14LdwydAz3kmmengY4CHlFYk:MdAzs+Is1IwuA7kmmev","tlshash":"6ef1c91de34aa568fc3fc549e0edda0aa56e102cf3360991b2bd952e01d4e52732bfd4","size":7957,"data":"","first_seen":"2026-02-12T20:37:44.910174Z","last_seen":"2026-02-17T15:15:31.663795Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f278e1582a6b32d6a9a05328bba73b0f","sha1":"02780b645a044990e49787663d3dba06626b1e3d","sha256":"07317dc90130ec69ed8e07a8362168074f9067473354101f361449cff37110aa","sha512":"08463b63ba1654bf203117d8f0c0a2ce4b5d92914ffba7c8ac3d942ff1a812c86cc61d9e840e5f3422c2b22d1b71b1a06b9a6d40d4e4259b32fd8cd40cc8357f","ssdeep":"","tlshash":"55319948a43216904242e8f1c676abeeabe774080574446d349cbec7eff8447e521678","size":1529,"data":"","first_seen":"2025-08-01T04:16:24.221852Z","last_seen":"2026-04-22T22:33:43.289618Z","times_seen":2806,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/user.context-DIZs7jcU.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"141404d63ba51bf63193a06055d53b51","sha1":"c45d60d7f06d4b87009fcb9b4d33800f51fea6b8","sha256":"59a539e37c978604e589f466d438e0a4a599b4eb7ff53c7120cf6e6f75658f99","sha512":"fb6d0501d6ad0d357cb96205f93210ca81d25d686f9f3fc87a2cdfc917d70aa42159c8e77596c49e1127c8f9fd2577d3680992424706b83352a8aae4d07f660e","ssdeep":"384:OPQJMJF7sMqTKP/bSZu/dcLgl1lkkObqtrC8CmUZr8sEo2M48/DFYREV7J/RC5AU:OPQJMJFITKP/b24dcC1lkMtrC8CBl8uM","tlshash":"67b2f75831d9e0b142e750a4947f620bf17819a0e05ca4a4e2aafdf439f8d97817bf36","size":23804,"data":"","first_seen":"2026-02-12T20:37:44.894834Z","last_seen":"2026-02-17T15:15:31.655683Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f0c7b0bd961d90f874d9b64ff2be2582","sha1":"1ea9db61770718133fdedd51c3ca4e4b13096de7","sha256":"4f6d55ea324ff53daa42d76e69dd40f3725c48c7ea8c08c9e58c2c486757efa6","sha512":"6c6ea5e583e32a50bc3b0ceab3dbfe07b20c4d8855dd7d6f16528be6da2563cf5d813f6f79d442454933efac8cdf0c805924bcba46e105bf5d716c0f65b11cd2","ssdeep":"384:El05EGwUrAxYaHIBgZxIXQf8jN74TXb0oMnnp00lXGsDnLn:El03xAfRwRnpJlXGsX","tlshash":"b2c2d7abdd00b37a1e620f56b62b3ef462aa52d807a6105c824dc5581b5013bef7f1df","size":26949,"data":"","first_seen":"2026-02-17T15:14:02.896266Z","last_seen":"2026-02-17T15:15:31.681678Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c1ba9e73ebab4be7a9e097479a0c9843","sha1":"235ee88e8b805177eebe7a570ec9388b30cf176a","sha256":"e28da88ce25c805812d83658afab1dd2e4d1062afa3abf1fb04ba2269d19fb3e","sha512":"c81d107ea527d582746d6ae28ea3d152c867169333acae8959e92be6c6b833f1b974b92dfadf8507eeb4ee99e381878d9cb84adb2c59827bce45b4cf5cc6f994","ssdeep":"","tlshash":"ab419ed6f3d2056a6257353e9fbfe948313440176448cc25f40c69ad9f508f056fab9d","size":2036,"data":"","first_seen":"2026-02-17T15:14:02.89718Z","last_seen":"2026-04-11T17:53:03.123544Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/home.page-Ct3tf3tM.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"5a29259a94de743d09a4303684f81d03","sha1":"18c34520487bac55562921d773bff2403de1dd0c","sha256":"2d8a7ac7eb66a1c7fa524540bc485ef3812e3ee8b63d46ac893604ef6d75abbb","sha512":"53b77269b87130d63611ebfa481d178afba5f58d7cad427923307d2c30b05744ad70c91df248c2e29f3b8f8a187063bb1595a5d1203b93cc060e4916c323b7b3","ssdeep":"384:ly1/X+OcTGNVVsdKwB2hPBF8oIxqMjmkWxuh27ab/tPODgps:ly1/X+OWGNVVsdKG2JBFTxyM5","tlshash":"9eb2950955b21172e243e0a51d2b9a193333420b6e59bc5c3f9d92786f6c13e99f37ec","size":24981,"data":"","first_seen":"2026-02-17T15:14:02.853014Z","last_seen":"2026-02-17T15:15:31.654504Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/plotly-2.24.1.min.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa40c495876a1ca59d25aead5a1c6249","sha1":"448bb4bb459d66eed36eaa33e8202f8c5de5a913","sha256":"e9bdfe9da0e906b87bf0a700c678973e82f145acf202f9bb79c9baffc7d02494","sha512":"410bfb0545ffb4233e8c9c281d8f180e87663963eb9b7b6dc2dc77ea47be99853dc4dddf604bcde1a118bed90929e5c26a91189b68a3ad31f871e87f12f6933c","ssdeep":"768:MxUElc86+uTxQ5SaGW55DNxLRbAjlgtMPtYCdbOMc1yBgOZAJnKG7cycdLcYzrtd:X+Nh6lgWYubOf1SZAdw5ImL4wQaKupcg","tlshash":"349361d9994bd0e48e5222ded473ec09e4680963cdacf1a3b92cdec2741df66c44763a","size":92545,"data":"","first_seen":"2026-02-17T15:14:02.835554Z","last_seen":"2026-02-17T15:15:31.659044Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"59a13eef9e5e0ec7844e58e8b47d54a0","sha1":"0fb2b2059a878b87f8524284d448dd46a4351953","sha256":"c890c150b008d069bfddb86ee2c2e3fe979515939053b4c53fd6853b68e4fe35","sha512":"7fcdb614d30b1141e9a1e134a98e2888007f786f866c24e6383106d3e003f094e72901aa295e7d3450fccf5a249b25b436401a5b9439205da6b0eec8d72cfc80","ssdeep":"","tlshash":"33f0beaf336126ca23ae6ad20796c01d1e72e4ab3002163c575a36ca0cb6f52521b07e","size":494,"data":"","first_seen":"2025-08-01T04:17:54.874483Z","last_seen":"2026-04-22T22:33:43.28422Z","times_seen":2649,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0e1ee9f442371606d9a13b41a0dbeaff","sha1":"a05c25c8ad9127fe7d45319ce13e8b4a485d2e01","sha256":"713285cbc0cb910dfd2e7a86c604d191a27789ae50964ab1c674507ff4a20c45","sha512":"1dbac9fa1e0b338e780a3600f1a3da140a6c83a961a1d0c6c80fe3dc5a9041c346c471d264a07ccc87457cdccc2a28b768d02283512ba9cee0fc2e2b7124e42d","ssdeep":"","tlshash":"0221fedeb2826488526794d742cd8dceb8e617a919008c20452ef299225c3e8fb6ad54","size":1177,"data":"","first_seen":"2025-08-01T04:16:24.218288Z","last_seen":"2026-04-22T22:33:43.285268Z","times_seen":2733,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ed0304281cd87e6be0e0181a5a2fc56","sha1":"e4ee7c4b4d6686fb4d6b0277edbbf1842c0cac16","sha256":"60577caeb36676e7ea3c18d22708a9e7ffc2ca3948a7bccb3bf90934fa5ee068","sha512":"41827882da8d276a738680d2a4fe4abd15df27ba3d7e323ad71e43fdc5df18a008e7eebe7ab3ab8b60054d9939a27182b83c40082323b34b2f64d1c067000963","ssdeep":"384:tCb0wJJiWq8omI/ZZsRQ0Qm1dUZXSMpU1qnH+8z2FwuRMqymlWHrkxDVivP+tpT7:tCb0wJJiWq8omI/X2FwuRMqy8srkxDVr","tlshash":"19a2a6a8f9d7b461532378700927501f7b7f9cc4701a481b9a54a2a0f920f5caa7bff5","size":23076,"data":"","first_seen":"2026-02-17T15:14:57.746534Z","last_seen":"2026-02-17T15:15:31.684369Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/root-8mEX-aQm.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"586050d49991160d6909894350224c07","sha1":"01a3a28e2452fe6f16cee67268612a4b00b33a33","sha256":"14afcc895061e0efd2a3bc4fb2177bfe9958b830bbb195c99533918002721a63","sha512":"7cb2f7655a6983208d1d12f39a9cf01d6c9a0d3ef6dfe1bff106721e60ba94a3e6c96d37788eeade170721e34f147fa7d452d1b49945c725ef62ab6f4d7c7aff","ssdeep":"98304:9fpOUbGpKOA/W1KGIVpO0y6dy6tVRNp/Kd:9fpxbGpKOpjgpO0y6dy6tVRNpCd","tlshash":"41267d84336ab475079626d4447b0041f238ac46604c809afeec9bfb6ff949a857bf7d","size":4584591,"data":"","first_seen":"2026-02-14T01:27:34.075997Z","last_seen":"2026-02-17T15:15:31.685612Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-LBSJK40LXZ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6eb42686c796c2c65796f7d4f42aacf9","sha1":"1a045d8f077b42b0f73c37895bd5df638b380288","sha256":"603f84393713df6e758ee3338ffef1ba9e9ed0a5a0c33e1dd67cce87d9b2a63e","sha512":"d5f71df4525814d1b8daaf5c2ba4e02fe6f149b8266eb81570eb2355da46d01c53c5a5e337e78356b5c8d3d4335c01746464396a7e8030c5dac9771270721611","ssdeep":"6144:HgjNMmwzYRrw8wENIP8gMDSgP14j9VkV4Bq5Itz/uG:UjwzYRSmIP8G44BSa","tlshash":"58a41ace73d674225296f478503f018ba57b24a2f49cc89af189cce42d74a9a4277f7c","size":450214,"data":"","first_seen":"2026-02-17T15:15:31.664781Z","last_seen":"2026-02-17T15:15:31.664781Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8de04e3dc63af7585af0e827672eb149","sha1":"02ee5e4b4e73e430d629744c4b7a3e38c36ed06d","sha256":"123e2a4c9c65ad62ea2b0992b1f80073e18a341a810f9ba40d1c4cdc31f1e759","sha512":"a42fcbfd4fc45305b75c0093524abafcf73f7d10f3bbe8cf573f3ea87803f672ae7fd293a116e7c24aeb0ef9fb24b9ea32e48200a56243187d5b550407631184","ssdeep":"","tlshash":"a911cce0aa6c599781c2095034894b02b13cb020203d9fd0bf75f0ce7c7c7ec96d262a","size":1000,"data":"","first_seen":"2025-12-20T20:03:49.143914Z","last_seen":"2026-04-22T22:33:43.291427Z","times_seen":1500,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/safeWallet-VUYZPLY4-CXnodgMs.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a09d06d29fe2837adda28d773f8d6e5","sha1":"93c50ca2782f3f0b4c1f6d48c9fa33476f772ac0","sha256":"aaaf8c1f6acc96bda06bfc1e526611b918cd12021d54b15cce8fef605554938e","sha512":"7c181bd28ffca7872846372455d30661b0b89069cc473f94ac177247350091749470603dbf2827abc14eee65d5f98c37664defe6105075889415cee5bc3ac9dd","ssdeep":"","tlshash":"c531229136cca6e0770ae321cd04c166f85528effd66e35c6a015862bd0846d758cdfd","size":1449,"data":"","first_seen":"2024-12-25T05:30:42.588753Z","last_seen":"2026-04-18T12:51:34.196287Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/mewWallet-6V4UZOQC-B0qJRky8.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ba9b4ec5d6e0138fdc7dcea74d719b1","sha1":"7e9a5254388ae9b05ccab215bcadfda7cbb92178","sha256":"cabb87e570e8e5c15a34eeb5c010a7651a3e878e76568fa8f274903a86c23047","sha512":"8bbc357ee098b1666e94e09a19e0b9711acc240227e819daa87a564a6a0ff456a338c4b61d83f68344063ce6c0ac09d7ef5e9ccb4c711aefc103562691a600de","ssdeep":"192:vSL2IcUA1oFBu/kyilFZl1s7tWld8YgsII9P3cO6+fzRXygn3IJigNnvMqDCdFIZ:vSL2IcUm/XwZvw0IGrCgivRhilI","tlshash":"9742c5d0332c53f9f507c3a9a7aaa0569a7c30da3daf5158f64f05256b144fa883f843","size":12987,"data":"","first_seen":"2025-12-31T12:33:59.905722Z","last_seen":"2026-04-08T12:13:16.929881Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/vstack-C3IvQv9K.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c72115e55d96341fe00e51a13ad95800","sha1":"f789714ca4a48a66869371451206a6e9ce15f7f5","sha256":"e5a93dc91bddae578f0687f643569653fb9c0153c227e0541e839a351f8b557a","sha512":"68ae22b64c7f635d371f27233ca7ef7e99ffbce471ecc831481cd428db19f75ece5453e7ea4e8850215aedf4b58ec8904bad0e72ac36cb7f47c4f00a18e2ae79","ssdeep":"768:VsHWUpDTugn4fMqCgSknl5Qn1upQLpOFZDPTKyPZmZA5J4hdrW:e2bC1YczpOb2Z0J4i","tlshash":"c1e2f9a132541408f6afc7aef8c61f48c13916335413fccab67c8aa8d1517b91b6bb6d","size":32755,"data":"","first_seen":"2026-02-12T20:37:44.873434Z","last_seen":"2026-02-17T15:15:31.671429Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/hiunicornstudio/unicornstudio.js@v2.0.1/dist/unicornStudio.umd.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d62fcb8aae79e4ddff0c2f73514cac7f","sha1":"cbf46f8b66d5d226568da0f3ee29eb143784d0c9","sha256":"9a64dbb9af5e9672cc99b091377d7df9a9d1dcb2a910b639360e77b18a31cd71","sha512":"be67b0445a5e1603905d44b113b7d5c70f675e8901d6cf7a7f918cb61f197d581abee3af79af6e846d27cf87b7a0fcac17e0330455992ec09ee337b194a05f35","ssdeep":"3072:2dkdy/7ekEfcyDjn/+H4/l81Ei7PlzLWymGMbnDaURDS5WfeT:2dkdy/7ekEfcMRDS5WfeT","tlshash":"9ef3e9a6716b642e0982818bf0750e07a226655c340dc46d7b7cb8ff68ece5e317d73a","size":163593,"data":"","first_seen":"2026-01-30T19:04:09.913225Z","last_seen":"2026-04-08T12:13:16.904295Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/sound-button.component-CXJP3EGL.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6a87328d6438328d99961c6a3b5251d1","sha1":"8665ad288654908abf6930b50e5110fb228a1460","sha256":"40e7a7bcfee3bd860b9eb80bdd7befdebfe80abb3c67c6b78449b1a1501b86b2","sha512":"ac723989fd6ed8e62f01f65d66d1ae27e37a4ac14ca3ee6801d6e0c8ebc041a60ebb6d6c59380f38f345d28ddbcef96d4c9a490bcffcff647bc1c77e2528327a","ssdeep":"","tlshash":"204163e9c70035ac680e9b30fc177812b1be14fe8ba557d0814c653c6a328e3eb25ad5","size":2189,"data":"","first_seen":"2026-02-12T20:37:44.952108Z","last_seen":"2026-02-17T15:15:31.642379Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3433c9d3e9b7e8e5b34ed72e309db572","sha1":"d53d7df082088749c1df6b08330ee9b9e4076932","sha256":"1d96fa9904e3743570bccd5be90e83fd91975299f374093cc6f723673d582dd1","sha512":"ffd0e047331871f21738643968b7eb7fa045ee0e45346a9ea986c4b8a3e745dd310542c6b2734f6d244408bba6548ec66f5cd7662c69485b5e59e3b9432cdff2","ssdeep":"","tlshash":"06f04245bd825a24d35670ddc41f978cc53690dd91491c4cbb64ece1de94c2cdfc6534","size":585,"data":"","first_seen":"2025-08-01T04:16:24.219641Z","last_seen":"2026-04-22T22:33:43.288159Z","times_seen":2843,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/index-Cv69DvSO.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2290e70d1f20a0f0ab497866d29e1f43","sha1":"8f91166b2507908b954144ca1060a707b5f92320","sha256":"46061444d4462839ff3e39911a47ba3d89aa404dddd7fb863a6a6958eb8c6a5e","sha512":"d58dfd6c176e19fca0d3a2bb8432b2d718c4ac1357242c5841a11afd1848b3c369dc2f1add96f8876da746a6958e2668e5aefb010c4e6595c9c4e93ae6966815","ssdeep":"","tlshash":"8c71138db7c4f04249c6a960037ba31772a9377318bdc2a193ee95b012675594227f74","size":3680,"data":"","first_seen":"2026-02-12T20:37:44.878589Z","last_seen":"2026-02-17T15:15:31.638947Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"17765de82d30c09dc0b3122610a5f243","sha1":"efb20f4a183dadf921bb480d4bbd1aceee2d7c7d","sha256":"184d96b2e390b0ec78394cc26f9d382c97e075d452b54670e26fcbf1f86007d5","sha512":"140b26108d418246321aba38910762823287ac554cc49c06a6c229ebb23a855c3c29e11e989842de59a71c2dc2d4cb4204599f3a57d190537084f4d1d5d16237","ssdeep":"","tlshash":"fda00220542a02aa6af3815d5b13fe39774519972109c462365cd70b2fe20d7d036ae4","size":83,"data":"","first_seen":"2026-02-17T15:14:02.898032Z","last_seen":"2026-02-17T15:15:31.688241Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/background-music.context-CyxtzD9I.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"dd8962f02570fab22e3a42bcca1bd186","sha1":"5b97d297afafc3fc4bb310d1df2ace70e1c55a15","sha256":"8463f455837cb03dee7ccdc05ac924afb6330a5d1c0927c55498bcba4b024ac7","sha512":"e4a9b80a701e74bf2fd7d6d6fbb8561d438203199b3a6b503e1fce4398ff1d80aa84ac7047df0e4102c79f9e40fb42e54ba08097c88a581bd4e2b8be4a6bf52e","ssdeep":"","tlshash":"d111dcb7a8a4907afb8e09a809a1907937333b54304a40f1e13c94ab45d2582e67b7d9","size":927,"data":"","first_seen":"2026-02-12T20:37:44.875304Z","last_seen":"2026-02-17T15:15:31.642906Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/use-is-client.hook-Dbkd0djT.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"391de8cdcd2af4de88351dd1d73e986a","sha1":"153d5f5716888fed5639274f54d354547ba1e868","sha256":"8171e7a9d58fe35766e9a6b00e4473415b36bfbc374a727c1eef52dedbc3541f","sha512":"c831734885d6e9a318bdde077004403d4732e3a8b423d0bee43f37bd708692488dbca71242f9a02e1fa310b1ee1c81e6c98fee1e174e2da1cdee0cd46adbe442","ssdeep":"","tlshash":"c0c02b551081acb0870008b452b7cdb0a43354dc22e52b90b42a4c0717050e38bafc27","size":141,"data":"","first_seen":"2026-02-12T20:37:44.861545Z","last_seen":"2026-02-17T15:15:31.651273Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/rabbyWallet-FLVUU35F-BZrp4syk.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"174b08de1e202256a72f7663e79b8461","sha1":"602e294d94f061211502895741144c4320248855","sha256":"0767c9b588d0ab9b532619b26d91fe6e5163f541bcc2d6a9e9adae18f670dc8d","sha512":"640ce4e8d836b4ea90ace61f30c3cbe697e7d9a7d6d04c4b4a4e0f1845f850754434d0415ee9f3a7ec0856d679fe14679d1548d99385bb887a205fb0ab6d3b1f","ssdeep":"","tlshash":"594183e8eb38e993edadc67cdf19a475310e30ff909441a551d65b1e30646d33e0a650","size":2370,"data":"","first_seen":"2025-04-01T04:17:39.073172Z","last_seen":"2026-04-10T09:11:01.513661Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c5fc497d0e211a2e36c46b5db725bd91","sha1":"a8c3983ed4d747f55498f189c31c4de26c7f6ddd","sha256":"9e5877b188d6941b6a25c086ddfd78151d8ecf578198e2c98d7e40e9ecd0a89e","sha512":"8fc66515a84a089e6c32bfadd94f0804295e12d6e705dc20850618c3af8221a9b978809ec2472f6530cbc010540e9b87907ef9c57a7f0f249370aea8dbd7e1b0","ssdeep":"","tlshash":"f39000002080008b220a20e03c0a0c000828200b208e000cb08e8fc20f0c022a00000c","size":39,"data":"","first_seen":"2026-02-17T15:14:02.90016Z","last_seen":"2026-02-17T15:15:31.689237Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/wei-D7GVSARS.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e065176194127ef3104fbc14e1bd3b00","sha1":"039b4c635defe3279321deab3fb61f072e7d065f","sha256":"c3902c83d4f8bc61033b89f57529565f14d42ea0f041b9fdb5b9d0fe5c9475f4","sha512":"1d9acde4385221d0bd76124b774e59d581c7a9e8eaa324a63bc40d745f745db6ffb406267281105ecb9904d77d0e98a3b2ecf72ac19019f2515952270c534c36","ssdeep":"768:c694VJ5YH/os7Dwz5yuLKkyp0rxY5T0ztsZ:c69cXQos7UEuzi0Gku","tlshash":"1fe2c5e972a2f18663e734f201fb9446f13a7d44990d05b5f2088af53cb1686b32af75","size":32145,"data":"","first_seen":"2026-02-12T20:37:44.896165Z","last_seen":"2026-04-08T12:13:16.924687Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/f5acaa9e-e01b-4ebb-b663-a859d14dd246","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"11df5522f23cd9881ed30d5af4ea789a","sha1":"e0ce93175db8a0d185ffba30eb39cc255722e548","sha256":"cd8e7578cc7dfb0edf1ac5dac2d6e0ed44530b9434b23d40b34df5b43ed3698b","sha512":"1e3774cd260ca8d743cfe553942cf9e82d9350a9e619f975ff9f4f56fc0d2b4c74e24f47d3d86a78f4d6d6b8c929652804a77bb2ec25cfd32dec6007c4d871b1","ssdeep":"","tlshash":"39110b36f40ad40c42024f2977f76d207c6ae00887dbdceabb88df612894d3a10c3684","size":1000,"data":"","first_seen":"2026-02-17T15:15:31.695135Z","last_seen":"2026-02-17T15:15:31.695135Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/x.icon-CbqT8MzM.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"fb42e57ffea46e58aa4fb5ee7a0cef6a","sha1":"d70f95c5c596f2d7effecf7d91c026791f67880b","sha256":"e1f7a5c79ba590e07a72f3a5a1f220105553c2da2f97a31752ddf49e59d536e8","sha512":"1adb08cdfda523b90b2287caaeda482c961eb725d83342e0f20701507a655663ce9665c6e9c2a7bd1e569f3997950ee4ad441be86af502c621fec54e1ea10c84","ssdeep":"","tlshash":"54f097ff83c0609448591f7a79b22c252077b5f893a405a0c94449919d290f2b31ee82","size":458,"data":"","first_seen":"2026-02-12T20:37:44.870545Z","last_seen":"2026-02-17T15:15:31.659695Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/rainbowWallet-2SR6TVBF-kimcGeuf.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a0e974aa17cd852cfd0a349aa6cde2a","sha1":"3e83142c11e9b7a57432123b72457ff579f8bcb8","sha256":"0813cf58d2da41c33e74c0fb7e5a9671020dc397611becaacd42e1f6ae5b30a4","sha512":"28eac8d72b65f6e1cd4f0ac75cfe58a515be407e04b12aea7a90a8056018133d9f4de319843eb5238f465a23d817971dbd945e4fdbfc59fca26b823efd59a601","ssdeep":"","tlshash":"c071ca958a3dac3be52dc18cee411420710daabfdc894a5272639fef9d784c6ac4c660","size":3646,"data":"","first_seen":"2024-12-25T05:30:42.549882Z","last_seen":"2026-04-18T12:51:34.20253Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1e21743cd2ee2004cd56bfc5c29e3609","sha1":"bf516634ffbcfd3186b71dafc0ecdcc47894c439","sha256":"0e428980439e794b176e0ee3cd84e4878510b1d52c1efc1c00f4af9729a17029","sha512":"4264e5ce5b4f3acb24046582388132a5915398c9266c18c6349d75fb94bd74bac990dc6ebd12e1e118a3a24752a3e4badae2faabd69b9827d1f223a0750da4c2","ssdeep":"48:atoyTqSsM+c69M+c69M+c69M+c60778KK7NaaM//M+A:atlDNDNDNDl778KKw//M+A","tlshash":"25913f32165427da63ce8fd45a85751d01d2c89a383e60bdff3279eded3a683c031612","size":4506,"data":"","first_seen":"2025-08-01T04:16:24.215618Z","last_seen":"2026-04-22T22:33:43.288619Z","times_seen":2779,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3e68fa119d408bcb2ab1f99a70af9c1d","sha1":"8e295f05ce6ec1fa52d541fbf668795ad5da22ba","sha256":"b75d134b02b2cef151991c9573f54e18ed6b7afd6d9b2736125d38bfa8c359f0","sha512":"2f238c3d3727b3410ede1a0b9652cdb8f6c708ec6083a2df548c4aceae5f61fe39daa22cda95880c31033d5021f0c867c5d348ec32cc3ec9e4050255eb84a3a5","ssdeep":"","tlshash":"de11c4793a165534d5c5414b317de7a93d3260617b12e044c26ccc255d58d9714dfcbe","size":902,"data":"","first_seen":"2026-02-17T15:15:31.697034Z","last_seen":"2026-02-17T15:15:31.697034Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/page-meta.component-CGOmIOVX.