{"report_id":"abc8d278-703c-4b1b-a09b-20d37bc92dfe","version":6,"status":"done","tags":[],"date":"2026-02-14T01:27:22Z","url":{"schema":"https","addr":"eligible-ethgas.com/","fqdn":"eligible-ethgas.com","domain":"eligible-ethgas.com","tld":"com"},"ip":{"addr":"104.21.13.61","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"eligible-ethgas.com/","fqdn":"eligible-ethgas.com","domain":"eligible-ethgas.com","tld":"com"},"title":"Espresso Claim Portal","dom":{"size":52405,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (27222)","md5":"a9e5300a54d4239c45624cfc9244299d","sha1":"6e0427d8a1d5ac90f984442641e266f99d2216d3","sha256":"07091a96432ff0ac9a9771a49d1f182ba6c5f5ac735130ae666423eb446d4574","sha512":"92e523d1d11e8d38c8472fffa306827803b6feb50e65c9b28fe488fdd67f5a32e157678f90e8253d0b451959ecbdfe4a924b988e5e10e030ed1f3c2edd0bd370","ssdeep":"768:cDHyylvfM8nMmT8pv5uoFMZrl0+xAf3UdnpJlXGsY:ilvfM8nMmQxp60c5nHlXGsY","tlshash":"65334bb6d410977a0a231f48f63379a8726261e94b64509cf15cc19c2740dfb8ebf9ee","dom_hash":"domhash671a2ca2ed0aececb8d2cfb31bf7474a","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"eligible-ethgas.com/","fqdn":"eligible-ethgas.com","domain":"eligible-ethgas.com","tld":"com"},"ip":{"addr":"104.21.13.61","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T01:27:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":4}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-14T01:26:59Z","timestamp":1771032419,"ip_dst":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":49534,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2026-02-14T01:26:59.481577+0000\",\"flow_id\":1887027425658561,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":49534,\"dest_ip\":\"104.26.13.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3436,\"start\":\"2026-02-14T01:26:59.476865+0000\"}}"}],"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-14","alert":"PHP webshell obfuscated by encoding of mixed hex and dec","trigger":"eligible-ethgas.com/assets/secure.php?req=ping","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/04/18","description":"PHP webshell obfuscated by encoding of mixed hex and dec","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_obfuscated_encoding_mixed_dec_and_hex"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-14","alert":"Known PHP Webshells which contain unique strings, lousy rule for low hanging fruits. Most are catched by other rules in here but maybe these catch different versions.","trigger":"eligible-ethgas.com/assets/secure.php?req=ping","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/01/09","description":"Known PHP Webshells which contain unique strings, lousy rule for low hanging fruits. Most are catched by other rules in here but maybe these catch different versions.","hash":"7b6471774d14510cf6fa312a496eed72b614f6fc","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_by_string_known_webshell"}},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"eligible-ethgas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"public-bsc.nownodes.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-02-08T22:32:21.331091Z","alert_count":0,"request_count":1,"received_data":164385,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"claim.espresso.foundation","ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2022-02-16","domain_rank":0,"first_seen":"2025-12-31T12:33:52.770511Z","last_seen":"2026-02-11T03:47:40.297232Z","alert_count":0,"request_count":46,"received_data":6502086,"sent_data":22199,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"eligible-ethgas.com","ip":{"addr":"172.67.198.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-20","domain_rank":0,"first_seen":"2026-02-12T20:37:37.680041Z","last_seen":"2026-02-12T20:37:37.680041Z","alert_count":9,"request_count":7,"received_data":3580789,"sent_data":3048,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"us.i.posthog.com","ip":{"addr":"34.199.45.253","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2020-01-23","domain_rank":42193,"first_seen":"2024-02-22T12:48:36Z","last_seen":"2026-02-11T12:26:23.737Z","alert_count":0,"request_count":3,"received_data":2055,"sent_data":1719,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"assets.unicorn.studio","ip":{"addr":"34.120.54.136","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2020-08-17","domain_rank":3759026,"first_seen":"2024-10-30T11:09:32Z","last_seen":"2026-02-06T20:52:33.944336Z","alert_count":0,"request_count":1,"received_data":77130,"sent_data":525,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}]},{"fqdn":"us-assets.i.posthog.com","ip":{"addr":"172.66.166.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-01-23","domain_rank":57965,"first_seen":"2024-02-22T12:48:35Z","last_seen":"2026-02-11T15:03:50.639135Z","alert_count":0,"request_count":4,"received_data":114277,"sent_data":2010,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-08T22:14:51.234086Z","alert_count":0,"request_count":1,"received_data":73799,"sent_data":542,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-02-08T22:20:44.026892Z","alert_count":0,"request_count":1,"received_data":450837,"sent_data":446,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"magna-public-assets-prod.s3.amazonaws.com","ip":{"addr":"52.217.140.