{"report_id":"a9b637ce-64fa-4c72-aaee-a0e752bd2fe5","version":6,"status":"done","tags":[],"date":"2026-05-30T05:44:18Z","url":{"schema":"http","addr":"claim-reserve.com","fqdn":"claim-reserve.com","domain":"claim-reserve.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":0,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"final":{"url":{"schema":"https","addr":"claim-reserve.com/","fqdn":"claim-reserve.com","domain":"claim-reserve.com","tld":"com"},"title":"ClaimReserve — Secure crypto portfolio tracking","dom":{"size":33626,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (22028)","md5":"6db7a1193200621f4f462f52c41bc5d4","sha1":"705338088a9e7558734b3c8fb52c7747ef7748e6","sha256":"5893e5ff9bb72b601c899aa366e416840060e36abee63feec48ab0414057165d","sha512":"e923dae6a799f5ae492397579eea64b5fe6e4b1241dd566b1e3337e389880e39c93903eb08f96585e528da2e98e20416eca87425c1ee1248732204c194bf321a","ssdeep":"768:tvn5Tox0rGV4xksc64Jysq7vz+3kaNmFy:tvn6ebx/c64Jysq7vzKkgmY","tlshash":"72e2d690f21c123d592be754fec8b76c9125f0a3ee124876b10d04aae6c3fe97562f94","dom_hash":"domhashaeb15d05f6ecc6a065eb3f995ae60813","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"claim-reserve.com","fqdn":"claim-reserve.com","domain":"claim-reserve.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":0,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-04T05:44:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"claim-reserve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-24T22:18:17.447529Z","alert_count":0,"request_count":7,"received_data":258874,"sent_data":3945,"comment":"","tags":null,"fingerprints":null},{"fqdn":"claim-reserve.com","ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2026-05-28","domain_rank":0,"first_seen":"2026-05-30T05:44:17.73924Z","last_seen":"2026-05-30T05:44:17.73924Z","alert_count":13,"request_count":13,"received_data":815167,"sent_data":9454,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.gpteng.co","ip":{"addr":"104.18.29.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-06-26","domain_rank":776423,"first_seen":"2024-12-08T00:48:33.877309Z","last_seen":"2026-05-27T15:35:48.278105Z","alert_count":0,"request_count":1,"received_data":134520,"sent_data":534,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"64.233.162.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-24T22:21:07.624228Z","alert_count":0,"request_count":1,"received_data":22116,"sent_data":553,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"claim-reserve.com/assets/wallet-BakHMhun.js","fqdn":"claim-reserve.com","domain":"claim-reserve.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"importedModule","is_inline":false,"md5":"fa80e73122de51c65bd3261d4f399a9d","sha1":"6bf01ea7dffe5419f9adf6a0ccef87fc63a2106e","sha256":"3f1270b347ab37d87f2feaaeba22e3ce9a5b85110066d2bc9753e562358d8865","sha512":"f50102925158b75a5412b45646086f4ea5f47e4fe8c1b340b16bdbf45f998d7708b64f1c00296c90966dc3c7334947515390428a1d53d956b8ee74c401d62822","ssdeep":"","tlshash":"72e012395f9d06ff060bc958099fa0114bddb1bcb6b909d17d1e41665526067ccbb701","size":298,"data":"","first_seen":"2026-05-30T05:44:20.303605Z","last_seen":"2026-05-30T05:44:20.834962Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-reserve.com/assets/index-jpYvdnwn.js","fqdn":"claim-reserve.com","domain":"claim-reserve.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"515074b0058be04433594572fc693c55","sha1":"2f4e220d7bafcc2cb11a6aeb3ba8712408abf464","sha256":"003e3f796e3f54cbeeb7c47956f6d2d9b8e138a55cbd5abd972e7a60829dfe60","sha512":"60cd505eb403ce18d1e9bc0b944fadb51ac16cbc53bbc4fa5c9ddafc926f7dc4d3b9871561ae2c7a7daf98ceaace79cad57d41a79852562c10601cb4855b149e","ssdeep":"96:g3Usn9R0hd3a8KTXImwcUwJ//okIBkKw2D97H:gEO9RU3GwcUaYFFlH","tlshash":"80b1f219f141fbacee665ad4fd1eb604700e4ea8c76b49b6e07e30120a644977e237c5","size":5331,"data":"","first_seen":"2026-05-30T05:44:20.300795Z","last_seen":"2026-05-30T05:44:20.829187Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-reserve.com/","fqdn":"claim-reserve.com","domain":"claim-reserve.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"8f9f99f10b9567883774afebc4626dd4","sha1":"b231c9c0383fdd42d0379fd24e2e708796fed53d","sha256":"418ac15785f4dea8dd0589c17e4849645612dc89e17259889b586677020b09ac","sha512":"25dc0095224c247d69906a17fa8a09b342d4eb7c08acc7bf1402896f0280c24c0d2416206405ceb976f69c41c2afbff793a7d9166fdbc6401ff769f917c8eb5e","ssdeep":"","tlshash":"b411449898810038c6fe06db93726318717510deb7c7b444e13ccd382a5e76b43559c3","size":919,"data":"","first_seen":"2026-03-27T14:24:21.930344Z","last_seen":"2026-06-06T18:22:12.414144Z","times_seen":1059,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-reserve.com/~flock.js","fqdn":"claim-reserve.com","domain":"claim-reserve.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","size":21296,"data":"","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-06-06T18:24:31.408492Z","times_seen":10058,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-reserve.com/","fqdn":"claim-reserve.com","domain":"claim-reserve.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"970da0a41088363143dca4cb1842e8f8","sha1":"82c89c6956f9cd50943d01fa9e61ff229ff03d19","sha256":"8e02f6b8b4bab5e14cd2dc0ccc4b532dd5d85726de340c840c317c9066d537a9","sha512":"8defb00d7a6fd46fae867368571cf823194f827bd1d034130d4c170a7df01664e0c2176ea307179e09522bb8549ffefec424fb0e7d21a8b5c53fc13e789a15f0","ssdeep":"","tlshash":"81110c7b08110e9542bcbd87743079c006a016103ab6d7adf6bfe88cba49dde117ed30","size":916,"data":"","first_seen":"2026-05-30T05:44:20.865559Z","last_seen":"2026-05-30T05:44:20.865559Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-reserve.com/","fqdn":"claim-reserve.com","domain":"claim-reserve.