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"9c126c37b55ffdec2dea9e147dc70591","sha1":"80a0f691f3373c84441125492cb7e95fbe0085ac","sha256":"649c7f6181b5e4cea70dd0987f6f30821ac6bd733f391bd4faeadfc70f0afefb","sha512":"fab55382ec0bab85320f87d24b604b978de71aea79c5c7591faa17bd5d7d78d36cf5f47e0c71782ae6acda9a7184982ec0898ac78ce90742b0db4f319949a053","ssdeep":"","tlshash":"2e014969a510689b1766ce111c9af24db17687bfc038c9a1b5a448390ff1fe7c07277d","size":803,"data":"","first_seen":"2026-02-12T20:37:44.920975Z","last_seen":"2026-02-17T15:15:31.673146Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/chunk-EPOLDU6W-CTl9JfCV.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"db6bcb2e9203db5931e0a006707aa8f8","sha1":"3c2e1a69890c86ec42c22dcbbb2724da796f14fc","sha256":"aafcb8e093136e7e5e16c711e54525ad50b79bc7d4032a490688e34fdb02af56","sha512":"940017d99e2e7a61b013843f41f60e8ce5cc85443643b0383d6851dfbbe22ea17b320d8e3e4a6ce1c6a517832dc1d270a40aa57a10c0ea2582b776a94e9e6edd","ssdeep":"1536:YZe4IJi0G4pPj0hsIkZxr5bRRvMViduOZgVI/rYWYYKyWXMH:Ge4IoMaUZxr/RvMVid1GVI/rYWYYLW+","tlshash":"22c33bf9729270794bef13f180bb0015b3b92ca9246d8015b2acc99e35b5c4c967bf79","size":125122,"data":"","first_seen":"2026-02-12T20:37:44.877208Z","last_seen":"2026-02-17T15:15:31.655095Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/portal-config.context-CMF-xdRd.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e3aebedff17583da4653f1a9fa85711e","sha1":"eda59fae2e436695ea79edb0e83a77b9ce79b6eb","sha256":"0f45a30e055ac1c9f616ae57c71e9d80ca7a02011fada27eb21c67c800839fbd","sha512":"975be27fb649bf407705df47343c51c2247c548f1f2c62d174db07e0bca4fbeb95c32f88888fd50873430d1d7e92accbb4a58b9c083b958372cac8a4ece6a7f4","ssdeep":"","tlshash":"b2e0c09b6040f67277034cf528208534d333346a30258b70c11c855bbac00e2633f8e2","size":351,"data":"","first_seen":"2026-02-12T20:37:44.944046Z","last_seen":"2026-02-17T15:15:31.649714Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/wei-D7GVSARS.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:56.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esperesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:39:23 GMT","end":"Mon, 11 May 2026 21:37:10 GMT"},"fingerprint":{"sha1":"7D:D7:1F:F3:EC:B2:62:EE:46:06:FF:B5:03:10:4F:D3:5D:30:F8:A7","sha256":"75:A0:16:A2:94:7C:AF:93:9D:5A:94:40:3C:0C:89:D0:E3:F7:DB:28:0E:45:DC:7D:2D:8D:A3:50:53:54:D1:D9"}}},"request":{"raw":"GET /assets/wei-D7GVSARS.js HTTP/1.1\r\nHost: claim.esperesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/assets/root-W8lXAx1b.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 15:14:56 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 12 Feb 2026 15:00:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\ncontent-encoding: br\r\nage: 91\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"698deb27-7d91\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J8L1cjQlMoW8JiVPIkeIv6qsG5Dt9kca7IMq9ImZlkttHuqiQFlhpHWO1G0hDZc2K%2Fj%2BT99pMd2rPPGh9pEThbwOJ%2B%2Fha18nQntj0AizR8HzCpQof%2BsuQlOM\"}]}\r\ncf-ray: 9cf63cbc1eff4435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32145,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (32144)","md5":"e065176194127ef3104fbc14e1bd3b00","sha1":"039b4c635defe3279321deab3fb61f072e7d065f","sha256":"c3902c83d4f8bc61033b89f57529565f14d42ea0f041b9fdb5b9d0fe5c9475f4","sha512":"1d9acde4385221d0bd76124b774e59d581c7a9e8eaa324a63bc40d745f745db6ffb406267281105ecb9904d77d0e98a3b2ecf72ac19019f2515952270c534c36","ssdeep":"768:c694VJ5YH/os7Dwz5yuLKkyp0rxY5T0ztsZ:c69cXQos7UEuzi0Gku","tlshash":"1fe2c5e972a2f18663e734f201fb9446f13a7d44990d05b5f2088af53cb1686b32af75","first_seen":"2026-02-12T20:37:44.896165Z","last_seen":"2026-04-08T12:13:16.924687Z","times_seen":6,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.esperesso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/phantomWallet-IPGVKCAB-BGoqRxdn.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:57.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esperesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:39:23 GMT","end":"Mon, 11 May 2026 21:37:10 GMT"},"fingerprint":{"sha1":"7D:D7:1F:F3:EC:B2:62:EE:46:06:FF:B5:03:10:4F:D3:5D:30:F8:A7","sha256":"75:A0:16:A2:94:7C:AF:93:9D:5A:94:40:3C:0C:89:D0:E3:F7:DB:28:0E:45:DC:7D:2D:8D:A3:50:53:54:D1:D9"}}},"request":{"raw":"GET /assets/phantomWallet-IPGVKCAB-BGoqRxdn.js HTTP/1.1\r\nHost: claim.esperesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/assets/root-8mEX-aQm.js\r\nCookie: cf_clearance=51kqFdHlgwCmq4AZXa7a8OZHZ7b_PKvTuRRtJG6CUtU-1771341296-1.2.1.1-FOWik8D0h1Nn.VtkzZpAJ4lkUOOKcjVH3DRCigh3pGX7A2lo5Y.33ypI9RQl0IizAqPHKaqhYy3pTKi1A8BcKCFDRy9Hqg75ovYVEALmyj5H9Qao2BH9A5zuXqghoItIwpAwOwsYAC2FCs5.RnrcoCLP25LCY9WQu84bh5_YWXwcTP72H.tEyh3msamy2I_UwB9KW.wJxQjyDNy_6Ah27ZvKYJDq.gsor7tGUeIwPnc; ph_phc_9Cg41wNBIXNBnxyvzsD9AC6UT5KSjNjTR4SSnj4uH4_posthog=%7B%22%24device_id%22%3A%22019c6c2b-38fb-75f1-afb3-508acf5dd83d%22%2C%22distinct_id%22%3A%22019c6c2b-38fb-75f1-afb3-508acf5dd83d%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 15:14:59 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 12 Feb 2026 15:00:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"698deb27-397\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y4zw2CJ9UsGaNSToxwN8cg6f8IiZIZ9lERemnNmmKGgdJOWeZPDY%2Bvho%2B44hjzyTGVXHQK0cJOW%2Fgp6LulTFlrVVrNBT0Npdty0PeUr%2F5eRf0xnoZCi4nZLX\"}]}\r\ncf-ray: 9cf63cc828e74435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":919,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (918)","md5":"d8d3e122c71dad3b911494fe2c10c5f8","sha1":"1b78a2cd20efa5bf8974c3f1d828585a4dec9961","sha256":"074e942e3627e6929f68a9f298e84f7ca26788c12c1dfc6caf7dc90473303910","sha512":"cf37e331c970b63ce5d64b41b174e697175c73e2d942534a7b77daac130ca72233a08809240204283a3bf66bc52c73846ed55ba5add6302341688d4714158d22","ssdeep":"","tlshash":"e411dcd20f3080e50e9aae39ad3878e416b171af737826841349cf34ea83dc74508a50","first_seen":"2025-05-30T14:20:20.549969Z","last_seen":"2026-04-17T09:09:52.493057Z","times_seen":22,"resource_available":true,"data":null}},"time_used":1376,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1376,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.esperesso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/mewWallet-6V4UZOQC-B0qJRky8.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:57.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esperesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:39:23 GMT","end":"Mon, 11 May 2026 21:37:10 GMT"},"fingerprint":{"sha1":"7D:D7:1F:F3:EC:B2:62:EE:46:06:FF:B5:03:10:4F:D3:5D:30:F8:A7","sha256":"75:A0:16:A2:94:7C:AF:93:9D:5A:94:40:3C:0C:89:D0:E3:F7:DB:28:0E:45:DC:7D:2D:8D:A3:50:53:54:D1:D9"}}},"request":{"raw":"GET /assets/mewWallet-6V4UZOQC-B0qJRky8.js HTTP/1.1\r\nHost: claim.esperesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/assets/root-8mEX-aQm.js\r\nCookie: cf_clearance=51kqFdHlgwCmq4AZXa7a8OZHZ7b_PKvTuRRtJG6CUtU-1771341296-1.2.1.1-FOWik8D0h1Nn.VtkzZpAJ4lkUOOKcjVH3DRCigh3pGX7A2lo5Y.33ypI9RQl0IizAqPHKaqhYy3pTKi1A8BcKCFDRy9Hqg75ovYVEALmyj5H9Qao2BH9A5zuXqghoItIwpAwOwsYAC2FCs5.RnrcoCLP25LCY9WQu84bh5_YWXwcTP72H.tEyh3msamy2I_UwB9KW.wJxQjyDNy_6Ah27ZvKYJDq.gsor7tGUeIwPnc; ph_phc_9Cg41wNBIXNBnxyvzsD9AC6UT5KSjNjTR4SSnj4uH4_posthog=%7B%22%24device_id%22%3A%22019c6c2b-38fb-75f1-afb3-508acf5dd83d%22%2C%22distinct_id%22%3A%22019c6c2b-38fb-75f1-afb3-508acf5dd83d%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 15:14:58 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 12 Feb 2026 15:00:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"698deb27-32bb\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yq%2FQTj8VnXPor3pbQaRvTV1Mh1j95HPeJVlMmVyj22wkN4vfk9kbwd1q40WghW8yYW73gqj0DFhg2AOsRXzFwoLx70Y2BdzrLkWFfEYeKAAN0Pt64zFTGN6W\"}]}\r\ncf-ray: 9cf63cc838eb4435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12987,"size_decoded":0,"mime_type":"application/javascript","magic":"HTML document, ASCII text, with very long lines (12986)","md5":"0ba9b4ec5d6e0138fdc7dcea74d719b1","sha1":"7e9a5254388ae9b05ccab215bcadfda7cbb92178","sha256":"cabb87e570e8e5c15a34eeb5c010a7651a3e878e76568fa8f274903a86c23047","sha512":"8bbc357ee098b1666e94e09a19e0b9711acc240227e819daa87a564a6a0ff456a338c4b61d83f68344063ce6c0ac09d7ef5e9ccb4c711aefc103562691a600de","ssdeep":"192:vSL2IcUA1oFBu/kyilFZl1s7tWld8YgsII9P3cO6+fzRXygn3IJigNnvMqDCdFIZ:vSL2IcUm/XwZvw0IGrCgivRhilI","tlshash":"9742c5d0332c53f9f507c3a9a7aaa0569a7c30da3daf5158f64f05256b144fa883f843","first_seen":"2025-12-31T12:33:59.905722Z","last_seen":"2026-04-08T12:13:16.929881Z","times_seen":17,"resource_available":true,"data":null}},"time_used":436,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":436,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.esperesso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/injectedWallet-H7LYKTQS-CAHJNGc-.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:57.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esperesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:39:23 GMT","end":"Mon, 11 May 2026 21:37:10 GMT"},"fingerprint":{"sha1":"7D:D7:1F:F3:EC:B2:62:EE:46:06:FF:B5:03:10:4F:D3:5D:30:F8:A7","sha256":"75:A0:16:A2:94:7C:AF:93:9D:5A:94:40:3C:0C:89:D0:E3:F7:DB:28:0E:45:DC:7D:2D:8D:A3:50:53:54:D1:D9"}}},"request":{"raw":"GET /assets/injectedWallet-H7LYKTQS-CAHJNGc-.js HTTP/1.1\r\nHost: claim.esperesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/assets/root-8mEX-aQm.js\r\nCookie: cf_clearance=51kqFdHlgwCmq4AZXa7a8OZHZ7b_PKvTuRRtJG6CUtU-1771341296-1.2.1.1-FOWik8D0h1Nn.VtkzZpAJ4lkUOOKcjVH3DRCigh3pGX7A2lo5Y.33ypI9RQl0IizAqPHKaqhYy3pTKi1A8BcKCFDRy9Hqg75ovYVEALmyj5H9Qao2BH9A5zuXqghoItIwpAwOwsYAC2FCs5.RnrcoCLP25LCY9WQu84bh5_YWXwcTP72H.tEyh3msamy2I_UwB9KW.wJxQjyDNy_6Ah27ZvKYJDq.gsor7tGUeIwPnc; ph_phc_9Cg41wNBIXNBnxyvzsD9AC6UT5KSjNjTR4SSnj4uH4_posthog=%7B%22%24device_id%22%3A%22019c6c2b-38fb-75f1-afb3-508acf5dd83d%22%2C%22distinct_id%22%3A%22019c6c2b-38fb-75f1-afb3-508acf5dd83d%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 15:15:00 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 12 Feb 2026 15:00:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"698deb27-2ad\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9j4prwewdCHtcB35cMUc0gsdxqgUMHuSTZg9lvW8hP5cjH26l6nwzi5SGmR5fCkxi8RGpd%2FeP18AsbG3gLsBAJOGriU%2FP78yBjL4RL%2BmYywFBdOC8QipX6Ks\"}]}\r\ncf-ray: 9cf63cc848f24435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":685,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (684)","md5":"d15e27dd16cca201d14667c3af8cb320","sha1":"a2a412c0b28c967d51856bd18a3f5b1a039cbf94","sha256":"db58171c5bda95e8016d892b4692c77c4f7644fe1fd3ee9b6ac1f561e867aec0","sha512":"20a745ee7cfac75a1160058128403ca4639ca13460191bceb426a295e6ad64e72d63343c73565dff68a719fb7590fe12853a1b213c9a1e0d33a24d2e0937225a","ssdeep":"","tlshash":"fc01f476d22cd45dc91dc36cfd6e68f3234961e6611f4328755c0f2ea2194cbec1e264","first_seen":"2025-04-01T04:17:39.059491Z","last_seen":"2026-04-17T09:09:52.492445Z","times_seen":34,"resource_available":true,"data":null}},"time_used":2679,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2679,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.esperesso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-17T15:14:55.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esperesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:39:23 GMT","end":"Mon, 11 May 2026 21:37:10 GMT"},"fingerprint":{"sha1":"7D:D7:1F:F3:EC:B2:62:EE:46:06:FF:B5:03:10:4F:D3:5D:30:F8:A7","sha256":"75:A0:16:A2:94:7C:AF:93:9D:5A:94:40:3C:0C:89:D0:E3:F7:DB:28:0E:45:DC:7D:2D:8D:A3:50:53:54:D1:D9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: claim.esperesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Feb 2026 15:14:55 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Thu, 12 Feb 2026 15:00:55 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VmEV9nGxNRMOjDd0qoOYSH8X29KT6Ly09xCxIDPpjC8dw9gLAFVGV3nCz%2BMLhZFGAKvw7DHaj3NW3MAyQJFhSPPRUUCEtD0McyvB98VUw3LwuXwr2P7s3%2BTF\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9cf63cb7f814c8cb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55466,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (26885)","md5":"5c40a5df1b6adfa6c21d7599e9a734ea","sha1":"c370df985577f3e46c43a176e4c1562f1589028a","sha256":"dd6beaefff50733d099bb5512c0612303ee50cf15651630c0fe4a31662f45c1b","sha512":"f07044006a3152a281615e6e03721ad8c0bfa5f33d85a25c8f2921bb6db8a663f56e7afd4da3618d5a54ba8625ea875efd23f2c504f947aa969b602ea4726980","ssdeep":"768:dw4irdMgMQE+pvhkeF9uxXl03xAfRwRnpJlXGsD3x/k:wdMgMQFZ/Lq0BHnHlXGsD3x/k","tlshash":"aa434ab6d470927609231f04aa377da87a6261e74b18409cf15cc59c2f40dbb8e7f9ee","first_seen":"2026-02-17T15:15:31.636652Z","last_seen":"2026-02-17T15:15:31.636652Z","times_seen":1,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":42,"dns":1,"connect":8,"send":0,"wait":290,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.esperesso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"us-assets.i.posthog.com/array/phc_9Cg41wNBIXNBnxyvzsD9AC6UT5KSjNjTR4SSnj4uH4/config.js","fqdn":"us-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"104.20.17.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:57.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 21:09:57 GMT","end":"Mon, 20 Apr 2026 22:09:56 GMT"},"fingerprint":{"sha1":"28:A9:79:25:3F:AF:B7:89:AC:9D:42:8A:C3:69:5B:4C:8E:6F:4C:77","sha256":"4D:63:13:FA:35:7E:FE:29:D4:53:E6:EF:2E:3B:8F:06:9D:32:9C:B5:EB:7E:3C:76:62:83:84:76:B4:C3:88:3C"}}},"request":{"raw":"GET /array/phc_9Cg41wNBIXNBnxyvzsD9AC6UT5KSjNjTR4SSnj4uH4/config.js HTTP/1.1\r\nHost: us-assets.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://claim.esperesso.foundation\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Feb 2026 15:14:58 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 572\r\nvary: Origin, Referer, Accept-Encoding\r\nallow: GET, HEAD, OPTIONS\r\nx-frame-options: SAMEORIGIN\r\nreporting-endpoints: posthog=\"https://us.i.posthog.com/report/?token=sTMFPsFhdP1Ssg\u0026sample_rate=0.1\u0026v=2\"\r\ncontent-security-policy-report-only: default-src 'self'; style-src 'self' 'unsafe-inline' https://*.posthog.com https://fonts.googleapis.com; script-src 'self' 'nonce-cO1kHigIvQxUkFNEFr7wK' https://*.posthog.com https://*.i.posthog.com; font-src 'self' https://*.posthog.com https://app-static.eu.posthog.com https://app-static-prod.posthog.com https://d1sdjtjk6xzm7.cloudfront.net https://fonts.gstatic.com https://cdn.jsdelivr.net https://assets.faircado.com https://use.typekit.net; worker-src 'self'; child-src 'none'; object-src 'none'; media-src https://res.cloudinary.com; img-src 'self' data: https://*.posthog.com https://posthog.com https://www.gravatar.com https://res.cloudinary.com https://platform.slack-edge.com https://raw.githubusercontent.com; frame-ancestors https://posthog.com https://preview.posthog.com https://vercel.com; connect-src 'self' https://status.posthog.com https://*.posthog.com  https://raw.githubusercontent.com https://api.github.com; frame-src https:; manifest-src 'self'; base-uri 'self'; report-uri https://us.i.posthog.com/report/?token=sTMFPsFhdP1Ssg\u0026sample_rate=0.1\u0026v=2; report-to posthog\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-opener-policy: same-origin\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 10\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ranges: bytes\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\nlast-modified: Tue, 17 Feb 2026 15:14:58 GMT\r\ncf-ray: 9cf63cc84fcf3e6a-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":892,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (694)","md5":"981e456b5f0f9fa545898be7ae986a32","sha1":"61dcc85f58ddf340c9490ba8b01173493bccc7f4","sha256":"c17c6f43b9a8f9b7535546fecd667d535187206451b090938ed3e103727eb01d","sha512":"4d781cd94fedc54061436fa0024116fe16bc551895d0c10d794bece2537ed19ad70c0d410fa61da1662225a3e4ab282d510b7a29117428d63b3619960723b813","ssdeep":"","tlshash":"19115929f89008be00e6b51aab97e0436f7b80db92484c1de9c441567b1d83b9987fc5","first_seen":"2026-02-17T15:15:31.637512Z","last_seen":"2026-02-17T15:15:31.637512Z","times_seen":1,"resource_available":true,"data":null}},"time_used":444,"timings":{"blocked":34,"dns":1,"connect":8,"send":0,"wait":372,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/root-8mEX-aQm.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:56.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esperesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:39:23 GMT","end":"Mon, 11 May 2026 21:37:10 GMT"},"fingerprint":{"sha1":"7D:D7:1F:F3:EC:B2:62:EE:46:06:FF:B5:03:10:4F:D3:5D:30:F8:A7","sha256":"75:A0:16:A2:94:7C:AF:93:9D:5A:94:40:3C:0C:89:D0:E3:F7:DB:28:0E:45:DC:7D:2D:8D:A3:50:53:54:D1:D9"}}},"request":{"raw":"GET /assets/root-8mEX-aQm.js HTTP/1.1\r\nHost: claim.esperesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/assets/root-W8lXAx1b.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 15:14:56 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 12 Feb 2026 15:00:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\ncontent-encoding: br\r\nage: 91\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"698deb27-45f48f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2RSt3A7ENeRq8S0akZ49W%2FQklPHTpxmYbKW0OT8ewirf3Fs0jo7eEw%2BD8IgiIBqSsqvPeJBPORDg18GxfKIaEPMqoIzDmnwSRcY8rF4RRYXJ1b00uiJDug%2Ft\"}]}\r\ncf-ray: 9cf63cbc0ee24435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4584591,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (34815)","md5":"2cf1d3b508ff9b7c9f000159d1dee902","sha1":"33278b12cefadd98aee1cce8a095eb2e68c00a1c","sha256":"7fc482ab08c498d9e9759cb22316925699218fc75b2bf5cb3ce316ccbc611881","sha512":"21e8b2841a48b59f88917a645938c1a3af829092bfc09d487dd1518d89a427e186c4aed4ad0bdc547b710c9d7df868c74a24f185f905277ce2869504174d19e4","ssdeep":"12288:n9fpJVdQ4gcuM4m5D4yUvaqzm/rFqkKY4reW8VSm1FXV:n9fpXgXM35D4PCqm4recEz","tlshash":"b025e8ef6b0f5d9c0e61138444ab02d1e1545c83d4cc8483f5b89beb5ef94aa906a7fe","first_seen":"2026-02-12T20:37:44.891849Z","last_seen":"2026-02-17T15:15:31.638344Z","times_seen":4,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":188,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.esperesso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/index-Cv69DvSO.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:56.