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2005-08-18","domain_rank":0,"first_seen":"2025-12-28T18:47:20.473023Z","last_seen":"2026-02-11T03:00:08.681455Z","alert_count":0,"request_count":1,"received_data":10612,"sent_data":492,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"api.ipify.org","ip":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-05","domain_rank":8166,"first_seen":"2014-10-06T12:38:43Z","last_seen":"2026-02-09T08:52:44.317696Z","alert_count":0,"request_count":1,"received_data":271,"sent_data":451,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-08T22:17:48.645662Z","alert_count":0,"request_count":4,"received_data":14996,"sent_data":1950,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"magna-public-assets-prod.s3.us-east-1.amazonaws.com","ip":{"addr":"16.182.41.98","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2005-08-18","domain_rank":0,"first_seen":"2025-12-31T12:33:52.777756Z","last_seen":"2026-02-12T20:37:38.413763Z","alert_count":0,"request_count":1,"received_data":57065,"sent_data":534,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"fumbling-pill.click","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-16","domain_rank":0,"first_seen":"2026-02-12T20:37:37.689244Z","last_seen":"2026-02-12T20:37:37.689244Z","alert_count":0,"request_count":1,"received_data":621,"sent_data":453,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"public-bsc.nownodes.io","ip":{"addr":"172.66.145.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-05-20","domain_rank":0,"first_seen":"2025-10-14T19:44:58.496919Z","last_seen":"2026-02-12T20:37:38.340071Z","alert_count":2,"request_count":2,"received_data":1656,"sent_data":1037,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"rpc.walletconnect.org","ip":{"addr":"3.120.6.92","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2018-03-26","domain_rank":891779,"first_seen":"2023-02-11T03:06:43Z","last_seen":"2026-02-13T11:31:47.735667Z","alert_count":0,"request_count":1,"received_data":1653,"sent_data":540,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/config-BBCuuyHT.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"2659ce7411e25b3d5645e8b9e7481b22","sha1":"1386224bd903186c8f26dbcf6b16b4bac52fe189","sha256":"3640abc74fa3ee2f91ed70d2d775e9394c102e19d824f29c7be284c9cde5fd06","sha512":"ea3c6acc6b8bad14675569407fd59965170a30c28148b9ed577e693dc286e0dd86f0adc998cbd80e5e80889309bd3b46751a48341eddc0c771c0545c03a9d0b4","ssdeep":"768:WzlHMGUyZBymwaJ2+d3EfZ56gNjwWghktt55HRTrhD1841Mzq2yS6Iv4Gx5U4KMA:WzlHfL2p6lhi9Wq2tHhC9V48pd","tlshash":"f523a7ca7186b2162be2d1a4483f4015e2396954780e846cb5bdddd3bd72c8ee17bf38","size":47290,"data":"","first_seen":"2026-02-12T20:37:44.856378Z","last_seen":"2026-02-17T15:15:31.641748Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/mewWallet-6V4UZOQC-B0qJRky8.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ba9b4ec5d6e0138fdc7dcea74d719b1","sha1":"7e9a5254388ae9b05ccab215bcadfda7cbb92178","sha256":"cabb87e570e8e5c15a34eeb5c010a7651a3e878e76568fa8f274903a86c23047","sha512":"8bbc357ee098b1666e94e09a19e0b9711acc240227e819daa87a564a6a0ff456a338c4b61d83f68344063ce6c0ac09d7ef5e9ccb4c711aefc103562691a600de","ssdeep":"192:vSL2IcUA1oFBu/kyilFZl1s7tWld8YgsII9P3cO6+fzRXygn3IJigNnvMqDCdFIZ:vSL2IcUm/XwZvw0IGrCgivRhilI","tlshash":"9742c5d0332c53f9f507c3a9a7aaa0569a7c30da3daf5158f64f05256b144fa883f843","size":12987,"data":"","first_seen":"2025-12-31T12:33:59.905722Z","last_seen":"2026-04-08T12:13:16.929881Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/assets-NU2OP443-COMs-Mo6.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"33ae24799663e13f83cee5987fa8f728","sha1":"2309fcbf480ac447c060a427f2a6cd24974dfa30","sha256":"aac5c0d81b97b3892fafba21cdf014c77be385f12d7b1f525dc3f79d0cb2ede5","sha512":"f576ef24f5393cb38276b01c0aaa4d41c56a04d9bd0b82c8e04202949fe343407f12514560fe743af27fbff37a401bcff5c38a25ed66cecdd581c265ab9ad58d","ssdeep":"384:LOr2OrPR1YS2qj0FNwZe7QnBZ4pFSMLYp9uVEK:LOCO11D2qYzdyzK","tlshash":"2c82fd9b8728d94e6e6b8ff8ffdcb4d9332c30e5222e04d4115e616291a359feb41d81","size":17965,"data":"","first_seen":"2024-12-25T05:30:42.584192Z","last_seen":"2026-05-20T16:17:57.627438Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-assets.i.posthog.com/static/dead-clicks-autocapture.js?v=1.332.0","fqdn":"us-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"172.66.166.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc981e3687edce8a3d22380972ee45e3","sha1":"1955fa562b42c9f134b62e7ac0e9c11bbfa4da75","sha256":"a40d91c2014cca52defeb2481998498f02fc53526fd05302df0e0e490173814a","sha512":"2dc021b1b3ef375290f2d59d97ccc6bd6306aa4af2791c6cc29a129b50acc89a0566e5b27074037312082f55966c0bda2d77ab2ace32ad4a2154d08176e1c2c1","ssdeep":"384:sw+VM/tkSeCRi2WzHiAOjCQBgxjOJWgikn26FT:n+D9QeOMgM6FT","tlshash":"69420a88b7d0f3b12bd7145ac4bf1702f03525082556c824b159ecdab4adb1622bbe7f","size":13059,"data":"","first_seen":"2026-01-12T11:07:28.642714Z","last_seen":"2026-05-30T16:55:13.558939Z","times_seen":5172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/wei-D7GVSARS.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"e065176194127ef3104fbc14e1bd3b00","sha1":"039b4c635defe3279321deab3fb61f072e7d065f","sha256":"c3902c83d4f8bc61033b89f57529565f14d42ea0f041b9fdb5b9d0fe5c9475f4","sha512":"1d9acde4385221d0bd76124b774e59d581c7a9e8eaa324a63bc40d745f745db6ffb406267281105ecb9904d77d0e98a3b2ecf72ac19019f2515952270c534c36","ssdeep":"768:c694VJ5YH/os7Dwz5yuLKkyp0rxY5T0ztsZ:c69cXQos7UEuzi0Gku","tlshash":"1fe2c5e972a2f18663e734f201fb9446f13a7d44990d05b5f2088af53cb1686b32af75","size":32145,"data":"","first_seen":"2026-02-12T20:37:44.896165Z","last_seen":"2026-04-08T12:13:16.924687Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/vstack-C3IvQv9K.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"c72115e55d96341fe00e51a13ad95800","sha1":"f789714ca4a48a66869371451206a6e9ce15f7f5","sha256":"e5a93dc91bddae578f0687f643569653fb9c0153c227e0541e839a351f8b557a","sha512":"68ae22b64c7f635d371f27233ca7ef7e99ffbce471ecc831481cd428db19f75ece5453e7ea4e8850215aedf4b58ec8904bad0e72ac36cb7f47c4f00a18e2ae79","ssdeep":"768:VsHWUpDTugn4fMqCgSknl5Qn1upQLpOFZDPTKyPZmZA5J4hdrW:e2bC1YczpOb2Z0J4i","tlshash":"c1e2f9a132541408f6afc7aef8c61f48c13916335413fccab67c8aa8d1517b91b6bb6d","size":32755,"data":"","first_seen":"2026-02-12T20:37:44.873434Z","last_seen":"2026-02-17T15:15:31.671429Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/login-CWDTIDNK-DhDUYE4b.