{"report_id":"a316e59b-72cd-4b66-8b0b-4a8ba033969e","version":0,"status":"done","tags":[],"date":"2026-09-11T03:11:29Z","url":{"schema":"http","addr":"robinessencemyclaim.xyz/","fqdn":"robinessencemyclaim.xyz","domain":"robinessencemyclaim.xyz","tld":"xyz"},"ip":{"addr":"104.21.60.88","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"robinessencemyclaim.xyz/","fqdn":"robinessencemyclaim.xyz","domain":"robinessencemyclaim.xyz","tld":"xyz"},"title":"Raydium","dom":{"size":52036,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (404)","md5":"acd0ceef8cbb3490037d31ad0581ae33","sha1":"3a4b7b11624c63fdd9eb78790efecb59598280fa","sha256":"cfab60155cda69f21f33d5e0ecf85dc12fc247ec2d4fc3240a6bc8d96f923167","sha512":"a732b96cf6eec5c4242e7565bae76e38bae1f947fad6b2d5e84468d9a7f369639f870f7bd777006081f05ed97d793227bd85839f62fa6180a21b2ec014514e93","ssdeep":"768:JdfBOBID0V+goba8AFfAQl/RvQtOl4CJ3i7baFSxZRKdzR2zdyZBhad7hmRtiES3:fB7T2vdZRaT7c6NKjebKckcpoGLo7m","tlshash":"38331110aaa3897f355790ee27e69e4e6a60b403c907f61872fc05d15f87df38ca7624","dom_hash":"domhashfae6ffc8098defb06b8a541f51315df0","first_seen":"2026-09-11T03:11:35.106414Z","last_seen":"2026-09-11T03:11:35.106414Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"robinessencemyclaim.xyz/","fqdn":"robinessencemyclaim.xyz","domain":"robinessencemyclaim.xyz","tld":"xyz"},"ip":{"addr":"104.21.60.88","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-16T03:11:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"robinessencemyclaim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"robinessencemyclaim.xyz","ip":{"addr":"172.67.194.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-09-08","domain_rank":0,"first_seen":"2026-09-11T03:11:30.16981Z","last_seen":"2026-09-11T03:11:30.16981Z","alert_count":26,"request_count":26,"received_data":1336121,"sent_data":13575,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"robinessencemyclaim.xyz/","fqdn":"robinessencemyclaim.xyz","domain":"robinessencemyclaim.xyz","tld":"xyz"},"ip":{"addr":"172.67.194.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"effd87de11eb8f66a017be3ad99221b7","sha1":"d73afe44d62c701c910c1e7fbda623d3c56f4d45","sha256":"62f873ae866587b5b12fc8a064ae3637b2b3e92ae92a8f08243d545945bcd32b","sha512":"fbb002048832da081f12038c8e9533ee96fad8cd51da0941f7df46aeb79460f5b077f9511335e1b33225700d5205b29665cd53272629a7d44d53b5d0f80ca567","ssdeep":"","tlshash":"d3c0c04880f0cea0000e00ea003871fc3050396f1143a0c3c3f88c4b66fce414a49235","size":180,"data":"","first_seen":"2026-09-11T03:11:35.130574Z","last_seen":"2026-09-11T03:11:35.130574Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robinessencemyclaim.xyz/secureproxy?s=%2Fipfs%2FgvI9wx0BDLzegy_lMs0ZMQ2b3958976a17c6f279bc5f00f7ab0129%3Ft%3D1789096250041","fqdn":"robinessencemyclaim.xyz","domain":"robinessencemyclaim.xyz","tld":"xyz"},"ip":{"addr":"172.67.194.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2ba6df520e24715b21a32e0fa7adfcf","sha1":"f4fa4a83f94cb05d38de5c2ccb83e700b4ca181b","sha256":"c1e776850676cdda9f873472db6d0dc4de3e305d32063e603f9a7b7af4650655","sha512":"fb08681b2e463b0295b63bc9c1a5f63233bc6984bac14794b1091597c79870b8a3f9ba0c9e8d0f157fb94af32fa00f163d7a9e07871577c2ca1e8095f8cd1748","ssdeep":"6144:ch5gDmrq9NWCEiox3Ti/1gFQZDeoV5oMPNFppHSyyA:csGq9NWCEiox3Ti/ESVPHSyyA","tlshash":"c4d4cbd0b34a56bbd8d6b2b7043349afdfa82d06064b188bd2e7dce4725470791d89bc","size":645584,"data":"","first_seen":"2026-09-11T03:11:35.123027Z","last_seen":"2026-09-11T03:11:35.123027Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"robinessencemyclaim.xyz/media-medium.svg","fqdn":"robinessencemyclaim.xyz","domain":"robinessencemyclaim.xyz","tld":"xyz"},"ip":{"addr":"172.67.194.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robinessencemyclaim.xyz/","date":"2026-09-11T03:10:49.440Z","timestamp":1789096249440,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robinessencemyclaim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 09:11:12 GMT","end":"Tue, 08 Dec 2026 10:08:54 GMT"},"fingerprint":{"sha1":"6C:B9:47:48:19:61:6E:91:F6:1B:12:6F:B7:6F:65:73:21:33:16:00","sha256":"D4:40:C1:64:94:1F:84:8C:47:74:A2:63:2D:29:45:28:0F:A0:D8:B2:E9:3C:B5:6D:75:91:BE:53:BC:93:8C:FF"}}},"request":{"raw":"GET /media-medium.svg HTTP/1.1\r\nHost: robinessencemyclaim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robinessencemyclaim.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 03:10:49 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\nlast-modified: Wed, 09 Sep 2026 09:38:22 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Slyy%2F1mfMwwo4%2B%2F2uuhkAbpqnJB0uK5JlGDbAbJX1lxECNYav1jIWmrZPx%2FLmH6BWV6Ik99Yc2XPOjLGiCYIO3a4knFl6Qa%2F%2BDQ%2BthCzA1KnjfHHXDyo9Yhf0jkn0NtqGkWlaEJK7s7ahA%3D%3D\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\netag: W/\"6aa1290e-373\"\r\ncf-ray: a3937b470fb1b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":883,"size_decoded":1414,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6aa5e62ae23c1b4796bf74f211afdeda","sha1":"240296ff8d856fc32e71ae8074c670272bc3948d","sha256":"75e6acac8ec27af8dd61fd017314cf85474131c35e9eb05201adeaa3cb1c7047","sha512":"9083cfd0dc2204d536dcc5d9f16adeead99f1bc4e938369ef6d7968a75a13975767505a87a5c36c5bc8f502549c9aaec442e6a08ed0606e07bbe9d924d3d73ed","ssdeep":"","tlshash":"601100b63058e091a4cea393c061e249a4ea2032cf59c1d8a095a1e6bd32d9b7d18d95","first_seen":"2023-05-23T06:00:59Z","last_seen":"2026-10-09T17:13:51.9408Z","times_seen":171,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"robinessencemyclaim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robinessencemyclaim.xyz/SpaceGrotesk[wght].woff2","fqdn":"robinessencemyclaim.xyz","domain":"robinessencemyclaim.xyz","tld":"xyz"},"ip":{"addr":"172.67.194.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://robinessencemyclaim.xyz/","date":"2026-09-11T03:10:50.096Z","timestamp":1789096250096,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robinessencemyclaim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 09:11:12 GMT","end":"Tue, 08 Dec 2026 10:08:54 GMT"},"fingerprint":{"sha1":"6C:B9:47:48:19:61:6E:91:F6:1B:12:6F:B7:6F:65:73:21:33:16:00","sha256":"D4:40:C1:64:94:1F:84:8C:47:74:A2:63:2D:29:45:28:0F:A0:D8:B2:E9:3C:B5:6D:75:91:BE:53:BC:93:8C:FF"}}},"request":{"raw":"GET /SpaceGrotesk[wght].woff2 HTTP/1.1\r\nHost: robinessencemyclaim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robinessencemyclaim.xyz/bdc6bdd6b27d34fb.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 03:10:50 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Wed, 09 Sep 2026 09:38:22 GMT\r\netag: \"6aa1290e-c068\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oJ%2Bas0T%2BBni4tTkb4ICke%2FYY89ykvi%2BqO7%2BwT1i39y1%2F6H50yr%2FN9rGEq8vBHhxAiyofUO9XcMKMh0VQQqpxqraROEAA7KY7Lfv%2FooIpaVe5P7%2B%2BO0dKpZK5DDM9f1iyM%2FGz9TkRxMIvZQ%3D%3D\"}]}\r\ncf-ray: a3937b4b1fdfb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 49256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":49256,"size_decoded":50227,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 49256, version 2.0","md5":"0c62a8f36c27538912ccbbd5de747927","sha1":"b4509f04a2bed1ec04e7f9ff4dc33c69e8e263ec","sha256":"8e085aa438094f11487a836652edd5c054fa6a96f63fc7c282105ee3a4b08c07","sha512":"a67cdcfd2c433321dac9322b221ffa7aa0eab3f0258d7975c84e891eddea41fd456ee3c6f7e67762853e023ba0ccd3d0586d5d549a63fc0ae4ac62f7533dc074","ssdeep":"1536:pKXTCNqIqI29JkBq+zhVpQ0n17Bwnfen623:pKXGoaWl8y0nPwnGn623","tlshash":"a123f1ce649a7d788870eaa31dd73f146dfc984389d6e6e1e1c2da8d21c971809e434b","first_seen":"2023-05-23T06:00:59Z","last_seen":"2026-10-13T07:15:40.563427Z","times_seen":597,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"robinessencemyclaim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robinessencemyclaim.xyz/","fqdn":"robinessencemyclaim.xyz","domain":"robinessencemyclaim.xyz","tld":"xyz"},"ip":{"addr":"172.67.194.