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"2acd3d73bbc8d3ba3f35629bb52bdc87","sha1":"1ceb5cdb1aaef828d045f93c024d676b2a173ff5","sha256":"b6ca917f8a08af4a6ad8cc558c1aa032e1e0648b79ce297747c7f6d3a6693807","sha512":"087546aae007202ed3509d48e832308255bf2c81f32242f4fcfc51a4bd81b653856059e7c9abfa88b9fadaa45ed3857d59acc885222f8d6f2234942b235402f7","ssdeep":"","tlshash":"9801afcbe7ec623243a5b4b9185aa5dd3e3800f0eb005bb61c744db43394d5d002ee81","size":829,"data":"","first_seen":"2026-01-07T03:19:54.535133Z","last_seen":"2026-06-06T16:41:35.787238Z","times_seen":942,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-reserve.com/assets/index-C6nYynFH.js","fqdn":"claim-reserve.com","domain":"claim-reserve.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ddd9ba4f7a4f7a68c588e1bc0f312a4","sha1":"134cb8bf2fa5bd7a3c5d05d9dc36d249e4f56f3d","sha256":"7741448a3754ef1628e6d6a9d627efd795f2c0984423847cbac58bbee7986a17","sha512":"a81046f59512553b0480eb6c0912d29c9d616952d660b74cdb3cc39d7c0410ddf1efb30b37fb947a4995c5552354da794c4576e7171e9dd515335dc86f8256b8","ssdeep":"6144:8hIpkdjr5VcwA9+eREVVkY4TYIRAS+lhjXIVKC/29RpGYp6fo8VG96QOM5Kt74zv:8hIiFSXJE2KLWVG9J/5Kt7SPKv9xs","tlshash":"71d47ed832aaa5220bd345e0907f1103f2382916780c8464f66cdddf7ab5949e67bfbd","size":600591,"data":"","first_seen":"2026-05-30T05:44:20.301648Z","last_seen":"2026-05-30T05:44:20.856394Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-reserve.com/assets/createLucideIcon-Ysa3KNYc.js","fqdn":"claim-reserve.com","domain":"claim-reserve.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"importedModule","is_inline":false,"md5":"763646a652eafeed563878e73129950c","sha1":"4234c858bb8b66df2fc1946a8a1889d112310d5d","sha256":"2df601f0469636ee4b23f7acb6795096128853f0823a03fa89a67ad316804430","sha512":"83bdaecd888a39a2a8e8e7c487eb9f612b799dbbeecd8dec0aa73628eeb728422da72a9ad41d802c199fd9568fd9ffed451d3ee84e5c3b9a94db34fbb196ab69","ssdeep":"","tlshash":"30214408b3d4283ca23584cd975c3069ec779a18f9635a58d2fc6d1a7623146a337acc","size":1202,"data":"","first_seen":"2026-05-30T05:44:20.292586Z","last_seen":"2026-05-30T05:44:20.854054Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-reserve.com/assets/logo-CCqEY0DN.js","fqdn":"claim-reserve.com","domain":"claim-reserve.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"importedModule","is_inline":false,"md5":"6ac1a8ad5fedd20d30f21e819f4ad361","sha1":"6d6182c2602ab61d6596be3a2a9df6d43a7b3e9d","sha256":"6137e6a40de5ab42cb7f1f2c158dbd2c80747529e10cd08fd65f0d1f297c1c4c","sha512":"c1404e18f3336d6253b7407a3e107716e92cdfef409efc1f92dcbced852aaf2fb9a04bcbc6aa7278f27343bc72e145487350a889e593cd86e86b250ba55bae2f","ssdeep":"","tlshash":"9190023a640405a44099208961a794560415223c613b629dc4144186a392554848582a","size":52,"data":"","first_seen":"2026-05-30T05:44:20.291639Z","last_seen":"2026-05-30T05:44:20.8619Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-reserve.com/assets/message-square-BaYzBwCT.js","fqdn":"claim-reserve.com","domain":"claim-reserve.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"importedModule","is_inline":false,"md5":"00200f60773faf77d10ccbf9edea9b28","sha1":"bacf204b652ff950607a7df15062a48eeab3e4ef","sha256":"6a7c75783f5be961d62ec09715676c206dc5756251dfd042b3b8dc5ece048da4","sha512":"d2b003933470e1ee1e3040889bd152ad611bcc9ea204c2f9533f0b66686fe95b9b61ac4a982b4172530126ed161c75a80da93df322e60cca4bf46fcd17b085b4","ssdeep":"","tlshash":"5bd0a77aaf4d17ed0a4389992e0fe2110f8976b9329c8de1320d837a878b593c4fb541","size":245,"data":"","first_seen":"2026-05-30T05:44:20.304519Z","last_seen":"2026-05-30T05:44:20.863241Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-reserve.com/assets/shield-check-Itiw_F-i.js","fqdn":"claim-reserve.com","domain":"claim-reserve.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"importedModule","is_inline":false,"md5":"95f552b6dd86e2772cf332d30ebcc24f","sha1":"cc925212eb9b95fbf5afcaefeb11fa06d46fe07b","sha256":"fa2b77712dd81955faebf7957c52cb0ce3504e57712db7958b9c038bb68a4e01","sha512":"102a810bdff894f95b6b31a4fb895134d2dfdb0e6afc7a382476c027fe3431966ffa62fffc5b5d4c01ff1342affc04f31b4edde9dca778dbde92888005163c4f","ssdeep":"","tlshash":"20e0867aaf4d57ed15c7dac985472010cfade19933e94dd0b10c897b811688bc49fa21","size":327,"data":"","first_seen":"2026-05-30T05:44:20.296479Z","last_seen":"2026-05-30T05:44:20.838807Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-reserve.com/","date":"2026-05-30T05:43:57.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://claim-reserve.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 29 May 2026 14:00:32 GMT\r\nexpires: Sat, 29 May 2027 14:00:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 56605\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-06T19:13:06.957278Z","times_seen":205100,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":60,"dns":1,"connect":17,"send":0,"wait":43,"receive":8,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-reserve.com/assets/index-jpYvdnwn.js","fqdn":"claim-reserve.com","domain":"claim-reserve.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-reserve.com/","date":"2026-05-30T05:43:58.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-reserve.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 10:34:11 GMT","end":"Wed, 26 Aug 2026 11:33:24 GMT"},"fingerprint":{"sha1":"49:68:F6:11:33:A0:70:A0:BA:3D:EA:54:AC:4F:3A:16:70:58:D8:9C","sha256":"76:14:56:DA:1F:01:64:4F:8D:C2:55:B5:CF:43:88:9A:8A:58:72:2B:18:D9:CD:A0:2B:35:42:1A:E3:27:26:08"}}},"request":{"raw":"GET /assets/index-jpYvdnwn.js HTTP/1.1\r\nHost: claim-reserve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-reserve.com/assets/index-C6nYynFH.