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"baa5f0f7116deb709bd4b3a54c31eaff","sha1":"10c4efb11b9c1bcdd87aca0c0443f636c8d29b39","sha256":"63a8daf7039c537fe8d7ff88c50a6b8022e74f447d5df3ffcd6a515723252c33","sha512":"8d534b9541eb5d33576b4a5a2dbd28aadc57c01fc91ea3644bcfb13ad76470288c9ac8228a1fc8d6f30ca5873abb0c3b20136d5377bdb9923c3ff6665542b4bc","ssdeep":"192:dyAYirZ2ixxPjwzSFW5xrsRo3/58dmho4x7MV:EiN2Qjw+FWjARaidSpx7MV","tlshash":"261283ea5768627ed89bce6cdf668840130d70fd35b8c8e49a9ecf686057c89fd87010","size":9275,"data":"","first_seen":"2024-12-25T05:30:42.593071Z","last_seen":"2026-05-20T16:17:57.645038Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"31c5ca8344606c644357cc7bc5fcb4f2","sha1":"15e7956f4907328c3862fa720a83785f0ed12b87","sha256":"74dcb4cb8f2d15ddd47a1fa2cdb56cb103d54874a465c7b55698ab4f6c1cd63e","sha512":"d85c94991e10b65bb479d56f3d45b638f0f1e41a162ca309960ef86dcd5b5336ea6100adb6d2e72ef674722cf05978893d4e9c682b133f299d9eb829ac6123ff","ssdeep":"","tlshash":"78f04c0f859102324dfba1692e57a21170b6a0db294a4a0839ad411c7faec2b4785bc0","size":592,"data":"","first_seen":"2025-03-03T03:45:08.736625Z","last_seen":"2026-06-08T12:01:03.141084Z","times_seen":7338,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/x.icon-CbqT8MzM.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"fb42e57ffea46e58aa4fb5ee7a0cef6a","sha1":"d70f95c5c596f2d7effecf7d91c026791f67880b","sha256":"e1f7a5c79ba590e07a72f3a5a1f220105553c2da2f97a31752ddf49e59d536e8","sha512":"1adb08cdfda523b90b2287caaeda482c961eb725d83342e0f20701507a655663ce9665c6e9c2a7bd1e569f3997950ee4ad441be86af502c621fec54e1ea10c84","ssdeep":"","tlshash":"54f097ff83c0609448591f7a79b22c252077b5f893a405a0c94449919d290f2b31ee82","size":458,"data":"","first_seen":"2026-02-12T20:37:44.870545Z","last_seen":"2026-02-17T15:15:31.659695Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/hstack-CUgmLe_w.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"b7eee23af1a11018eccb2f03f433479e","sha1":"26a85d0dfade6f1936bf0536ff7552cafb10eddf","sha256":"be84c6b2df189dee15f38c7cac639297e122f25960e6ecf27b842b497f34a032","sha512":"be66625d268bd7860953531aeecb3af8281ddbb7a4a506ae6f087dd003d425c40ce907773581b62ccd8cad76d8897a7b90594afdb5467e21acced2a78344ca91","ssdeep":"","tlshash":"a5f0dcaba44171b003e5cc68b1e6526951de6fd8f67195c4a0cf884f26202c682aba4a","size":473,"data":"","first_seen":"2026-02-12T20:37:44.860275Z","last_seen":"2026-02-17T15:15:31.648865Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/rainbowWallet-2SR6TVBF-kimcGeuf.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a0e974aa17cd852cfd0a349aa6cde2a","sha1":"3e83142c11e9b7a57432123b72457ff579f8bcb8","sha256":"0813cf58d2da41c33e74c0fb7e5a9671020dc397611becaacd42e1f6ae5b30a4","sha512":"28eac8d72b65f6e1cd4f0ac75cfe58a515be407e04b12aea7a90a8056018133d9f4de319843eb5238f465a23d817971dbd945e4fdbfc59fca26b823efd59a601","ssdeep":"","tlshash":"c071ca958a3dac3be52dc18cee411420710daabfdc894a5272639fef9d784c6ac4c660","size":3646,"data":"","first_seen":"2024-12-25T05:30:42.549882Z","last_seen":"2026-05-17T17:52:49.736369Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-assets.i.posthog.com/array/phc_9Cg41wNBIXNBnxyvzsD9AC6UT5KSjNjTR4SSnj4uH4/config.js","fqdn":"us-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"172.66.166.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9602dfdc98c5a6fb6544ae7444ccfaf","sha1":"6cb2ab54f288ae3b676fc25db366d79fb1e10ddb","sha256":"4a42653d425ab8b40189e6e4513ce79ca10d48595b52d5dfcb4e0a057d500020","sha512":"8495d2da826c16a88402e145858b24de3378304fb867254845ab87950b8bc54c42c7a629270db02ed23dec97a526c5f075a71c99258d0be625adb4f7e675a3b5","ssdeep":"","tlshash":"79114c29f99008be00e6b51eabd7e0436f7b809b92444c1de9c441567b1d83b9987fc4","size":860,"data":"","first_seen":"2026-02-12T20:37:44.903055Z","last_seen":"2026-02-14T01:27:34.071224Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"71dfe42af37cec6e1b8a11bd0a94d293","sha1":"2e30765cce85dc76c46065bc9cd4d5da92f173e3","sha256":"d3fbc2d1399dbbfdc68499799ef4a79ed43b2b8096f14395a2aea2040de6ebd2","sha512":"1f3cdf0a2f826385c2cd428986a9c00ffdd0a995e25a5fd76f74d2db5f5f607b92dc518eba0c04d32995ce8d585e4c98bee88cb9c6c16fc9ef229f659668556c","ssdeep":"","tlshash":"50f09738182a0bed4bd326dc9603bb1a331842836404a531d9eccab834c34fa6033cea","size":472,"data":"","first_seen":"2025-12-07T20:46:41.259343Z","last_seen":"2026-06-06T16:31:17.310313Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/chunk-EPOLDU6W-CTl9JfCV.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"db6bcb2e9203db5931e0a006707aa8f8","sha1":"3c2e1a69890c86ec42c22dcbbb2724da796f14fc","sha256":"aafcb8e093136e7e5e16c711e54525ad50b79bc7d4032a490688e34fdb02af56","sha512":"940017d99e2e7a61b013843f41f60e8ce5cc85443643b0383d6851dfbbe22ea17b320d8e3e4a6ce1c6a517832dc1d270a40aa57a10c0ea2582b776a94e9e6edd","ssdeep":"1536:YZe4IJi0G4pPj0hsIkZxr5bRRvMViduOZgVI/rYWYYKyWXMH:Ge4IoMaUZxr/RvMVid1GVI/rYWYYLW+","tlshash":"22c33bf9729270794bef13f180bb0015b3b92ca9246d8015b2acc99e35b5c4c967bf79","size":125122,"data":"","first_seen":"2026-02-12T20:37:44.877208Z","last_seen":"2026-02-17T15:15:31.655095Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/portal-config.context-CMF-xdRd.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"e3aebedff17583da4653f1a9fa85711e","sha1":"eda59fae2e436695ea79edb0e83a77b9ce79b6eb","sha256":"0f45a30e055ac1c9f616ae57c71e9d80ca7a02011fada27eb21c67c800839fbd","sha512":"975be27fb649bf407705df47343c51c2247c548f1f2c62d174db07e0bca4fbeb95c32f88888fd50873430d1d7e92accbb4a58b9c083b958372cac8a4ece6a7f4","ssdeep":"","tlshash":"b2e0c09b6040f67277034cf528208534d333346a30258b70c11c855bbac00e2633f8e2","size":351,"data":"","first_seen":"2026-02-12T20:37:44.944046Z","last_seen":"2026-02-17T15:15:31.649714Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/bitgetWallet-CLYTW54T-Wwn2QYd0.