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-11T03:10:48.811Z","timestamp":1789096248811,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robinessencemyclaim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 09:11:12 GMT","end":"Tue, 08 Dec 2026 10:08:54 GMT"},"fingerprint":{"sha1":"6C:B9:47:48:19:61:6E:91:F6:1B:12:6F:B7:6F:65:73:21:33:16:00","sha256":"D4:40:C1:64:94:1F:84:8C:47:74:A2:63:2D:29:45:28:0F:A0:D8:B2:E9:3C:B5:6D:75:91:BE:53:BC:93:8C:FF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: robinessencemyclaim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 03:10:49 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 09 Sep 2026 09:38:22 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZTJ160jqvdM5T4b%2F%2F9u7mzR46pDEv2f%2F3If6vfwam1JaVjfaRtQOQU2y%2B8EyJf5H130KhjQnDNnWko2ybqxUDzLeRQbRROWRtDrTGeBVTEBbGBA5CYGnWzV%2BfgACikMCWBc3bOGsVH%2FEbg%3D%3D\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: zstd\r\ncf-ray: a3937b43ba9b5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51812,"size_decoded":9311,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (404)","md5":"c008df3d7b6622fe99cc6f70b543ee61","sha1":"e258341877bbbd6d657fc2dd31de17abb6e442d2","sha256":"76d18e4d47d5f135e2f9bfd281effcdd8cefb1ba01c5254591730484682f511d","sha512":"427bba0e56c18e1c5b1a2370ab911689ec112817a0cd8a11454cbe265f508c8204bd466f5cb1aaba726349024e905ce77635258bb06aad2d71cee98816c22d63","ssdeep":"768:9dfBOBID0V+goba8AFfAQl/RvQtOl4CJ3i7baFSxZRKdzR2zdyZBhad7hmRtiESa:rB7k2vdZRaT7c6NKjebKckcpoGLo7E","tlshash":"fa330110aaa3897f355790ee27e69e4e6a60b403c907f61872fc05d15f87df38ca7624","first_seen":"2026-09-11T03:11:35.109609Z","last_seen":"2026-09-11T03:11:35.109609Z","times_seen":1,"resource_available":true,"data":null}},"time_used":351,"timings":{"blocked":-1,"dns":92,"connect":1,"send":0,"wait":245,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"robinessencemyclaim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robinessencemyclaim.xyz/ApC1Ccev5wch.js","fqdn":"robinessencemyclaim.xyz","domain":"robinessencemyclaim.xyz","tld":"xyz"},"ip":{"addr":"172.67.194.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://robinessencemyclaim.xyz/","date":"2026-09-11T03:10:49.418Z","timestamp":1789096249418,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robinessencemyclaim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 09:11:12 GMT","end":"Tue, 08 Dec 2026 10:08:54 GMT"},"fingerprint":{"sha1":"6C:B9:47:48:19:61:6E:91:F6:1B:12:6F:B7:6F:65:73:21:33:16:00","sha256":"D4:40:C1:64:94:1F:84:8C:47:74:A2:63:2D:29:45:28:0F:A0:D8:B2:E9:3C:B5:6D:75:91:BE:53:BC:93:8C:FF"}}},"request":{"raw":"GET /ApC1Ccev5wch.js HTTP/1.1\r\nHost: robinessencemyclaim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robinessencemyclaim.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 03:10:49 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Wed, 09 Sep 2026 09:38:22 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r3TSbxharPBRG%2B9IY3JU1dsk6LRuaPCNUuuvBbrkL5QhgVcmiKNk3Vlt%2BY3yxw8NhIZYKvbMT2f9IVVC7wS2s6wlIYGjsKuvu4i3wM8pbSlFLljTOtpBYVpMczKn8zv%2BiakbcZBdETGrIg%3D%3D\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3937b46dfa5b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T05:37:40.491416Z","times_seen":19114689,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"robinessencemyclaim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robinessencemyclaim.xyz/logo-with-text.svg","fqdn":"robinessencemyclaim.xyz","domain":"robinessencemyclaim.xyz","tld":"xyz"},"ip":{"addr":"172.67.194.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robinessencemyclaim.xyz/","date":"2026-09-11T03:10:49.428Z","timestamp":1789096249428,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robinessencemyclaim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 09:11:12 GMT","end":"Tue, 08 Dec 2026 10:08:54 GMT"},"fingerprint":{"sha1":"6C:B9:47:48:19:61:6E:91:F6:1B:12:6F:B7:6F:65:73:21:33:16:00","sha256":"D4:40:C1:64:94:1F:84:8C:47:74:A2:63:2D:29:45:28:0F:A0:D8:B2:E9:3C:B5:6D:75:91:BE:53:BC:93:8C:FF"}}},"request":{"raw":"GET /logo-with-text.svg HTTP/1.1\r\nHost: robinessencemyclaim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robinessencemyclaim.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 03:10:49 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\nlast-modified: Wed, 09 Sep 2026 09:38:22 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NXeWyzxqe9x9E1C5jBbGDcFfvid%2FDIAzUKQU7SFXiNDxAQVIdTt4JNe3%2F4ssBg%2BCrsE%2FToXcxtYCMULU%2F2ukd15pNcsbjWjevqlZ%2Fz%2FnWbCYlIzK9vs%2BbCRTXjWiugThPFe9XZ5y%2FEUYVg%3D%3D\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\netag: W/\"6aa1290e-b2c\"\r\ncf-ray: a3937b46efa8b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2860,"size_decoded":2414,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3cdaf3a18accd53c3cbf47846f831a5e","sha1":"52a5d69f27bc88b35d34ed3a44ae9b4cc555e520","sha256":"6354f38310391f7747749371558628411c388b550f49cb30f4924fd11ae45725","sha512":"172531beb6d7b7778b197a879c33ee495cd1a8e4ad564204f9c61c4a5fac8c381967c5f78e3de8cc4954d25b57e389a0655f5ec822e33ce3d40b5e17cb83f735","ssdeep":"","tlshash":"7051b785930095e0d5c7c6d4dd3fedec751fa0d5a35750a981f1ab08d4170f26c4cea0","first_seen":"2023-05-23T06:00:59Z","last_seen":"2026-10-09T17:13:51.934984Z","times_seen":186,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"robinessencemyclaim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robinessencemyclaim.xyz/home-bg-element-1.png","fqdn":"robinessencemyclaim.xyz","domain":"robinessencemyclaim.xyz","tld":"xyz"},"ip":{"addr":"172.67.194.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robinessencemyclaim.xyz/","date":"2026-09-11T03:10:49.430Z","timestamp":1789096249430,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robinessencemyclaim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 09:11:12 GMT","end":"Tue, 08 Dec 2026 10:08:54 GMT"},"fingerprint":{"sha1":"6C:B9:47:48:19:61:6E:91:F6:1B:12:6F:B7:6F:65:73:21:33:16:00","sha256":"D4:40:C1:64:94:1F:84:8C:47:74:A2:63:2D:29:45:28:0F:A0:D8:B2:E9:3C:B5:6D:75:91:BE:53:BC:93:8C:FF"}}},"request":{"raw":"GET /home-bg-element-1.png HTTP/1.1\r\nHost: robinessencemyclaim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robinessencemyclaim.