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esperesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:39:23 GMT","end":"Mon, 11 May 2026 21:37:10 GMT"},"fingerprint":{"sha1":"7D:D7:1F:F3:EC:B2:62:EE:46:06:FF:B5:03:10:4F:D3:5D:30:F8:A7","sha256":"75:A0:16:A2:94:7C:AF:93:9D:5A:94:40:3C:0C:89:D0:E3:F7:DB:28:0E:45:DC:7D:2D:8D:A3:50:53:54:D1:D9"}}},"request":{"raw":"GET /assets/index-Cv69DvSO.js HTTP/1.1\r\nHost: claim.esperesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/assets/root-W8lXAx1b.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 15:14:56 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 12 Feb 2026 15:00:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\ncontent-encoding: br\r\nage: 91\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"698deb27-e60\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cnJlVS%2B25we%2Bb%2FbxNntmOKfOB9wG81Hba%2F4tY%2FwwaCCsKc6LLNlIc%2Be5mT6e5r5Pqnr9K7PQvtM5c9re15nuIJSA%2BZurgiE7INEovDZWIrj9ukS1gE7Ai7S0\"}]}\r\ncf-ray: 9cf63cbc1efe4435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3680,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3679)","md5":"2290e70d1f20a0f0ab497866d29e1f43","sha1":"8f91166b2507908b954144ca1060a707b5f92320","sha256":"46061444d4462839ff3e39911a47ba3d89aa404dddd7fb863a6a6958eb8c6a5e","sha512":"d58dfd6c176e19fca0d3a2bb8432b2d718c4ac1357242c5841a11afd1848b3c369dc2f1add96f8876da746a6958e2668e5aefb010c4e6595c9c4e93ae6966815","ssdeep":"","tlshash":"8c71138db7c4f04249c6a960037ba31772a9377318bdc2a193ee95b012675594227f74","first_seen":"2026-02-12T20:37:44.878589Z","last_seen":"2026-02-17T15:15:31.638947Z","times_seen":4,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.esperesso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"magna-public-assets-prod.s3.amazonaws.com/portal-assets/espresso/favicon.svg","fqdn":"magna-public-assets-prod.s3.amazonaws.com","domain":"magna-public-assets-prod.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.183.229","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:56.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /portal-assets/espresso/favicon.svg HTTP/1.1\r\nHost: magna-public-assets-prod.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: IzxQFS2xcLas9WfeQKT/FIvYdhTNgPkehrZyqi6Ruj5fwZdd2C3gCqUFyA3fdgh95DgSH88JWn6WtEAitXLOo0aY31xyIirz\r\nx-amz-request-id: ABZ3VDGWKR67N22F\r\nDate: Tue, 17 Feb 2026 15:14:57 GMT\r\nx-amz-replication-status: COMPLETED\r\nLast-Modified: Mon, 03 Nov 2025 06:36:25 GMT\r\nETag: \"0e5690d3b329d727d3beebed48d6c2d8\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: auKTxiUYoPRtGjfydffsemwNuvEyinOQ\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 2660\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":2660,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0e5690d3b329d727d3beebed48d6c2d8","sha1":"46b9b822697390227617c5ae61b21db0bd9674cd","sha256":"99b5446fdb0675412588659f6eacf34bd66b95ddb4d340801d98d6b8f297a149","sha512":"bd902ea28f21257e5cecaf6d06b6a2585b0b937a8815b357b170f618e575343710c9a741c267176410640221cead59ad991db5e9e32b0ae74245618a29eea20e","ssdeep":"","tlshash":"3451ffdc361cd1854a5c6bcb9f5aa0791c26e1e0de8e8509ea442e1f38c5c6f6c393c5","first_seen":"2025-12-28T18:47:24.367929Z","last_seen":"2026-04-08T12:13:16.913402Z","times_seen":28,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":1,"connect":93,"send":0,"wait":130,"receive":1,"ssl":100},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/entry.client-Bv3K-XV0.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:57.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esperesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:39:23 GMT","end":"Mon, 11 May 2026 21:37:10 GMT"},"fingerprint":{"sha1":"7D:D7:1F:F3:EC:B2:62:EE:46:06:FF:B5:03:10:4F:D3:5D:30:F8:A7","sha256":"75:A0:16:A2:94:7C:AF:93:9D:5A:94:40:3C:0C:89:D0:E3:F7:DB:28:0E:45:DC:7D:2D:8D:A3:50:53:54:D1:D9"}}},"request":{"raw":"GET /assets/entry.client-Bv3K-XV0.js HTTP/1.1\r\nHost: claim.esperesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/\r\nCookie: cf_clearance=51kqFdHlgwCmq4AZXa7a8OZHZ7b_PKvTuRRtJG6CUtU-1771341296-1.2.1.1-FOWik8D0h1Nn.VtkzZpAJ4lkUOOKcjVH3DRCigh3pGX7A2lo5Y.33ypI9RQl0IizAqPHKaqhYy3pTKi1A8BcKCFDRy9Hqg75ovYVEALmyj5H9Qao2BH9A5zuXqghoItIwpAwOwsYAC2FCs5.RnrcoCLP25LCY9WQu84bh5_YWXwcTP72H.tEyh3msamy2I_UwB9KW.wJxQjyDNy_6Ah27ZvKYJDq.gsor7tGUeIwPnc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 15:14:57 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 12 Feb 2026 15:00:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\ncontent-encoding: br\r\nage: 90\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"698deb27-2e489\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FxNT2pwSUPwM1EG8sqw9GIY5T4TfHXBWKQhX4%2FvbCDUVXipgUz1fLxsaOEfw3aMimsTa%2FgXFMWLIMYO4KdrwPsNX2xklPPm89wbHkqNXCSCuLxsLRKEh4TiX\"}]}\r\ncf-ray: 9cf63cc578884435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":189577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (54963)","md5":"ea90ebb2c0a9bda9658b8eb254b09e09","sha1":"4bc2cae557e90d63d4bfd15d5d90452b0e57ca60","sha256":"0140eab84177fcb22e827368c499794ece7e7d21204b44971d2e9c51c3a46e49","sha512":"5ed8fc3903da8c1454b9357681cc9d830e0ba865ba32ef0b8ab55d53b0db2f88210231e0a3eac15710f4cc8de6edbafae2bbfa6bebba8dd6ad4c9bacae7d826c","ssdeep":"3072:XO8GfDyHDZubrIrn6BEnaE2CmfnoSA016Un/m:evL4VunIz64eoSvL/m","tlshash":"10041bec32bea7566eb245e6109f1503727c28236c0c4c70a151fe9d66b844a51fbfee","first_seen":"2026-02-12T20:37:44.912773Z","last_seen":"2026-02-17T15:15:31.640008Z","times_seen":4,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":19,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.esperesso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"us.i.posthog.com/flags/?v=2\u0026config=true\u0026ip=0\u0026_=1771341297917\u0026ver=1.332.0\u0026compression=base64","fqdn":"us.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"52.3.30.168","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:57.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6A:93:A0:4B:D8:27:D0:2A:1E:35:71:6C:A2:1C:2A:2C:2E:E1:A7:D7","sha256":"2A:1F:69:7F:28:B0:DA:BD:59:C5:0F:27:B3:35:6D:E9:5B:8B:A2:4A:F8:89:F1:F0:10:CD:CD:8F:62:8E:07:E6"}}},"request":{"raw":"POST /flags/?v=2\u0026config=true\u0026ip=0\u0026_=1771341297917\u0026ver=1.332.0\u0026compression=base64 HTTP/1.1\r\nHost: us.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim.esperesso.foundation/\r\ncontent-type: application/x-www-form-urlencoded\r\nContent-Length: 269\r\nOrigin: https://claim.esperesso.foundation\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":269,"data":"data=eyJ0b2tlbiI6InBoY185Q2c0MXdOQklYTkJueHl2enNEOUFDNlVUNUtTak5qVFI0U1NuajR1SDQiLCJkaXN0aW5jdF9pZCI6IjAxOWM2YzJiLTM4ZmItNzVmMS1hZmIzLTUwOGFjZjVkZDgzZCIsImdyb3VwcyI6e30sInBlcnNvbl9wcm9wZXJ0aWVzIjp7fSwiJGRldmljZV9pZCI6IjAxOWM2YzJiLTM4ZmItNzVmMS1hZmIzLTUwOGFjZjVkZDgzZCJ9"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Feb 2026 15:14:58 GMT\r\ncontent-type: application/json\r\nvary: origin, access-control-request-method, access-control-request-headers, Accept-Encoding\r\naccess-control-allow-origin: https://claim.esperesso.foundation\r\naccess-control-allow-credentials: true\r\nx-envoy-upstream-service-time: 31\r\ncontent-encoding: gzip\r\nserver: envoy\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":803,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fa3fe9fa44a7c2cd1173e0e1b1d8dddf","sha1":"3fd5026b6deae5767328741071a235bfe9842be8","sha256":"7b8be821590cf6f83347cbaad1107b4b76483700ee8f9ab2162df152f5ab4397","sha512":"939613f527260d975b713b2ba48bcac7a90dc514ea082c1f453581b76c4415d519dca0d3b65144e7470dfb8793ea84f96fbca847152441c0e20d45155fe82ab5","ssdeep":"","tlshash":"ef01bd6eb994083c8c154305eaa16a015fff923732287c4cf6a8458230db0de8e93e07","first_seen":"2026-02-17T15:15:31.640538Z","last_seen":"2026-02-17T15:15:31.640538Z","times_seen":1,"resource_available":false,"data":null}},"time_used":587,"timings":{"blocked":248,"dns":21,"connect":93,"send":0,"wait":125,"receive":0,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/config-BBCuuyHT.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:56.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esperesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:39:23 GMT","end":"Mon, 11 May 2026 21:37:10 GMT"},"fingerprint":{"sha1":"7D:D7:1F:F3:EC:B2:62:EE:46:06:FF:B5:03:10:4F:D3:5D:30:F8:A7","sha256":"75:A0:16:A2:94:7C:AF:93:9D:5A:94:40:3C:0C:89:D0:E3:F7:DB:28:0E:45:DC:7D:2D:8D:A3:50:53:54:D1:D9"}}},"request":{"raw":"GET /assets/config-BBCuuyHT.js HTTP/1.1\r\nHost: claim.esperesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/assets/root-W8lXAx1b.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 15:14:56 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 12 Feb 2026 15:00:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\ncontent-encoding: br\r\nage: 91\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"698deb27-b8ba\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fJnHN4Ji5KzV04ybKrKvTN8r85iwU5c1cGucEWa5l1v%2BIiWroT%2FqHMJeAYZf65ws4zapDY%2B%2FDaR68Wng8YQtkz03JIe1ziiEQvoM55dP8LDCHXxZ6A9naoVr\"}]}\r\ncf-ray: 9cf63cbc1ee74435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47290,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (47289)","md5":"2659ce7411e25b3d5645e8b9e7481b22","sha1":"1386224bd903186c8f26dbcf6b16b4bac52fe189","sha256":"3640abc74fa3ee2f91ed70d2d775e9394c102e19d824f29c7be284c9cde5fd06","sha512":"ea3c6acc6b8bad14675569407fd59965170a30c28148b9ed577e693dc286e0dd86f0adc998cbd80e5e80889309bd3b46751a48341eddc0c771c0545c03a9d0b4","ssdeep":"768:WzlHMGUyZBymwaJ2+d3EfZ56gNjwWghktt55HRTrhD1841Mzq2yS6Iv4Gx5U4KMA:WzlHfL2p6lhi9Wq2tHhC9V48pd","tlshash":"f523a7ca7186b2162be2d1a4483f4015e2396954780e846cb5bdddd3bd72c8ee17bf38","first_seen":"2026-02-12T20:37:44.856378Z","last_seen":"2026-02-17T15:15:31.641748Z","times_seen":4,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.esperesso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/sound-button.component-CXJP3EGL.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:56.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esperesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:39:23 GMT","end":"Mon, 11 May 2026 21:37:10 GMT"},"fingerprint":{"sha1":"7D:D7:1F:F3:EC:B2:62:EE:46:06:FF:B5:03:10:4F:D3:5D:30:F8:A7","sha256":"75:A0:16:A2:94:7C:AF:93:9D:5A:94:40:3C:0C:89:D0:E3:F7:DB:28:0E:45:DC:7D:2D:8D:A3:50:53:54:D1:D9"}}},"request":{"raw":"GET /assets/sound-button.component-CXJP3EGL.js HTTP/1.1\r\nHost: claim.esperesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/assets/home.page-Ct3tf3tM.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 15:14:56 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 12 Feb 2026 15:00:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\ncontent-encoding: br\r\nage: 91\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"698deb27-88d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FDm%2B4N65MT8jafUAXGOR6XDikwTgCctsMA6SCsYsdheysG3p60tB9jTYzEE84Mnsh25zNNtS8hXfa8Em76%2BI0dhWr7%2BXLUdM%2F5dT5TNGbWJmiJQr3F1IMtgq\"}]}\r\ncf-ray: 9cf63cbc6f114435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2189,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2188)","md5":"6a87328d6438328d99961c6a3b5251d1","sha1":"8665ad288654908abf6930b50e5110fb228a1460","sha256":"40e7a7bcfee3bd860b9eb80bdd7befdebfe80abb3c67c6b78449b1a1501b86b2","sha512":"ac723989fd6ed8e62f01f65d66d1ae27e37a4ac14ca3ee6801d6e0c8ebc041a60ebb6d6c59380f38f345d28ddbcef96d4c9a490bcffcff647bc1c77e2528327a","ssdeep":"","tlshash":"204163e9c70035ac680e9b30fc177812b1be14fe8ba557d0814c653c6a328e3eb25ad5","first_seen":"2026-02-12T20:37:44.952108Z","last_seen":"2026-02-17T15:15:31.642379Z","times_seen":4,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.esperesso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/background-music.context-CyxtzD9I.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:56.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esperesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:39:23 GMT","end":"Mon, 11 May 2026 21:37:10 GMT"},"fingerprint":{"sha1":"7D:D7:1F:F3:EC:B2:62:EE:46:06:FF:B5:03:10:4F:D3:5D:30:F8:A7","sha256":"75:A0:16:A2:94:7C:AF:93:9D:5A:94:40:3C:0C:89:D0:E3:F7:DB:28:0E:45:DC:7D:2D:8D:A3:50:53:54:D1:D9"}}},"request":{"raw":"GET /assets/background-music.context-CyxtzD9I.js HTTP/1.1\r\nHost: claim.esperesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/assets/root-W8lXAx1b.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 15:14:56 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 12 Feb 2026 15:00:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\ncontent-encoding: br\r\nage: 91\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"698deb27-39f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GIEvDS%2Fc4Oh8ofoRHKwGTRiqJTeUw5Sq9axuoX%2FlGbaYoq3PPk5ZMOhNawbkDrE92%2Bb4cVO7xtSUXlZwXSDpMoSEKSmykVu6AbJ5BeLGdseRsAWsDDkItv1J\"}]}\r\ncf-ray: 9cf63cbc2f004435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":927,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (926)","md5":"dd8962f02570fab22e3a42bcca1bd186","sha1":"5b97d297afafc3fc4bb310d1df2ace70e1c55a15","sha256":"8463f455837cb03dee7ccdc05ac924afb6330a5d1c0927c55498bcba4b024ac7","sha512":"e4a9b80a701e74bf2fd7d6d6fbb8561d438203199b3a6b503e1fce4398ff1d80aa84ac7047df0e4102c79f9e40fb42e54ba08097c88a581bd4e2b8be4a6bf52e","ssdeep":"","tlshash":"d111dcb7a8a4907afb8e09a809a1907937333b54304a40f1e13c94ab45d2582e67b7d9","first_seen":"2026-02-12T20:37:44.875304Z","last_seen":"2026-02-17T15:15:31.642906Z","times_seen":4,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.esperesso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/ledgerWallet-KZKJ5Q2S-DdZeAsds.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:57.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esperesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:39:23 GMT","end":"Mon, 11 May 2026 21:37:10 GMT"},"fingerprint":{"sha1":"7D:D7:1F:F3:EC:B2:62:EE:46:06:FF:B5:03:10:4F:D3:5D:30:F8:A7","sha256":"75:A0:16:A2:94:7C:AF:93:9D:5A:94:40:3C:0C:89:D0:E3:F7:DB:28:0E:45:DC:7D:2D:8D:A3:50:53:54:D1:D9"}}},"request":{"raw":"GET /assets/ledgerWallet-KZKJ5Q2S-DdZeAsds.js HTTP/1.1\r\nHost: claim.esperesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/assets/root-8mEX-aQm.js\r\nCookie: cf_clearance=51kqFdHlgwCmq4AZXa7a8OZHZ7b_PKvTuRRtJG6CUtU-1771341296-1.2.1.1-FOWik8D0h1Nn.VtkzZpAJ4lkUOOKcjVH3DRCigh3pGX7A2lo5Y.33ypI9RQl0IizAqPHKaqhYy3pTKi1A8BcKCFDRy9Hqg75ovYVEALmyj5H9Qao2BH9A5zuXqghoItIwpAwOwsYAC2FCs5.RnrcoCLP25LCY9WQu84bh5_YWXwcTP72H.tEyh3msamy2I_UwB9KW.wJxQjyDNy_6Ah27ZvKYJDq.gsor7tGUeIwPnc; ph_phc_9Cg41wNBIXNBnxyvzsD9AC6UT5KSjNjTR4SSnj4uH4_posthog=%7B%22%24device_id%22%3A%22019c6c2b-38fb-75f1-afb3-508acf5dd83d%22%2C%22distinct_id%22%3A%22019c6c2b-38fb-75f1-afb3-508acf5dd83d%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 15:15:12 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 12 Feb 2026 15:00:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"698deb27-1bb\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QX%2BH%2BtIOIVKYeUeK%2FiOSq0Emk0F53UyBhpiMfEmw%2FcyrSBvfqNdjsn4WlIY5XFjwV0kTI%2Bd1n0j6gKI4dtZLfofNxhVbNJP3VA39g2EXJxJmcSBMfnngUIZe\"}]}\r\ncf-ray: 9cf63cc828e44435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":443,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (442)","md5":"717b03058e9eccce29ae3a8f15544b1a","sha1":"c2b626e64489c6f9084d3bad64c5fb73df88d797","sha256":"59642a8a9d30d9684f1aa6b4c8ca8886bf9a53491a3e238ad3aadac36f1917d9","sha512":"d339c57445af528cd655bad29dc18dbbf61ef6c5a8f6541b4735e8ef7ed872dbf173d22e3c67f976eb78bd25eb8b30a40b2613698d6ef9f24a485a61c7e9f6ee","ssdeep":"","tlshash":"b7f0abe64b508d00874a03b1cabc94c8313775eea758239cb2720619bd420afb90cbb0","first_seen":"2025-09-05T14:38:20.777264Z","last_seen":"2026-04-17T09:09:52.483064Z","times_seen":21,"resource_available":true,"data":null}},"time_used":14488,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14488,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.esperesso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/coinbaseWallet-WWX6LF36-BMRj6mTC.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:57.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esperesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:39:23 GMT","end":"Mon, 11 May 2026 21:37:10 GMT"},"fingerprint":{"sha1":"7D:D7:1F:F3:EC:B2:62:EE:46:06:FF:B5:03:10:4F:D3:5D:30:F8:A7","sha256":"75:A0:16:A2:94:7C:AF:93:9D:5A:94:40:3C:0C:89:D0:E3:F7:DB:28:0E:45:DC:7D:2D:8D:A3:50:53:54:D1:D9"}}},"request":{"raw":"GET /assets/coinbaseWallet-WWX6LF36-BMRj6mTC.js HTTP/1.1\r\nHost: claim.esperesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/assets/root-8mEX-aQm.js\r\nCookie: cf_clearance=51kqFdHlgwCmq4AZXa7a8OZHZ7b_PKvTuRRtJG6CUtU-1771341296-1.2.1.1-FOWik8D0h1Nn.VtkzZpAJ4lkUOOKcjVH3DRCigh3pGX7A2lo5Y.33ypI9RQl0IizAqPHKaqhYy3pTKi1A8BcKCFDRy9Hqg75ovYVEALmyj5H9Qao2BH9A5zuXqghoItIwpAwOwsYAC2FCs5.RnrcoCLP25LCY9WQu84bh5_YWXwcTP72H.tEyh3msamy2I_UwB9KW.wJxQjyDNy_6Ah27ZvKYJDq.gsor7tGUeIwPnc; ph_phc_9Cg41wNBIXNBnxyvzsD9AC6UT5KSjNjTR4SSnj4uH4_posthog=%7B%22%24device_id%22%3A%22019c6c2b-38fb-75f1-afb3-508acf5dd83d%22%2C%22distinct_id%22%3A%22019c6c2b-38fb-75f1-afb3-508acf5dd83d%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 15:15:05 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 12 Feb 2026 15:00:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"698deb27-256\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1UwHNZFaUAdcPTKAy7dL62QOnCHB0NOStiMkdk2exGj3O%2BSwWtYeDyRator9kptmnAT%2B%2BddiI85woFfGTz19zdR5BxgQj%2ByKmH4vsvWzOtM%2FMYzRaMV0ndDL\"}]}\r\ncf-ray: 9cf63cc828e54435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":598,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (597)","md5":"694e1f6dd72af86c8c477f9608975a74","sha1":"3b0def5280cfb0e2cb76b3a039bf7e26986a7f92","sha256":"4a238a92bd23caf58037a8423adebebfc6a84b6762f033bc7e6ebf8741ca1e41","sha512":"7290b10e41ef6e0d7bc27cb24d75327c1493f0d2ae961fb89bf1bb387659a9bc14681b66dbe754722c5f2ea5a98b6cc76c2ca9cde9406de0062262f6f056003f","ssdeep":"","tlshash":"64f022a1a2dcb411186ad336513c5ad4bcd7128cae2e621c32801f1af82009a98c8a79","first_seen":"2024-12-25T05:30:42.515918Z","last_seen":"2026-04-18T12:51:34.188672Z","times_seen":60,"resource_available":true,"data":null}},"time_used":7492,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7492,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.esperesso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/root-xUBic4Hn.css","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:55.