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c209ae7e667ef953a67fd9e02e026122","sha1":"263c559b9b3d0aa0da8a7ea36790983dc7a0821f","sha256":"1f5ce5ae5b81eeeb68a411dc27cbdeadab04eecff9fca4447d20755e6b770e46","sha512":"6daddffb9e9d093649df98bcb5d7737e9fa7687dac1308a4710689c88076d5dc81b7de5bbfe7abf7a3910d9f53c331207b153b9f582c2eafa4717e553cc07f58","ssdeep":"","tlshash":"2571a791d7f5e09f6b1803b6ff9a14e79432f4e641140b9de55e3361200ee23e91f554","size":3493,"data":"","first_seen":"2025-04-09T07:08:13.379631Z","last_seen":"2026-05-20T16:17:57.641698Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/walletConnectWallet-FNSU4KNU-B0ci71fU.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"05a8359b297686a38136a26a10311301","sha1":"5d995f91f19bdd38e876708ea756b76ad53ce55c","sha256":"ff6da22ac4da1356c60264b8a4ca0e3bf79b026e16220dfac81cf1058e40160d","sha512":"28ffda0d4b0fcf35ec80c90c3bfc90103685a5220858159a9016588568e808550fb18e8b2d8ee45f72817087723c842ad4f3872adf933ef1da6267d6cef4fdbb","ssdeep":"","tlshash":"1a3115ef6be412f4d017e3a3d01590267ddb24ba7729ef44421b4ae0ae0149d64c8d78","size":1513,"data":"","first_seen":"2024-12-25T05:30:42.591141Z","last_seen":"2026-05-20T16:17:57.685031Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-LBSJK40LXZ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e9633f58cf6c7c62a3ffeb35f72226c","sha1":"791c5b1e55dfc10b8755a916b5448f4508c40ed8","sha256":"d6cab1d9321350cb439c20a0a8bc2b5137c89ed609dd480d98fc86aa1e573d18","sha512":"cb20586532efe32d50543d6d5a1f87fb692b7d3b8474c2a6cc9cab7714623b5bf7e86c28bd4729716a86a9a1d27a16a5ca367a2ddb78fdb5dfca29a5ebbcb2e6","ssdeep":"6144:HPjNMmwzYRrw8wENIP8gMDSgP14j9VkV4Bq5Itz/uG:5jwzYRSmIP8G44BSa","tlshash":"eaa419ce73d674225296e478503f018ba57b24a2f49cc89af189cce42d74a9a4277f7c","size":450233,"data":"","first_seen":"2026-02-14T01:27:34.066415Z","last_seen":"2026-02-14T01:27:34.066415Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-assets.i.posthog.com/static/surveys.js?v=1.332.0","fqdn":"us-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"172.66.166.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e5524e0a38e666641598f4af467d97cb","sha1":"45c5c489a4d62917bd6c96ba53c42f22a0532837","sha256":"76627c7a8023fdfcf06970fa7ad2bf139ba499a9b02c1b2315b1046b01b5b8da","sha512":"757082563a814e2fb37959c1e9b38090f2982876fa8686afad56cfcfa9005642464a75cad8bf762e7140b42bbc01f9ffdf657b15af4129374165b5a8af4b20cb","ssdeep":"1536:lLNgAQ74f1FTsEQvLwBaTa2IaDwxFPFk/XnVVUbH4ah:1Ngj7p/Lw4we/XnNU","tlshash":"61934bd5b740f1ae41db80b4207e4842b33d2b1afa0d4958b157dc943de9948a39ffaa","size":89989,"data":"","first_seen":"2026-02-12T20:37:44.899207Z","last_seen":"2026-04-13T10:23:59.614185Z","times_seen":882,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/en_US-762U7H2X-CbWPluA0.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"ba4d43bdbbfd3c753e169df3aa2b74e0","sha1":"94e71fd5d63ad5ddb110133a9d3ae80d445c87d8","sha256":"858aa2383e4722460ec5d7ad11046a3d57d3c6621d641dfb2a27f43ef531f80a","sha512":"b611693cf312754d097de63a7a810f7997c6c6897b188983ce507f1e04a28548f347531a396a807fecea167196d52da96b15d624f330d799e766fb43771b684b","ssdeep":"12288:wd/7EKwzWIKWTHoX2f+ozuNqxl+SNa45IVWdyq:WzEJzWIKYIXQ2qx8SR0q","tlshash":"82c46c44b2a0b565439740e914eb1000f1346e9db50c58a876ecd9be3fbaec885fbf6d","size":562283,"data":"","first_seen":"2026-02-12T20:37:44.89269Z","last_seen":"2026-02-14T01:27:34.022587Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/page-meta.component-CGOmIOVX.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"9c126c37b55ffdec2dea9e147dc70591","sha1":"80a0f691f3373c84441125492cb7e95fbe0085ac","sha256":"649c7f6181b5e4cea70dd0987f6f30821ac6bd733f391bd4faeadfc70f0afefb","sha512":"fab55382ec0bab85320f87d24b604b978de71aea79c5c7591faa17bd5d7d78d36cf5f47e0c71782ae6acda9a7184982ec0898ac78ce90742b0db4f319949a053","ssdeep":"","tlshash":"2e014969a510689b1766ce111c9af24db17687bfc038c9a1b5a448390ff1fe7c07277d","size":803,"data":"","first_seen":"2026-02-12T20:37:44.920975Z","last_seen":"2026-02-17T15:15:31.673146Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/base-modal.component-B_TnXego.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"d8d308403b95f92748e1675665c7c997","sha1":"087fdbf4e6c73c4b95c1667dcae52ff5bd7175c4","sha256":"5a8ba25a6f724cf84177b9fe507e0b761a7275763228d146e88613153a03ea5d","sha512":"71122f70aefbe546c2e6474d82f06f8df21c9e29a7a190ded3c868fd73a489467b22f9223bba2a244c9a252b2870fdfe4caa31592338938eab612645096d74fb","ssdeep":"192:pGdAzs+Is14LdwydAz3kmmengY4CHlFYk:MdAzs+Is1IwuA7kmmev","tlshash":"6ef1c91de34aa568fc3fc549e0edda0aa56e102cf3360991b2bd952e01d4e52732bfd4","size":7957,"data":"","first_seen":"2026-02-12T20:37:44.910174Z","last_seen":"2026-02-17T15:15:31.663795Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/user.context-DIZs7jcU.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"141404d63ba51bf63193a06055d53b51","sha1":"c45d60d7f06d4b87009fcb9b4d33800f51fea6b8","sha256":"59a539e37c978604e589f466d438e0a4a599b4eb7ff53c7120cf6e6f75658f99","sha512":"fb6d0501d6ad0d357cb96205f93210ca81d25d686f9f3fc87a2cdfc917d70aa42159c8e77596c49e1127c8f9fd2577d3680992424706b83352a8aae4d07f660e","ssdeep":"384:OPQJMJF7sMqTKP/bSZu/dcLgl1lkkObqtrC8CmUZr8sEo2M48/DFYREV7J/RC5AU:OPQJMJFITKP/b24dcC1lkMtrC8CBl8uM","tlshash":"67b2f75831d9e0b142e750a4947f620bf17819a0e05ca4a4e2aafdf439f8d97817bf36","size":23804,"data":"","first_seen":"2026-02-12T20:37:44.894834Z","last_seen":"2026-02-17T15:15:31.655683Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/metaMaskWallet-YFHEHW7V-BggUDXad.