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 03:10:49 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Wed, 09 Sep 2026 09:38:22 GMT\r\netag: \"6aa1290e-1e8a5\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pn6It4UdtRLAHmStD4X3cADusfPOuCGq8VxmYQ%2FlVXDnJ0i7aqFoc5iJDB2dIznvxSZ6gsDTONvn6yJ0kSZwrsTrI2yqfKRWd5fbQsfQUOkUHN7nj5cV%2Bj5ZqkKDarQADVpdXi86tdrYEQ%3D%3D\"}]}\r\ncf-ray: a3937b46ffa9b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 125093\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":125093,"size_decoded":126037,"mime_type":"image/png","magic":"PNG image data, 744 x 801, 8-bit colormap, non-interlaced","md5":"31a19e31be7321d44890afb0f3359d5a","sha1":"50849289aa6fc127953ec59182fe49a9a9e86b56","sha256":"803c1a7f20d0b5290d50e534460a165cd9c948c2edaa2e8a58c424fd88c16ea1","sha512":"a050445b8b20a3308195df945f65c54d1e38b9f159c8b7d03308413472fd3baac1beb36ea973fe05c24f803b6c4c786e9490f56eece37362add092283ee3204c","ssdeep":"3072:REZ0M1excEYtt1WJaaPVhqBhzUuIeORAOQv9YK3L6z++05G:Rm1excEYf1WtPUhwudORAO49YKbaa5G","tlshash":"20c30227b1b1df1c642d6a9b72e3cf27983008b749015d55db6128d8bf1522bdab3a23","first_seen":"2023-08-04T00:54:38Z","last_seen":"2026-10-09T17:13:51.938675Z","times_seen":186,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"robinessencemyclaim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robinessencemyclaim.xyz/home-acceleraytor.svg","fqdn":"robinessencemyclaim.xyz","domain":"robinessencemyclaim.xyz","tld":"xyz"},"ip":{"addr":"172.67.194.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robinessencemyclaim.xyz/","date":"2026-09-11T03:10:49.436Z","timestamp":1789096249436,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robinessencemyclaim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 09:11:12 GMT","end":"Tue, 08 Dec 2026 10:08:54 GMT"},"fingerprint":{"sha1":"6C:B9:47:48:19:61:6E:91:F6:1B:12:6F:B7:6F:65:73:21:33:16:00","sha256":"D4:40:C1:64:94:1F:84:8C:47:74:A2:63:2D:29:45:28:0F:A0:D8:B2:E9:3C:B5:6D:75:91:BE:53:BC:93:8C:FF"}}},"request":{"raw":"GET /home-acceleraytor.svg HTTP/1.1\r\nHost: robinessencemyclaim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robinessencemyclaim.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 03:10:49 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\nlast-modified: Wed, 09 Sep 2026 09:38:22 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EMgZj5F8ERqpKBCPA200RYKJUDfTVuZiyzlblmOpD%2FOW6WoAOnGV%2F%2BOP14jC38sTJHUIS9%2FBprYICnjC%2BiWLfGtdfkw4kkum%2BR2SHbdFkhxjeSMjiQLYVlXA4nAtf3pe1ToV83meDOWokA%3D%3D\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\netag: W/\"6aa1290e-411\"\r\ncf-ray: a3937b46ffaeb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1041,"size_decoded":1481,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d4b054d65db0d9780e5fc181b59684a2","sha1":"ba8892cb0d89d218b1ec88f2adfe68b19ec2cad8","sha256":"88ed50a56f860e0fc20bdff5516becf92c90765c8f1d53a1f4bfe6d0e22addd3","sha512":"49d476362a6464f36cafb491cbbde8277cf1e96d42a9427a8bd06a22fa21764e45fd17ccc74a6f8f7980401a41f00c6333d0b1f7b04972db61430d14ea5ffb8d","ssdeep":"","tlshash":"521136f793e6f645c02bbf11a4b32d45648f30709e9b8a8291f35164ae95c08d67cc88","first_seen":"2023-05-23T06:00:59Z","last_seen":"2026-10-09T17:13:51.93706Z","times_seen":171,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"robinessencemyclaim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robinessencemyclaim.xyz/home-yield.svg","fqdn":"robinessencemyclaim.xyz","domain":"robinessencemyclaim.xyz","tld":"xyz"},"ip":{"addr":"172.67.194.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robinessencemyclaim.xyz/","date":"2026-09-11T03:10:49.433Z","timestamp":1789096249433,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robinessencemyclaim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 09:11:12 GMT","end":"Tue, 08 Dec 2026 10:08:54 GMT"},"fingerprint":{"sha1":"6C:B9:47:48:19:61:6E:91:F6:1B:12:6F:B7:6F:65:73:21:33:16:00","sha256":"D4:40:C1:64:94:1F:84:8C:47:74:A2:63:2D:29:45:28:0F:A0:D8:B2:E9:3C:B5:6D:75:91:BE:53:BC:93:8C:FF"}}},"request":{"raw":"GET /home-yield.svg HTTP/1.1\r\nHost: robinessencemyclaim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robinessencemyclaim.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 03:10:49 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\nlast-modified: Wed, 09 Sep 2026 09:38:22 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1oH1%2BQ%2BN1Gc%2FQl%2Bl8zemJChc9G4gnZ2buMP6ygi7ODPeZodhR6l8NPl2Ivp4K%2BJsWOfiD1provhi2PoAxZ7ZCqvV86n1g9HcLGUsKuGF1NA98zA3sLVLqPoomoZoFxxHz6hb%2FwPDnifSRg%3D%3D\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\netag: W/\"6aa1290e-890\"\r\ncf-ray: a3937b46ffadb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2192,"size_decoded":1803,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3de1aaa4220f36a9e59cb7821fc314af","sha1":"f21f4a3fb4d7aee1e0e823b92a6c4b03f2265cb4","sha256":"c2d78e62fe4de7e31c3f33e8c5d1a51e578085ed3f0ffffcf60f254c637c8d9b","sha512":"257077713ea008c35338d956d6a1e066ddf3513375ddb34a59faa8979a892ef09504352c7fb540a6c10d66fba5b88c628b4c565085180326a5c4f4880a5fda1c","ssdeep":"","tlshash":"b341bdfee7fbd0d02983eb86f871a150b52b11be9fb6cf084231a790d6b10944758c90","first_seen":"2023-05-23T06:00:59Z","last_seen":"2026-10-09T17:13:51.939192Z","times_seen":172,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"robinessencemyclaim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robinessencemyclaim.xyz/home-pool.svg","fqdn":"robinessencemyclaim.xyz","domain":"robinessencemyclaim.xyz","tld":"xyz"},"ip":{"addr":"172.67.194.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robinessencemyclaim.xyz/","date":"2026-09-11T03:10:49.434Z","timestamp":1789096249434,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robinessencemyclaim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 09:11:12 GMT","end":"Tue, 08 Dec 2026 10:08:54 GMT"},"fingerprint":{"sha1":"6C:B9:47:48:19:61:6E:91:F6:1B:12:6F:B7:6F:65:73:21:33:16:00","sha256":"D4:40:C1:64:94:1F:84:8C:47:74:A2:63:2D:29:45:28:0F:A0:D8:B2:E9:3C:B5:6D:75:91:BE:53:BC:93:8C:FF"}}},"request":{"raw":"GET /home-pool.svg HTTP/1.1\r\nHost: robinessencemyclaim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robinessencemyclaim.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 03:10:49 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\nlast-modified: Wed, 09 Sep 2026 09:38:22 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mnnxVQYoq3PNDTkKob%2BmHFJMCpvu0yyDeBjm9X3%2BEMawIMXOB6XlqkBdX%2FYCyj6j5n4lZodIXKNzsd8f8H%2FZdPajr0sI6qpfhQgI2hGQ%2F%2Byh8ewS1Ceah64ZhRL6eFejPLpRjezC7TKd4Q%3D%3D\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\netag: W/\"6aa1290e-31f\"\r\ncf-ray: a3937b46ffacb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":799,"size_decoded":1313,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"58f1f44bc06b7a01f3ee3df362b7a90f","sha1":"ec36fca5494419c82991ae151d25e1de61324352","sha256":"f4af9d79a49a6dce8c8fa2098c09ed354557bf3d93b8285343e06211993f56b8","sha512":"d5d1ea15b47f36639295d0394cd2096663890964c4bb83c9b97daebaafd0d7068f4254a4e2c0d15b27017df6aa91f5cd864fbfe3f02cb0f902b4f3d3691cdd2e","ssdeep":"","tlshash":"720104b8e3ecd743b88e4b5014931830d06734964186d6b6babc99d5af44cdd0de0c80","first_seen":"2023-05-23T06:00:59Z","last_seen":"2026-10-09T17:13:51.936469Z","times_seen":171,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"robinessencemyclaim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robinessencemyclaim.xyz/media-twitter.svg","fqdn":"robinessencemyclaim.xyz","domain":"robinessencemyclaim.xyz","tld":"xyz"},"ip":{"addr":"172.67.194.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robinessencemyclaim.xyz/","date":"2026-09-11T03:10:49.439Z","timestamp":1789096249439,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robinessencemyclaim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 09:11:12 GMT","end":"Tue, 08 Dec 2026 10:08:54 GMT"},"fingerprint":{"sha1":"6C:B9:47:48:19:61:6E:91:F6:1B:12:6F:B7:6F:65:73:21:33:16:00","sha256":"D4:40:C1:64:94:1F:84:8C:47:74:A2:63:2D:29:45:28:0F:A0:D8:B2:E9:3C:B5:6D:75:91:BE:53:BC:93:8C:FF"}}},"request":{"raw":"GET /media-twitter.svg HTTP/1.1\r\nHost: robinessencemyclaim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robinessencemyclaim.