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esperesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:39:23 GMT","end":"Mon, 11 May 2026 21:37:10 GMT"},"fingerprint":{"sha1":"7D:D7:1F:F3:EC:B2:62:EE:46:06:FF:B5:03:10:4F:D3:5D:30:F8:A7","sha256":"75:A0:16:A2:94:7C:AF:93:9D:5A:94:40:3C:0C:89:D0:E3:F7:DB:28:0E:45:DC:7D:2D:8D:A3:50:53:54:D1:D9"}}},"request":{"raw":"GET /assets/root-xUBic4Hn.css HTTP/1.1\r\nHost: claim.esperesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 15:14:55 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Thu, 12 Feb 2026 15:00:55 GMT\r\netag: \"698deb27-6d80\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 91\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HZqCbuE0QgQE%2Bv6P1k6vK%2BIFSmErHUeonDBuGL20VuN5BZoLRoVCmlihR42qMIbHGLVZtTfqggnnNo2FHTponpLswfiRqOVMQAz0PVJwipP6AUybh6I16qj8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cf63cbaceb94435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28032,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (28031)","md5":"b791fa2cfe8eea5dc35ba023b26bf0cb","sha1":"12f5d243511c0b9273162b3018d0dd57ccea4f1f","sha256":"6dc4c7194a918e7786fa782145e281df7b49fad5e2a449716bde8a904e07e0d4","sha512":"8d059d197b5ef2bd53175dc7f2092ddfb74d73c124965b15dc92600efb15e2bfc7efd6622e6e90f9a8513a817cbb9876588cf43f97478a5df12879b9aa71220c","ssdeep":"384:P56ed283ZcW23qWF7O36YBzQ4JYf1ojPFEINi:P56UJoYBzQmSojPFEwi","tlshash":"73c2c9093e2d3f38ba13a32440c0949c620b775feebd8797acd1265d9d9d78431aca79","first_seen":"2025-12-28T18:47:24.374234Z","last_seen":"2026-04-08T12:13:16.905421Z","times_seen":25,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.esperesso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/app-DdejxHE8.css","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:55.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esperesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:39:23 GMT","end":"Mon, 11 May 2026 21:37:10 GMT"},"fingerprint":{"sha1":"7D:D7:1F:F3:EC:B2:62:EE:46:06:FF:B5:03:10:4F:D3:5D:30:F8:A7","sha256":"75:A0:16:A2:94:7C:AF:93:9D:5A:94:40:3C:0C:89:D0:E3:F7:DB:28:0E:45:DC:7D:2D:8D:A3:50:53:54:D1:D9"}}},"request":{"raw":"GET /assets/app-DdejxHE8.css HTTP/1.1\r\nHost: claim.esperesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 15:14:55 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Thu, 12 Feb 2026 15:00:55 GMT\r\netag: \"698deb27-6479\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 91\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qwJ0W18pgf4bhSpRbnSEH2ledynuhugxsfmGEAOSDoXhwBR8QGBWatGR8fZUkmnTikyB7qiKK4OIu4BSuhWmmqFmCUo1VkzgMjkksCnLa6TicEQi5losdkJx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cf63cbaceba4435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25721,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (25717)","md5":"2c44a5882ad1be683a8d7ffd40524876","sha1":"03b8ed64ef83bf10ec8714724b9945f12436419c","sha256":"43b08ad544b3b972e038754336d5703cce8996aafcfca3d139ddcddcf6170603","sha512":"d2c9fa300a00f0eb2788357b08f05a7783fff0eda1374b83b6e2a068291f1945adf4d9d86113f0842d7c46dfd2fda852aebab0a03982364490194b2e7a563036","ssdeep":"768:DvyYADX3HpL1YkPjTem0rRkutSc9zE8UaHbTcf+GJkChbAAoi9KckbFiH5ToIZU:LADX3HpL1YkPjTem0rmutSc9w8UaHbTV","tlshash":"5fc29689b6008abe7c3be56a576dea0c6309be12ec104eeff91835021be7ff615d5504","first_seen":"2026-02-04T23:59:59.697125Z","last_seen":"2026-02-17T15:15:31.645137Z","times_seen":6,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.esperesso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/fonts/pp-neue-montreal/pp-neue-montreal-regular.woff2","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:55.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esperesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:39:23 GMT","end":"Mon, 11 May 2026 21:37:10 GMT"},"fingerprint":{"sha1":"7D:D7:1F:F3:EC:B2:62:EE:46:06:FF:B5:03:10:4F:D3:5D:30:F8:A7","sha256":"75:A0:16:A2:94:7C:AF:93:9D:5A:94:40:3C:0C:89:D0:E3:F7:DB:28:0E:45:DC:7D:2D:8D:A3:50:53:54:D1:D9"}}},"request":{"raw":"GET /fonts/pp-neue-montreal/pp-neue-montreal-regular.woff2 HTTP/1.1\r\nHost: claim.esperesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/fonts/pp-neue-montreal/font.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 15:14:55 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 47564\r\nlast-modified: Thu, 12 Feb 2026 15:00:55 GMT\r\netag: \"698deb27-b9cc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 91\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AUWc0wqTQXRSU2XBGkkv81x7eT2%2FEccjssW92fWvdN3RHZ5bWvVADvjpBPoRaeo%2FeB1HYE6C5sC4pppvFJNAK%2Fm82Qz7Nwb2JkffOY7tfzjNqF5wp42LAfYq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cf63cbbdedc4435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47564,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 47564, version 1.0","md5":"9f495aeb5f20fa526a69654c7a1af5e7","sha1":"5456093ac2a3210ebea9ea6fec4faed78cfbf4c1","sha256":"1a020a0ccc2b29ad091b713864b135d9f7fb6d3114e69620f6d56eeb9abefbcc","sha512":"0de585585140f263fb24e97236052ecf380c92b75c724fe3fe99c966ca90a53c6eeea812081e89850ca9c1d343c70ba967dd3f666a437f9b8237e49a5a6ad711","ssdeep":"768:L1MGt41Apz7bVFaRdg9IwhVyuCaMC4C0nRprwgT7XRgLyp2:OGG1AV7bX8g9IpuXtsjrw4up","tlshash":"b323029700fe4ff5c9adb0e81523fa130529898c59a73b7743a32da4a76d7f8ca06107","first_seen":"2023-11-11T04:34:18Z","last_seen":"2026-04-22T03:38:54.13889Z","times_seen":337,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.esperesso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/rainbowWallet-2SR6TVBF-kimcGeuf.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:57.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esperesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:39:23 GMT","end":"Mon, 11 May 2026 21:37:10 GMT"},"fingerprint":{"sha1":"7D:D7:1F:F3:EC:B2:62:EE:46:06:FF:B5:03:10:4F:D3:5D:30:F8:A7","sha256":"75:A0:16:A2:94:7C:AF:93:9D:5A:94:40:3C:0C:89:D0:E3:F7:DB:28:0E:45:DC:7D:2D:8D:A3:50:53:54:D1:D9"}}},"request":{"raw":"GET /assets/rainbowWallet-2SR6TVBF-kimcGeuf.js HTTP/1.1\r\nHost: claim.esperesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/assets/root-8mEX-aQm.js\r\nCookie: cf_clearance=51kqFdHlgwCmq4AZXa7a8OZHZ7b_PKvTuRRtJG6CUtU-1771341296-1.2.1.1-FOWik8D0h1Nn.VtkzZpAJ4lkUOOKcjVH3DRCigh3pGX7A2lo5Y.33ypI9RQl0IizAqPHKaqhYy3pTKi1A8BcKCFDRy9Hqg75ovYVEALmyj5H9Qao2BH9A5zuXqghoItIwpAwOwsYAC2FCs5.RnrcoCLP25LCY9WQu84bh5_YWXwcTP72H.tEyh3msamy2I_UwB9KW.wJxQjyDNy_6Ah27ZvKYJDq.gsor7tGUeIwPnc; ph_phc_9Cg41wNBIXNBnxyvzsD9AC6UT5KSjNjTR4SSnj4uH4_posthog=%7B%22%24device_id%22%3A%22019c6c2b-38fb-75f1-afb3-508acf5dd83d%22%2C%22distinct_id%22%3A%22019c6c2b-38fb-75f1-afb3-508acf5dd83d%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 15:14:58 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 12 Feb 2026 15:00:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"698deb27-e3e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XxvMKDGeGyJ5g07x%2Fd4xxVuPIehJ9%2FdkbeJm4HUh000nQ9FIQdlhDKRuXGzAjkDEmTy9HdzRW%2BYDMdSgUxMM4NbT4M6c6odydrS9LXo%2BRfaqrEVF2qRj46jo\"}]}\r\ncf-ray: 9cf63cc828e64435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3646,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (3645)","md5":"8a0e974aa17cd852cfd0a349aa6cde2a","sha1":"3e83142c11e9b7a57432123b72457ff579f8bcb8","sha256":"0813cf58d2da41c33e74c0fb7e5a9671020dc397611becaacd42e1f6ae5b30a4","sha512":"28eac8d72b65f6e1cd4f0ac75cfe58a515be407e04b12aea7a90a8056018133d9f4de319843eb5238f465a23d817971dbd945e4fdbfc59fca26b823efd59a601","ssdeep":"","tlshash":"c071ca958a3dac3be52dc18cee411420710daabfdc894a5272639fef9d784c6ac4c660","first_seen":"2024-12-25T05:30:42.549882Z","last_seen":"2026-04-18T12:51:34.20253Z","times_seen":56,"resource_available":true,"data":null}},"time_used":525,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":525,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.esperesso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/okxWallet-GJMKZIND-Ctk5JsJ6.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:57.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esperesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:39:23 GMT","end":"Mon, 11 May 2026 21:37:10 GMT"},"fingerprint":{"sha1":"7D:D7:1F:F3:EC:B2:62:EE:46:06:FF:B5:03:10:4F:D3:5D:30:F8:A7","sha256":"75:A0:16:A2:94:7C:AF:93:9D:5A:94:40:3C:0C:89:D0:E3:F7:DB:28:0E:45:DC:7D:2D:8D:A3:50:53:54:D1:D9"}}},"request":{"raw":"GET /assets/okxWallet-GJMKZIND-Ctk5JsJ6.js HTTP/1.1\r\nHost: claim.esperesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/assets/root-8mEX-aQm.js\r\nCookie: cf_clearance=51kqFdHlgwCmq4AZXa7a8OZHZ7b_PKvTuRRtJG6CUtU-1771341296-1.2.1.1-FOWik8D0h1Nn.VtkzZpAJ4lkUOOKcjVH3DRCigh3pGX7A2lo5Y.33ypI9RQl0IizAqPHKaqhYy3pTKi1A8BcKCFDRy9Hqg75ovYVEALmyj5H9Qao2BH9A5zuXqghoItIwpAwOwsYAC2FCs5.RnrcoCLP25LCY9WQu84bh5_YWXwcTP72H.tEyh3msamy2I_UwB9KW.wJxQjyDNy_6Ah27ZvKYJDq.gsor7tGUeIwPnc; ph_phc_9Cg41wNBIXNBnxyvzsD9AC6UT5KSjNjTR4SSnj4uH4_posthog=%7B%22%24device_id%22%3A%22019c6c2b-38fb-75f1-afb3-508acf5dd83d%22%2C%22distinct_id%22%3A%22019c6c2b-38fb-75f1-afb3-508acf5dd83d%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 15:15:11 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 12 Feb 2026 15:00:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"698deb27-382\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AHwJbge1W7cwEnX2a8L8iMk1xZwbQ%2FPKrhC33teb%2F75piItCy2zgxYS80xIWtv2BorqaJQtf1Ax8AKIXkGXw7nYaJqkbbnMxsTBKcP3MIUbPe6cpYcPtU8y1\"}]}\r\ncf-ray: 9cf63cc838ea4435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":898,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (897)","md5":"f4c59e31efbcd88c687fc0a977d992ca","sha1":"486cb19e8e6498704d418690e59128ebf9a02c6e","sha256":"92b49f1aed987eee109fd98567002c0420d85c602003e003b0f2ad3513c41f15","sha512":"01d94e855345137a19596757a9b585c74536b3c847f6c34ce07e2890fc4536375a159870aa1c88ff8a9b24f94c3cfee0eac0998d73170b52c9887080dff1ec54","ssdeep":"","tlshash":"8e115b9600ad4ddecc5da1eb937ca4aa573d2df8763881352f4c8b5020aacf8f44ad5c","first_seen":"2025-04-09T07:08:13.428855Z","last_seen":"2026-04-10T09:11:01.53738Z","times_seen":45,"resource_available":true,"data":null}},"time_used":13472,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13468,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.esperesso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"us-assets.i.posthog.com/static/surveys.js?v=1.332.0","fqdn":"us-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"104.20.17.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:58.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 21:09:57 GMT","end":"Mon, 20 Apr 2026 22:09:56 GMT"},"fingerprint":{"sha1":"28:A9:79:25:3F:AF:B7:89:AC:9D:42:8A:C3:69:5B:4C:8E:6F:4C:77","sha256":"4D:63:13:FA:35:7E:FE:29:D4:53:E6:EF:2E:3B:8F:06:9D:32:9C:B5:EB:7E:3C:76:62:83:84:76:B4:C3:88:3C"}}},"request":{"raw":"GET /static/surveys.js?v=1.332.0 HTTP/1.1\r\nHost: us-assets.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://claim.esperesso.foundation\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Feb 2026 15:14:58 GMT\r\ncontent-type: text/javascript; charset=\"utf-8\"\r\ncache-control: public, max-age=300\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nlast-modified: Tue, 17 Feb 2026 13:26:20 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-opener-policy: same-origin\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 3\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: MISS\r\ncf-ray: 9cf63ccaaf3d3e6a-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89989,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e5524e0a38e666641598f4af467d97cb","sha1":"45c5c489a4d62917bd6c96ba53c42f22a0532837","sha256":"76627c7a8023fdfcf06970fa7ad2bf139ba499a9b02c1b2315b1046b01b5b8da","sha512":"757082563a814e2fb37959c1e9b38090f2982876fa8686afad56cfcfa9005642464a75cad8bf762e7140b42bbc01f9ffdf657b15af4129374165b5a8af4b20cb","ssdeep":"1536:lLNgAQ74f1FTsEQvLwBaTa2IaDwxFPFk/XnVVUbH4ah:1Ngj7p/Lw4we/XnNU","tlshash":"61934bd5b740f1ae41db80b4207e4842b33d2b1afa0d4958b157dc943de9948a39ffaa","first_seen":"2026-02-12T20:37:44.899207Z","last_seen":"2026-04-13T10:23:59.614185Z","times_seen":882,"resource_available":true,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.unicorn.studio/images/hK13GObf5rZ2ZBOA1482Q9StWR73/coin.png","fqdn":"assets.unicorn.studio","domain":"unicorn.studio","tld":"studio"},"ip":{"addr":"34.120.54.136","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:59.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.unicorn.studio","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 01:15:17 GMT","end":"Sat, 11 Apr 2026 02:09:11 GMT"},"fingerprint":{"sha1":"DE:FB:B9:C7:64:66:73:ED:A0:17:64:C3:90:DC:C4:DA:51:F9:1E:8A","sha256":"1B:C6:C2:0F:6E:57:8E:65:50:70:81:13:33:ED:B6:62:DE:B7:E4:60:18:5C:4C:BC:E8:0B:86:F9:84:5D:74:88"}}},"request":{"raw":"GET /images/hK13GObf5rZ2ZBOA1482Q9StWR73/coin.png HTTP/1.1\r\nHost: assets.unicorn.studio\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://claim.esperesso.foundation\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWwWDOrwZbaK3F5Q1ZlKcMDDKk211sACXUBvITZ7ZBqm0Y3DqW1RovrzF0se4zkCvRMoSdlcb_g\r\nx-goog-generation: 1762861129615574\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 76234\r\nx-goog-hash: crc32c=s/wkUw==, md5=VUPxydD/UXnXMiBrkbzzgw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 76234\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, Content-Type, Date, ETag, If-None-Match, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Tue, 17 Feb 2026 15:08:54 GMT\r\nage: 365\r\nlast-modified: Tue, 11 Nov 2025 11:38:49 GMT\r\netag: \"5543f1c9d0ff5179d732206b91bcf383\"\r\ncontent-type: image/png\r\ncache-control: public,max-age=3600\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":76234,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 404 x 408, 8-bit colormap, non-interlaced","md5":"5543f1c9d0ff5179d732206b91bcf383","sha1":"7405c218b26efc284452c6f39c8522148667c4e5","sha256":"5b0b5b3c7175810ea204b14934608e55218c4a9326bdfa23c4c8a1ff4038063b","sha512":"578b57a63cf1cc650711f5525b08259affa1d722374a1cdfdde8c1f7282f315d444be30e134c361e34cce6bedd57f52c4fbde79b70ce3839fcd76c04c29d0fa9","ssdeep":"1536:ub3pH4uPjKs/YvPbs2vYdmUqNcD+LZoQdi+iL:w3pH4uPjKs/kAnqNS+LZoAAL","tlshash":"107302a84b7f871a9400a786a5a688b6e999fc3711b05a3dfdc403787c1c3d0c376da8","first_seen":"2025-12-31T12:33:59.890405Z","last_seen":"2026-04-08T12:13:16.930494Z","times_seen":19,"resource_available":false,"data":null}},"time_used":474,"timings":{"blocked":218,"dns":14,"connect":12,"send":0,"wait":15,"receive":23,"ssl":189},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/style.css","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:55.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esperesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:39:23 GMT","end":"Mon, 11 May 2026 21:37:10 GMT"},"fingerprint":{"sha1":"7D:D7:1F:F3:EC:B2:62:EE:46:06:FF:B5:03:10:4F:D3:5D:30:F8:A7","sha256":"75:A0:16:A2:94:7C:AF:93:9D:5A:94:40:3C:0C:89:D0:E3:F7:DB:28:0E:45:DC:7D:2D:8D:A3:50:53:54:D1:D9"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: claim.esperesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 15:14:55 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Thu, 12 Feb 2026 15:00:55 GMT\r\netag: \"698deb27-2ca\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 91\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4fpv2X8Y3Ormb85RyyT9l9dUvGxjgqgCJFdkbn805odcsjGkfWc0qnrrMqakm9dMu%2BnA76xkIn6fK9QIgw0gbGu5iW1SwVAEkz9Yr9DP9%2FnjNq26syC6j1GP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cf63cbacebb4435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":714,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"bedd04727b31dca6bed3c836848b2c82","sha1":"a05be52cb9976a4d6a633db91312f2fe1b10caa5","sha256":"4fd557acf2a35787f549be606b480b1d5a5f2d8863223db4c03bcb1456089c25","sha512":"dee983fb772c20f729c55826164c1729ecd24ea4724acd75280fe04a237db34646951aaf5810de9b99de1060b895e2fbb89538cd79313c694d920872567552be","ssdeep":"","tlshash":"a0014f27a1925922d19b0a5521533f3afb384ce58b2859b1f14e7ebc4b8fdd38944249","first_seen":"2026-02-17T15:14:02.851903Z","last_seen":"2026-02-17T15:15:31.648257Z","times_seen":2,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.esperesso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/hstack-CUgmLe_w.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:56.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esperesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:39:23 GMT","end":"Mon, 11 May 2026 21:37:10 GMT"},"fingerprint":{"sha1":"7D:D7:1F:F3:EC:B2:62:EE:46:06:FF:B5:03:10:4F:D3:5D:30:F8:A7","sha256":"75:A0:16:A2:94:7C:AF:93:9D:5A:94:40:3C:0C:89:D0:E3:F7:DB:28:0E:45:DC:7D:2D:8D:A3:50:53:54:D1:D9"}}},"request":{"raw":"GET /assets/hstack-CUgmLe_w.js HTTP/1.1\r\nHost: claim.esperesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/assets/root-W8lXAx1b.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 15:14:56 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 12 Feb 2026 15:00:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\ncontent-encoding: br\r\nage: 91\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"698deb27-1d9\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lPaL46DRw0QNJ%2BuvJLOFo9q5RK%2FAb%2B1PjocMFDzELOey%2BDU8LCS%2FX%2B8s13HMQB6M9MKs%2Btf%2F%2BAzho1U3j094HBv2BdFGEvw7rpy78F4JZxdYqXi9pOAGvCHi\"}]}\r\ncf-ray: 9cf63cbc1eeb4435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":473,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (472)","md5":"b7eee23af1a11018eccb2f03f433479e","sha1":"26a85d0dfade6f1936bf0536ff7552cafb10eddf","sha256":"be84c6b2df189dee15f38c7cac639297e122f25960e6ecf27b842b497f34a032","sha512":"be66625d268bd7860953531aeecb3af8281ddbb7a4a506ae6f087dd003d425c40ce907773581b62ccd8cad76d8897a7b90594afdb5467e21acced2a78344ca91","ssdeep":"","tlshash":"a5f0dcaba44171b003e5cc68b1e6526951de6fd8f67195c4a0cf884f26202c682aba4a","first_seen":"2026-02-12T20:37:44.860275Z","last_seen":"2026-02-17T15:15:31.648865Z","times_seen":4,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.esperesso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/portal-config.context-CMF-xdRd.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:56.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esperesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:39:23 GMT","end":"Mon, 11 May 2026 21:37:10 GMT"},"fingerprint":{"sha1":"7D:D7:1F:F3:EC:B2:62:EE:46:06:FF:B5:03:10:4F:D3:5D:30:F8:A7","sha256":"75:A0:16:A2:94:7C:AF:93:9D:5A:94:40:3C:0C:89:D0:E3:F7:DB:28:0E:45:DC:7D:2D:8D:A3:50:53:54:D1:D9"}}},"request":{"raw":"GET /assets/portal-config.context-CMF-xdRd.js HTTP/1.1\r\nHost: claim.esperesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/assets/root-W8lXAx1b.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 15:14:56 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 12 Feb 2026 15:00:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\ncontent-encoding: br\r\nage: 91\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"698deb27-15f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xUdQcpp547%2BLQiaywHOYd7mEzHIOAccv22UcaD1HSHzE8M4or1CsIAL1sUgrh%2BDvuLmWvyL1CKBG3xzu4ofiuRPpxKaEU1jBXlealaMJKUit2TXD8fjuzqTl\"}]}\r\ncf-ray: 9cf63cbc1ef84435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":351,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (350)","md5":"e3aebedff17583da4653f1a9fa85711e","sha1":"eda59fae2e436695ea79edb0e83a77b9ce79b6eb","sha256":"0f45a30e055ac1c9f616ae57c71e9d80ca7a02011fada27eb21c67c800839fbd","sha512":"975be27fb649bf407705df47343c51c2247c548f1f2c62d174db07e0bca4fbeb95c32f88888fd50873430d1d7e92accbb4a58b9c083b958372cac8a4ece6a7f4","ssdeep":"","tlshash":"b2e0c09b6040f67277034cf528208534d333346a30258b70c11c855bbac00e2633f8e2","first_seen":"2026-02-12T20:37:44.944046Z","last_seen":"2026-02-17T15:15:31.649714Z","times_seen":4,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.esperesso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/hiunicornstudio/unicornstudio.js@v2.0.1/dist/unicornStudio.umd.