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9faabc0cac059efd75278832f35fba0","sha1":"75a665ec82b0dd2ccab406db25ed49f69ba40931","sha256":"748a6c743322ec0b319bf361b84e929e5099721824636f5a4befd8e0ff8ab826","sha512":"7ab0d0071f01aad00b47c9fd55ef2748c61eeeb46b3abfb66afdae61970d62a77a0f643be0c95cab9a778d28a816b75fbb5c4667be6b794d97cec3937d0b5eec","ssdeep":"192:M1vaqYOX292169AY32zqzKHio+21BZBTibnKCU+jpBxMCXV:my933BU+V","tlshash":"17d15deb67488cbcb8271f24e34a3271613836d7692ee6594c738a79090519dbb7fcc4","size":6516,"data":"","first_seen":"2024-12-25T05:30:42.586528Z","last_seen":"2026-05-20T16:17:57.649029Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/okxWallet-GJMKZIND-Ctk5JsJ6.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4c59e31efbcd88c687fc0a977d992ca","sha1":"486cb19e8e6498704d418690e59128ebf9a02c6e","sha256":"92b49f1aed987eee109fd98567002c0420d85c602003e003b0f2ad3513c41f15","sha512":"01d94e855345137a19596757a9b585c74536b3c847f6c34ce07e2890fc4536375a159870aa1c88ff8a9b24f94c3cfee0eac0998d73170b52c9887080dff1ec54","ssdeep":"","tlshash":"8e115b9600ad4ddecc5da1eb937ca4aa573d2df8763881352f4c8b5020aacf8f44ad5c","size":898,"data":"","first_seen":"2025-04-09T07:08:13.428855Z","last_seen":"2026-05-20T16:17:57.647911Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/root-8mEX-aQm.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"586050d49991160d6909894350224c07","sha1":"01a3a28e2452fe6f16cee67268612a4b00b33a33","sha256":"14afcc895061e0efd2a3bc4fb2177bfe9958b830bbb195c99533918002721a63","sha512":"7cb2f7655a6983208d1d12f39a9cf01d6c9a0d3ef6dfe1bff106721e60ba94a3e6c96d37788eeade170721e34f147fa7d452d1b49945c725ef62ab6f4d7c7aff","ssdeep":"98304:9fpOUbGpKOA/W1KGIVpO0y6dy6tVRNp/Kd:9fpxbGpKOpjgpO0y6dy6tVRNpCd","tlshash":"41267d84336ab475079626d4447b0041f238ac46604c809afeec9bfb6ff949a857bf7d","size":4584591,"data":"","first_seen":"2026-02-14T01:27:34.075997Z","last_seen":"2026-02-17T15:15:31.685612Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/phantomWallet-IPGVKCAB-BGoqRxdn.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d8d3e122c71dad3b911494fe2c10c5f8","sha1":"1b78a2cd20efa5bf8974c3f1d828585a4dec9961","sha256":"074e942e3627e6929f68a9f298e84f7ca26788c12c1dfc6caf7dc90473303910","sha512":"cf37e331c970b63ce5d64b41b174e697175c73e2d942534a7b77daac130ca72233a08809240204283a3bf66bc52c73846ed55ba5add6302341688d4714158d22","ssdeep":"","tlshash":"e411dcd20f3080e50e9aae39ad3878e416b171af737826841349cf34ea83dc74508a50","size":919,"data":"","first_seen":"2025-05-30T14:20:20.549969Z","last_seen":"2026-04-17T09:09:52.493057Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/rabbyWallet-FLVUU35F-BZrp4syk.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"174b08de1e202256a72f7663e79b8461","sha1":"602e294d94f061211502895741144c4320248855","sha256":"0767c9b588d0ab9b532619b26d91fe6e5163f541bcc2d6a9e9adae18f670dc8d","sha512":"640ce4e8d836b4ea90ace61f30c3cbe697e7d9a7d6d04c4b4a4e0f1845f850754434d0415ee9f3a7ec0856d679fe14679d1548d99385bb887a205fb0ab6d3b1f","ssdeep":"","tlshash":"594183e8eb38e993edadc67cdf19a475310e30ff909441a551d65b1e30646d33e0a650","size":2370,"data":"","first_seen":"2025-04-01T04:17:39.073172Z","last_seen":"2026-04-10T09:11:01.513661Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/hiunicornstudio/unicornstudio.js@v2.0.1/dist/unicornStudio.umd.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d62fcb8aae79e4ddff0c2f73514cac7f","sha1":"cbf46f8b66d5d226568da0f3ee29eb143784d0c9","sha256":"9a64dbb9af5e9672cc99b091377d7df9a9d1dcb2a910b639360e77b18a31cd71","sha512":"be67b0445a5e1603905d44b113b7d5c70f675e8901d6cf7a7f918cb61f197d581abee3af79af6e846d27cf87b7a0fcac17e0330455992ec09ee337b194a05f35","ssdeep":"3072:2dkdy/7ekEfcyDjn/+H4/l81Ei7PlzLWymGMbnDaURDS5WfeT:2dkdy/7ekEfcMRDS5WfeT","tlshash":"9ef3e9a6716b642e0982818bf0750e07a226655c340dc46d7b7cb8ff68ece5e317d73a","size":163593,"data":"","first_seen":"2026-01-30T19:04:09.913225Z","last_seen":"2026-05-29T10:09:54.461281Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/safeWallet-VUYZPLY4-CXnodgMs.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a09d06d29fe2837adda28d773f8d6e5","sha1":"93c50ca2782f3f0b4c1f6d48c9fa33476f772ac0","sha256":"aaaf8c1f6acc96bda06bfc1e526611b918cd12021d54b15cce8fef605554938e","sha512":"7c181bd28ffca7872846372455d30661b0b89069cc473f94ac177247350091749470603dbf2827abc14eee65d5f98c37664defe6105075889415cee5bc3ac9dd","ssdeep":"","tlshash":"c531229136cca6e0770ae321cd04c166f85528effd66e35c6a015862bd0846d758cdfd","size":1449,"data":"","first_seen":"2024-12-25T05:30:42.588753Z","last_seen":"2026-05-17T17:52:49.735726Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c3e3e350f78cf22bd7b335d70b41a58a","sha1":"cce22220b6a8dff76692755cc45439b4ec474a4d","sha256":"ee6bb81f4e9fc030a39a7c71affc4d1f2b900baa4b4c7af83361388d7c39599b","sha512":"15b6cbf8bd67e82a4952004138ebc95c44e4d373317826f1560eeec13416cc1d6a38d834609ef4b713e7a9c92d1b1bbf84de08e2e4061ed3d1e3891982c25b0a","ssdeep":"","tlshash":"3f90025ff2302063a756122b166f15456421626565550869123830eb4955148474265c","size":57,"data":"","first_seen":"2025-06-30T14:23:19.448274Z","last_seen":"2026-06-08T12:45:29.039378Z","times_seen":52963,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"02bad808629f1d6d94fd35f18703c39b","sha1":"fb0be34185ec3fb29b31e7f182f0bb651f299e9f","sha256":"8fe9532ecf404c1e82638b1fb17f1b376f957478fec6675dd4e1bcc15a67ff69","sha512":"3a5147fe951d3145a7f2aa886c74b0fd97e580e49944a7ed4a78c25e12bf40740d5625b6b40125529a3398b5e4a972630ef6deab8c1706d777a2edb21ddfc021","ssdeep":"384:sl0UEGwUrAxYaHIBgZxIXQf8jN/HCXbIoOnnp00lXGsDnLG:sl0+xAf3UdnpJlXGs2","tlshash":"64c2d6abdd00b37a0e620f56762b3ef462aa52d807a6105c814dc5981b5023bef7f5df","size":26500,"data":"","first_seen":"2026-02-14T01:27:34.077445Z","last_seen":"2026-02-14T01:27:34.077445Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eligible-ethgas.com/assets/eleven.js","fqdn":"eligible-ethgas.com","domain":"eligible-ethgas.com","tld":"com"},"ip":{"addr":"172.67.198.