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 03:10:49 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\nlast-modified: Wed, 09 Sep 2026 09:38:22 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bg6XOfVyMz9AIghs7It5aGtGMrf%2FxRtUvfJdzQmxNfG7MSnPTMsqsWSvo%2Bp2QQzHBa2GiDv1RErfDi8aWOlDZVmblEQoG5TI4mHC7NLUTg2V4SyFEpYErMgriKAZ4w5mjPvxBNz9oryxZw%3D%3D\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\netag: W/\"6aa1290e-446\"\r\ncf-ray: a3937b46ffb0b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1094,"size_decoded":1554,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0b8b6e228ec5c96ab864995f5b54a7a0","sha1":"39e162b67b93058b2b28ae96d0d384839d05122f","sha256":"07bcb0118ab73b836745a47c687cee03c24caea7f0cd4440592e1204a056ff74","sha512":"37a556db06b2b7dc76d71fd00d9be19e78352bb12c98d38f5ed26dd5560c4bb7613aa44ca6c0a053aa42da75fd7034b3693af8eb897f3f537e8b8a8aa0c1fe22","ssdeep":"","tlshash":"aa1120f69268e2f887478f70cbb764a8396230b96fa603a41155a980b4109a10c8ed58","first_seen":"2023-05-23T06:00:59Z","last_seen":"2026-10-09T17:13:51.927603Z","times_seen":170,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"robinessencemyclaim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robinessencemyclaim.xyz/media-discord.svg","fqdn":"robinessencemyclaim.xyz","domain":"robinessencemyclaim.xyz","tld":"xyz"},"ip":{"addr":"172.67.194.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robinessencemyclaim.xyz/","date":"2026-09-11T03:10:49.441Z","timestamp":1789096249441,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robinessencemyclaim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 09:11:12 GMT","end":"Tue, 08 Dec 2026 10:08:54 GMT"},"fingerprint":{"sha1":"6C:B9:47:48:19:61:6E:91:F6:1B:12:6F:B7:6F:65:73:21:33:16:00","sha256":"D4:40:C1:64:94:1F:84:8C:47:74:A2:63:2D:29:45:28:0F:A0:D8:B2:E9:3C:B5:6D:75:91:BE:53:BC:93:8C:FF"}}},"request":{"raw":"GET /media-discord.svg HTTP/1.1\r\nHost: robinessencemyclaim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robinessencemyclaim.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 03:10:49 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\nlast-modified: Wed, 09 Sep 2026 09:38:22 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HJ%2Fw0b%2B6UoDMn%2FJrfVKimVbpkGBbSmCpdHuQ9NhS64J8WbGiShCYbNYwEySA3tuZ9tzMqxcnuaTTuAzR4Ubh6uqrbVm6HKnT3uFyDZqOrdc5B3saLLkgSOTP30A14udssualE2A3hUt4sA%3D%3D\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\netag: W/\"6aa1290e-757\"\r\ncf-ray: a3937b470fb2b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1879,"size_decoded":1730,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cba4f9674ffcf19c39b8b31b802a7b92","sha1":"eaf517b208ed28e37f4317a2f38a2a729ae5fd83","sha256":"65cdf7ee40d2d6d87924fc6c55d23e2bf8fd2fa361c7b7a5b80679c4b2523b66","sha512":"c9c732dd4961b9ef4a10ce5bf3c35dc181521a82da48db76918e9e2bf726648c0515c2c12cef6596b34cb671a442b23369c36c7f0fc0c1c8b252f1a598408b97","ssdeep":"","tlshash":"9d4102f75288f2c8d083c3b5d436047a779f2c723bea579443a88fe0f256195858cc58","first_seen":"2023-05-23T06:00:59Z","last_seen":"2026-10-09T17:13:51.940285Z","times_seen":170,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"robinessencemyclaim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robinessencemyclaim.xyz/media-telegram.svg","fqdn":"robinessencemyclaim.xyz","domain":"robinessencemyclaim.xyz","tld":"xyz"},"ip":{"addr":"172.67.194.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robinessencemyclaim.xyz/","date":"2026-09-11T03:10:49.442Z","timestamp":1789096249442,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robinessencemyclaim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 09:11:12 GMT","end":"Tue, 08 Dec 2026 10:08:54 GMT"},"fingerprint":{"sha1":"6C:B9:47:48:19:61:6E:91:F6:1B:12:6F:B7:6F:65:73:21:33:16:00","sha256":"D4:40:C1:64:94:1F:84:8C:47:74:A2:63:2D:29:45:28:0F:A0:D8:B2:E9:3C:B5:6D:75:91:BE:53:BC:93:8C:FF"}}},"request":{"raw":"GET /media-telegram.svg HTTP/1.1\r\nHost: robinessencemyclaim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robinessencemyclaim.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 03:10:49 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\nlast-modified: Wed, 09 Sep 2026 09:38:22 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4nWuPGUkiHLdHjJ8gILqK%2BMCpJCUZoryyutbpBNJ655x%2B5W2jArVzQTmQnqpVGIjc6sS3L1FBsKssrzQi8E5eiEeetfO6vjqlhJi9kKs82FfkGDsI0dQDWchk31qAke9aijAHpbVEOMl6g%3D%3D\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\netag: W/\"6aa1290e-3e3\"\r\ncf-ray: a3937b470fb3b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":995,"size_decoded":1506,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"704421aedf6fd2f977a48bc4dae884c7","sha1":"8e3516d3a58c056e8606054fae4532c1909b2eb2","sha256":"86ddfbf8b723ff15d24081f8958511846434b444efdb96269986708490197e03","sha512":"8550cf414fa0bd0ffcd282ce6b4bbe426a868580244478dfe9bea3e0b1a2c4e32ac3faebcd8e933a53288ac1f6d676d01a6fd5abd9db73d457728af2458eb93d","ssdeep":"","tlshash":"e31161e999e865c0530597b4d47e45b3f32330fe7365cf0e0260bdd06681065504dcd4","first_seen":"2023-05-23T06:00:59Z","last_seen":"2026-10-09T17:13:51.925711Z","times_seen":171,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"robinessencemyclaim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robinessencemyclaim.xyz/SpaceGrotesk[wght].woff2","fqdn":"robinessencemyclaim.xyz","domain":"robinessencemyclaim.xyz","tld":"xyz"},"ip":{"addr":"172.67.194.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://robinessencemyclaim.xyz/","date":"2026-09-11T03:10:50.093Z","timestamp":1789096250093,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robinessencemyclaim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 09:11:12 GMT","end":"Tue, 08 Dec 2026 10:08:54 GMT"},"fingerprint":{"sha1":"6C:B9:47:48:19:61:6E:91:F6:1B:12:6F:B7:6F:65:73:21:33:16:00","sha256":"D4:40:C1:64:94:1F:84:8C:47:74:A2:63:2D:29:45:28:0F:A0:D8:B2:E9:3C:B5:6D:75:91:BE:53:BC:93:8C:FF"}}},"request":{"raw":"GET /SpaceGrotesk[wght].woff2 HTTP/1.1\r\nHost: robinessencemyclaim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robinessencemyclaim.xyz/bdc6bdd6b27d34fb.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 03:10:50 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Wed, 09 Sep 2026 09:38:22 GMT\r\netag: \"6aa1290e-c068\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mxXR3L9t5DQ0XF0imYG2H4d4DXWT57vOiQVQtC3Ga8072INBxfC0u5QRfbdNY8CO%2FE%2FYwPDPc5J6e8KSHIN3t%2FrnwzpiweV9JP1WlYm%2F0GBkRvUm2ziC%2FG0IH6FvHHFA9IKnVX3MBiT6GQ%3D%3D\"}]}\r\ncf-ray: a3937b4b1fdeb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 49256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49256,"size_decoded":50222,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 49256, version 2.0","md5":"0c62a8f36c27538912ccbbd5de747927","sha1":"b4509f04a2bed1ec04e7f9ff4dc33c69e8e263ec","sha256":"8e085aa438094f11487a836652edd5c054fa6a96f63fc7c282105ee3a4b08c07","sha512":"a67cdcfd2c433321dac9322b221ffa7aa0eab3f0258d7975c84e891eddea41fd456ee3c6f7e67762853e023ba0ccd3d0586d5d549a63fc0ae4ac62f7533dc074","ssdeep":"1536:pKXTCNqIqI29JkBq+zhVpQ0n17Bwnfen623:pKXGoaWl8y0nPwnGn623","tlshash":"a123f1ce649a7d788870eaa31dd73f146dfc984389d6e6e1e1c2da8d21c971809e434b","first_seen":"2023-05-23T06:00:59Z","last_seen":"2026-10-13T07:15:40.563427Z","times_seen":597,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"robinessencemyclaim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robinessencemyclaim.xyz/build-on-slogan.svg","fqdn":"robinessencemyclaim.xyz","domain":"robinessencemyclaim.xyz","tld":"xyz"},"ip":{"addr":"172.67.194.