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __dpl=4177fe4e85ced65123029919b85ef8ba3cb29148d2955ec8a7ebdae896795f32; __cf_bm=HK9nwz0bOrTfXyjYa6l.9ywtrTOaFZb4uzMwr_lxEHc-1780119836.9404802-1.0.1.1-fB2vKrhkJSNUnIrYq_hOwKQTtCkMGNaZGrxGf37xiRmKqTNalgOgND5NnOIYiG0mx3.VZZPR.8RBLWJyndaS_3Rfifj13lRJGf_zztwlB_4qDrEqQtsYwDS1aot3KmwE\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 05:43:58 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 4177fe4e85ced65123029919b85ef8ba3cb29148d2955ec8a7ebdae896795f32\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a03b6c9b8d235fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5331,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (5328)","md5":"515074b0058be04433594572fc693c55","sha1":"2f4e220d7bafcc2cb11a6aeb3ba8712408abf464","sha256":"003e3f796e3f54cbeeb7c47956f6d2d9b8e138a55cbd5abd972e7a60829dfe60","sha512":"60cd505eb403ce18d1e9bc0b944fadb51ac16cbc53bbc4fa5c9ddafc926f7dc4d3b9871561ae2c7a7daf98ceaace79cad57d41a79852562c10601cb4855b149e","ssdeep":"96:g3Usn9R0hd3a8KTXImwcUwJ//okIBkKw2D97H:gEO9RU3GwcUaYFFlH","tlshash":"80b1f219f141fbacee665ad4fd1eb604700e4ea8c76b49b6e07e30120a644977e237c5","first_seen":"2026-05-30T05:44:20.300795Z","last_seen":"2026-05-30T05:44:20.829187Z","times_seen":2,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"claim-reserve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-reserve.com/assets/wallet-BakHMhun.js","fqdn":"claim-reserve.com","domain":"claim-reserve.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-reserve.com/","date":"2026-05-30T05:43:58.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-reserve.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 10:34:11 GMT","end":"Wed, 26 Aug 2026 11:33:24 GMT"},"fingerprint":{"sha1":"49:68:F6:11:33:A0:70:A0:BA:3D:EA:54:AC:4F:3A:16:70:58:D8:9C","sha256":"76:14:56:DA:1F:01:64:4F:8D:C2:55:B5:CF:43:88:9A:8A:58:72:2B:18:D9:CD:A0:2B:35:42:1A:E3:27:26:08"}}},"request":{"raw":"GET /assets/wallet-BakHMhun.js HTTP/1.1\r\nHost: claim-reserve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-reserve.com/assets/index-jpYvdnwn.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __dpl=4177fe4e85ced65123029919b85ef8ba3cb29148d2955ec8a7ebdae896795f32; __cf_bm=HK9nwz0bOrTfXyjYa6l.9ywtrTOaFZb4uzMwr_lxEHc-1780119836.9404802-1.0.1.1-fB2vKrhkJSNUnIrYq_hOwKQTtCkMGNaZGrxGf37xiRmKqTNalgOgND5NnOIYiG0mx3.VZZPR.8RBLWJyndaS_3Rfifj13lRJGf_zztwlB_4qDrEqQtsYwDS1aot3KmwE\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 05:43:58 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 4177fe4e85ced65123029919b85ef8ba3cb29148d2955ec8a7ebdae896795f32\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a03b6c9bdd415fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":298,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"fa80e73122de51c65bd3261d4f399a9d","sha1":"6bf01ea7dffe5419f9adf6a0ccef87fc63a2106e","sha256":"3f1270b347ab37d87f2feaaeba22e3ce9a5b85110066d2bc9753e562358d8865","sha512":"f50102925158b75a5412b45646086f4ea5f47e4fe8c1b340b16bdbf45f998d7708b64f1c00296c90966dc3c7334947515390428a1d53d956b8ee74c401d62822","ssdeep":"","tlshash":"72e012395f9d06ff060bc958099fa0114bddb1bcb6b909d17d1e41665526067ccbb701","first_seen":"2026-05-30T05:44:20.303605Z","last_seen":"2026-05-30T05:44:20.834962Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"claim-reserve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-reserve.com/~api/analytics","fqdn":"claim-reserve.com","domain":"claim-reserve.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://claim-reserve.com/","date":"2026-05-30T05:43:58.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-reserve.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 10:34:11 GMT","end":"Wed, 26 Aug 2026 11:33:24 GMT"},"fingerprint":{"sha1":"49:68:F6:11:33:A0:70:A0:BA:3D:EA:54:AC:4F:3A:16:70:58:D8:9C","sha256":"76:14:56:DA:1F:01:64:4F:8D:C2:55:B5:CF:43:88:9A:8A:58:72:2B:18:D9:CD:A0:2B:35:42:1A:E3:27:26:08"}}},"request":{"raw":"POST /~api/analytics HTTP/1.1\r\nHost: claim-reserve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-reserve.com/\r\nContent-Type: application/json\r\nContent-Length: 338\r\nOrigin: https://claim-reserve.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __dpl=4177fe4e85ced65123029919b85ef8ba3cb29148d2955ec8a7ebdae896795f32; __cf_bm=HK9nwz0bOrTfXyjYa6l.9ywtrTOaFZb4uzMwr_lxEHc-1780119836.9404802-1.0.1.1-fB2vKrhkJSNUnIrYq_hOwKQTtCkMGNaZGrxGf37xiRmKqTNalgOgND5NnOIYiG0mx3.VZZPR.8RBLWJyndaS_3Rfifj13lRJGf_zztwlB_4qDrEqQtsYwDS1aot3KmwE; session-id=e6df8e67-257c-4ab5-8e0a-dffc9907c0e2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":338,"data":"{\"timestamp\":\"2026-05-30T05:43:58.053Z\",\"action\":\"page_hit\",\"version\":\"1\",\"session_id\":\"e6df8e67-257c-4ab5-8e0a-dffc9907c0e2\",\"payload\":\"{\\\"user-agent\\\":\\\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\\\",\\\"locale\\\":\\\"en-US\\\",\\\"referrer\\\":\\\"\\\",\\\"pathname\\\":\\\"/\\\",\\\"href\\\":\\\"https://claim-reserve.com/\\\"}\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 05:43:58 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 4\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a03b6c9bed4c5fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"f92965e2c8a7afb3c1b9a5c09a263636","sha1":"e9b450d14bc2363d292c84f17cfad5cfbd58a458","sha256":"11a6767d5674c7e45f7e00dc525762275b3a48491ad6045427d2609cc496c516","sha512":"25775ba3c567970fc3df3f8107f2a78a67c5619d54bfb37704423acceec253316949eee77b81100a01b91c742e475b4f6157dd2427a9f9fafd87a4078f2d65df","ssdeep":"","tlshash":"54300000000000000000c00c00000000000000000c0000000000000000000000000000","first_seen":"2023-04-09T18:20:08Z","last_seen":"2026-06-06T18:24:31.403191Z","times_seen":10152,"resource_available":true,"data":null}},"time_used":462,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":462,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"claim-reserve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-reserve.com/","date":"2026-05-30T05:43:57.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://claim-reserve.