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0731dc266a43636b0e166275728b329f","sha1":"10ab55c566941fe6319681ccaa36e6313c7336e6","sha256":"c8a7922f93eb75f4329d4576efd7cba8a84cd888cf80856fa42dd171a4efe22f","sha512":"01ad04b1d570264819d09409aa94fec0af2f32c2b00dd96d76d8ed616b8293dbbe912e60cbb42a144ee4c665be0039f0f6036ee1ba7c3e682e0fa22066c7a744","ssdeep":"98304:dml/voXqyL4cDRxWyeI4vWSuyZXJPcrnE:dq/gXqyL4cDRxWyeI4vWSuyZXJPcrnE","tlshash":"3ef57c8073b1a079439741e4947b1501f238a85a7408c0acfbecd9f7af999c9897bf79","size":3556158,"data":"","first_seen":"2025-12-02T13:22:34.804996Z","last_seen":"2026-06-04T04:08:18.209746Z","times_seen":518,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/use-is-client.hook-Dbkd0djT.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"391de8cdcd2af4de88351dd1d73e986a","sha1":"153d5f5716888fed5639274f54d354547ba1e868","sha256":"8171e7a9d58fe35766e9a6b00e4473415b36bfbc374a727c1eef52dedbc3541f","sha512":"c831734885d6e9a318bdde077004403d4732e3a8b423d0bee43f37bd708692488dbca71242f9a02e1fa310b1ee1c81e6c98fee1e174e2da1cdee0cd46adbe442","ssdeep":"","tlshash":"c0c02b551081acb0870008b452b7cdb0a43354dc22e52b90b42a4c0717050e38bafc27","size":141,"data":"","first_seen":"2026-02-12T20:37:44.861545Z","last_seen":"2026-02-17T15:15:31.651273Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/proxy-CbI-37ef.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"a8609175f8d1090ccbfe6916a99abd31","sha1":"10b93318b1038161f4761f5f8b90d9ac2b10b38d","sha256":"9e0bf1425dd94af34dd3687c495430fc8f88005699cd827bd33a7c436d7c480a","sha512":"e8068f907bd69118366fb331a51b0f140e41c520d602b18986c0580fbace7fbefbf6c967a73f5f9de7b88578a5bb053b07289fc12ef59f40449775ad1cf71f28","ssdeep":"1536:H+2TsGd6fOmBgDHte9/Q3t/v5ScoeyUK8wlZWJDFV8lovCt5VyF6Puktr/:H+2Tdd6WFteRQ3t/vscoJUxwlMIwqr/","tlshash":"6bb307c572917561d3d685e9c0bf0b41b73718983009c0bcb63dadcb6d2250aa6bbb7e","size":115479,"data":"","first_seen":"2026-02-12T20:37:44.911871Z","last_seen":"2026-02-17T15:15:31.660652Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/home.page-Ct3tf3tM.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"6fc72c7829d24ffffb7622bb8e5aeea9","sha1":"57b9d2943dd84ca319bf5e22f6752a19bd66590b","sha256":"d913d7f7f72ecc197e64a25b676a9dd8c27021fb27148644c5c2ac34d7952354","sha512":"0909e8869fabb6eb39d548193640fbc14aa86e3f9ac0059a55959069983919b34550397a9c9bc108a3633f7cf2536860316cf3a130c135318295b232f5e73998","ssdeep":"384:jy1HHMuN5w55aPYV0Y7MJho557Pegzcm7+tJuLhmn4K:jy1HHM85E5aPYV0VJho5gjtJuLhmn1","tlshash":"d8522c4cd296667fe5d24599253bd11cb33a0658b27a8091d37fa8360370dc2b933bdb","size":13417,"data":"","first_seen":"2026-02-12T20:37:44.937491Z","last_seen":"2026-02-14T01:27:34.058469Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/index-Cv69DvSO.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"2290e70d1f20a0f0ab497866d29e1f43","sha1":"8f91166b2507908b954144ca1060a707b5f92320","sha256":"46061444d4462839ff3e39911a47ba3d89aa404dddd7fb863a6a6958eb8c6a5e","sha512":"d58dfd6c176e19fca0d3a2bb8432b2d718c4ac1357242c5841a11afd1848b3c369dc2f1add96f8876da746a6958e2668e5aefb010c4e6595c9c4e93ae6966815","ssdeep":"","tlshash":"8c71138db7c4f04249c6a960037ba31772a9377318bdc2a193ee95b012675594227f74","size":3680,"data":"","first_seen":"2026-02-12T20:37:44.878589Z","last_seen":"2026-02-17T15:15:31.638947Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/root-W8lXAx1b.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"8daea6b355ac65463f1bd3063b9029ef","sha1":"836def8415437e6274e6e6a55e8a391bb6741916","sha256":"f539b7a402e078bd4b121e892a9790444c9b31bffb9ae3ef4ef580ad98e7b04e","sha512":"5bc8fdf0f3c17ba85106e32d3a66e2e815f99e4433f1eeab4e117fbb298f03e6fc7416e2a8bd72b56e65674c399730e0141dd3eeca83a75a8bc1e791c34d54a6","ssdeep":"","tlshash":"f8f0be27d91046b552d2ccf1d1a0f571263342a3d3e1e7b1e4ef277a03d14a9c545553","size":539,"data":"","first_seen":"2026-02-12T20:37:44.891053Z","last_seen":"2026-02-17T15:15:31.672303Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/warning.icon-DZMR3VcF.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"35d0183119e310f97da036fc8d8c531f","sha1":"0f26d787dae1ac05c33174884d6288fe2b486f9e","sha256":"4ba7eab091a2f52849ef6820a64f8141bf491465cd22f2b45fa495edd19ff74e","sha512":"1945bbdc8bc075a6e1fe00fff2cd2217bd0431c9eb485a5a0b5f591a397c1493ee36f86301415502c9046d4bb7b539ea6efc3b75cc7cf33bbf0ca2ede0446d12","ssdeep":"","tlshash":"4ef0fe67e3b428b87505cea8b38f7936317760e4b3014641a35e680513600c5b46d992","size":655,"data":"","first_seen":"2026-02-12T20:37:44.938743Z","last_seen":"2026-02-17T15:15:31.673806Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/trustWallet-E2GVGE4U-CcH50yxW.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a25b589fc633676b9a58fa384f2d0334","sha1":"119f38e7d9e19f351e022c5fa0f537f15ea3f933","sha256":"7edbc680126336b8db68846c0b688c957b60afd953859b06ca9dfd6a74a54f02","sha512":"ad917ac1bc65cbd0d55a05d5e39241f3badda088e0a56bf1d332a82c1df6d46e706c54bf3f9ddf22c75c3e754a33d6c3c03b2e6138720a09e85e0ce96cd9dc9b","ssdeep":"","tlshash":"3c01c0dbdb29dc77c85f83bced08a4a3521876db60c8436ee6554f1f25a808b1c0db60","size":760,"data":"","first_seen":"2025-06-03T09:03:10.609568Z","last_seen":"2026-04-17T09:09:52.485468Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/roninWallet-SAB5ESVK-fW2QoTxP.