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robinessencemyclaim.xyz/","date":"2026-09-11T03:10:49.431Z","timestamp":1789096249431,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robinessencemyclaim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 09:11:12 GMT","end":"Tue, 08 Dec 2026 10:08:54 GMT"},"fingerprint":{"sha1":"6C:B9:47:48:19:61:6E:91:F6:1B:12:6F:B7:6F:65:73:21:33:16:00","sha256":"D4:40:C1:64:94:1F:84:8C:47:74:A2:63:2D:29:45:28:0F:A0:D8:B2:E9:3C:B5:6D:75:91:BE:53:BC:93:8C:FF"}}},"request":{"raw":"GET /build-on-slogan.svg HTTP/1.1\r\nHost: robinessencemyclaim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robinessencemyclaim.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 03:10:49 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\nlast-modified: Wed, 09 Sep 2026 09:38:22 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JaoWLShndsZL53h1fLruGtpTHG85y4RaICb2joNeIBnWxtSzL6CxATDbeFEkKJI4qaiUVE6OBvR8JQ5SGdoPaZ3o4qsrPOyRl%2Fl8id195ImqeLwjlZ%2BnXDkhSxpLlO4sD9KepWVAcflTzQ%3D%3D\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\netag: W/\"6aa1290e-23bf\"\r\ncf-ray: a3937b46ffaab517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9151,"size_decoded":3974,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"83fcc57ce12ab74732105f3def835f63","sha1":"1326cac11bce7ce0c9ec2a68034d4861b0717a92","sha256":"e0fd161504a5e1c8db0fbf4883531702586b9c97e5291b024593b346e1069166","sha512":"6fa182709fa08f302fffa6ae30ce8aa72fe07d26b3288c1f7844efa7232dce833a2aa51a8400f4cb9c213022e675f35bde6d8cc529124c26d8beed02cec66708","ssdeep":"192:XptuNQdJfnppIlq0WLfr6l802wauiSIdEIZ98vsmU4mjXPv:Xptu2nppUq3zagw0SIdvMsmwj/v","tlshash":"7f1241febfc0b5f0f341d3f9d016996939175cba2babd728c3945f88a896488c449c91","first_seen":"2023-05-11T04:33:41Z","last_seen":"2026-10-09T17:13:51.939774Z","times_seen":178,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"robinessencemyclaim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robinessencemyclaim.xyz/secureproxy?s=%2Fjmpd%2F","fqdn":"robinessencemyclaim.xyz","domain":"robinessencemyclaim.xyz","tld":"xyz"},"ip":{"addr":"172.67.194.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://robinessencemyclaim.xyz/","date":"2026-09-11T03:10:51.142Z","timestamp":1789096251142,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robinessencemyclaim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 09:11:12 GMT","end":"Tue, 08 Dec 2026 10:08:54 GMT"},"fingerprint":{"sha1":"6C:B9:47:48:19:61:6E:91:F6:1B:12:6F:B7:6F:65:73:21:33:16:00","sha256":"D4:40:C1:64:94:1F:84:8C:47:74:A2:63:2D:29:45:28:0F:A0:D8:B2:E9:3C:B5:6D:75:91:BE:53:BC:93:8C:FF"}}},"request":{"raw":"POST /secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: robinessencemyclaim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://robinessencemyclaim.xyz/\r\ncontent-type: application/json\r\nContent-Length: 1320\r\nOrigin: https://robinessencemyclaim.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1320,"data":"{\"route\":\"n9POyFeFG1tUtiSU-z9JOx3n\",\"payload\":\"0hqM-6_N52QB7AIEAyEAFQAZA9oCGAA4Ax8AAAIBWQMAAO8nhn2XtsKCAfYJp9dfWsQkkjOgf5ECAADeqqMyH1xIRg620wMINLiRvGXlf5YB2013HyWi7KAOzGVzsdH3eZDb6OtBcR2-41BCRxcnAfiS54AnREOoLL9W20GmQpjYNus5YJn9owv3Ep1UALvN9vUYwzZ1LmJVftOIPy4XjtL3PKi7DKRyUCZ73G8-kxCUyHdqvfuN4aML5K0LkbFGSCFA2YlTCkEdOUPngJvKNJWLiiMhlDn5gPYuWvjlDlf1_rVBN4xM-fuguDqiXpWGIuU2FFY2bkWc6dxKOEhiq8pfeyNn13sEVUF4p6M0v1gC_yPnuYIc29PFt9X-zgS4hvrSOYtZueaPctLmL04sqkOMtKmvgjbiNcSTyzV9xy3ioxR9zCrQV3-vbPTJ5ODwTZfnjg8xCEXJViN1Gj2Mojj-t65RhQm42FUuQkjGlBtcB0eI5mq4thFVeS5TaCTOpxARdG4VkV_lZZ-FEwDW6KgpOgwTrbypteNjiS-hzxEsR3eUTQxOkL2iguyxijQ4uoX2AZ-wn1CLzTq-SLUbZVLLqcSY1Wpp__uJ9TD2vGqc5AAnJym8WpEqCdBpqyFoGy-0C86DH7F0vMtu1T8Z9dxCgRXFtjfNlGTBNLkFwXzgIEUsn113p3bMHiG7VQOPDwzezT15ootAuMpbVvxZ5vasPDMosRXH56F8VLxQnZwkq2NFuuiYmasX2suZDxnl7GKPfTysV5zyH24jtB4px9jYe27aRDBRQD1bNKrg7qWcwceSnqe9zFsZEq56c4E_m6b-3tKXFgS4XBosHjffbSPy_xDNp-M5xO8yDgGvdstNOQQ3eIKOp6RjSmKiix3suRiJIo4oNlW26eHjUF5v2QTs6dwtoZ4QRib6jl19LVeVAPVSPj92WHkrxr--6EDOOTySVQned_yasAmIwo9C4rvF10XVtccXN3jRHRXnJbljbEAhv847Ivp91FqEu9z8b9se1D9dfH_fTzrS17Ta9ZO7eJNQHrWnSki-jJuHUbNzezGn8j5r1rRxTR5ENfnXibfBMw6XqjIXo2BiFp56yk78XproqcdbBwVH8YH_PbPlQ1PxXlDjc_okZ-fIT84Uh7AIqaGhTKWQ-vvAmwUByLkhYF4LSQxe2G8e1gDbN4d3qqVL_rwN4uCNL7IyTq2bQc0mfBFfE56wG241KPexNKVwNLqRs6uCfJ4UEA\",\"challenge\":null}"}},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 03:10:51 GMT\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"a-bAsFyilMr4Ra1hIU5PyoyFRunpI\"\r\nx-ratelimit-limit: 20\r\nx-ratelimit-remaining: 19\r\nx-ratelimit-reset: 1789096311258\r\ncdn-proxyver: 1.70\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 09/11/2026 03:10:51\r\ncdn-edgestorageid: 1444\r\ncdn-requestid: 42fd8a431ee594c43be98d845b68568b\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3PCtFnADqMCwHk6dnZfVipbH3zCwCv79o5Me9ze0cHGUh8ByigttRn%2FUTwRN8nBslwiU3GlSkrZT%2FZ83uCUfjB%2BkTx%2Fa1Dwa5Yl5%2BygOV8JxQkCa%2FKF3hmQk40KhhHj4TgELzE%2FSgd7b3g%3D%3D\"}]}\r\ncf-ray: a3937b51a829b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":3326,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T05:37:40.491416Z","times_seen":19114689,"resource_available":true,"data":null}},"time_used":764,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":764,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"robinessencemyclaim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robinessencemyclaim.xyz/css2.css","fqdn":"robinessencemyclaim.xyz","domain":"robinessencemyclaim.xyz","tld":"xyz"},"ip":{"addr":"172.67.194.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://robinessencemyclaim.xyz/","date":"2026-09-11T03:10:49.420Z","timestamp":1789096249420,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robinessencemyclaim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 09:11:12 GMT","end":"Tue, 08 Dec 2026 10:08:54 GMT"},"fingerprint":{"sha1":"6C:B9:47:48:19:61:6E:91:F6:1B:12:6F:B7:6F:65:73:21:33:16:00","sha256":"D4:40:C1:64:94:1F:84:8C:47:74:A2:63:2D:29:45:28:0F:A0:D8:B2:E9:3C:B5:6D:75:91:BE:53:BC:93:8C:FF"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: robinessencemyclaim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robinessencemyclaim.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 03:10:49 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Wed, 09 Sep 2026 09:38:22 GMT\r\netag: \"6aa1290e-1dcc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CwpPymYlQhdqnQJxt92sk3RmHZrXL5s%2Fv0LDeqmNCsN%2FL24AjGjVF62satisGmUbsIHGZLvC02%2BPt7Lktq%2FikXcA2FNBbWB5MrCo26bqF5YMMHq7G0d0VkmI7HP4ezSNnSRP%2BKcubRkXYw%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3937b46efa6b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7628,"size_decoded":1626,"mime_type":"text/css","magic":"ASCII text","md5":"a945690afba190bdf35bdbc8dca91152","sha1":"d93d79ba5c4ff541fb62d683c5d6b488b9f53ba8","sha256":"e3588f89e8f3d36d7befdcd1ad777d37963acce98132704f84f1d7ab2d5e1b4b","sha512":"72a22e14d311d595ee72e60b3ae2692c0cf6745594fab8f6f60c522f0f91a227d67e0dbbbc34e4fdfae78e152a29498981398ad2f56e511e7abe26664268a393","ssdeep":"192:9/NAPt34yaDD/OnIt3/ha8G/rKht3iIall/E5yt3RPaGc:JwSfyGKVm","tlshash":"ebf14490046b9400eb872cd277cf7f376d9da148a045c9795ffd1898acded2613a1b4d","first_seen":"2024-12-17T11:31:53.647668Z","last_seen":"2026-10-06T20:59:40.098144Z","times_seen":685,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"robinessencemyclaim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robinessencemyclaim.xyz/secureproxy?s=%2Fipfs%2FgvI9wx0BDLzegy_lMs0ZMQ2b3958976a17c6f279bc5f00f7ab0129%3Ft%3D1789096250041","fqdn":"robinessencemyclaim.xyz","domain":"robinessencemyclaim.xyz","tld":"xyz"},"ip":{"addr":"172.67.194.