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 29 May 2026 14:00:32 GMT\r\nexpires: Sat, 29 May 2027 14:00:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 56605\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-06T19:13:06.957278Z","times_seen":205100,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":84,"dns":3,"connect":31,"send":0,"wait":24,"receive":5,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-reserve.com/assets/shield-check-Itiw_F-i.js","fqdn":"claim-reserve.com","domain":"claim-reserve.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-reserve.com/","date":"2026-05-30T05:43:58.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-reserve.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 10:34:11 GMT","end":"Wed, 26 Aug 2026 11:33:24 GMT"},"fingerprint":{"sha1":"49:68:F6:11:33:A0:70:A0:BA:3D:EA:54:AC:4F:3A:16:70:58:D8:9C","sha256":"76:14:56:DA:1F:01:64:4F:8D:C2:55:B5:CF:43:88:9A:8A:58:72:2B:18:D9:CD:A0:2B:35:42:1A:E3:27:26:08"}}},"request":{"raw":"GET /assets/shield-check-Itiw_F-i.js HTTP/1.1\r\nHost: claim-reserve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-reserve.com/assets/index-jpYvdnwn.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __dpl=4177fe4e85ced65123029919b85ef8ba3cb29148d2955ec8a7ebdae896795f32; __cf_bm=HK9nwz0bOrTfXyjYa6l.9ywtrTOaFZb4uzMwr_lxEHc-1780119836.9404802-1.0.1.1-fB2vKrhkJSNUnIrYq_hOwKQTtCkMGNaZGrxGf37xiRmKqTNalgOgND5NnOIYiG0mx3.VZZPR.8RBLWJyndaS_3Rfifj13lRJGf_zztwlB_4qDrEqQtsYwDS1aot3KmwE\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 05:43:58 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 4177fe4e85ced65123029919b85ef8ba3cb29148d2955ec8a7ebdae896795f32\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a03b6c9bdd445fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":327,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (326)","md5":"95f552b6dd86e2772cf332d30ebcc24f","sha1":"cc925212eb9b95fbf5afcaefeb11fa06d46fe07b","sha256":"fa2b77712dd81955faebf7957c52cb0ce3504e57712db7958b9c038bb68a4e01","sha512":"102a810bdff894f95b6b31a4fb895134d2dfdb0e6afc7a382476c027fe3431966ffa62fffc5b5d4c01ff1342affc04f31b4edde9dca778dbde92888005163c4f","ssdeep":"","tlshash":"20e0867aaf4d57ed15c7dac985472010cfade19933e94dd0b10c897b811688bc49fa21","first_seen":"2026-05-30T05:44:20.296479Z","last_seen":"2026-05-30T05:44:20.838807Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"claim-reserve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gpteng.co/mcp-widgets/v1/fonts/CameraPlainVariable.woff2","fqdn":"cdn.gpteng.co","domain":"gpteng.co","tld":"co"},"ip":{"addr":"104.18.29.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-reserve.com/","date":"2026-05-30T05:43:57.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gpteng.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 20:25:47 GMT","end":"Sun, 12 Jul 2026 21:25:38 GMT"},"fingerprint":{"sha1":"B5:C2:5D:87:D7:51:E0:73:8D:83:C4:92:3B:A5:57:F0:18:C3:10:15","sha256":"B7:2A:6D:36:CB:2E:C6:82:0E:25:CC:93:EE:AC:6C:04:54:D4:F1:4C:15:85:D1:44:FB:0F:51:54:CB:A0:39:00"}}},"request":{"raw":"GET /mcp-widgets/v1/fonts/CameraPlainVariable.woff2 HTTP/1.1\r\nHost: cdn.gpteng.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://claim-reserve.com/\r\nOrigin: https://claim-reserve.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 05:43:57 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 133760\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\netag: \"c48bd2439e2921fc4d3aaef0e57446be\"\r\nlast-modified: Wed, 10 Dec 2025 13:46:40 GMT\r\nvary: Origin\r\nserver: cloudflare\r\nset-cookie: __cf_bm=UgTivA4PDB.B6ajqmYG2TTUhCAWZEZ1xRFRlccTYM3M-1780119837.9534185-1.0.1.1-gni_9TLnXEqn5IDNzScgBFkhT5KOSewuKZMiifiIjof4SH6KSCWAdCRXr_EvQPDbVRf7a5Q9FBBtcUoeleVAoh5A0KMFoAlEfo5zcO48LulSehgc50cFDiovzP..6sm4; HttpOnly; SameSite=None; Secure; Path=/; Domain=gpteng.co; Expires=Sat, 30 May 2026 06:13:57 GMT\r\ncf-cache-status: HIT\r\nage: 1408\r\nexpires: Sat, 30 May 2026 09:43:57 GMT\r\ncache-control: public, max-age=14400\r\ncf-ray: a03b6c9b3a5eb500-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":133760,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 133760, version 2.0","md5":"c48bd2439e2921fc4d3aaef0e57446be","sha1":"396596764aebbe25ba1c45f19091f48a7e17a9e5","sha256":"0f4491b0f9f6b9c3e6054a9f0036583e3978fd3a8d8f49ba5da05d63cf875cbb","sha512":"cb9ff1ede5ea280e8586c3e6e84c68685b3749fa492fb1babef3d0bb72ab1b095b1c00531554ead12e31139f226c7aa96399b11fd6ae256ea134639d98d95b64","ssdeep":"3072:OWSP0iIzCkvibLej77I/9GRBm7Xy2TJ46tNP7HlgXffTp/CGZ7YpV/z:OdYGkviXe7l87C2XtBC1/CGin/z","tlshash":"d9d3123e2ad0e463aba505b13a7f65808a2e5f11e3c773c145b274cfd5302a8236da7d","first_seen":"2025-04-23T20:37:12.507957Z","last_seen":"2026-06-06T16:41:35.772511Z","times_seen":1038,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":20,"dns":1,"connect":1,"send":0,"wait":13,"receive":7,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-reserve.com/","fqdn":"claim-reserve.com","domain":"claim-reserve.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-30T05:43:56.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-reserve.