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"68f97b0ae9e3156ac22560e59bd69d4e","sha1":"9809da0a9ae9c30ab42202c55b07eef3acd8d1fb","sha256":"8959d6d3640f29ffad2fcde3305042bd42df292e2059935d19d5227dbe809290","sha512":"d9d8677af4e67b9e869da5a01e783a25305798a87461bc1915b6f9c200ec06c5b44b79758c89ecfbc6324647893faa387e3f594b71729f0d7beb1a457370cf2b","ssdeep":"","tlshash":"36119ce5910889aec51fc22cdd109462231f24e67acac697a7fd4f393147443fc07a59","size":975,"data":"","first_seen":"2025-12-31T12:33:59.906467Z","last_seen":"2026-04-08T12:13:16.914673Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/sound-button.component-CXJP3EGL.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"6a87328d6438328d99961c6a3b5251d1","sha1":"8665ad288654908abf6930b50e5110fb228a1460","sha256":"40e7a7bcfee3bd860b9eb80bdd7befdebfe80abb3c67c6b78449b1a1501b86b2","sha512":"ac723989fd6ed8e62f01f65d66d1ae27e37a4ac14ca3ee6801d6e0c8ebc041a60ebb6d6c59380f38f345d28ddbcef96d4c9a490bcffcff647bc1c77e2528327a","ssdeep":"","tlshash":"204163e9c70035ac680e9b30fc177812b1be14fe8ba557d0814c653c6a328e3eb25ad5","size":2189,"data":"","first_seen":"2026-02-12T20:37:44.952108Z","last_seen":"2026-02-17T15:15:31.642379Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/ledgerWallet-KZKJ5Q2S-DdZeAsds.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"717b03058e9eccce29ae3a8f15544b1a","sha1":"c2b626e64489c6f9084d3bad64c5fb73df88d797","sha256":"59642a8a9d30d9684f1aa6b4c8ca8886bf9a53491a3e238ad3aadac36f1917d9","sha512":"d339c57445af528cd655bad29dc18dbbf61ef6c5a8f6541b4735e8ef7ed872dbf173d22e3c67f976eb78bd25eb8b30a40b2613698d6ef9f24a485a61c7e9f6ee","ssdeep":"","tlshash":"b7f0abe64b508d00874a03b1cabc94c8313775eea758239cb2720619bd420afb90cbb0","size":443,"data":"","first_seen":"2025-09-05T14:38:20.777264Z","last_seen":"2026-04-17T09:09:52.483064Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/injectedWallet-H7LYKTQS-CAHJNGc-.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d15e27dd16cca201d14667c3af8cb320","sha1":"a2a412c0b28c967d51856bd18a3f5b1a039cbf94","sha256":"db58171c5bda95e8016d892b4692c77c4f7644fe1fd3ee9b6ac1f561e867aec0","sha512":"20a745ee7cfac75a1160058128403ca4639ca13460191bceb426a295e6ad64e72d63343c73565dff68a719fb7590fe12853a1b213c9a1e0d33a24d2e0937225a","ssdeep":"","tlshash":"fc01f476d22cd45dc91dc36cfd6e68f3234961e6611f4328755c0f2ea2194cbec1e264","size":685,"data":"","first_seen":"2025-04-01T04:17:39.059491Z","last_seen":"2026-05-20T16:17:57.675356Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"00933d3d76fccf8f1d330b001b6dc118","sha1":"72a3f9f693a7d05bb6f1b38fd381a0f4e8bb5c7a","sha256":"4009527b06902e2fcd3c2ce78c0652caf43bda1783d1577198d0c3919782c607","sha512":"8fce1ced1efcaf7f17f0fbc71664f0ca59f5f7bddc682fdbc8b9ef3862def740a845bc3cd5cc3926c09b98782296d14c9b38d50b2dd6cb53b296ec76ba558602","ssdeep":"","tlshash":"090156a9f328199a66d92fbfa06a570c7460603e380600319507edfa1700de021cbd8e","size":845,"data":"","first_seen":"2025-08-20T23:30:20.291724Z","last_seen":"2026-06-08T12:06:46.083227Z","times_seen":39776,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/index.es-Cs6pd85t.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb0eab7d1742ada31f6506523e2f42b5","sha1":"9573691d65d377d70aca093fc5fe5f76c1befbfa","sha256":"ab7a7822ca5bd437b9433f372f2cca0dd917fc5865597ad73e7cb1eb99c0005c","sha512":"068701da2cf0b22387f3d5053b53ccbc15accc2c14a15853a6d6c8aaa80bf95d6766b4a267d79d19b41296f2c2495dba7023ec8b320d310dba5468b0a1f4d2e9","ssdeep":"6144:zKozfkuuo9pepoE4y4++7o8IR4zHVwSbZnECpGN36NokB:zRhnep4y4+kO4pwSbZn+6NXB","tlshash":"94742b8473b6a47603ea95d9a8352201f23458683049d46cffbc6defae844854b3ff76","size":345997,"data":"","first_seen":"2026-02-12T20:37:44.884861Z","last_seen":"2026-02-17T15:15:31.661464Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/loader.component-MQ1Ecw-o.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"69f34b5b165315b71333d0e6a7295fa3","sha1":"9b6e351669e11739c8bd9e39df9509b790fe24b5","sha256":"d0649f242ceef1251752ba00284bf8a0a01f66898d17d12e7026c1140b275f2f","sha512":"fbf030d996874ea4427f2180b55b4e43847cd90c862fc82690ead75728acbe61b41ec33d054831a04a433b6dff3ee909d47cc2c4f12c989bd50b422e8a6bcc70","ssdeep":"1536:IRK0GSaGlSaeey2MZ+40INYm1C5XeJP2CprtD2zj7br:IRcSllS3e070Bm1jrQ","tlshash":"b0b3c79c7882b8a5539b45a590ff010bf27d6c4b700c84a0f268ddaf79738695263fbd","size":117949,"data":"","first_seen":"2026-02-12T20:37:44.897315Z","last_seen":"2026-02-17T15:15:31.651856Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e0699d9362a4e2603cb8ff2bd6ddd2f4","sha1":"5a735efe15b3ec9246eb2ea710a664e7c850190c","sha256":"44164d886dd9b5bdba5e2ffaf7e55179c53804f86b7f172fb292d7311aeb08d1","sha512":"6a7de46450e6dbba8903543d163632bb33c985f7d5e2a61cd8c22781f9487d01dc468174af39aaf2a7e421f9efd29a80c2c3ff347805331254865fd9c357fa2d","ssdeep":"","tlshash":"c8900220542902aa5ae2815d5612fe3977441985110984620154d60b24d20d690369e4","size":53,"data":"","first_seen":"2025-01-19T19:20:19.81482Z","last_seen":"2026-06-08T12:01:03.14528Z","times_seen":9699,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/background-music.context-CyxtzD9I.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"dd8962f02570fab22e3a42bcca1bd186","sha1":"5b97d297afafc3fc4bb310d1df2ace70e1c55a15","sha256":"8463f455837cb03dee7ccdc05ac924afb6330a5d1c0927c55498bcba4b024ac7","sha512":"e4a9b80a701e74bf2fd7d6d6fbb8561d438203199b3a6b503e1fce4398ff1d80aa84ac7047df0e4102c79f9e40fb42e54ba08097c88a581bd4e2b8be4a6bf52e","ssdeep":"","tlshash":"d111dcb7a8a4907afb8e09a809a1907937333b54304a40f1e13c94ab45d2582e67b7d9","size":927,"data":"","first_seen":"2026-02-12T20:37:44.875304Z","last_seen":"2026-02-17T15:15:31.642906Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4533235bc340f56829dea0a7d50f01e1","sha1":"57e36d2d5ea0be6ffc8e6001b28f5b4f3b865a43","sha256":"a7b184efc6db3070eb138216ce988c4adb40b13a54bbbc308b9ff0be71f9e0eb","sha512":"dd0bfc5260b16d9a9b387ef134ba454aa5ed7636fab9b79e5034e229418ca5f0e6fd99dca3c881fa091df55204dfaf7e77e4526050a60e8110ed49b41ea4e831","ssdeep":"","tlshash":"1c60000000c000ff0000f0c03ccf0c000c0cf000300c00000003c3000000000030300c","size":16,"data":"","first_seen":"2023-03-08T20:20:25Z","last_seen":"2026-06-08T12:06:46.084691Z","times_seen":23747,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-assets.i.posthog.com/static/web-vitals.js?v=1.332.0","fqdn":"us-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"172.66.166.