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:57.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/hiunicornstudio/unicornstudio.js@v2.0.1/dist/unicornStudio.umd.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 2.0.1\r\nx-jsd-version-type: version\r\netag: W/\"27f09-y/Rvi2bV0iZWjaDz7inrFDeE0Mk\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 3349684\r\ndate: Tue, 17 Feb 2026 15:14:57 GMT\r\nx-served-by: cache-fra-etou8220186-FRA, cache-hel1410022-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 40621\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":163593,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d62fcb8aae79e4ddff0c2f73514cac7f","sha1":"cbf46f8b66d5d226568da0f3ee29eb143784d0c9","sha256":"9a64dbb9af5e9672cc99b091377d7df9a9d1dcb2a910b639360e77b18a31cd71","sha512":"be67b0445a5e1603905d44b113b7d5c70f675e8901d6cf7a7f918cb61f197d581abee3af79af6e846d27cf87b7a0fcac17e0330455992ec09ee337b194a05f35","ssdeep":"3072:2dkdy/7ekEfcyDjn/+H4/l81Ei7PlzLWymGMbnDaURDS5WfeT:2dkdy/7ekEfcMRDS5WfeT","tlshash":"9ef3e9a6716b642e0982818bf0750e07a226655c340dc46d7b7cb8ff68ece5e317d73a","first_seen":"2026-01-30T19:04:09.913225Z","last_seen":"2026-04-08T12:13:16.904295Z","times_seen":15,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":36,"dns":1,"connect":13,"send":0,"wait":16,"receive":14,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/fonts/pp-neue-montreal/pp-neue-montreal-medium.woff2","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:55.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esperesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:39:23 GMT","end":"Mon, 11 May 2026 21:37:10 GMT"},"fingerprint":{"sha1":"7D:D7:1F:F3:EC:B2:62:EE:46:06:FF:B5:03:10:4F:D3:5D:30:F8:A7","sha256":"75:A0:16:A2:94:7C:AF:93:9D:5A:94:40:3C:0C:89:D0:E3:F7:DB:28:0E:45:DC:7D:2D:8D:A3:50:53:54:D1:D9"}}},"request":{"raw":"GET /fonts/pp-neue-montreal/pp-neue-montreal-medium.woff2 HTTP/1.1\r\nHost: claim.esperesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/fonts/pp-neue-montreal/font.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 15:14:55 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 51980\r\nlast-modified: Thu, 12 Feb 2026 15:00:55 GMT\r\netag: \"698deb27-cb0c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 91\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2a8WNU0ItY%2FudAeMdJuSJQgnYxJha8hJrMmS4kBurFz1bWh1LYBQX3LBeeOVXDub%2BKEvwR2nah05qsj78n9gs%2BYc4tH4KEePm0qDCY%2BglhmsTqynVgWd2Tn1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cf63cbbdedb4435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51980,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 51980, version 1.0","md5":"b36caee87073c28b3f64d07e13d86b2a","sha1":"5f77698d1e7c61ee9dbeda0774b7227c0e3ebf3a","sha256":"11a1b227a4f432bdc5587a529d34a46abbed7067b6e1fb913db0c489c7175828","sha512":"4d868669f739643351e9d2d6ec442fce5db761eb35f48e855deb755529556b28bf55adbd1eb4d25b34478efb35cc34662ead7af40342f365f6082b11f337ad38","ssdeep":"1536:mfOh/to3MFPyrfkIsvSfkMmIxH1S0VSIw6b:mfOh/+cJmpOYI0cIXb","tlshash":"f933f254a314656ed906ef65c95c2ba363bd33dae801e84f303d3bdbf91aa312790057","first_seen":"2023-11-11T04:34:18Z","last_seen":"2026-04-22T03:38:54.134872Z","times_seen":327,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.esperesso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/use-is-client.hook-Dbkd0djT.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:56.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esperesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:39:23 GMT","end":"Mon, 11 May 2026 21:37:10 GMT"},"fingerprint":{"sha1":"7D:D7:1F:F3:EC:B2:62:EE:46:06:FF:B5:03:10:4F:D3:5D:30:F8:A7","sha256":"75:A0:16:A2:94:7C:AF:93:9D:5A:94:40:3C:0C:89:D0:E3:F7:DB:28:0E:45:DC:7D:2D:8D:A3:50:53:54:D1:D9"}}},"request":{"raw":"GET /assets/use-is-client.hook-Dbkd0djT.js HTTP/1.1\r\nHost: claim.esperesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/assets/root-W8lXAx1b.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 15:14:56 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 12 Feb 2026 15:00:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\ncontent-encoding: br\r\nage: 91\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"698deb27-8d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vah3Lnc3XdStVPm7Vjx4pUMlEhKYIDtxwcJMNWF2%2BTXAktnwUs75u9rPxTf2CN9Wbwh%2BKsldPYuXPQO75Hi3wPldM3EJEdqQAI%2FpSxXRcNWUq7bx8%2BY9sa%2Fu\"}]}\r\ncf-ray: 9cf63cbc1ef44435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":141,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"391de8cdcd2af4de88351dd1d73e986a","sha1":"153d5f5716888fed5639274f54d354547ba1e868","sha256":"8171e7a9d58fe35766e9a6b00e4473415b36bfbc374a727c1eef52dedbc3541f","sha512":"c831734885d6e9a318bdde077004403d4732e3a8b423d0bee43f37bd708692488dbca71242f9a02e1fa310b1ee1c81e6c98fee1e174e2da1cdee0cd46adbe442","ssdeep":"","tlshash":"c0c02b551081acb0870008b452b7cdb0a43354dc22e52b90b42a4c0717050e38bafc27","first_seen":"2026-02-12T20:37:44.861545Z","last_seen":"2026-02-17T15:15:31.651273Z","times_seen":4,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.esperesso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/loader.component-MQ1Ecw-o.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:56.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esperesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:39:23 GMT","end":"Mon, 11 May 2026 21:37:10 GMT"},"fingerprint":{"sha1":"7D:D7:1F:F3:EC:B2:62:EE:46:06:FF:B5:03:10:4F:D3:5D:30:F8:A7","sha256":"75:A0:16:A2:94:7C:AF:93:9D:5A:94:40:3C:0C:89:D0:E3:F7:DB:28:0E:45:DC:7D:2D:8D:A3:50:53:54:D1:D9"}}},"request":{"raw":"GET /assets/loader.component-MQ1Ecw-o.js HTTP/1.1\r\nHost: claim.esperesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/assets/home.page-Ct3tf3tM.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 15:14:56 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 12 Feb 2026 15:00:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\ncontent-encoding: br\r\nage: 91\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"698deb27-1ccbd\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PoZb2iIcInT1893knS7bCAZod1h0Cg9gL%2FRFFVENgdFVTcj2e6iBDsGawm12fWRXGDFWZv18KLaQIkvmzkP2TwMwCNlnYzNp98rrY1f%2BbIPJWu%2BWwMHlhh8m\"}]}\r\ncf-ray: 9cf63cbc6f154435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":117949,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (46483)","md5":"69f34b5b165315b71333d0e6a7295fa3","sha1":"9b6e351669e11739c8bd9e39df9509b790fe24b5","sha256":"d0649f242ceef1251752ba00284bf8a0a01f66898d17d12e7026c1140b275f2f","sha512":"fbf030d996874ea4427f2180b55b4e43847cd90c862fc82690ead75728acbe61b41ec33d054831a04a433b6dff3ee909d47cc2c4f12c989bd50b422e8a6bcc70","ssdeep":"1536:IRK0GSaGlSaeey2MZ+40INYm1C5XeJP2CprtD2zj7br:IRcSllS3e070Bm1jrQ","tlshash":"b0b3c79c7882b8a5539b45a590ff010bf27d6c4b700c84a0f268ddaf79738695263fbd","first_seen":"2026-02-12T20:37:44.897315Z","last_seen":"2026-02-17T15:15:31.651856Z","times_seen":4,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.esperesso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/secureproxy?e=jscdn/getFile","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:56.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esperesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:39:23 GMT","end":"Mon, 11 May 2026 21:37:10 GMT"},"fingerprint":{"sha1":"7D:D7:1F:F3:EC:B2:62:EE:46:06:FF:B5:03:10:4F:D3:5D:30:F8:A7","sha256":"75:A0:16:A2:94:7C:AF:93:9D:5A:94:40:3C:0C:89:D0:E3:F7:DB:28:0E:45:DC:7D:2D:8D:A3:50:53:54:D1:D9"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: claim.esperesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim.esperesso.foundation/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://claim.esperesso.foundation\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"ix8a87qcfzu197mhyk0v\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 15:14:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eTf5v0%2BHNB4KlF0qApli0xu5LYY0Jff3IfLnGMGierNPLCYdLBuA%2FJj5hguQHpiF88ovaggUjNFNr%2B7CQm5holU0NyQ4o0WOlZoWqeFbylohVg%3D%3D\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncf-ray: 9cf63cbc8f1a4435-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3319072,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9e1f588a88429f3a76eb883151f20f99","sha1":"5ce040d2aa525dbb39f7bab3dbb5340280844ea6","sha256":"d2cf06aa38ce6f531c63a40cd27cc738039d656558631f47aa4e5bae1754cb0c","sha512":"a2ce8bf999852658b98d6f99d6a0896b2cdd92ae3d8de9ecd5529976f67ef03d993290a0b420b20025f8df1eb3a1b2bc91ec973349aa5dedc85131f72e8f6676","ssdeep":"24576:1yjCq4rCMBZ849RxN4soD5JaHTRsq4BrWjhNI:1WdMhfxNeeHFVX2","tlshash":"fa252384ac8790a64b4427bbe0b75e1e52a05f4548d952dfe90ddd8136fffb082cb42e","first_seen":"2026-02-17T15:14:02.841627Z","last_seen":"2026-02-17T15:15:31.652403Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1426,"receive":895,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.esperesso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/trustWallet-E2GVGE4U-CcH50yxW.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:57.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esperesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:39:23 GMT","end":"Mon, 11 May 2026 21:37:10 GMT"},"fingerprint":{"sha1":"7D:D7:1F:F3:EC:B2:62:EE:46:06:FF:B5:03:10:4F:D3:5D:30:F8:A7","sha256":"75:A0:16:A2:94:7C:AF:93:9D:5A:94:40:3C:0C:89:D0:E3:F7:DB:28:0E:45:DC:7D:2D:8D:A3:50:53:54:D1:D9"}}},"request":{"raw":"GET /assets/trustWallet-E2GVGE4U-CcH50yxW.js HTTP/1.1\r\nHost: claim.esperesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/assets/root-8mEX-aQm.js\r\nCookie: cf_clearance=51kqFdHlgwCmq4AZXa7a8OZHZ7b_PKvTuRRtJG6CUtU-1771341296-1.2.1.1-FOWik8D0h1Nn.VtkzZpAJ4lkUOOKcjVH3DRCigh3pGX7A2lo5Y.33ypI9RQl0IizAqPHKaqhYy3pTKi1A8BcKCFDRy9Hqg75ovYVEALmyj5H9Qao2BH9A5zuXqghoItIwpAwOwsYAC2FCs5.RnrcoCLP25LCY9WQu84bh5_YWXwcTP72H.tEyh3msamy2I_UwB9KW.wJxQjyDNy_6Ah27ZvKYJDq.gsor7tGUeIwPnc; ph_phc_9Cg41wNBIXNBnxyvzsD9AC6UT5KSjNjTR4SSnj4uH4_posthog=%7B%22%24device_id%22%3A%22019c6c2b-38fb-75f1-afb3-508acf5dd83d%22%2C%22distinct_id%22%3A%22019c6c2b-38fb-75f1-afb3-508acf5dd83d%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 15:14:58 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 12 Feb 2026 15:00:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"698deb27-2f8\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=52AXBwdE4cSUBSs2cPeRQmwK4qFHK7XjT39kr7OAGHanneO2a1G%2BWt1gXk%2Fkoxb2Pad2cfVEiJQIwA%2FnFsyxdDTDfDsBie3WxP3hS6jC0zIKUnxZA9A0D7QE\"}]}\r\ncf-ray: 9cf63cc828e84435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":760,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (759)","md5":"a25b589fc633676b9a58fa384f2d0334","sha1":"119f38e7d9e19f351e022c5fa0f537f15ea3f933","sha256":"7edbc680126336b8db68846c0b688c957b60afd953859b06ca9dfd6a74a54f02","sha512":"ad917ac1bc65cbd0d55a05d5e39241f3badda088e0a56bf1d332a82c1df6d46e706c54bf3f9ddf22c75c3e754a33d6c3c03b2e6138720a09e85e0ce96cd9dc9b","ssdeep":"","tlshash":"3c01c0dbdb29dc77c85f83bced08a4a3521876db60c8436ee6554f1f25a808b1c0db60","first_seen":"2025-06-03T09:03:10.609568Z","last_seen":"2026-04-17T09:09:52.485468Z","times_seen":36,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.esperesso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/walletConnectWallet-FNSU4KNU-B0ci71fU.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:57.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esperesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:39:23 GMT","end":"Mon, 11 May 2026 21:37:10 GMT"},"fingerprint":{"sha1":"7D:D7:1F:F3:EC:B2:62:EE:46:06:FF:B5:03:10:4F:D3:5D:30:F8:A7","sha256":"75:A0:16:A2:94:7C:AF:93:9D:5A:94:40:3C:0C:89:D0:E3:F7:DB:28:0E:45:DC:7D:2D:8D:A3:50:53:54:D1:D9"}}},"request":{"raw":"GET /assets/walletConnectWallet-FNSU4KNU-B0ci71fU.js HTTP/1.1\r\nHost: claim.esperesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/assets/root-8mEX-aQm.js\r\nCookie: cf_clearance=51kqFdHlgwCmq4AZXa7a8OZHZ7b_PKvTuRRtJG6CUtU-1771341296-1.2.1.1-FOWik8D0h1Nn.VtkzZpAJ4lkUOOKcjVH3DRCigh3pGX7A2lo5Y.33ypI9RQl0IizAqPHKaqhYy3pTKi1A8BcKCFDRy9Hqg75ovYVEALmyj5H9Qao2BH9A5zuXqghoItIwpAwOwsYAC2FCs5.RnrcoCLP25LCY9WQu84bh5_YWXwcTP72H.tEyh3msamy2I_UwB9KW.wJxQjyDNy_6Ah27ZvKYJDq.gsor7tGUeIwPnc; ph_phc_9Cg41wNBIXNBnxyvzsD9AC6UT5KSjNjTR4SSnj4uH4_posthog=%7B%22%24device_id%22%3A%22019c6c2b-38fb-75f1-afb3-508acf5dd83d%22%2C%22distinct_id%22%3A%22019c6c2b-38fb-75f1-afb3-508acf5dd83d%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 15:14:59 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 12 Feb 2026 15:00:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"698deb27-5e9\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0i%2BQ1LCViJFdsHH3wL2%2Ft8JamhNI1IhTllRuzdUCJ0uKpylrM76yZau3GFIvV0zYIs%2BuyWazooXoEn4lEiGIHz690ujnsrSuyAJ3Soh0XFBRpBTYiMGti2k2\"}]}\r\ncf-ray: 9cf63cc848ef4435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1513,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1512)","md5":"05a8359b297686a38136a26a10311301","sha1":"5d995f91f19bdd38e876708ea756b76ad53ce55c","sha256":"ff6da22ac4da1356c60264b8a4ca0e3bf79b026e16220dfac81cf1058e40160d","sha512":"28ffda0d4b0fcf35ec80c90c3bfc90103685a5220858159a9016588568e808550fb18e8b2d8ee45f72817087723c842ad4f3872adf933ef1da6267d6cef4fdbb","ssdeep":"","tlshash":"1a3115ef6be412f4d017e3a3d01590267ddb24ba7729ef44421b4ae0ae0149d64c8d78","first_seen":"2024-12-25T05:30:42.591141Z","last_seen":"2026-04-18T12:51:34.184449Z","times_seen":71,"resource_available":true,"data":null}},"time_used":1345,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1345,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.esperesso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"us-assets.i.posthog.com/static/dead-clicks-autocapture.js?v=1.332.0","fqdn":"us-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"104.20.17.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:58.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 21:09:57 GMT","end":"Mon, 20 Apr 2026 22:09:56 GMT"},"fingerprint":{"sha1":"28:A9:79:25:3F:AF:B7:89:AC:9D:42:8A:C3:69:5B:4C:8E:6F:4C:77","sha256":"4D:63:13:FA:35:7E:FE:29:D4:53:E6:EF:2E:3B:8F:06:9D:32:9C:B5:EB:7E:3C:76:62:83:84:76:B4:C3:88:3C"}}},"request":{"raw":"GET /static/dead-clicks-autocapture.js?v=1.332.0 HTTP/1.1\r\nHost: us-assets.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://claim.esperesso.foundation\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Feb 2026 15:14:58 GMT\r\ncontent-type: text/javascript; charset=\"utf-8\"\r\ncache-control: public, max-age=14400\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nlast-modified: Tue, 17 Feb 2026 13:26:20 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-opener-policy: same-origin\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 3\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: MISS\r\ncf-ray: 9cf63cca9f233e6a-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13059,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13006)","md5":"cc981e3687edce8a3d22380972ee45e3","sha1":"1955fa562b42c9f134b62e7ac0e9c11bbfa4da75","sha256":"a40d91c2014cca52defeb2481998498f02fc53526fd05302df0e0e490173814a","sha512":"2dc021b1b3ef375290f2d59d97ccc6bd6306aa4af2791c6cc29a129b50acc89a0566e5b27074037312082f55966c0bda2d77ab2ace32ad4a2154d08176e1c2c1","ssdeep":"384:sw+VM/tkSeCRi2WzHiAOjCQBgxjOJWgikn26FT:n+D9QeOMgM6FT","tlshash":"69420a88b7d0f3b12bd7145ac4bf1702f03525082556c824b159ecdab4adb1622bbe7f","first_seen":"2026-01-12T11:07:28.642714Z","last_seen":"2026-04-13T18:21:15.324763Z","times_seen":5155,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/home.page-Ct3tf3tM.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:55.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esperesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:39:23 GMT","end":"Mon, 11 May 2026 21:37:10 GMT"},"fingerprint":{"sha1":"7D:D7:1F:F3:EC:B2:62:EE:46:06:FF:B5:03:10:4F:D3:5D:30:F8:A7","sha256":"75:A0:16:A2:94:7C:AF:93:9D:5A:94:40:3C:0C:89:D0:E3:F7:DB:28:0E:45:DC:7D:2D:8D:A3:50:53:54:D1:D9"}}},"request":{"raw":"GET /assets/home.page-Ct3tf3tM.js HTTP/1.1\r\nHost: claim.esperesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 15:14:55 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 12 Feb 2026 15:00:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\ncontent-encoding: br\r\nage: 91\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"698deb27-6195\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=st1asMkgnlRocI4QDDC9bWWHiGtouXsVb%2BaZf7E5xeJxBHbuQg5NpYh2gqS5%2BRSyqq06HCLAuKX6FIFRU74QMoBMNXv5AAj33%2FqSo3fZj3uaoF9QLpDRuOEy\"}]}\r\ncf-ray: 9cf63cbbceda4435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24981,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (725)","md5":"5a29259a94de743d09a4303684f81d03","sha1":"18c34520487bac55562921d773bff2403de1dd0c","sha256":"2d8a7ac7eb66a1c7fa524540bc485ef3812e3ee8b63d46ac893604ef6d75abbb","sha512":"53b77269b87130d63611ebfa481d178afba5f58d7cad427923307d2c30b05744ad70c91df248c2e29f3b8f8a187063bb1595a5d1203b93cc060e4916c323b7b3","ssdeep":"384:ly1/X+OcTGNVVsdKwB2hPBF8oIxqMjmkWxuh27ab/tPODgps:ly1/X+OWGNVVsdKG2JBFTxyM5","tlshash":"9eb2950955b21172e243e0a51d2b9a193333420b6e59bc5c3f9d92786f6c13e99f37ec","first_seen":"2026-02-17T15:14:02.853014Z","last_seen":"2026-02-17T15:15:31.654504Z","times_seen":2,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.esperesso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/chunk-EPOLDU6W-CTl9JfCV.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:56.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esperesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:39:23 GMT","end":"Mon, 11 May 2026 21:37:10 GMT"},"fingerprint":{"sha1":"7D:D7:1F:F3:EC:B2:62:EE:46:06:FF:B5:03:10:4F:D3:5D:30:F8:A7","sha256":"75:A0:16:A2:94:7C:AF:93:9D:5A:94:40:3C:0C:89:D0:E3:F7:DB:28:0E:45:DC:7D:2D:8D:A3:50:53:54:D1:D9"}}},"request":{"raw":"GET /assets/chunk-EPOLDU6W-CTl9JfCV.js HTTP/1.1\r\nHost: claim.esperesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/assets/root-W8lXAx1b.