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 10:34:11 GMT","end":"Wed, 26 Aug 2026 11:33:24 GMT"},"fingerprint":{"sha1":"49:68:F6:11:33:A0:70:A0:BA:3D:EA:54:AC:4F:3A:16:70:58:D8:9C","sha256":"76:14:56:DA:1F:01:64:4F:8D:C2:55:B5:CF:43:88:9A:8A:58:72:2B:18:D9:CD:A0:2B:35:42:1A:E3:27:26:08"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: claim-reserve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 05:43:57 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, must-revalidate, max-age=0\r\nx-deployment-id: 4177fe4e85ced65123029919b85ef8ba3cb29148d2955ec8a7ebdae896795f32\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nset-cookie: __dpl=4177fe4e85ced65123029919b85ef8ba3cb29148d2955ec8a7ebdae896795f32; Path=/; Max-Age=86400; SameSite=Lax; Secure\n__cf_bm=HK9nwz0bOrTfXyjYa6l.9ywtrTOaFZb4uzMwr_lxEHc-1780119836.9404802-1.0.1.1-fB2vKrhkJSNUnIrYq_hOwKQTtCkMGNaZGrxGf37xiRmKqTNalgOgND5NnOIYiG0mx3.VZZPR.8RBLWJyndaS_3Rfifj13lRJGf_zztwlB_4qDrEqQtsYwDS1aot3KmwE; HttpOnly; SameSite=None; Secure; Path=/; Domain=claim-reserve.com; Expires=Sat, 30 May 2026 06:13:57 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a03b6c94d9d65fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20738,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"data","md5":"3e7dc3356b76da2ac7798c5f8b05ffb5","sha1":"39fa0bb962e068279f6404b5c437bad01810f406","sha256":"0d564b5a940d155f4dd58a226fb195dc9dcd34428ed56e2b74d93398dd493978","sha512":"aea71fb39dfaa92704a1279f980399f6f68440c53f94148b3194861daddc4e6b4e538ab1bc5176feed13dbaef325c5fb93417b9b34c2d870656f4b544a1c87be","ssdeep":"192:5abuTUqYvz0ZikHBA3ljO2z7sVi4h1j4p0A77ujywAcQSyUZxBH73YXQ:5aaTUqYJ+BEx/G1j4pz7i2NjaNH8XQ","tlshash":"6a923b22d318263e9367c3f8fa64f394126a91b7e20b8979f57d06b417c3d89d523e90","first_seen":"2026-05-30T05:44:20.845415Z","last_seen":"2026-05-30T05:44:20.845415Z","times_seen":1,"resource_available":true,"data":null}},"time_used":358,"timings":{"blocked":20,"dns":1,"connect":1,"send":0,"wait":318,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"claim-reserve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-reserve.com/assets/logo-C1oevarM.png","fqdn":"claim-reserve.com","domain":"claim-reserve.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-reserve.com/","date":"2026-05-30T05:43:57.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-reserve.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 10:34:11 GMT","end":"Wed, 26 Aug 2026 11:33:24 GMT"},"fingerprint":{"sha1":"49:68:F6:11:33:A0:70:A0:BA:3D:EA:54:AC:4F:3A:16:70:58:D8:9C","sha256":"76:14:56:DA:1F:01:64:4F:8D:C2:55:B5:CF:43:88:9A:8A:58:72:2B:18:D9:CD:A0:2B:35:42:1A:E3:27:26:08"}}},"request":{"raw":"GET /assets/logo-C1oevarM.png HTTP/1.1\r\nHost: claim-reserve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-reserve.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __dpl=4177fe4e85ced65123029919b85ef8ba3cb29148d2955ec8a7ebdae896795f32; __cf_bm=HK9nwz0bOrTfXyjYa6l.9ywtrTOaFZb4uzMwr_lxEHc-1780119836.9404802-1.0.1.1-fB2vKrhkJSNUnIrYq_hOwKQTtCkMGNaZGrxGf37xiRmKqTNalgOgND5NnOIYiG0mx3.VZZPR.8RBLWJyndaS_3Rfifj13lRJGf_zztwlB_4qDrEqQtsYwDS1aot3KmwE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 05:43:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 52612\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 4177fe4e85ced65123029919b85ef8ba3cb29148d2955ec8a7ebdae896795f32\r\nserver: cloudflare\r\ncf-ray: a03b6c97db395fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52612,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"9420167932faad0c7cd76909f162aa53","sha1":"f98114704c92241771d594342eca529b6acb748f","sha256":"539ef9f858bd783cf5d404bcc1cb3074f097316b3568935ec81547fc8b7c14bb","sha512":"0f395d5dbd92a7dd59301718fd4c9cf91b0cc5f19b351ab14e05e5ee52583556719f1fd1409fbfaf23bdd928285bbd7bd6048ffedd047e68d0a7fe046e6657d0","ssdeep":"1536:Cl86hY1XTAiglvI+SRYjitSKvaqcIpPocLLW1ya:Cl8F1wsRq+BiIPp+Ya","tlshash":"e133f1591592cd9b13c3b00bd7705d98a2863c9a73206ebdba5740bc5fa73e47c68523","first_seen":"2026-05-30T05:44:20.298301Z","last_seen":"2026-05-30T05:44:20.848889Z","times_seen":2,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"claim-reserve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026family=Space+Grotesk:wght@500;600;700\u0026family=JetBrains+Mono:wght@400;500;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"64.233.162.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-reserve.com/","date":"2026-05-30T05:43:57.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:15 GMT","end":"Thu, 30 Jul 2026 15:53:14 GMT"},"fingerprint":{"sha1":"19:42:B0:56:3A:E4:79:BF:8B:69:E2:50:F4:76:BF:1E:A9:D7:7A:49","sha256":"D7:FF:C1:46:95:F3:5F:08:04:B0:E1:A8:FE:14:FC:60:19:58:D6:C7:D3:6E:82:B3:64:07:E9:E1:CB:9A:27:8C"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026family=Space+Grotesk:wght@500;600;700\u0026family=JetBrains+Mono:wght@400;500;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-reserve.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 30 May 2026 05:43:57 GMT\r\ndate: Sat, 30 May 2026 05:43:57 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21430,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"637638222aafbed4924ec4fccc7e156c","sha1":"b58129bf7fc8f33d69e73e34f0e8f329832689c5","sha256":"7067d5d4e72b5fb036a82894df3f00c168c83afffa2a8d2059799e627a8acb9b","sha512":"b0ff4306805016c896b8991d5a556ee50df0d2fdad97aa3cf805b2eb61ae57bc0f7ef70d9437561aad138692d88eb4b3e8176398206d55c0c3a14ef286a1b53c","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGgG+7p3ZAXYjG9Up3qnXq:vXuM0p2+QOGC6CIgRt","tlshash":"c3a2cb92002ba400eb571cc633cfbe36bd8e604a6085d5b99ffe1c899ceac66537475d","first_seen":"2026-03-11T11:00:28.916297Z","last_seen":"2026-05-30T05:44:20.850694Z","times_seen":4,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":124,"dns":0,"connect":28,"send":0,"wait":31,"receive":0,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-reserve.com/","date":"2026-05-30T05:43:57.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://claim-reserve.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 29 May 2026 14:10:52 GMT\r\nexpires: Sat, 29 May 2027 14:10:52 GMT\r\ncache-control: public, max-age=31536000\r\nage: 55985\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22288,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-06-06T18:36:28.893843Z","times_seen":18810,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":61,"dns":2,"connect":15,"send":0,"wait":50,"receive":4,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-reserve.com/","date":"2026-05-30T05:43:57.