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://robinessencemyclaim.xyz/","date":"2026-09-11T03:10:50.043Z","timestamp":1789096250043,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robinessencemyclaim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 09:11:12 GMT","end":"Tue, 08 Dec 2026 10:08:54 GMT"},"fingerprint":{"sha1":"6C:B9:47:48:19:61:6E:91:F6:1B:12:6F:B7:6F:65:73:21:33:16:00","sha256":"D4:40:C1:64:94:1F:84:8C:47:74:A2:63:2D:29:45:28:0F:A0:D8:B2:E9:3C:B5:6D:75:91:BE:53:BC:93:8C:FF"}}},"request":{"raw":"GET /secureproxy?s=%2Fipfs%2FgvI9wx0BDLzegy_lMs0ZMQ2b3958976a17c6f279bc5f00f7ab0129%3Ft%3D1789096250041 HTTP/1.1\r\nHost: robinessencemyclaim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robinessencemyclaim.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 03:10:50 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"9d9d0-9PpKg/lMsF043lwsy4PnALTKGBs\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=e2IeBqpwhVqjSvBAUyKWzg.js\r\ncdn-proxyver: 1.70\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/11/2026 03:10:50\r\ncdn-edgestorageid: 1056\r\ncdn-requestid: cb8017987b41312db4a493c170a5000f\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sJItiviM2itWNDRnG2oTM%2BXSM%2FZG64aRXJ%2FZw2jQPGZ5paFH5xAVEdXV6WIt2nbSbqIyJAjoEpe5rzeC5309UEGmcb359hiZ3mMk7N3tgQWXKWZG2NSm%2BEzx6N%2FvMNL9zFbINMZRizfVwg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3937b4acfd8b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":645584,"size_decoded":141910,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c2ba6df520e24715b21a32e0fa7adfcf","sha1":"f4fa4a83f94cb05d38de5c2ccb83e700b4ca181b","sha256":"c1e776850676cdda9f873472db6d0dc4de3e305d32063e603f9a7b7af4650655","sha512":"fb08681b2e463b0295b63bc9c1a5f63233bc6984bac14794b1091597c79870b8a3f9ba0c9e8d0f157fb94af32fa00f163d7a9e07871577c2ca1e8095f8cd1748","ssdeep":"6144:ch5gDmrq9NWCEiox3Ti/1gFQZDeoV5oMPNFppHSyyA:csGq9NWCEiox3Ti/ESVPHSyyA","tlshash":"c4d4cbd0b34a56bbd8d6b2b7043349afdfa82d06064b188bd2e7dce4725470791d89bc","first_seen":"2026-09-11T03:11:35.123027Z","last_seen":"2026-09-11T03:11:35.123027Z","times_seen":1,"resource_available":true,"data":null}},"time_used":725,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":602,"receive":123,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"robinessencemyclaim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robinessencemyclaim.xyz/SpaceGrotesk[wght].woff2","fqdn":"robinessencemyclaim.xyz","domain":"robinessencemyclaim.xyz","tld":"xyz"},"ip":{"addr":"172.67.194.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://robinessencemyclaim.xyz/","date":"2026-09-11T03:10:50.097Z","timestamp":1789096250097,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robinessencemyclaim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 09:11:12 GMT","end":"Tue, 08 Dec 2026 10:08:54 GMT"},"fingerprint":{"sha1":"6C:B9:47:48:19:61:6E:91:F6:1B:12:6F:B7:6F:65:73:21:33:16:00","sha256":"D4:40:C1:64:94:1F:84:8C:47:74:A2:63:2D:29:45:28:0F:A0:D8:B2:E9:3C:B5:6D:75:91:BE:53:BC:93:8C:FF"}}},"request":{"raw":"GET /SpaceGrotesk[wght].woff2 HTTP/1.1\r\nHost: robinessencemyclaim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robinessencemyclaim.xyz/bdc6bdd6b27d34fb.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 03:10:50 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Wed, 09 Sep 2026 09:38:22 GMT\r\netag: \"6aa1290e-c068\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M45yRAMe8x7XqrCINVjn%2FQADh2KSxUXhwvccnqxekWaPgAgZi%2FHQlgK1qWGssaOcsOxiNYHiFL%2FQ4kir6pKuO8afe4A579nktexsWz2%2Bg0eMdm3TytnnK%2BL%2FIUt6gt9GyzwrR9qZcQgX4A%3D%3D\"}]}\r\ncf-ray: a3937b4b1fe1b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 49256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49256,"size_decoded":50224,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 49256, version 2.0","md5":"0c62a8f36c27538912ccbbd5de747927","sha1":"b4509f04a2bed1ec04e7f9ff4dc33c69e8e263ec","sha256":"8e085aa438094f11487a836652edd5c054fa6a96f63fc7c282105ee3a4b08c07","sha512":"a67cdcfd2c433321dac9322b221ffa7aa0eab3f0258d7975c84e891eddea41fd456ee3c6f7e67762853e023ba0ccd3d0586d5d549a63fc0ae4ac62f7533dc074","ssdeep":"1536:pKXTCNqIqI29JkBq+zhVpQ0n17Bwnfen623:pKXGoaWl8y0nPwnGn623","tlshash":"a123f1ce649a7d788870eaa31dd73f146dfc984389d6e6e1e1c2da8d21c971809e434b","first_seen":"2023-05-23T06:00:59Z","last_seen":"2026-10-13T07:15:40.563427Z","times_seen":597,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"robinessencemyclaim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robinessencemyclaim.xyz/logo-with-text.svg","fqdn":"robinessencemyclaim.xyz","domain":"robinessencemyclaim.xyz","tld":"xyz"},"ip":{"addr":"172.67.194.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robinessencemyclaim.xyz/","date":"2026-09-11T03:10:50.535Z","timestamp":1789096250535,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robinessencemyclaim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 09:11:12 GMT","end":"Tue, 08 Dec 2026 10:08:54 GMT"},"fingerprint":{"sha1":"6C:B9:47:48:19:61:6E:91:F6:1B:12:6F:B7:6F:65:73:21:33:16:00","sha256":"D4:40:C1:64:94:1F:84:8C:47:74:A2:63:2D:29:45:28:0F:A0:D8:B2:E9:3C:B5:6D:75:91:BE:53:BC:93:8C:FF"}}},"request":{"raw":"GET /logo-with-text.svg HTTP/1.1\r\nHost: robinessencemyclaim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robinessencemyclaim.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 03:10:50 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\nlast-modified: Wed, 09 Sep 2026 09:38:22 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C0or9XCj1btmMAN3KwV7AtDB1ZAUo8ZXrFuRHA7ZponQS7bIGIt4kYd4WBoZ%2Bzcyw3OGLxYAhtMFM2wkIJV4YJGYBnTDPxYpmmXJ7hToZ0%2FDZrRMznRN9Qd0wwn0yvOCv1P7D7bVUneo3A%3D%3D\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=6,i=?0\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6aa1290e-b2c\"\r\ncf-ray: a3937b4dd81cb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2860,"size_decoded":2403,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3cdaf3a18accd53c3cbf47846f831a5e","sha1":"52a5d69f27bc88b35d34ed3a44ae9b4cc555e520","sha256":"6354f38310391f7747749371558628411c388b550f49cb30f4924fd11ae45725","sha512":"172531beb6d7b7778b197a879c33ee495cd1a8e4ad564204f9c61c4a5fac8c381967c5f78e3de8cc4954d25b57e389a0655f5ec822e33ce3d40b5e17cb83f735","ssdeep":"","tlshash":"7051b785930095e0d5c7c6d4dd3fedec751fa0d5a35750a981f1ab08d4170f26c4cea0","first_seen":"2023-05-23T06:00:59Z","last_seen":"2026-10-09T17:13:51.934984Z","times_seen":186,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"robinessencemyclaim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robinessencemyclaim.xyz/bdc6bdd6b27d34fb.css","fqdn":"robinessencemyclaim.xyz","domain":"robinessencemyclaim.xyz","tld":"xyz"},"ip":{"addr":"172.67.194.