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 15:14:56 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 12 Feb 2026 15:00:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\ncontent-encoding: br\r\nage: 91\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"698deb27-1e8c2\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1OC8F%2FD%2BQSglZP1q7nJys5g8T84CQu5xrZxnd76mNHg4lw%2FW1eSUcMpibv9YET1l3Rfq0%2BKcHXR33Rq%2BBzW74MVCe7d08mJ7P66fW7TX%2FF3nKKeDDLIsjweo\"}]}\r\ncf-ray: 9cf63cbc1ee64435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":125122,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (46949)","md5":"db6bcb2e9203db5931e0a006707aa8f8","sha1":"3c2e1a69890c86ec42c22dcbbb2724da796f14fc","sha256":"aafcb8e093136e7e5e16c711e54525ad50b79bc7d4032a490688e34fdb02af56","sha512":"940017d99e2e7a61b013843f41f60e8ce5cc85443643b0383d6851dfbbe22ea17b320d8e3e4a6ce1c6a517832dc1d270a40aa57a10c0ea2582b776a94e9e6edd","ssdeep":"1536:YZe4IJi0G4pPj0hsIkZxr5bRRvMViduOZgVI/rYWYYKyWXMH:Ge4IoMaUZxr/RvMVid1GVI/rYWYYLW+","tlshash":"22c33bf9729270794bef13f180bb0015b3b92ca9246d8015b2acc99e35b5c4c967bf79","first_seen":"2026-02-12T20:37:44.877208Z","last_seen":"2026-02-17T15:15:31.655095Z","times_seen":4,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.esperesso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/user.context-DIZs7jcU.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:56.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esperesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:39:23 GMT","end":"Mon, 11 May 2026 21:37:10 GMT"},"fingerprint":{"sha1":"7D:D7:1F:F3:EC:B2:62:EE:46:06:FF:B5:03:10:4F:D3:5D:30:F8:A7","sha256":"75:A0:16:A2:94:7C:AF:93:9D:5A:94:40:3C:0C:89:D0:E3:F7:DB:28:0E:45:DC:7D:2D:8D:A3:50:53:54:D1:D9"}}},"request":{"raw":"GET /assets/user.context-DIZs7jcU.js HTTP/1.1\r\nHost: claim.esperesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/assets/root-W8lXAx1b.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 15:14:56 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 12 Feb 2026 15:00:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\ncontent-encoding: br\r\nage: 91\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"698deb27-5cfc\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wyPgEwTUzXhXrbHGFCqSRzas1HKK9j%2B7X1D1rv0SiyKg%2F3sq5TQSwwBaQBqjcVJpvDKXUYcL%2FVmh5FGSa0MFyPPmy3%2Bc9YRScAqLNgKjx6WrarywYuPrKm7u\"}]}\r\ncf-ray: 9cf63cbc1ef04435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23804,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12049)","md5":"141404d63ba51bf63193a06055d53b51","sha1":"c45d60d7f06d4b87009fcb9b4d33800f51fea6b8","sha256":"59a539e37c978604e589f466d438e0a4a599b4eb7ff53c7120cf6e6f75658f99","sha512":"fb6d0501d6ad0d357cb96205f93210ca81d25d686f9f3fc87a2cdfc917d70aa42159c8e77596c49e1127c8f9fd2577d3680992424706b83352a8aae4d07f660e","ssdeep":"384:OPQJMJF7sMqTKP/bSZu/dcLgl1lkkObqtrC8CmUZr8sEo2M48/DFYREV7J/RC5AU:OPQJMJFITKP/b24dcC1lkMtrC8CBl8uM","tlshash":"67b2f75831d9e0b142e750a4947f620bf17819a0e05ca4a4e2aafdf439f8d97817bf36","first_seen":"2026-02-12T20:37:44.894834Z","last_seen":"2026-02-17T15:15:31.655683Z","times_seen":4,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.esperesso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/bitgetWallet-CLYTW54T-Wwn2QYd0.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:57.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esperesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:39:23 GMT","end":"Mon, 11 May 2026 21:37:10 GMT"},"fingerprint":{"sha1":"7D:D7:1F:F3:EC:B2:62:EE:46:06:FF:B5:03:10:4F:D3:5D:30:F8:A7","sha256":"75:A0:16:A2:94:7C:AF:93:9D:5A:94:40:3C:0C:89:D0:E3:F7:DB:28:0E:45:DC:7D:2D:8D:A3:50:53:54:D1:D9"}}},"request":{"raw":"GET /assets/bitgetWallet-CLYTW54T-Wwn2QYd0.js HTTP/1.1\r\nHost: claim.esperesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/assets/root-8mEX-aQm.js\r\nCookie: cf_clearance=51kqFdHlgwCmq4AZXa7a8OZHZ7b_PKvTuRRtJG6CUtU-1771341296-1.2.1.1-FOWik8D0h1Nn.VtkzZpAJ4lkUOOKcjVH3DRCigh3pGX7A2lo5Y.33ypI9RQl0IizAqPHKaqhYy3pTKi1A8BcKCFDRy9Hqg75ovYVEALmyj5H9Qao2BH9A5zuXqghoItIwpAwOwsYAC2FCs5.RnrcoCLP25LCY9WQu84bh5_YWXwcTP72H.tEyh3msamy2I_UwB9KW.wJxQjyDNy_6Ah27ZvKYJDq.gsor7tGUeIwPnc; ph_phc_9Cg41wNBIXNBnxyvzsD9AC6UT5KSjNjTR4SSnj4uH4_posthog=%7B%22%24device_id%22%3A%22019c6c2b-38fb-75f1-afb3-508acf5dd83d%22%2C%22distinct_id%22%3A%22019c6c2b-38fb-75f1-afb3-508acf5dd83d%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 15:14:58 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 12 Feb 2026 15:00:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"698deb27-da5\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2zNaf9qCLH%2B4d5ZEJRneykuarJ3TF3yNR%2BQ4xvKXIUb9S7aMSn6qwPqZ320aVkyJhLNEWPDeRjBUgrZ%2B2cmkSF6Bny0uz6NSmFkM1Qt2M%2FdDEIUk6jgv14CC\"}]}\r\ncf-ray: 9cf63cc838ed4435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3493,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (3492)","md5":"c209ae7e667ef953a67fd9e02e026122","sha1":"263c559b9b3d0aa0da8a7ea36790983dc7a0821f","sha256":"1f5ce5ae5b81eeeb68a411dc27cbdeadab04eecff9fca4447d20755e6b770e46","sha512":"6daddffb9e9d093649df98bcb5d7737e9fa7687dac1308a4710689c88076d5dc81b7de5bbfe7abf7a3910d9f53c331207b153b9f582c2eafa4717e553cc07f58","ssdeep":"","tlshash":"2571a791d7f5e09f6b1803b6ff9a14e79432f4e641140b9de55e3361200ee23e91f554","first_seen":"2025-04-09T07:08:13.379631Z","last_seen":"2026-04-08T12:13:16.922421Z","times_seen":30,"resource_available":true,"data":null}},"time_used":413,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":412,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.esperesso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/login-CWDTIDNK-DhDUYE4b.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:57.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esperesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:39:23 GMT","end":"Mon, 11 May 2026 21:37:10 GMT"},"fingerprint":{"sha1":"7D:D7:1F:F3:EC:B2:62:EE:46:06:FF:B5:03:10:4F:D3:5D:30:F8:A7","sha256":"75:A0:16:A2:94:7C:AF:93:9D:5A:94:40:3C:0C:89:D0:E3:F7:DB:28:0E:45:DC:7D:2D:8D:A3:50:53:54:D1:D9"}}},"request":{"raw":"GET /assets/login-CWDTIDNK-DhDUYE4b.js HTTP/1.1\r\nHost: claim.esperesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/assets/en_US-762U7H2X-CbWPluA0.js\r\nCookie: cf_clearance=51kqFdHlgwCmq4AZXa7a8OZHZ7b_PKvTuRRtJG6CUtU-1771341296-1.2.1.1-FOWik8D0h1Nn.VtkzZpAJ4lkUOOKcjVH3DRCigh3pGX7A2lo5Y.33ypI9RQl0IizAqPHKaqhYy3pTKi1A8BcKCFDRy9Hqg75ovYVEALmyj5H9Qao2BH9A5zuXqghoItIwpAwOwsYAC2FCs5.RnrcoCLP25LCY9WQu84bh5_YWXwcTP72H.tEyh3msamy2I_UwB9KW.wJxQjyDNy_6Ah27ZvKYJDq.gsor7tGUeIwPnc; ph_phc_9Cg41wNBIXNBnxyvzsD9AC6UT5KSjNjTR4SSnj4uH4_posthog=%7B%22%24device_id%22%3A%22019c6c2b-38fb-75f1-afb3-508acf5dd83d%22%2C%22distinct_id%22%3A%22019c6c2b-38fb-75f1-afb3-508acf5dd83d%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 15:14:58 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 12 Feb 2026 15:00:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"698deb27-243b\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QCjan6h0Uv6jhTDLRn%2Bx2UPGGw7IejWWMDQTQ5Q83xN%2BBzSGdZ0%2FYFkr0jNE7FdxlT8yUyv64msT6FTTUUY22epdWQ1ecyfOp%2FUy%2B1awQv86giezUyU%2FBh23\"}]}\r\ncf-ray: 9cf63cc848f44435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9275,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (9274)","md5":"baa5f0f7116deb709bd4b3a54c31eaff","sha1":"10c4efb11b9c1bcdd87aca0c0443f636c8d29b39","sha256":"63a8daf7039c537fe8d7ff88c50a6b8022e74f447d5df3ffcd6a515723252c33","sha512":"8d534b9541eb5d33576b4a5a2dbd28aadc57c01fc91ea3644bcfb13ad76470288c9ac8228a1fc8d6f30ca5873abb0c3b20136d5377bdb9923c3ff6665542b4bc","ssdeep":"192:dyAYirZ2ixxPjwzSFW5xrsRo3/58dmho4x7MV:EiN2Qjw+FWjARaidSpx7MV","tlshash":"261283ea5768627ed89bce6cdf668840130d70fd35b8c8e49a9ecf686057c89fd87010","first_seen":"2024-12-25T05:30:42.593071Z","last_seen":"2026-04-18T12:51:34.197248Z","times_seen":77,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.esperesso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"us.i.posthog.com/e/?ip=0\u0026_=1771341297979\u0026ver=1.332.0\u0026compression=gzip-js","fqdn":"us.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"52.3.30.168","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:57.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6A:93:A0:4B:D8:27:D0:2A:1E:35:71:6C:A2:1C:2A:2C:2E:E1:A7:D7","sha256":"2A:1F:69:7F:28:B0:DA:BD:59:C5:0F:27:B3:35:6D:E9:5B:8B:A2:4A:F8:89:F1:F0:10:CD:CD:8F:62:8E:07:E6"}}},"request":{"raw":"POST /e/?ip=0\u0026_=1771341297979\u0026ver=1.332.0\u0026compression=gzip-js HTTP/1.1\r\nHost: us.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim.esperesso.foundation/\r\ncontent-type: text/plain\r\nContent-Length: 832\r\nOrigin: https://claim.esperesso.foundation\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Feb 2026 15:14:58 GMT\r\ncontent-type: application/json\r\ncontent-length: 15\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: https://claim.esperesso.foundation\r\naccess-control-allow-credentials: true\r\nx-envoy-upstream-service-time: 0\r\nserver: envoy\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c86a47ac0d792e37182689c73fcbf6ad","sha1":"8fd92e4671341e79f0a3529ac5e9d59d38db9e78","sha256":"0c40bafcfdc8adc6db63a6a5bfdb3dd5201798e6163fc674dc2fcbdb2a4134f1","sha512":"827cafe34edc64ac15f9bb3d269d338f8161a08d174071ed415b8a9e78d0672327e09034445292f90b81f5a063c8606d36ee66b20e0fff0446130303d598a8d3","ssdeep":"","tlshash":"1b600000000000030fc00c00000cc03c3ff30fc0003f00c0030fc0300c030c0c00c000","first_seen":"2023-04-06T21:35:05Z","last_seen":"2026-04-23T04:38:48.39503Z","times_seen":24860,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":172,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":123},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"magna-public-assets-prod.s3.amazonaws.com/portal-assets/espresso/logo.svg","fqdn":"magna-public-assets-prod.s3.amazonaws.com","domain":"magna-public-assets-prod.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.21.107","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:55.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /portal-assets/espresso/logo.svg HTTP/1.1\r\nHost: magna-public-assets-prod.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: Ge5zR2/LL5IMQroe52KAvPdzDxM+14ExQq5VOuRRt5A18SvOWZUOv5tBU7ud+IVO5DnOIrtLgmyQ1N/h62DOog==\r\nx-amz-request-id: ABZ9VZ0RVEBE8R0P\r\nDate: Tue, 17 Feb 2026 15:14:57 GMT\r\nx-amz-replication-status: COMPLETED\r\nLast-Modified: Wed, 12 Nov 2025 16:32:20 GMT\r\nETag: \"e7d57d12734f150bf16762985f60e68f\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: TqihulMH7zzidS_xLcOiP5lydJnvVth2\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 10123\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":10123,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e7d57d12734f150bf16762985f60e68f","sha1":"8b9e922d3d6cb0e595f06f9be854993143e08c39","sha256":"fff37441b6ebebe425ac73d7370e23f99ef080363dde784aed0d5ab0d2f6d67e","sha512":"c3e6515d8895a288314112f2e450bbac693526a28f7bd3aaeb993e2cb6c387e15b6ae1a666e4c91db478c84ae041786c517745a1f58a7bbf618ddcc14661660c","ssdeep":"192:8+g/3Z39WicEGuje62Ar97zpAa2OiVv4218mT5Uq/ww1y:ng/3xQieuD2AZBAPPy2FTfBy","tlshash":"0d2296da6be8f3f1d506f3e2c65a4078ba2b70f56d66cb18cba52d55aa1045fc884cc0","first_seen":"2025-12-28T18:47:24.370223Z","last_seen":"2026-04-08T12:13:16.923463Z","times_seen":27,"resource_available":false,"data":null}},"time_used":756,"timings":{"blocked":314,"dns":13,"connect":95,"send":0,"wait":121,"receive":1,"ssl":209},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/plotly-2.24.1.min.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:55.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esperesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:39:23 GMT","end":"Mon, 11 May 2026 21:37:10 GMT"},"fingerprint":{"sha1":"7D:D7:1F:F3:EC:B2:62:EE:46:06:FF:B5:03:10:4F:D3:5D:30:F8:A7","sha256":"75:A0:16:A2:94:7C:AF:93:9D:5A:94:40:3C:0C:89:D0:E3:F7:DB:28:0E:45:DC:7D:2D:8D:A3:50:53:54:D1:D9"}}},"request":{"raw":"GET /plotly-2.24.1.min.js HTTP/1.1\r\nHost: claim.esperesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 15:14:55 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Thu, 12 Feb 2026 15:00:55 GMT\r\netag: \"698deb27-16981\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 296\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FuMluyF3T3e4gt06daaEdoSU5MNSR5MsqME9ExPeapr2h54y5alCZtpwq5rtK5IhvgaRsQqoXwsHoZFt1nstF4xgYsHnttNYy77Adjq2twahAYYzUsJwCxQz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cf63cbacebc4435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":92545,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"fa40c495876a1ca59d25aead5a1c6249","sha1":"448bb4bb459d66eed36eaa33e8202f8c5de5a913","sha256":"e9bdfe9da0e906b87bf0a700c678973e82f145acf202f9bb79c9baffc7d02494","sha512":"410bfb0545ffb4233e8c9c281d8f180e87663963eb9b7b6dc2dc77ea47be99853dc4dddf604bcde1a118bed90929e5c26a91189b68a3ad31f871e87f12f6933c","ssdeep":"768:MxUElc86+uTxQ5SaGW55DNxLRbAjlgtMPtYCdbOMc1yBgOZAJnKG7cycdLcYzrtd:X+Nh6lgWYubOf1SZAdw5ImL4wQaKupcg","tlshash":"349361d9994bd0e48e5222ded473ec09e4680963cdacf1a3b92cdec2741df66c44763a","first_seen":"2026-02-17T15:14:02.835554Z","last_seen":"2026-02-17T15:15:31.659044Z","times_seen":2,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.esperesso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/x.icon-CbqT8MzM.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:56.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esperesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:39:23 GMT","end":"Mon, 11 May 2026 21:37:10 GMT"},"fingerprint":{"sha1":"7D:D7:1F:F3:EC:B2:62:EE:46:06:FF:B5:03:10:4F:D3:5D:30:F8:A7","sha256":"75:A0:16:A2:94:7C:AF:93:9D:5A:94:40:3C:0C:89:D0:E3:F7:DB:28:0E:45:DC:7D:2D:8D:A3:50:53:54:D1:D9"}}},"request":{"raw":"GET /assets/x.icon-CbqT8MzM.js HTTP/1.1\r\nHost: claim.esperesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/assets/root-W8lXAx1b.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 15:14:56 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 12 Feb 2026 15:00:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\ncontent-encoding: br\r\nage: 91\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"698deb27-1ca\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JeYVPXt3c1aZ4zpd8L4IXq3vCpXUcoVKuaOFzyG9k%2BMHP80zDw%2BfGYAti2YaI1qjHaNxY6YnqohpY%2FdhLwxREcx939pjKmByswNmdkxMBinm9UAVUNvgdSiV\"}]}\r\ncf-ray: 9cf63cbc1ee54435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":458,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (457)","md5":"fb42e57ffea46e58aa4fb5ee7a0cef6a","sha1":"d70f95c5c596f2d7effecf7d91c026791f67880b","sha256":"e1f7a5c79ba590e07a72f3a5a1f220105553c2da2f97a31752ddf49e59d536e8","sha512":"1adb08cdfda523b90b2287caaeda482c961eb725d83342e0f20701507a655663ce9665c6e9c2a7bd1e569f3997950ee4ad441be86af502c621fec54e1ea10c84","ssdeep":"","tlshash":"54f097ff83c0609448591f7a79b22c252077b5f893a405a0c94449919d290f2b31ee82","first_seen":"2026-02-12T20:37:44.870545Z","last_seen":"2026-02-17T15:15:31.659695Z","times_seen":4,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.esperesso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/proxy-CbI-37ef.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:56.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esperesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:39:23 GMT","end":"Mon, 11 May 2026 21:37:10 GMT"},"fingerprint":{"sha1":"7D:D7:1F:F3:EC:B2:62:EE:46:06:FF:B5:03:10:4F:D3:5D:30:F8:A7","sha256":"75:A0:16:A2:94:7C:AF:93:9D:5A:94:40:3C:0C:89:D0:E3:F7:DB:28:0E:45:DC:7D:2D:8D:A3:50:53:54:D1:D9"}}},"request":{"raw":"GET /assets/proxy-CbI-37ef.js HTTP/1.1\r\nHost: claim.esperesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/assets/home.page-Ct3tf3tM.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 15:14:56 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 12 Feb 2026 15:00:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\ncontent-encoding: br\r\nage: 91\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"698deb27-1c317\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XpqZJp7n22JteBNAKbg1IQjtZPu0d%2BOgT2o4BMwpoNsm9iU8qDGYnxy0cyZ8ci0FFbe2o9kIh5VKnj5QGQ3qtUorGWMVQz68oyAKVtyx4GYNBni1SqZhx2zZ\"}]}\r\ncf-ray: 9cf63cbc6f164435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":115479,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39601)","md5":"a8609175f8d1090ccbfe6916a99abd31","sha1":"10b93318b1038161f4761f5f8b90d9ac2b10b38d","sha256":"9e0bf1425dd94af34dd3687c495430fc8f88005699cd827bd33a7c436d7c480a","sha512":"e8068f907bd69118366fb331a51b0f140e41c520d602b18986c0580fbace7fbefbf6c967a73f5f9de7b88578a5bb053b07289fc12ef59f40449775ad1cf71f28","ssdeep":"1536:H+2TsGd6fOmBgDHte9/Q3t/v5ScoeyUK8wlZWJDFV8lovCt5VyF6Puktr/:H+2Tdd6WFteRQ3t/vscoJUxwlMIwqr/","tlshash":"6bb307c572917561d3d685e9c0bf0b41b73718983009c0bcb63dadcb6d2250aa6bbb7e","first_seen":"2026-02-12T20:37:44.911871Z","last_seen":"2026-02-17T15:15:31.660652Z","times_seen":4,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.esperesso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/index.es-Cs6pd85t.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:57.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esperesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:39:23 GMT","end":"Mon, 11 May 2026 21:37:10 GMT"},"fingerprint":{"sha1":"7D:D7:1F:F3:EC:B2:62:EE:46:06:FF:B5:03:10:4F:D3:5D:30:F8:A7","sha256":"75:A0:16:A2:94:7C:AF:93:9D:5A:94:40:3C:0C:89:D0:E3:F7:DB:28:0E:45:DC:7D:2D:8D:A3:50:53:54:D1:D9"}}},"request":{"raw":"GET /assets/index.es-Cs6pd85t.js HTTP/1.1\r\nHost: claim.esperesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/assets/root-8mEX-aQm.js\r\nCookie: cf_clearance=51kqFdHlgwCmq4AZXa7a8OZHZ7b_PKvTuRRtJG6CUtU-1771341296-1.2.1.1-FOWik8D0h1Nn.VtkzZpAJ4lkUOOKcjVH3DRCigh3pGX7A2lo5Y.33ypI9RQl0IizAqPHKaqhYy3pTKi1A8BcKCFDRy9Hqg75ovYVEALmyj5H9Qao2BH9A5zuXqghoItIwpAwOwsYAC2FCs5.RnrcoCLP25LCY9WQu84bh5_YWXwcTP72H.tEyh3msamy2I_UwB9KW.wJxQjyDNy_6Ah27ZvKYJDq.gsor7tGUeIwPnc\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 15:14:58 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 12 Feb 2026 15:00:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"698deb27-5478d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M48o5L3CT9r6eLSt4PUNykdZNXoTKV0pUoERRvs6Z%2FO3tV9oZw8PyVGnK9b1pfjrK3MfVHfhNMkGkbepPHpK4vJk8A2X3tWoh9Y7MT%2Bcn4js09eHnGr5OHaq\"}]}\r\ncf-ray: 9cf63cc7b8de4435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":345997,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (53181)","md5":"cb0eab7d1742ada31f6506523e2f42b5","sha1":"9573691d65d377d70aca093fc5fe5f76c1befbfa","sha256":"ab7a7822ca5bd437b9433f372f2cca0dd917fc5865597ad73e7cb1eb99c0005c","sha512":"068701da2cf0b22387f3d5053b53ccbc15accc2c14a15853a6d6c8aaa80bf95d6766b4a267d79d19b41296f2c2495dba7023ec8b320d310dba5468b0a1f4d2e9","ssdeep":"6144:zKozfkuuo9pepoE4y4++7o8IR4zHVwSbZnECpGN36NokB:zRhnep4y4+kO4pwSbZn+6NXB","tlshash":"94742b8473b6a47603ea95d9a8352201f23458683049d46cffbc6defae844854b3ff76","first_seen":"2026-02-12T20:37:44.884861Z","last_seen":"2026-02-17T15:15:31.661464Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1555,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":535,"receive":1020,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.esperesso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/rabbyWallet-FLVUU35F-BZrp4syk.