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://claim-reserve.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31432\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 29 May 2026 14:02:32 GMT\r\nexpires: Sat, 29 May 2027 14:02:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 56485\r\nlast-modified: Wed, 10 Sep 2025 16:52:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31432,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31432, version 1.0","md5":"b636a65da4f00129f08c7df6e5dd75ac","sha1":"4f27206c4b1caf8b7805597fcbc6922ff5805daa","sha256":"83c005d49d8a6a50474c73a5a36ac0468076e9c4a29da7bdb14995d80560a5be","sha512":"77ad92edddd5fc9ce47b8b329cf41b2fec895ea01a97b9122df3766163998fadcbe47c868631208636c4e587136ddd390d38e3e9da2743758c9da2c77a66f859","ssdeep":"768:a8+AGQwBrw24YHLKRG5lBF260n1e5vhjJKWWAD95I9Puggtx:B+AiBrw2fHL+GyvYtYADM9Pug0x","tlshash":"52e2f274ea41ca57676335ed4203e99d015fa318ebf6fd40869ccad2a506bcb7c4033a","first_seen":"2024-10-21T03:03:54.505463Z","last_seen":"2026-06-06T18:36:28.892024Z","times_seen":7044,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":79,"dns":1,"connect":30,"send":0,"wait":31,"receive":2,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-reserve.com/","date":"2026-05-30T05:43:57.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://claim-reserve.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31432\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 29 May 2026 14:02:32 GMT\r\nexpires: Sat, 29 May 2027 14:02:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 56485\r\nlast-modified: Wed, 10 Sep 2025 16:52:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31432,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31432, version 1.0","md5":"b636a65da4f00129f08c7df6e5dd75ac","sha1":"4f27206c4b1caf8b7805597fcbc6922ff5805daa","sha256":"83c005d49d8a6a50474c73a5a36ac0468076e9c4a29da7bdb14995d80560a5be","sha512":"77ad92edddd5fc9ce47b8b329cf41b2fec895ea01a97b9122df3766163998fadcbe47c868631208636c4e587136ddd390d38e3e9da2743758c9da2c77a66f859","ssdeep":"768:a8+AGQwBrw24YHLKRG5lBF260n1e5vhjJKWWAD95I9Puggtx:B+AiBrw2fHL+GyvYtYADM9Pug0x","tlshash":"52e2f274ea41ca57676335ed4203e99d015fa318ebf6fd40869ccad2a506bcb7c4033a","first_seen":"2024-10-21T03:03:54.505463Z","last_seen":"2026-06-06T18:36:28.892024Z","times_seen":7044,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":43,"dns":0,"connect":0,"send":0,"wait":36,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-reserve.com/assets/createLucideIcon-Ysa3KNYc.js","fqdn":"claim-reserve.com","domain":"claim-reserve.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-reserve.com/","date":"2026-05-30T05:43:58.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-reserve.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 10:34:11 GMT","end":"Wed, 26 Aug 2026 11:33:24 GMT"},"fingerprint":{"sha1":"49:68:F6:11:33:A0:70:A0:BA:3D:EA:54:AC:4F:3A:16:70:58:D8:9C","sha256":"76:14:56:DA:1F:01:64:4F:8D:C2:55:B5:CF:43:88:9A:8A:58:72:2B:18:D9:CD:A0:2B:35:42:1A:E3:27:26:08"}}},"request":{"raw":"GET /assets/createLucideIcon-Ysa3KNYc.js HTTP/1.1\r\nHost: claim-reserve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-reserve.com/assets/index-jpYvdnwn.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __dpl=4177fe4e85ced65123029919b85ef8ba3cb29148d2955ec8a7ebdae896795f32; __cf_bm=HK9nwz0bOrTfXyjYa6l.9ywtrTOaFZb4uzMwr_lxEHc-1780119836.9404802-1.0.1.1-fB2vKrhkJSNUnIrYq_hOwKQTtCkMGNaZGrxGf37xiRmKqTNalgOgND5NnOIYiG0mx3.VZZPR.8RBLWJyndaS_3Rfifj13lRJGf_zztwlB_4qDrEqQtsYwDS1aot3KmwE\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 05:43:58 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 4177fe4e85ced65123029919b85ef8ba3cb29148d2955ec8a7ebdae896795f32\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a03b6c9bdd405fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1202,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1201)","md5":"763646a652eafeed563878e73129950c","sha1":"4234c858bb8b66df2fc1946a8a1889d112310d5d","sha256":"2df601f0469636ee4b23f7acb6795096128853f0823a03fa89a67ad316804430","sha512":"83bdaecd888a39a2a8e8e7c487eb9f612b799dbbeecd8dec0aa73628eeb728422da72a9ad41d802c199fd9568fd9ffed451d3ee84e5c3b9a94db34fbb196ab69","ssdeep":"","tlshash":"30214408b3d4283ca23584cd975c3069ec779a18f9635a58d2fc6d1a7623146a337acc","first_seen":"2026-05-30T05:44:20.292586Z","last_seen":"2026-05-30T05:44:20.854054Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"claim-reserve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-reserve.com/assets/styles-DJrsO-FW.css","fqdn":"claim-reserve.com","domain":"claim-reserve.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-reserve.com/","date":"2026-05-30T05:43:57.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-reserve.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 10:34:11 GMT","end":"Wed, 26 Aug 2026 11:33:24 GMT"},"fingerprint":{"sha1":"49:68:F6:11:33:A0:70:A0:BA:3D:EA:54:AC:4F:3A:16:70:58:D8:9C","sha256":"76:14:56:DA:1F:01:64:4F:8D:C2:55:B5:CF:43:88:9A:8A:58:72:2B:18:D9:CD:A0:2B:35:42:1A:E3:27:26:08"}}},"request":{"raw":"GET /assets/styles-DJrsO-FW.css HTTP/1.1\r\nHost: claim-reserve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-reserve.