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://robinessencemyclaim.xyz/","date":"2026-09-11T03:10:49.417Z","timestamp":1789096249417,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robinessencemyclaim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 09:11:12 GMT","end":"Tue, 08 Dec 2026 10:08:54 GMT"},"fingerprint":{"sha1":"6C:B9:47:48:19:61:6E:91:F6:1B:12:6F:B7:6F:65:73:21:33:16:00","sha256":"D4:40:C1:64:94:1F:84:8C:47:74:A2:63:2D:29:45:28:0F:A0:D8:B2:E9:3C:B5:6D:75:91:BE:53:BC:93:8C:FF"}}},"request":{"raw":"GET /bdc6bdd6b27d34fb.css HTTP/1.1\r\nHost: robinessencemyclaim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robinessencemyclaim.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 03:10:50 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Wed, 09 Sep 2026 09:38:22 GMT\r\netag: \"6aa1290e-19c37\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y64RdtlsKc9igiI%2B8dd9kA%2Bzm3qM9uTC4RnGV99A9hHfylEY8WYMTAwAHjl8hKd%2Bkb9RMHZkog%2FgdpRin2CX1M2S%2FpEJQl2L1fsMwquv1yz82IHQvVYcfEJauPcx9SbIwB46dmgS%2F%2BjgYg%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3937b46dfa4b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":105527,"size_decoded":22226,"mime_type":"text/css","magic":"ASCII text","md5":"ba0b941f296cd700ced4bd0401968c27","sha1":"45b8bd1d5b782cf0f39471e0a867431f88eb2d32","sha256":"b9e08fa976f2dd165573e3ed596ea5337f8e805baf4116d9e2ad0e928419885e","sha512":"6860a8a1c28f05192854eec41b20ccfe89aae13dd8fae3d396ffdaae3de3760e829413c5a2c6bfffe1644505cb2feaca58e065be716b30b2b664fa5257d8b582","ssdeep":"1536:9PEY1JIzdJralsZHe1t7sZs6wfMpHJg0FtC4jE7:HlsZHe1CrG","tlshash":"81a3b61569f30d192d1f54fc96dda24ab62a60c78e1edea9bfcd30004fc83b4d896e58","first_seen":"2025-08-22T23:05:17.786863Z","last_seen":"2026-09-11T03:11:35.124063Z","times_seen":12,"resource_available":true,"data":null}},"time_used":599,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":599,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"robinessencemyclaim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robinessencemyclaim.xyz/home-trade.svg","fqdn":"robinessencemyclaim.xyz","domain":"robinessencemyclaim.xyz","tld":"xyz"},"ip":{"addr":"172.67.194.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robinessencemyclaim.xyz/","date":"2026-09-11T03:10:49.432Z","timestamp":1789096249432,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robinessencemyclaim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 09:11:12 GMT","end":"Tue, 08 Dec 2026 10:08:54 GMT"},"fingerprint":{"sha1":"6C:B9:47:48:19:61:6E:91:F6:1B:12:6F:B7:6F:65:73:21:33:16:00","sha256":"D4:40:C1:64:94:1F:84:8C:47:74:A2:63:2D:29:45:28:0F:A0:D8:B2:E9:3C:B5:6D:75:91:BE:53:BC:93:8C:FF"}}},"request":{"raw":"GET /home-trade.svg HTTP/1.1\r\nHost: robinessencemyclaim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robinessencemyclaim.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 03:10:49 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\nlast-modified: Wed, 09 Sep 2026 09:38:22 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ooYau3mbunYJVHSuzj657w1j9e%2BFExB7twB3Lpgf3Ht9OP3MMCNqKkhKIUv1bDB9GVwLZyjr%2FaPT6yWYB%2B%2F8K5sUOWNa12YrkmAHgC6KPW%2BvDmC5NJyGwaKKVJeDhpZsNd693gqU68thPQ%3D%3D\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\netag: W/\"6aa1290e-1e5\"\r\ncf-ray: a3937b46ffabb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":485,"size_decoded":1246,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"99a268f3b235d6c95588456e9cb243d3","sha1":"d02effed1e7bf3840186902bb02f6ebdf61f21b8","sha256":"2891c9f2638e186d56da2cb11e7a0f7510b88641b7fe539eba8606b12fd244b3","sha512":"2a568377ada6f96db752b086e445ea4c7d8efd801f0b1da6029d54f302b5101c2a53f9861c3cbf32c203ecd18a9c8b5fbf295321820778778d08bc885c3186d8","ssdeep":"","tlshash":"96f059f3500936f00504db10d86a143e317d60ec265d5a5aa2502325a9c48ee1cddd9c","first_seen":"2023-05-23T06:00:59Z","last_seen":"2026-10-09T17:13:51.935545Z","times_seen":173,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"robinessencemyclaim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robinessencemyclaim.xyz/home-bg-element-3.png","fqdn":"robinessencemyclaim.xyz","domain":"robinessencemyclaim.xyz","tld":"xyz"},"ip":{"addr":"172.67.194.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robinessencemyclaim.xyz/","date":"2026-09-11T03:10:50.080Z","timestamp":1789096250080,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robinessencemyclaim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 09:11:12 GMT","end":"Tue, 08 Dec 2026 10:08:54 GMT"},"fingerprint":{"sha1":"6C:B9:47:48:19:61:6E:91:F6:1B:12:6F:B7:6F:65:73:21:33:16:00","sha256":"D4:40:C1:64:94:1F:84:8C:47:74:A2:63:2D:29:45:28:0F:A0:D8:B2:E9:3C:B5:6D:75:91:BE:53:BC:93:8C:FF"}}},"request":{"raw":"GET /home-bg-element-3.png HTTP/1.1\r\nHost: robinessencemyclaim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robinessencemyclaim.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 03:10:50 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Wed, 09 Sep 2026 09:38:22 GMT\r\netag: \"6aa1290e-1a15f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9lc9q6DyyAWPTGlhhWdyO9cQdabCOj9VfxFKqq0sRV4xfYYN1ui1rMesgdFcZoUNo%2B7eSqu1bO2mntw8dsGmSj6j9i8FHEKge8RLTQiKCuu8zVyxSoMZwt1YjxLOpie5GDWDculAZF6LKg%3D%3D\"}]}\r\ncf-ray: a3937b4b0fdcb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 106847\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106847,"size_decoded":107789,"mime_type":"image/png","magic":"PNG image data, 1435 x 640, 8-bit colormap, non-interlaced","md5":"829d54060f0b24427b5e52f048431d1b","sha1":"6686c3a249cca06d598b1a890bbdd8cf62eff8b4","sha256":"9ca4bbf09503d26b093a81a470af944eb6e8a4ef68ae76df6638815500d44529","sha512":"35e1a2c38b520f3ca003e45f01aa22640496495343552ef5fb936581a50b0b982220802dd8abed64461a86cff8a12ad43de52c187780ab1bcbceb18dad5be4e1","ssdeep":"3072:73q2Wi2s6o6KrNN6GG9dDfuLr9qHcMn7Ho:DjR6Kr18cyHo","tlshash":"64a312866f235976fc4821bd39c7e485f70ba6ac91128624ad5430f9a0eb85e73c5f0f","first_seen":"2023-05-23T06:00:59Z","last_seen":"2026-10-09T17:13:51.937558Z","times_seen":95,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"robinessencemyclaim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robinessencemyclaim.xyz/home-bg-element-2.png","fqdn":"robinessencemyclaim.xyz","domain":"robinessencemyclaim.xyz","tld":"xyz"},"ip":{"addr":"172.67.194.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robinessencemyclaim.xyz/","date":"2026-09-11T03:10:50.079Z","timestamp":1789096250079,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robinessencemyclaim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 09:11:12 GMT","end":"Tue, 08 Dec 2026 10:08:54 GMT"},"fingerprint":{"sha1":"6C:B9:47:48:19:61:6E:91:F6:1B:12:6F:B7:6F:65:73:21:33:16:00","sha256":"D4:40:C1:64:94:1F:84:8C:47:74:A2:63:2D:29:45:28:0F:A0:D8:B2:E9:3C:B5:6D:75:91:BE:53:BC:93:8C:FF"}}},"request":{"raw":"GET /home-bg-element-2.png HTTP/1.1\r\nHost: robinessencemyclaim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robinessencemyclaim.