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:57.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esperesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:39:23 GMT","end":"Mon, 11 May 2026 21:37:10 GMT"},"fingerprint":{"sha1":"7D:D7:1F:F3:EC:B2:62:EE:46:06:FF:B5:03:10:4F:D3:5D:30:F8:A7","sha256":"75:A0:16:A2:94:7C:AF:93:9D:5A:94:40:3C:0C:89:D0:E3:F7:DB:28:0E:45:DC:7D:2D:8D:A3:50:53:54:D1:D9"}}},"request":{"raw":"GET /assets/rabbyWallet-FLVUU35F-BZrp4syk.js HTTP/1.1\r\nHost: claim.esperesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/assets/root-8mEX-aQm.js\r\nCookie: cf_clearance=51kqFdHlgwCmq4AZXa7a8OZHZ7b_PKvTuRRtJG6CUtU-1771341296-1.2.1.1-FOWik8D0h1Nn.VtkzZpAJ4lkUOOKcjVH3DRCigh3pGX7A2lo5Y.33ypI9RQl0IizAqPHKaqhYy3pTKi1A8BcKCFDRy9Hqg75ovYVEALmyj5H9Qao2BH9A5zuXqghoItIwpAwOwsYAC2FCs5.RnrcoCLP25LCY9WQu84bh5_YWXwcTP72H.tEyh3msamy2I_UwB9KW.wJxQjyDNy_6Ah27ZvKYJDq.gsor7tGUeIwPnc; ph_phc_9Cg41wNBIXNBnxyvzsD9AC6UT5KSjNjTR4SSnj4uH4_posthog=%7B%22%24device_id%22%3A%22019c6c2b-38fb-75f1-afb3-508acf5dd83d%22%2C%22distinct_id%22%3A%22019c6c2b-38fb-75f1-afb3-508acf5dd83d%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 15:14:58 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 12 Feb 2026 15:00:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"698deb27-942\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K4M%2BndFpgVpI85X%2BbPqwyK28ZQUcEgInmvKnE8VKkiRTaIume3aUtd7MxyADFNEBQBtE36k2g1mpRiOJDYSFVSiRfny5jXwVoSG7ELSdxTD0TlfayRi5yADr\"}]}\r\ncf-ray: 9cf63cc828e94435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2370,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2369)","md5":"174b08de1e202256a72f7663e79b8461","sha1":"602e294d94f061211502895741144c4320248855","sha256":"0767c9b588d0ab9b532619b26d91fe6e5163f541bcc2d6a9e9adae18f670dc8d","sha512":"640ce4e8d836b4ea90ace61f30c3cbe697e7d9a7d6d04c4b4a4e0f1845f850754434d0415ee9f3a7ec0856d679fe14679d1548d99385bb887a205fb0ab6d3b1f","ssdeep":"","tlshash":"594183e8eb38e993edadc67cdf19a475310e30ff909441a551d65b1e30646d33e0a650","first_seen":"2025-04-01T04:17:39.073172Z","last_seen":"2026-04-10T09:11:01.513661Z","times_seen":32,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.esperesso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/roninWallet-SAB5ESVK-fW2QoTxP.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:57.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esperesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:39:23 GMT","end":"Mon, 11 May 2026 21:37:10 GMT"},"fingerprint":{"sha1":"7D:D7:1F:F3:EC:B2:62:EE:46:06:FF:B5:03:10:4F:D3:5D:30:F8:A7","sha256":"75:A0:16:A2:94:7C:AF:93:9D:5A:94:40:3C:0C:89:D0:E3:F7:DB:28:0E:45:DC:7D:2D:8D:A3:50:53:54:D1:D9"}}},"request":{"raw":"GET /assets/roninWallet-SAB5ESVK-fW2QoTxP.js HTTP/1.1\r\nHost: claim.esperesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/assets/root-8mEX-aQm.js\r\nCookie: cf_clearance=51kqFdHlgwCmq4AZXa7a8OZHZ7b_PKvTuRRtJG6CUtU-1771341296-1.2.1.1-FOWik8D0h1Nn.VtkzZpAJ4lkUOOKcjVH3DRCigh3pGX7A2lo5Y.33ypI9RQl0IizAqPHKaqhYy3pTKi1A8BcKCFDRy9Hqg75ovYVEALmyj5H9Qao2BH9A5zuXqghoItIwpAwOwsYAC2FCs5.RnrcoCLP25LCY9WQu84bh5_YWXwcTP72H.tEyh3msamy2I_UwB9KW.wJxQjyDNy_6Ah27ZvKYJDq.gsor7tGUeIwPnc; ph_phc_9Cg41wNBIXNBnxyvzsD9AC6UT5KSjNjTR4SSnj4uH4_posthog=%7B%22%24device_id%22%3A%22019c6c2b-38fb-75f1-afb3-508acf5dd83d%22%2C%22distinct_id%22%3A%22019c6c2b-38fb-75f1-afb3-508acf5dd83d%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 15:14:58 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 12 Feb 2026 15:00:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"698deb27-3cf\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sTFuEgcxBHS74M1v7exFFPCYqXSqX1r1%2BnCuTh9QXO0%2FJp9uYtpzDMWuC6of5UQ2m1gRiZ%2BJFJcBpPopFl4sVmfEk2wrB%2Fim1RhIBpMTgeDUbEFBU1h3QvYA\"}]}\r\ncf-ray: 9cf63cc838ec4435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":975,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (974)","md5":"68f97b0ae9e3156ac22560e59bd69d4e","sha1":"9809da0a9ae9c30ab42202c55b07eef3acd8d1fb","sha256":"8959d6d3640f29ffad2fcde3305042bd42df292e2059935d19d5227dbe809290","sha512":"d9d8677af4e67b9e869da5a01e783a25305798a87461bc1915b6f9c200ec06c5b44b79758c89ecfbc6324647893faa387e3f594b71729f0d7beb1a457370cf2b","ssdeep":"","tlshash":"36119ce5910889aec51fc22cdd109462231f24e67acac697a7fd4f393147443fc07a59","first_seen":"2025-12-31T12:33:59.906467Z","last_seen":"2026-04-08T12:13:16.914673Z","times_seen":17,"resource_available":true,"data":null}},"time_used":593,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":593,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.esperesso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/base-modal.component-B_TnXego.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:56.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esperesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:39:23 GMT","end":"Mon, 11 May 2026 21:37:10 GMT"},"fingerprint":{"sha1":"7D:D7:1F:F3:EC:B2:62:EE:46:06:FF:B5:03:10:4F:D3:5D:30:F8:A7","sha256":"75:A0:16:A2:94:7C:AF:93:9D:5A:94:40:3C:0C:89:D0:E3:F7:DB:28:0E:45:DC:7D:2D:8D:A3:50:53:54:D1:D9"}}},"request":{"raw":"GET /assets/base-modal.component-B_TnXego.js HTTP/1.1\r\nHost: claim.esperesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/assets/home.page-Ct3tf3tM.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 15:14:56 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 12 Feb 2026 15:00:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\ncontent-encoding: br\r\nage: 91\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"698deb27-1f15\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=61U2qp9FOtxDOEhBC4UWuAYsIXmtpLhrXz%2FK5M5d4n2wsRn5kkgptmot3bpjO%2FrjOkSlfzC8RwofgbC1AllmXTiW9skM1Yf4yaMdDmWmgkyx2wXSS1ifln81\"}]}\r\ncf-ray: 9cf63cbc6f134435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7957,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (7956)","md5":"d8d308403b95f92748e1675665c7c997","sha1":"087fdbf4e6c73c4b95c1667dcae52ff5bd7175c4","sha256":"5a8ba25a6f724cf84177b9fe507e0b761a7275763228d146e88613153a03ea5d","sha512":"71122f70aefbe546c2e6474d82f06f8df21c9e29a7a190ded3c868fd73a489467b22f9223bba2a244c9a252b2870fdfe4caa31592338938eab612645096d74fb","ssdeep":"192:pGdAzs+Is14LdwydAz3kmmengY4CHlFYk:MdAzs+Is1IwuA7kmmev","tlshash":"6ef1c91de34aa568fc3fc549e0edda0aa56e102cf3360991b2bd952e01d4e52732bfd4","first_seen":"2026-02-12T20:37:44.910174Z","last_seen":"2026-02-17T15:15:31.663795Z","times_seen":4,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.esperesso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"magna-public-assets-prod.s3.amazonaws.com/portal-assets/espresso/favicon.svg","fqdn":"magna-public-assets-prod.s3.amazonaws.com","domain":"magna-public-assets-prod.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.21.107","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:56.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /portal-assets/espresso/favicon.svg HTTP/1.1\r\nHost: magna-public-assets-prod.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: fBK2aY0IAkwXR3U8b6i5+5dhu1QedNma3XAVFsYD84CMg0nd86p+8KuFSwqNYFO38eGZYAzRb7mQQCTjR5GJlw==\r\nx-amz-request-id: ABZC9EHR5X368CA6\r\nDate: Tue, 17 Feb 2026 15:14:57 GMT\r\nx-amz-replication-status: COMPLETED\r\nLast-Modified: Mon, 03 Nov 2025 06:36:25 GMT\r\nETag: \"0e5690d3b329d727d3beebed48d6c2d8\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: auKTxiUYoPRtGjfydffsemwNuvEyinOQ\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 2660\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":2660,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0e5690d3b329d727d3beebed48d6c2d8","sha1":"46b9b822697390227617c5ae61b21db0bd9674cd","sha256":"99b5446fdb0675412588659f6eacf34bd66b95ddb4d340801d98d6b8f297a149","sha512":"bd902ea28f21257e5cecaf6d06b6a2585b0b937a8815b357b170f618e575343710c9a741c267176410640221cead59ad991db5e9e32b0ae74245618a29eea20e","ssdeep":"","tlshash":"3451ffdc361cd1854a5c6bcb9f5aa0791c26e1e0de8e8509ea442e1f38c5c6f6c393c5","first_seen":"2025-12-28T18:47:24.367929Z","last_seen":"2026-04-08T12:13:16.913402Z","times_seen":28,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-LBSJK40LXZ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:57.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:27 GMT","end":"Mon, 20 Apr 2026 08:39:26 GMT"},"fingerprint":{"sha1":"B2:D0:1D:A5:DD:A9:AD:E9:27:09:79:7A:EA:74:E1:AA:2A:15:0B:BA","sha256":"40:26:82:6A:41:11:A9:D8:20:62:80:26:7B:44:BF:84:9F:FA:74:0E:35:A5:08:C0:FB:E0:28:35:56:1A:CB:8A"}}},"request":{"raw":"GET /gtag/js?id=G-LBSJK40LXZ HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 17 Feb 2026 15:14:58 GMT\r\nexpires: Tue, 17 Feb 2026 15:14:58 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 149186\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":450214,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"6eb42686c796c2c65796f7d4f42aacf9","sha1":"1a045d8f077b42b0f73c37895bd5df638b380288","sha256":"603f84393713df6e758ee3338ffef1ba9e9ed0a5a0c33e1dd67cce87d9b2a63e","sha512":"d5f71df4525814d1b8daaf5c2ba4e02fe6f149b8266eb81570eb2355da46d01c53c5a5e337e78356b5c8d3d4335c01746464396a7e8030c5dac9771270721611","ssdeep":"6144:HgjNMmwzYRrw8wENIP8gMDSgP14j9VkV4Bq5Itz/uG:UjwzYRSmIP8G44BSa","tlshash":"58a41ace73d674225296f478503f018ba57b24a2f49cc89af189cce42d74a9a4277f7c","first_seen":"2026-02-17T15:15:31.664781Z","last_seen":"2026-02-17T15:15:31.664781Z","times_seen":1,"resource_available":true,"data":null}},"time_used":453,"timings":{"blocked":151,"dns":1,"connect":28,"send":0,"wait":69,"receive":81,"ssl":118},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-assets.i.posthog.com/static/web-vitals.js?v=1.332.0","fqdn":"us-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"104.20.17.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:58.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 21:09:57 GMT","end":"Mon, 20 Apr 2026 22:09:56 GMT"},"fingerprint":{"sha1":"28:A9:79:25:3F:AF:B7:89:AC:9D:42:8A:C3:69:5B:4C:8E:6F:4C:77","sha256":"4D:63:13:FA:35:7E:FE:29:D4:53:E6:EF:2E:3B:8F:06:9D:32:9C:B5:EB:7E:3C:76:62:83:84:76:B4:C3:88:3C"}}},"request":{"raw":"GET /static/web-vitals.js?v=1.332.0 HTTP/1.1\r\nHost: us-assets.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://claim.esperesso.foundation\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Feb 2026 15:14:58 GMT\r\ncontent-type: text/javascript; charset=\"utf-8\"\r\ncache-control: public, max-age=300\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nlast-modified: Tue, 17 Feb 2026 13:26:20 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-opener-policy: same-origin\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 5\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: MISS\r\ncf-ray: 9cf63ccaaf3f3e6a-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":6599,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6559)","md5":"aa1e3521e57a40ad394b049fa7ff3bc5","sha1":"ec88012f680be684d8d430c5efd61fc29b658374","sha256":"b17014672e5f28d0dc0cad40ee4d09feb6a1201dadb3932b1f3073a8e4f387d6","sha512":"729c7ed37f0f321fd1c588aab554f289ff37fce9a3cb7dfa78cb8f47db8cbacb69eb0660ea2e245a540dca857f4cf277f67f53c7d789609006e56799ce3ad282","ssdeep":"96:tzI8C48z+TJzq4L88kTAFKb5rbCKHDuqqUtl0AcJ4c0jU4mzWuCD/ZDZkRlulDsd:VC4F4Sk8FKvae0f4TcWuEZDyCSXEdij","tlshash":"eed1d9f59f41e53921bae2b6d47a514333396386a409409ce23eefd0146d4c6739bb32","first_seen":"2026-01-29T18:42:31.973098Z","last_seen":"2026-04-13T18:21:15.4337Z","times_seen":3480,"resource_available":true,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":347,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/en_US-762U7H2X-CbWPluA0.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:56.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esperesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:39:23 GMT","end":"Mon, 11 May 2026 21:37:10 GMT"},"fingerprint":{"sha1":"7D:D7:1F:F3:EC:B2:62:EE:46:06:FF:B5:03:10:4F:D3:5D:30:F8:A7","sha256":"75:A0:16:A2:94:7C:AF:93:9D:5A:94:40:3C:0C:89:D0:E3:F7:DB:28:0E:45:DC:7D:2D:8D:A3:50:53:54:D1:D9"}}},"request":{"raw":"GET /assets/en_US-762U7H2X-CbWPluA0.js HTTP/1.1\r\nHost: claim.esperesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/assets/root-W8lXAx1b.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 15:14:56 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 12 Feb 2026 15:00:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\ncontent-encoding: br\r\nage: 91\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"698deb27-d2e56\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hxb90M5BGRZ7%2FzzeaL%2Bi%2FXSOD5aTfiz%2BsU8%2BEDLrY%2FjN9yT%2BN2NszaNRz6TSoPK9cBr3yMQM5BVfkrg6dWFCvGjqLTLtjQ5KnueV3V3S9Nh1MZRieeRJt5D6\"}]}\r\ncf-ray: 9cf63cbc1ef94435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":863830,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"ab77e7bb06e8a53a96edfabd2d0d74bd","sha1":"16818df2860db67a613a6184df0ab64ed98eef13","sha256":"07ea399345a1745d599d73d9a42ac99c0fd510efd8a873e889bb38bd3b2bb7ff","sha512":"044e171fc117eb365dfc8d0be32b29ce957ec302f04fea98bcb2df715b58691256bb0f8978f59fda3115ef3bc62f23907b6c737a32515074372a984897bb2d32","ssdeep":"6144:4iEX0PUqHiHvJYj8BMveljqhpSoMu3T2LpLARIAFmRvXxGZTVuVxQa9eaNtlyj:kTPlxqh7SLpLAR34M5uVxQa9Tzlyj","tlshash":"0205b60956f220718247f079096f9815b230a64f6e5dbc683f8c92ac2f1d47c9af6bdd","first_seen":"2026-02-17T15:14:02.839855Z","last_seen":"2026-02-17T15:15:31.667082Z","times_seen":2,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.esperesso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/use-on-connect.hook-B9Vb195z.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:56.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esperesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:39:23 GMT","end":"Mon, 11 May 2026 21:37:10 GMT"},"fingerprint":{"sha1":"7D:D7:1F:F3:EC:B2:62:EE:46:06:FF:B5:03:10:4F:D3:5D:30:F8:A7","sha256":"75:A0:16:A2:94:7C:AF:93:9D:5A:94:40:3C:0C:89:D0:E3:F7:DB:28:0E:45:DC:7D:2D:8D:A3:50:53:54:D1:D9"}}},"request":{"raw":"GET /assets/use-on-connect.hook-B9Vb195z.js HTTP/1.1\r\nHost: claim.esperesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/assets/home.page-Ct3tf3tM.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 15:14:56 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 12 Feb 2026 15:00:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\ncontent-encoding: br\r\nage: 91\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"698deb27-28e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jn2J5G7a5ENTBLQzL7cwKK3LlhlgrOSJVStdW%2B7HwGr5oHLfrl4%2Fupa9F36lfOT8xzTimBHcoZ1Wd18WVqrV8QHFung4MvZlXtyOMMYsecm%2BABXq%2F7qlsqGq\"}]}\r\ncf-ray: 9cf63cbc6f144435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":654,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (653)","md5":"5dddc34bc306e93857c0a0501f507ab4","sha1":"71f4b9fe8ed412a4300d6667888a8894b6110a1c","sha256":"1beb9af3345660f681b9316277dc9908a3a06e0a0cc29d1eb8efba5e026fbe27","sha512":"b7a566f2bb49ae583ad997f7380e6f8e871a2a7a0e7dac0e9af5a1d8d460b7ad254cc51dec92034739723fdb261482655a6782f0302a4e12b4bc05550223e378","ssdeep":"","tlshash":"f2f0dda5d0c0d6f8d317cce9d438eb7e0a312ad8b189c2c4dcae49631291ec0802aa07","first_seen":"2026-02-12T20:37:44.939654Z","last_seen":"2026-02-17T15:15:31.667925Z","times_seen":4,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.esperesso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/metaMaskWallet-YFHEHW7V-BggUDXad.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:57.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esperesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:39:23 GMT","end":"Mon, 11 May 2026 21:37:10 GMT"},"fingerprint":{"sha1":"7D:D7:1F:F3:EC:B2:62:EE:46:06:FF:B5:03:10:4F:D3:5D:30:F8:A7","sha256":"75:A0:16:A2:94:7C:AF:93:9D:5A:94:40:3C:0C:89:D0:E3:F7:DB:28:0E:45:DC:7D:2D:8D:A3:50:53:54:D1:D9"}}},"request":{"raw":"GET /assets/metaMaskWallet-YFHEHW7V-BggUDXad.js HTTP/1.1\r\nHost: claim.esperesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/assets/root-8mEX-aQm.js\r\nCookie: cf_clearance=51kqFdHlgwCmq4AZXa7a8OZHZ7b_PKvTuRRtJG6CUtU-1771341296-1.2.1.1-FOWik8D0h1Nn.VtkzZpAJ4lkUOOKcjVH3DRCigh3pGX7A2lo5Y.33ypI9RQl0IizAqPHKaqhYy3pTKi1A8BcKCFDRy9Hqg75ovYVEALmyj5H9Qao2BH9A5zuXqghoItIwpAwOwsYAC2FCs5.RnrcoCLP25LCY9WQu84bh5_YWXwcTP72H.tEyh3msamy2I_UwB9KW.wJxQjyDNy_6Ah27ZvKYJDq.gsor7tGUeIwPnc; ph_phc_9Cg41wNBIXNBnxyvzsD9AC6UT5KSjNjTR4SSnj4uH4_posthog=%7B%22%24device_id%22%3A%22019c6c2b-38fb-75f1-afb3-508acf5dd83d%22%2C%22distinct_id%22%3A%22019c6c2b-38fb-75f1-afb3-508acf5dd83d%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 15:14:58 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 12 Feb 2026 15:00:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"698deb27-1974\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DMIhlLJr5s5IrsE5pOS0rqKa0euQIjRFMOR8i%2FIwEEZHSM%2BHOk1kqWwwFhHxolr6Jhy23NQ7i1qPZ6JSdg72hQdEu%2F3LqLDJjew%2BdrycqlxASgpXkdcrhB0a\"}]}\r\ncf-ray: 9cf63cc828e34435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6516,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (6515)","md5":"c9faabc0cac059efd75278832f35fba0","sha1":"75a665ec82b0dd2ccab406db25ed49f69ba40931","sha256":"748a6c743322ec0b319bf361b84e929e5099721824636f5a4befd8e0ff8ab826","sha512":"7ab0d0071f01aad00b47c9fd55ef2748c61eeeb46b3abfb66afdae61970d62a77a0f643be0c95cab9a778d28a816b75fbb5c4667be6b794d97cec3937d0b5eec","ssdeep":"192:M1vaqYOX292169AY32zqzKHio+21BZBTibnKCU+jpBxMCXV:my933BU+V","tlshash":"17d15deb67488cbcb8271f24e34a3271613836d7692ee6594c738a79090519dbb7fcc4","first_seen":"2024-12-25T05:30:42.586528Z","last_seen":"2026-04-18T12:51:34.183552Z","times_seen":68,"resource_available":true,"data":null}},"time_used":485,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":485,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.esperesso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/assets-NU2OP443-COMs-Mo6.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:57.