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __dpl=4177fe4e85ced65123029919b85ef8ba3cb29148d2955ec8a7ebdae896795f32; __cf_bm=HK9nwz0bOrTfXyjYa6l.9ywtrTOaFZb4uzMwr_lxEHc-1780119836.9404802-1.0.1.1-fB2vKrhkJSNUnIrYq_hOwKQTtCkMGNaZGrxGf37xiRmKqTNalgOgND5NnOIYiG0mx3.VZZPR.8RBLWJyndaS_3Rfifj13lRJGf_zztwlB_4qDrEqQtsYwDS1aot3KmwE\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 05:43:57 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 4177fe4e85ced65123029919b85ef8ba3cb29148d2955ec8a7ebdae896795f32\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a03b6c97db3a5fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93594,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ac0da9efaaa8f0db2bbc46ad37a1eb1a","sha1":"d242792f5d5f2875283af4f45866a9ea8e702a17","sha256":"077e907f7213e8952d6a9f35aeff43cce14a74887304ab83951c11797544027f","sha512":"ab93b68f6b18fad3a4088b78aad8e3424416b9dc7e254f7a19a0b96b9c7d3ba34a8accb94c27a0d824a1ce3180484f3191f02b04605c69f1ef19085bf9edd4d1","ssdeep":"1536:TAlADoUh+KPLMibANyQX3ESXW6jY9QYJCHwahSsMq+WDhXX7RILP5988R988q:0lADoUh+KPLMicNy0ESXW6jY9QYJuPMe","tlshash":"1f9383a4b239e53f7c23b4f9938cb84c9109b0c4dd6546edfa16612217c3bf6ad67a04","first_seen":"2026-05-30T05:44:20.299186Z","last_seen":"2026-05-30T05:44:20.855258Z","times_seen":2,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"claim-reserve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-reserve.com/","date":"2026-05-30T05:43:57.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://claim-reserve.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 29 May 2026 14:10:52 GMT\r\nexpires: Sat, 29 May 2027 14:10:52 GMT\r\ncache-control: public, max-age=31536000\r\nage: 55985\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22288,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-06-06T18:36:28.893843Z","times_seen":18810,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":73,"dns":3,"connect":15,"send":0,"wait":52,"receive":3,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-reserve.com/","date":"2026-05-30T05:43:57.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://claim-reserve.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 29 May 2026 14:00:32 GMT\r\nexpires: Sat, 29 May 2027 14:00:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 56605\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-06T19:13:06.957278Z","times_seen":205100,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":63,"dns":0,"connect":0,"send":0,"wait":17,"receive":19,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-reserve.com/assets/index-C6nYynFH.js","fqdn":"claim-reserve.com","domain":"claim-reserve.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-reserve.com/","date":"2026-05-30T05:43:57.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-reserve.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 10:34:11 GMT","end":"Wed, 26 Aug 2026 11:33:24 GMT"},"fingerprint":{"sha1":"49:68:F6:11:33:A0:70:A0:BA:3D:EA:54:AC:4F:3A:16:70:58:D8:9C","sha256":"76:14:56:DA:1F:01:64:4F:8D:C2:55:B5:CF:43:88:9A:8A:58:72:2B:18:D9:CD:A0:2B:35:42:1A:E3:27:26:08"}}},"request":{"raw":"GET /assets/index-C6nYynFH.js HTTP/1.1\r\nHost: claim-reserve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-reserve.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __dpl=4177fe4e85ced65123029919b85ef8ba3cb29148d2955ec8a7ebdae896795f32; __cf_bm=HK9nwz0bOrTfXyjYa6l.9ywtrTOaFZb4uzMwr_lxEHc-1780119836.9404802-1.0.1.1-fB2vKrhkJSNUnIrYq_hOwKQTtCkMGNaZGrxGf37xiRmKqTNalgOgND5NnOIYiG0mx3.VZZPR.8RBLWJyndaS_3Rfifj13lRJGf_zztwlB_4qDrEqQtsYwDS1aot3KmwE\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 05:43:57 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 4177fe4e85ced65123029919b85ef8ba3cb29148d2955ec8a7ebdae896795f32\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a03b6c99ac325fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":600591,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (41119)","md5":"7ddd9ba4f7a4f7a68c588e1bc0f312a4","sha1":"134cb8bf2fa5bd7a3c5d05d9dc36d249e4f56f3d","sha256":"7741448a3754ef1628e6d6a9d627efd795f2c0984423847cbac58bbee7986a17","sha512":"a81046f59512553b0480eb6c0912d29c9d616952d660b74cdb3cc39d7c0410ddf1efb30b37fb947a4995c5552354da794c4576e7171e9dd515335dc86f8256b8","ssdeep":"6144:8hIpkdjr5VcwA9+eREVVkY4TYIRAS+lhjXIVKC/29RpGYp6fo8VG96QOM5Kt74zv:8hIiFSXJE2KLWVG9J/5Kt7SPKv9xs","tlshash":"71d47ed832aaa5220bd345e0907f1103f2382916780c8464f66cdddf7ab5949e67bfbd","first_seen":"2026-05-30T05:44:20.301648Z","last_seen":"2026-05-30T05:44:20.856394Z","times_seen":2,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"claim-reserve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-reserve.com/favicon.ico","fqdn":"claim-reserve.com","domain":"claim-reserve.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-reserve.com/","date":"2026-05-30T05:43:58.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-reserve.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 10:34:11 GMT","end":"Wed, 26 Aug 2026 11:33:24 GMT"},"fingerprint":{"sha1":"49:68:F6:11:33:A0:70:A0:BA:3D:EA:54:AC:4F:3A:16:70:58:D8:9C","sha256":"76:14:56:DA:1F:01:64:4F:8D:C2:55:B5:CF:43:88:9A:8A:58:72:2B:18:D9:CD:A0:2B:35:42:1A:E3:27:26:08"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: claim-reserve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-reserve.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __dpl=4177fe4e85ced65123029919b85ef8ba3cb29148d2955ec8a7ebdae896795f32; __cf_bm=HK9nwz0bOrTfXyjYa6l.9ywtrTOaFZb4uzMwr_lxEHc-1780119836.9404802-1.0.1.1-fB2vKrhkJSNUnIrYq_hOwKQTtCkMGNaZGrxGf37xiRmKqTNalgOgND5NnOIYiG0mx3.VZZPR.8RBLWJyndaS_3Rfifj13lRJGf_zztwlB_4qDrEqQtsYwDS1aot3KmwE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sat, 30 May 2026 05:43:58 GMT\r\ncontent-type: text/html; charset=utf-8\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a03b6c9b8d1e5fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12665,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"data","md5":"257215316420c3ce34bf0f1953fce7b1","sha1":"8787010ed21a3e4207724d404a86783206869025","sha256":"278d44154619e7c48d3a7fecfd7ee7a6dc7bcb44ab583e4ad03d162ddba62c13","sha512":"7f633034350fc22f2886c75cc6eb2ae8c44c8a6f698c70a16126f277ecd5b7651144a042f54904d52dd5a5020d15e90f721a6977bafb8144f8bc8e7905f41eb0","ssdeep":"96:zwcrdPrpbraoMJMgJ9LTU15OA3lghaoX9DSjxpeHTw0rxZqEo4IYx76lg2+3wehu:ba9TUqYvBP497ujywAcQSyUZxBH73YXQ","tlshash":"72421b93c318b63f4352d2bcbea5f4c4166950b3e6058de1f96e097852c3a9ce113f90","first_seen":"2026-05-30T05:44:20.858809Z","last_seen":"2026-05-30T05:44:20.858809Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"claim-reserve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-reserve.com/assets/logo-CCqEY0DN.js","fqdn":"claim-reserve.com","domain":"claim-reserve.