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 03:10:50 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Wed, 09 Sep 2026 09:38:22 GMT\r\netag: \"6aa1290e-874a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AWlSQzwchJLo%2FCWqze8u9bl9RiM73RkG7Mvaei6%2FZOnZGKkQ3QT76bSu5lzDCE1aXNPp%2BmSFmj0qWDfLq7yzpWUp8f9H1cDIk6VPtl5HxMCDjshoeg5A1I9uYtXmmiexwP9NYUYtaPXfCA%3D%3D\"}]}\r\ncf-ray: a3937b4affdbb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 34634\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34634,"size_decoded":35578,"mime_type":"image/png","magic":"PNG image data, 1320 x 506, 8-bit colormap, non-interlaced","md5":"40c38eed9c27f4f82553bcb71fc16fb5","sha1":"79108ff5c9db3e2d12302994e630c53d047065cb","sha256":"41aa77b316dcb01bb7eadc8ce07f038c3d51f2eb46b29e2820843df7db8c989d","sha512":"52a640cbe60c477b8acdb3a5713dcdd85c579717a0f2a3f6300609fc8c82cc71c61c02980f793d8a892288275faa3c1d388f3c70c6e9fb287e08469ff6d61089","ssdeep":"768:dIA+Mgg8444I9ORJGyr3/CoNmR6mpMuAKxLK4ruhOafV6gWXT5JAvsS97g:BVBpI0vaoNmQmp7K4rOgDMsShg","tlshash":"73f2f169fcc00a50d69c6ed1e57cb65f321a6212b53ad42e4b6288bf761f2e73632811","first_seen":"2023-05-23T06:00:59Z","last_seen":"2026-10-09T17:13:51.928142Z","times_seen":117,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"robinessencemyclaim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robinessencemyclaim.xyz/home-footer-bg.webp","fqdn":"robinessencemyclaim.xyz","domain":"robinessencemyclaim.xyz","tld":"xyz"},"ip":{"addr":"172.67.194.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robinessencemyclaim.xyz/","date":"2026-09-11T03:10:50.082Z","timestamp":1789096250082,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robinessencemyclaim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 09:11:12 GMT","end":"Tue, 08 Dec 2026 10:08:54 GMT"},"fingerprint":{"sha1":"6C:B9:47:48:19:61:6E:91:F6:1B:12:6F:B7:6F:65:73:21:33:16:00","sha256":"D4:40:C1:64:94:1F:84:8C:47:74:A2:63:2D:29:45:28:0F:A0:D8:B2:E9:3C:B5:6D:75:91:BE:53:BC:93:8C:FF"}}},"request":{"raw":"GET /home-footer-bg.webp HTTP/1.1\r\nHost: robinessencemyclaim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robinessencemyclaim.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 03:10:50 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Wed, 09 Sep 2026 09:38:22 GMT\r\netag: \"6aa1290e-2672\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V4wVPX33m4ppmqdSwmiVoaYMp3rA1HTJfPxIhkcmeTniVL3rBBrJmA67fuPgxd5efQSCGhSutr74%2FVZfqxY%2BLa5E9DnU4lKT1eBmeFvSEB%2FtsWY%2BVeNYdA%2FEojwnEFqrviLR8Lz7W5SrfA%3D%3D\"}]}\r\npriority: u=4,i\r\nvary: accept-encoding\r\ncf-ray: a3937b4b0fddb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9842,"size_decoded":8841,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7f9f1d3e3372791ad849c2c9f3c65628","sha1":"50ab5c834bf0cd77243e72a9c93265ef6c680c9b","sha256":"420a39c05a75fd598ca0adde22a3519779d1fa9808fcfea38775c4baacb7c7fe","sha512":"4fad34c159c71c450eb73d39f0cc7d645c10b23ca3148d3d1db65f5b8021c9c45f6c3b5a6f84907a41a8c52ec527b32acf682570cb6c3b0ddd7a5366c304ae82","ssdeep":"192:OtH9jC0xwwwAanXMQcqepqaBAnMmnTdMpPJn8r:8jAwwAanA1prcnTdiPar","tlshash":"33128da438df477503384e5ee6155eb19a18e801decf9fc17c0d2d9a398c2534f5a61b","first_seen":"2023-05-23T06:00:59Z","last_seen":"2026-10-09T17:13:51.941366Z","times_seen":114,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"robinessencemyclaim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robinessencemyclaim.xyz/SpaceGrotesk[wght].woff2","fqdn":"robinessencemyclaim.xyz","domain":"robinessencemyclaim.xyz","tld":"xyz"},"ip":{"addr":"172.67.194.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://robinessencemyclaim.xyz/","date":"2026-09-11T03:10:50.098Z","timestamp":1789096250098,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robinessencemyclaim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 09:11:12 GMT","end":"Tue, 08 Dec 2026 10:08:54 GMT"},"fingerprint":{"sha1":"6C:B9:47:48:19:61:6E:91:F6:1B:12:6F:B7:6F:65:73:21:33:16:00","sha256":"D4:40:C1:64:94:1F:84:8C:47:74:A2:63:2D:29:45:28:0F:A0:D8:B2:E9:3C:B5:6D:75:91:BE:53:BC:93:8C:FF"}}},"request":{"raw":"GET /SpaceGrotesk[wght].woff2 HTTP/1.1\r\nHost: robinessencemyclaim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robinessencemyclaim.xyz/bdc6bdd6b27d34fb.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 03:10:50 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Wed, 09 Sep 2026 09:38:22 GMT\r\netag: \"6aa1290e-c068\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eLMHnb7BX%2F3OhIGZ6vK1CEpt6cZDfhyXRjujkg1PBJvOPIzujr7e0w1iKosfCIb5KgDgFVbrRbqBg24OTNxHvUlN2bQ9wxycqcRrJ6tg3LdMpNAhyvzXDfjAQn0Wm0Gptjd4nQRH5ka74A%3D%3D\"}]}\r\ncf-ray: a3937b4b1fe3b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 49256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49256,"size_decoded":50214,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 49256, version 2.0","md5":"0c62a8f36c27538912ccbbd5de747927","sha1":"b4509f04a2bed1ec04e7f9ff4dc33c69e8e263ec","sha256":"8e085aa438094f11487a836652edd5c054fa6a96f63fc7c282105ee3a4b08c07","sha512":"a67cdcfd2c433321dac9322b221ffa7aa0eab3f0258d7975c84e891eddea41fd456ee3c6f7e67762853e023ba0ccd3d0586d5d549a63fc0ae4ac62f7533dc074","ssdeep":"1536:pKXTCNqIqI29JkBq+zhVpQ0n17Bwnfen623:pKXGoaWl8y0nPwnGn623","tlshash":"a123f1ce649a7d788870eaa31dd73f146dfc984389d6e6e1e1c2da8d21c971809e434b","first_seen":"2023-05-23T06:00:59Z","last_seen":"2026-10-13T07:15:40.563427Z","times_seen":597,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"robinessencemyclaim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robinessencemyclaim.xyz/home-order-book-AMM.svg","fqdn":"robinessencemyclaim.xyz","domain":"robinessencemyclaim.xyz","tld":"xyz"},"ip":{"addr":"172.67.194.254","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robinessencemyclaim.xyz/","date":"2026-09-11T03:10:49.438Z","timestamp":1789096249438,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robinessencemyclaim.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 09:11:12 GMT","end":"Tue, 08 Dec 2026 10:08:54 GMT"},"fingerprint":{"sha1":"6C:B9:47:48:19:61:6E:91:F6:1B:12:6F:B7:6F:65:73:21:33:16:00","sha256":"D4:40:C1:64:94:1F:84:8C:47:74:A2:63:2D:29:45:28:0F:A0:D8:B2:E9:3C:B5:6D:75:91:BE:53:BC:93:8C:FF"}}},"request":{"raw":"GET /home-order-book-AMM.svg HTTP/1.1\r\nHost: robinessencemyclaim.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robinessencemyclaim.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 03:10:49 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\nlast-modified: Wed, 09 Sep 2026 09:38:22 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6p1e2KVWWhkI5NkF93S4LPci54XAuccybvuRlo0mB5VNh6kH8zK1%2BPvjudjJ9mbRktgDWr%2FXey16yRgbr%2BQ51a37RRvqe7DsZ7OsBX46UpLXP3pHa6M1bA0vOQOgoBw3XbhRawj0wDxtWA%3D%3D\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\netag: W/\"6aa1290e-933\"\r\ncf-ray: a3937b46ffafb517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2355,"size_decoded":1764,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"032d4241b0a0430c669e2113752dcdab","sha1":"652968abbec6b67be9f517325adc26b14bf62790","sha256":"2c08e1ad3274e3189e2911f15b465b4468f8a5f5ce488832d266eea9129b0cc4","sha512":"55565622a3e735864c3871692ea796ba84783b117693213965d5c88edfe3ecd896c39d759c15224922e33502fcf54588a203d7fa6b7a2cc9d1d5032c75d3b93e","ssdeep":"","tlshash":"a141f4f1eeeca5d0e103c7f08d2fa6f1371e30b47f938daa4f9279844a615ada085425","first_seen":"2023-05-23T06:00:59Z","last_seen":"2026-10-09T17:13:51.925116Z","times_seen":172,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"robinessencemyclaim.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}