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esperesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:39:23 GMT","end":"Mon, 11 May 2026 21:37:10 GMT"},"fingerprint":{"sha1":"7D:D7:1F:F3:EC:B2:62:EE:46:06:FF:B5:03:10:4F:D3:5D:30:F8:A7","sha256":"75:A0:16:A2:94:7C:AF:93:9D:5A:94:40:3C:0C:89:D0:E3:F7:DB:28:0E:45:DC:7D:2D:8D:A3:50:53:54:D1:D9"}}},"request":{"raw":"GET /assets/assets-NU2OP443-COMs-Mo6.js HTTP/1.1\r\nHost: claim.esperesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/assets/en_US-762U7H2X-CbWPluA0.js\r\nCookie: cf_clearance=51kqFdHlgwCmq4AZXa7a8OZHZ7b_PKvTuRRtJG6CUtU-1771341296-1.2.1.1-FOWik8D0h1Nn.VtkzZpAJ4lkUOOKcjVH3DRCigh3pGX7A2lo5Y.33ypI9RQl0IizAqPHKaqhYy3pTKi1A8BcKCFDRy9Hqg75ovYVEALmyj5H9Qao2BH9A5zuXqghoItIwpAwOwsYAC2FCs5.RnrcoCLP25LCY9WQu84bh5_YWXwcTP72H.tEyh3msamy2I_UwB9KW.wJxQjyDNy_6Ah27ZvKYJDq.gsor7tGUeIwPnc; ph_phc_9Cg41wNBIXNBnxyvzsD9AC6UT5KSjNjTR4SSnj4uH4_posthog=%7B%22%24device_id%22%3A%22019c6c2b-38fb-75f1-afb3-508acf5dd83d%22%2C%22distinct_id%22%3A%22019c6c2b-38fb-75f1-afb3-508acf5dd83d%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 15:14:59 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 12 Feb 2026 15:00:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"698deb27-462d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=doaPbHGVpc2rgeORcZKSsYWUOwrQJNferasTHNmgh3rxbY9pQdQ0jp%2F2WwVm%2Bh49LPpk4VTO8Z30W%2FRsPpNec0Q4%2By3uJBVHPyXnCAp1EH%2BNOOpwRWdb9Atb\"}]}\r\ncf-ray: 9cf63cc848f34435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17965,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (17964)","md5":"33ae24799663e13f83cee5987fa8f728","sha1":"2309fcbf480ac447c060a427f2a6cd24974dfa30","sha256":"aac5c0d81b97b3892fafba21cdf014c77be385f12d7b1f525dc3f79d0cb2ede5","sha512":"f576ef24f5393cb38276b01c0aaa4d41c56a04d9bd0b82c8e04202949fe343407f12514560fe743af27fbff37a401bcff5c38a25ed66cecdd581c265ab9ad58d","ssdeep":"384:LOr2OrPR1YS2qj0FNwZe7QnBZ4pFSMLYp9uVEK:LOCO11D2qYzdyzK","tlshash":"2c82fd9b8728d94e6e6b8ff8ffdcb4d9332c30e5222e04d4115e616291a359feb41d81","first_seen":"2024-12-25T05:30:42.584192Z","last_seen":"2026-04-18T12:51:34.198627Z","times_seen":77,"resource_available":true,"data":null}},"time_used":1804,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1804,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.esperesso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"magna-public-assets-prod.s3.us-east-1.amazonaws.com/portal-assets/espresso/unicorn-animation.json","fqdn":"magna-public-assets-prod.s3.us-east-1.amazonaws.com","domain":"magna-public-assets-prod.s3.us-east-1.amazonaws.com","tld":"s3.us-east-1.amazonaws.com"},"ip":{"addr":"16.15.199.246","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:57.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 20 May 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:6E:24:DA:38:A4:1B:D7:08:C5:38:4D:E4:0F:23:5C:25:6C:07:22","sha256":"35:22:88:53:F8:1C:C9:41:3D:8C:59:1A:B2:A9:9D:DB:1E:0B:3D:51:8E:EC:0A:47:5C:FD:28:EF:42:DD:69:E6"}}},"request":{"raw":"GET /portal-assets/espresso/unicorn-animation.json HTTP/1.1\r\nHost: magna-public-assets-prod.s3.us-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim.esperesso.foundation/\r\nOrigin: https://claim.esperesso.foundation\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: TFwwSwEHmJ/iFSbLWkgv4enFafo1VwZ06AVCEGtETP8ZUCnaNUV5BVHjFz/pmdyr5dJQfr3PIb9n273CEBMLz8f322clqZzb\r\nx-amz-request-id: MXRAB0ABAH2EDRW8\r\nDate: Tue, 17 Feb 2026 15:14:59 GMT\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, HEAD\r\nVary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-amz-replication-status: COMPLETED\r\nLast-Modified: Fri, 16 Jan 2026 10:57:15 GMT\r\nETag: \"2ea07af947a247d91ddb094057983718\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: yoEgpUTK0HwwaorqC_3lM4zQe4dn91Hn\r\nAccept-Ranges: bytes\r\nContent-Type: application/json\r\nContent-Length: 56423\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":56423,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2ea07af947a247d91ddb094057983718","sha1":"f09ec926559ecf8dd1d7b02e535108c095767f3f","sha256":"260d78304c9f29249b0a22d6ae969adc5229b7f31100cb9cd80cd0e6679436ce","sha512":"5019faf50bff8d5a8f6df76f1bede43f2842942a7aa55280582adb3856740a1b297023fe808265ae0c6456b31a539fd06b9f40caeccd4ec309453c8eb363d00e","ssdeep":"1536:El31c1NrzuK2drRbHZF6pDyzCnCFkCbCFyCbC5L7U7soa9:El31c1NvhorRbHVz0QkOQy0KL7U7st9","tlshash":"5f43c5b464dad1249f07ad5ddc130288e37e70f91844a6979e1ec881e0c735ce7baadb","first_seen":"2026-01-30T19:04:09.864004Z","last_seen":"2026-04-08T12:13:16.917948Z","times_seen":14,"resource_available":false,"data":null}},"time_used":866,"timings":{"blocked":314,"dns":24,"connect":93,"send":0,"wait":143,"receive":95,"ssl":195},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/fonts/pp-neue-montreal/font.css","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:55.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esperesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:39:23 GMT","end":"Mon, 11 May 2026 21:37:10 GMT"},"fingerprint":{"sha1":"7D:D7:1F:F3:EC:B2:62:EE:46:06:FF:B5:03:10:4F:D3:5D:30:F8:A7","sha256":"75:A0:16:A2:94:7C:AF:93:9D:5A:94:40:3C:0C:89:D0:E3:F7:DB:28:0E:45:DC:7D:2D:8D:A3:50:53:54:D1:D9"}}},"request":{"raw":"GET /fonts/pp-neue-montreal/font.css HTTP/1.1\r\nHost: claim.esperesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 15:14:55 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Thu, 12 Feb 2026 15:00:55 GMT\r\netag: \"698deb27-190\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 91\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8QTPJPEkozI4lYCzm8W8fONzKLe%2FGJ7O5WS%2FaJWg6VQSjyb8egLri9aUzmo7JX%2BT1hrgH1nWNMimRQmZ2vSwfFNRwFI7wo0D3C7xL4pcBRM9qJqGEgrD0PPI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cf63cbaceb84435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":400,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a6a6e32dbe741d171e83cee23cf2248a","sha1":"b89b8228695b1b63c2abdb052b48dbbbd19a2528","sha256":"91fafc1905bf8c2ed7d8d91ee2c57deea7a7f886c4b8d9f1a6544f7fd9c08589","sha512":"39e9abd765670064d807e614cfa029e1b368beaa357afb935f88837d838c5bee37cfcd3285731fe84c825282bda9ac5a93c14238e28e6d4ea1f47e463382717f","ssdeep":"","tlshash":"d4e0228008aaa600d2290c46b38f8f272d1d48062002c4ae5b7b78489de38b173c0b0f","first_seen":"2025-12-31T12:33:59.892068Z","last_seen":"2026-02-17T15:15:31.670744Z","times_seen":16,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.esperesso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/vstack-C3IvQv9K.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:56.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esperesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:39:23 GMT","end":"Mon, 11 May 2026 21:37:10 GMT"},"fingerprint":{"sha1":"7D:D7:1F:F3:EC:B2:62:EE:46:06:FF:B5:03:10:4F:D3:5D:30:F8:A7","sha256":"75:A0:16:A2:94:7C:AF:93:9D:5A:94:40:3C:0C:89:D0:E3:F7:DB:28:0E:45:DC:7D:2D:8D:A3:50:53:54:D1:D9"}}},"request":{"raw":"GET /assets/vstack-C3IvQv9K.js HTTP/1.1\r\nHost: claim.esperesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/assets/root-W8lXAx1b.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 15:14:56 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 12 Feb 2026 15:00:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\ncontent-encoding: br\r\nage: 91\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"698deb27-7ff3\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B5qYeMjrqi74BwB9QdY%2Fr9nlMGdRgKU6ihJBL%2F6e6gadA4PAIW9Z0zt1HzTGXUElEJVAVZ9IcT2epTC6nW6Ndu8bkBwA96FQxx2nakbJn3xeqQPgDe2qXyEQ\"}]}\r\ncf-ray: 9cf63cbc1ee44435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32755,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32754)","md5":"c72115e55d96341fe00e51a13ad95800","sha1":"f789714ca4a48a66869371451206a6e9ce15f7f5","sha256":"e5a93dc91bddae578f0687f643569653fb9c0153c227e0541e839a351f8b557a","sha512":"68ae22b64c7f635d371f27233ca7ef7e99ffbce471ecc831481cd428db19f75ece5453e7ea4e8850215aedf4b58ec8904bad0e72ac36cb7f47c4f00a18e2ae79","ssdeep":"768:VsHWUpDTugn4fMqCgSknl5Qn1upQLpOFZDPTKyPZmZA5J4hdrW:e2bC1YczpOb2Z0J4i","tlshash":"c1e2f9a132541408f6afc7aef8c61f48c13916335413fccab67c8aa8d1517b91b6bb6d","first_seen":"2026-02-12T20:37:44.873434Z","last_seen":"2026-02-17T15:15:31.671429Z","times_seen":4,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.esperesso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"magna-public-assets-prod.s3.amazonaws.com/portal-assets/espresso/favicon.svg","fqdn":"magna-public-assets-prod.s3.amazonaws.com","domain":"magna-public-assets-prod.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.183.229","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:15:00.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /portal-assets/espresso/favicon.svg HTTP/1.1\r\nHost: magna-public-assets-prod.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: niEtTlreZlr1QI02UfBnhxV01NMrfUneDAi3lt4G9343vshe2b4pfGsVrbVAvfWotEqTRcgZG90q6nv1RCmwnJbm1vGQ1qHh\r\nx-amz-request-id: YXYD2QJN0QSRV1YR\r\nDate: Tue, 17 Feb 2026 15:15:01 GMT\r\nx-amz-replication-status: COMPLETED\r\nLast-Modified: Mon, 03 Nov 2025 06:36:25 GMT\r\nETag: \"0e5690d3b329d727d3beebed48d6c2d8\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: auKTxiUYoPRtGjfydffsemwNuvEyinOQ\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 2660\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":2660,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0e5690d3b329d727d3beebed48d6c2d8","sha1":"46b9b822697390227617c5ae61b21db0bd9674cd","sha256":"99b5446fdb0675412588659f6eacf34bd66b95ddb4d340801d98d6b8f297a149","sha512":"bd902ea28f21257e5cecaf6d06b6a2585b0b937a8815b357b170f618e575343710c9a741c267176410640221cead59ad991db5e9e32b0ae74245618a29eea20e","ssdeep":"","tlshash":"3451ffdc361cd1854a5c6bcb9f5aa0791c26e1e0de8e8509ea442e1f38c5c6f6c393c5","first_seen":"2025-12-28T18:47:24.367929Z","last_seen":"2026-04-08T12:13:16.913402Z","times_seen":28,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":119,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/root-W8lXAx1b.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:55.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esperesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:39:23 GMT","end":"Mon, 11 May 2026 21:37:10 GMT"},"fingerprint":{"sha1":"7D:D7:1F:F3:EC:B2:62:EE:46:06:FF:B5:03:10:4F:D3:5D:30:F8:A7","sha256":"75:A0:16:A2:94:7C:AF:93:9D:5A:94:40:3C:0C:89:D0:E3:F7:DB:28:0E:45:DC:7D:2D:8D:A3:50:53:54:D1:D9"}}},"request":{"raw":"GET /assets/root-W8lXAx1b.js HTTP/1.1\r\nHost: claim.esperesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 15:14:55 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 12 Feb 2026 15:00:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\ncontent-encoding: br\r\nage: 91\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"698deb27-21b\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NLs4yonC7Km7ILn80Hc6Y%2FE8UTn6B6mfwRLdRWgtQ0zpXFIuZBKTLdpiozyf5BZhQYkmHIv3aYmy6Z9F1ngaWLbfNU0kvdn1rmNkgYK43NKqCVg1LhbmOVvH\"}]}\r\ncf-ray: 9cf63cbbbed94435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":539,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (538)","md5":"8daea6b355ac65463f1bd3063b9029ef","sha1":"836def8415437e6274e6e6a55e8a391bb6741916","sha256":"f539b7a402e078bd4b121e892a9790444c9b31bffb9ae3ef4ef580ad98e7b04e","sha512":"5bc8fdf0f3c17ba85106e32d3a66e2e815f99e4433f1eeab4e117fbb298f03e6fc7416e2a8bd72b56e65674c399730e0141dd3eeca83a75a8bc1e791c34d54a6","ssdeep":"","tlshash":"f8f0be27d91046b552d2ccf1d1a0f571263342a3d3e1e7b1e4ef277a03d14a9c545553","first_seen":"2026-02-12T20:37:44.891053Z","last_seen":"2026-02-17T15:15:31.672303Z","times_seen":4,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.esperesso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/page-meta.component-CGOmIOVX.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:56.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esperesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:39:23 GMT","end":"Mon, 11 May 2026 21:37:10 GMT"},"fingerprint":{"sha1":"7D:D7:1F:F3:EC:B2:62:EE:46:06:FF:B5:03:10:4F:D3:5D:30:F8:A7","sha256":"75:A0:16:A2:94:7C:AF:93:9D:5A:94:40:3C:0C:89:D0:E3:F7:DB:28:0E:45:DC:7D:2D:8D:A3:50:53:54:D1:D9"}}},"request":{"raw":"GET /assets/page-meta.component-CGOmIOVX.js HTTP/1.1\r\nHost: claim.esperesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/assets/home.page-Ct3tf3tM.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 15:14:56 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 12 Feb 2026 15:00:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\ncontent-encoding: br\r\nage: 91\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"698deb27-323\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i%2BBdiOfOQT%2Fpyl001%2FOIdsnkgqbvJJIC0OPQVQhZtqK%2BGfNZ%2BA8MhlDpW6KALJEwvhj83aSuC%2B9OlfCFqhTGQ1LuTNAVnz5hl5rzL%2F4yAQ%2FchUPg7poEqau7\"}]}\r\ncf-ray: 9cf63cbc6f104435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":803,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (802)","md5":"9c126c37b55ffdec2dea9e147dc70591","sha1":"80a0f691f3373c84441125492cb7e95fbe0085ac","sha256":"649c7f6181b5e4cea70dd0987f6f30821ac6bd733f391bd4faeadfc70f0afefb","sha512":"fab55382ec0bab85320f87d24b604b978de71aea79c5c7591faa17bd5d7d78d36cf5f47e0c71782ae6acda9a7184982ec0898ac78ce90742b0db4f319949a053","ssdeep":"","tlshash":"2e014969a510689b1766ce111c9af24db17687bfc038c9a1b5a448390ff1fe7c07277d","first_seen":"2026-02-12T20:37:44.920975Z","last_seen":"2026-02-17T15:15:31.673146Z","times_seen":4,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.esperesso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/warning.icon-DZMR3VcF.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:56.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esperesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:39:23 GMT","end":"Mon, 11 May 2026 21:37:10 GMT"},"fingerprint":{"sha1":"7D:D7:1F:F3:EC:B2:62:EE:46:06:FF:B5:03:10:4F:D3:5D:30:F8:A7","sha256":"75:A0:16:A2:94:7C:AF:93:9D:5A:94:40:3C:0C:89:D0:E3:F7:DB:28:0E:45:DC:7D:2D:8D:A3:50:53:54:D1:D9"}}},"request":{"raw":"GET /assets/warning.icon-DZMR3VcF.js HTTP/1.1\r\nHost: claim.esperesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/assets/home.page-Ct3tf3tM.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 15:14:56 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 12 Feb 2026 15:00:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\ncontent-encoding: br\r\nage: 91\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"698deb27-28f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DPl43kL49AieLTvV5ap%2Bv0eejUEprA3DiWDHkg3SXYZ4W22nqgd8%2FVHesqVzwGNHWLl3A3JvOGtkjsNWcgCTL3%2FFKnB7iEwTEZQju4OyVK5%2FPw2b7cEHeQlq\"}]}\r\ncf-ray: 9cf63cbc6f124435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":655,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (654)","md5":"35d0183119e310f97da036fc8d8c531f","sha1":"0f26d787dae1ac05c33174884d6288fe2b486f9e","sha256":"4ba7eab091a2f52849ef6820a64f8141bf491465cd22f2b45fa495edd19ff74e","sha512":"1945bbdc8bc075a6e1fe00fff2cd2217bd0431c9eb485a5a0b5f591a397c1493ee36f86301415502c9046d4bb7b539ea6efc3b75cc7cf33bbf0ca2ede0446d12","ssdeep":"","tlshash":"4ef0fe67e3b428b87505cea8b38f7936317760e4b3014641a35e680513600c5b46d992","first_seen":"2026-02-12T20:37:44.938743Z","last_seen":"2026-02-17T15:15:31.673806Z","times_seen":4,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.esperesso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.esperesso.foundation/assets/safeWallet-VUYZPLY4-CXnodgMs.js","fqdn":"claim.esperesso.foundation","domain":"esperesso.foundation","tld":"foundation"},"ip":{"addr":"104.21.13.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:14:57.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esperesso.foundation","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:39:23 GMT","end":"Mon, 11 May 2026 21:37:10 GMT"},"fingerprint":{"sha1":"7D:D7:1F:F3:EC:B2:62:EE:46:06:FF:B5:03:10:4F:D3:5D:30:F8:A7","sha256":"75:A0:16:A2:94:7C:AF:93:9D:5A:94:40:3C:0C:89:D0:E3:F7:DB:28:0E:45:DC:7D:2D:8D:A3:50:53:54:D1:D9"}}},"request":{"raw":"GET /assets/safeWallet-VUYZPLY4-CXnodgMs.js HTTP/1.1\r\nHost: claim.esperesso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/assets/root-8mEX-aQm.js\r\nCookie: cf_clearance=51kqFdHlgwCmq4AZXa7a8OZHZ7b_PKvTuRRtJG6CUtU-1771341296-1.2.1.1-FOWik8D0h1Nn.VtkzZpAJ4lkUOOKcjVH3DRCigh3pGX7A2lo5Y.33ypI9RQl0IizAqPHKaqhYy3pTKi1A8BcKCFDRy9Hqg75ovYVEALmyj5H9Qao2BH9A5zuXqghoItIwpAwOwsYAC2FCs5.RnrcoCLP25LCY9WQu84bh5_YWXwcTP72H.tEyh3msamy2I_UwB9KW.wJxQjyDNy_6Ah27ZvKYJDq.gsor7tGUeIwPnc; ph_phc_9Cg41wNBIXNBnxyvzsD9AC6UT5KSjNjTR4SSnj4uH4_posthog=%7B%22%24device_id%22%3A%22019c6c2b-38fb-75f1-afb3-508acf5dd83d%22%2C%22distinct_id%22%3A%22019c6c2b-38fb-75f1-afb3-508acf5dd83d%22%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 15:14:58 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 12 Feb 2026 15:00:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"698deb27-5a9\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aoW5Lbyw4oCcmm4sXnGOemA6hpcAPFWhetD1pYgM1IhAxmGVIoZjq%2BCwPEEOu0KEZPA4bcuODhrwBqUJ%2FXd%2B0NlVWe6LIgpdoHBvDD0ihY42qqSHs8JQWCVr\"}]}\r\ncf-ray: 9cf63cc838ee4435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1449,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1448)","md5":"9a09d06d29fe2837adda28d773f8d6e5","sha1":"93c50ca2782f3f0b4c1f6d48c9fa33476f772ac0","sha256":"aaaf8c1f6acc96bda06bfc1e526611b918cd12021d54b15cce8fef605554938e","sha512":"7c181bd28ffca7872846372455d30661b0b89069cc473f94ac177247350091749470603dbf2827abc14eee65d5f98c37664defe6105075889415cee5bc3ac9dd","ssdeep":"","tlshash":"c531229136cca6e0770ae321cd04c166f85528effd66e35c6a015862bd0846d758cdfd","first_seen":"2024-12-25T05:30:42.588753Z","last_seen":"2026-04-18T12:51:34.196287Z","times_seen":38,"resource_available":true,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":350,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"claim.esperesso.foundation","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"magna-public-assets-prod.s3.amazonaws.com/portal-assets/espresso/favicon.svg","fqdn":"magna-public-assets-prod.s3.amazonaws.com","domain":"magna-public-assets-prod.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.21.107","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.esperesso.foundation/","date":"2026-02-17T15:15:00.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /portal-assets/espresso/favicon.svg HTTP/1.1\r\nHost: magna-public-assets-prod.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.esperesso.foundation/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 1ZG4uONUFOUu7+21fFZ9yQijQ1Rgv8t91Ac7OnGA7MPnbqm/7a4xNdColDUAbSO9ZCbfG+UVupT1vm1vO8ITyg==\r\nx-amz-request-id: YXY5T04R5F3YDA4R\r\nDate: Tue, 17 Feb 2026 15:15:01 GMT\r\nx-amz-replication-status: COMPLETED\r\nLast-Modified: Mon, 03 Nov 2025 06:36:25 GMT\r\nETag: \"0e5690d3b329d727d3beebed48d6c2d8\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: auKTxiUYoPRtGjfydffsemwNuvEyinOQ\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 2660\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":2660,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0e5690d3b329d727d3beebed48d6c2d8","sha1":"46b9b822697390227617c5ae61b21db0bd9674cd","sha256":"99b5446fdb0675412588659f6eacf34bd66b95ddb4d340801d98d6b8f297a149","sha512":"bd902ea28f21257e5cecaf6d06b6a2585b0b937a8815b357b170f618e575343710c9a741c267176410640221cead59ad991db5e9e32b0ae74245618a29eea20e","ssdeep":"","tlshash":"3451ffdc361cd1854a5c6bcb9f5aa0791c26e1e0de8e8509ea442e1f38c5c6f6c393c5","first_seen":"2025-12-28T18:47:24.367929Z","last_seen":"2026-04-08T12:13:16.913402Z","times_seen":28,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}