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-reserve.com/","date":"2026-05-30T05:43:58.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-reserve.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 10:34:11 GMT","end":"Wed, 26 Aug 2026 11:33:24 GMT"},"fingerprint":{"sha1":"49:68:F6:11:33:A0:70:A0:BA:3D:EA:54:AC:4F:3A:16:70:58:D8:9C","sha256":"76:14:56:DA:1F:01:64:4F:8D:C2:55:B5:CF:43:88:9A:8A:58:72:2B:18:D9:CD:A0:2B:35:42:1A:E3:27:26:08"}}},"request":{"raw":"GET /assets/logo-CCqEY0DN.js HTTP/1.1\r\nHost: claim-reserve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-reserve.com/assets/index-jpYvdnwn.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __dpl=4177fe4e85ced65123029919b85ef8ba3cb29148d2955ec8a7ebdae896795f32; __cf_bm=HK9nwz0bOrTfXyjYa6l.9ywtrTOaFZb4uzMwr_lxEHc-1780119836.9404802-1.0.1.1-fB2vKrhkJSNUnIrYq_hOwKQTtCkMGNaZGrxGf37xiRmKqTNalgOgND5NnOIYiG0mx3.VZZPR.8RBLWJyndaS_3Rfifj13lRJGf_zztwlB_4qDrEqQtsYwDS1aot3KmwE\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 05:43:58 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 4177fe4e85ced65123029919b85ef8ba3cb29148d2955ec8a7ebdae896795f32\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a03b6c9bdd3e5fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":52,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"6ac1a8ad5fedd20d30f21e819f4ad361","sha1":"6d6182c2602ab61d6596be3a2a9df6d43a7b3e9d","sha256":"6137e6a40de5ab42cb7f1f2c158dbd2c80747529e10cd08fd65f0d1f297c1c4c","sha512":"c1404e18f3336d6253b7407a3e107716e92cdfef409efc1f92dcbced852aaf2fb9a04bcbc6aa7278f27343bc72e145487350a889e593cd86e86b250ba55bae2f","ssdeep":"","tlshash":"9190023a640405a44099208961a794560415223c613b629dc4144186a392554848582a","first_seen":"2026-05-30T05:44:20.291639Z","last_seen":"2026-05-30T05:44:20.8619Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"claim-reserve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-reserve.com/assets/message-square-BaYzBwCT.js","fqdn":"claim-reserve.com","domain":"claim-reserve.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-reserve.com/","date":"2026-05-30T05:43:58.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-reserve.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 10:34:11 GMT","end":"Wed, 26 Aug 2026 11:33:24 GMT"},"fingerprint":{"sha1":"49:68:F6:11:33:A0:70:A0:BA:3D:EA:54:AC:4F:3A:16:70:58:D8:9C","sha256":"76:14:56:DA:1F:01:64:4F:8D:C2:55:B5:CF:43:88:9A:8A:58:72:2B:18:D9:CD:A0:2B:35:42:1A:E3:27:26:08"}}},"request":{"raw":"GET /assets/message-square-BaYzBwCT.js HTTP/1.1\r\nHost: claim-reserve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-reserve.com/assets/index-jpYvdnwn.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __dpl=4177fe4e85ced65123029919b85ef8ba3cb29148d2955ec8a7ebdae896795f32; __cf_bm=HK9nwz0bOrTfXyjYa6l.9ywtrTOaFZb4uzMwr_lxEHc-1780119836.9404802-1.0.1.1-fB2vKrhkJSNUnIrYq_hOwKQTtCkMGNaZGrxGf37xiRmKqTNalgOgND5NnOIYiG0mx3.VZZPR.8RBLWJyndaS_3Rfifj13lRJGf_zztwlB_4qDrEqQtsYwDS1aot3KmwE\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 05:43:58 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: 4177fe4e85ced65123029919b85ef8ba3cb29148d2955ec8a7ebdae896795f32\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a03b6c9bdd425fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":245,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"00200f60773faf77d10ccbf9edea9b28","sha1":"bacf204b652ff950607a7df15062a48eeab3e4ef","sha256":"6a7c75783f5be961d62ec09715676c206dc5756251dfd042b3b8dc5ece048da4","sha512":"d2b003933470e1ee1e3040889bd152ad611bcc9ea204c2f9533f0b66686fe95b9b61ac4a982b4172530126ed161c75a80da93df322e60cca4bf46fcd17b085b4","ssdeep":"","tlshash":"5bd0a77aaf4d17ed0a4389992e0fe2110f8976b9329c8de1320d837a878b593c4fb541","first_seen":"2026-05-30T05:44:20.304519Z","last_seen":"2026-05-30T05:44:20.863241Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"claim-reserve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-reserve.com/~flock.js","fqdn":"claim-reserve.com","domain":"claim-reserve.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-reserve.com/","date":"2026-05-30T05:43:57.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-reserve.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 10:34:11 GMT","end":"Wed, 26 Aug 2026 11:33:24 GMT"},"fingerprint":{"sha1":"49:68:F6:11:33:A0:70:A0:BA:3D:EA:54:AC:4F:3A:16:70:58:D8:9C","sha256":"76:14:56:DA:1F:01:64:4F:8D:C2:55:B5:CF:43:88:9A:8A:58:72:2B:18:D9:CD:A0:2B:35:42:1A:E3:27:26:08"}}},"request":{"raw":"GET /~flock.js HTTP/1.1\r\nHost: claim-reserve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-reserve.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __dpl=4177fe4e85ced65123029919b85ef8ba3cb29148d2955ec8a7ebdae896795f32; __cf_bm=HK9nwz0bOrTfXyjYa6l.9ywtrTOaFZb4uzMwr_lxEHc-1780119836.9404802-1.0.1.1-fB2vKrhkJSNUnIrYq_hOwKQTtCkMGNaZGrxGf37xiRmKqTNalgOgND5NnOIYiG0mx3.VZZPR.8RBLWJyndaS_3Rfifj13lRJGf_zztwlB_4qDrEqQtsYwDS1aot3KmwE\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 05:43:57 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: max-age=1500\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a03b6c97db3c5fac-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21296,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21296), with no line terminators","md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-06-06T18:24:31.408492Z","times_seen":10058,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"claim-reserve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}