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa1e3521e57a40ad394b049fa7ff3bc5","sha1":"ec88012f680be684d8d430c5efd61fc29b658374","sha256":"b17014672e5f28d0dc0cad40ee4d09feb6a1201dadb3932b1f3073a8e4f387d6","sha512":"729c7ed37f0f321fd1c588aab554f289ff37fce9a3cb7dfa78cb8f47db8cbacb69eb0660ea2e245a540dca857f4cf277f67f53c7d789609006e56799ce3ad282","ssdeep":"96:tzI8C48z+TJzq4L88kTAFKb5rbCKHDuqqUtl0AcJ4c0jU4mzWuCD/ZDZkRlulDsd:VC4F4Sk8FKvae0f4TcWuEZDyCSXEdij","tlshash":"eed1d9f59f41e53921bae2b6d47a514333396386a409409ce23eefd0146d4c6739bb32","size":6599,"data":"","first_seen":"2026-01-29T18:42:31.973098Z","last_seen":"2026-05-30T16:55:13.565573Z","times_seen":3485,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/coinbaseWallet-WWX6LF36-BMRj6mTC.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"694e1f6dd72af86c8c477f9608975a74","sha1":"3b0def5280cfb0e2cb76b3a039bf7e26986a7f92","sha256":"4a238a92bd23caf58037a8423adebebfc6a84b6762f033bc7e6ebf8741ca1e41","sha512":"7290b10e41ef6e0d7bc27cb24d75327c1493f0d2ae961fb89bf1bb387659a9bc14681b66dbe754722c5f2ea5a98b6cc76c2ca9cde9406de0062262f6f056003f","ssdeep":"","tlshash":"64f022a1a2dcb411186ad336513c5ad4bcd7128cae2e621c32801f1af82009a98c8a79","size":598,"data":"","first_seen":"2024-12-25T05:30:42.515918Z","last_seen":"2026-05-17T17:52:49.746342Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/use-on-connect.hook-B9Vb195z.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"5dddc34bc306e93857c0a0501f507ab4","sha1":"71f4b9fe8ed412a4300d6667888a8894b6110a1c","sha256":"1beb9af3345660f681b9316277dc9908a3a06e0a0cc29d1eb8efba5e026fbe27","sha512":"b7a566f2bb49ae583ad997f7380e6f8e871a2a7a0e7dac0e9af5a1d8d460b7ad254cc51dec92034739723fdb261482655a6782f0302a4e12b4bc05550223e378","ssdeep":"","tlshash":"f2f0dda5d0c0d6f8d317cce9d438eb7e0a312ad8b189c2c4dcae49631291ec0802aa07","size":654,"data":"","first_seen":"2026-02-12T20:37:44.939654Z","last_seen":"2026-02-17T15:15:31.667925Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/entry.client-Bv3K-XV0.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea90ebb2c0a9bda9658b8eb254b09e09","sha1":"4bc2cae557e90d63d4bfd15d5d90452b0e57ca60","sha256":"0140eab84177fcb22e827368c499794ece7e7d21204b44971d2e9c51c3a46e49","sha512":"5ed8fc3903da8c1454b9357681cc9d830e0ba865ba32ef0b8ab55d53b0db2f88210231e0a3eac15710f4cc8de6edbafae2bbfa6bebba8dd6ad4c9bacae7d826c","ssdeep":"3072:XO8GfDyHDZubrIrn6BEnaE2CmfnoSA016Un/m:evL4VunIz64eoSvL/m","tlshash":"10041bec32bea7566eb245e6109f1503727c28236c0c4c70a151fe9d66b844a51fbfee","size":189577,"data":"","first_seen":"2026-02-12T20:37:44.912773Z","last_seen":"2026-02-17T15:15:31.640008Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"claim.espresso.foundation/fonts/pp-neue-montreal/pp-neue-montreal-regular.woff2","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:26:58.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"6B:84:E2:F7:B0:5A:22:11:49:DC:F7:9B:A2:54:CE:36:02:5B:F4:F5","sha256":"EB:40:F6:36:FE:11:66:87:B7:F6:20:14:F5:EC:28:6B:5E:7F:78:A7:93:24:72:E2:3F:B6:F2:19:7C:BB:54:C9"}}},"request":{"raw":"GET /fonts/pp-neue-montreal/pp-neue-montreal-regular.woff2 HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/fonts/pp-neue-montreal/font.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:26:58 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 47564\r\nserver: nginx/1.29.5\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 21730\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"pp-neue-montreal-regular.woff2\"\r\netag: \"9f495aeb5f20fa526a69654c7a1af5e7\"\r\nlast-modified: Fri, 13 Feb 2026 19:24:47 GMT\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: cle1::gljps-1771032418731-d5953f0abe9e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":47564,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 47564, version 1.0","md5":"9f495aeb5f20fa526a69654c7a1af5e7","sha1":"5456093ac2a3210ebea9ea6fec4faed78cfbf4c1","sha256":"1a020a0ccc2b29ad091b713864b135d9f7fb6d3114e69620f6d56eeb9abefbcc","sha512":"0de585585140f263fb24e97236052ecf380c92b75c724fe3fe99c966ca90a53c6eeea812081e89850ca9c1d343c70ba967dd3f666a437f9b8237e49a5a6ad711","ssdeep":"768:L1MGt41Apz7bVFaRdg9IwhVyuCaMC4C0nRprwgT7XRgLyp2:OGG1AV7bX8g9IpuXtsjrw4up","tlshash":"b323029700fe4ff5c9adb0e81523fa130529898c59a73b7743a32da4a76d7f8ca06107","first_seen":"2023-11-11T04:34:18Z","last_seen":"2026-06-06T21:58:35.44677Z","times_seen":397,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":228,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/page-meta.component-CGOmIOVX.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:26:58.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"6B:84:E2:F7:B0:5A:22:11:49:DC:F7:9B:A2:54:CE:36:02:5B:F4:F5","sha256":"EB:40:F6:36:FE:11:66:87:B7:F6:20:14:F5:EC:28:6B:5E:7F:78:A7:93:24:72:E2:3F:B6:F2:19:7C:BB:54:C9"}}},"request":{"raw":"GET /assets/page-meta.component-CGOmIOVX.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/home.page-Ct3tf3tM.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:26:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 803\r\nserver: nginx/1.29.5\r\naccess-control-allow-origin: *\r\nage: 12532\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"page-meta.component-CGOmIOVX.js\"\r\netag: \"9c126c37b55ffdec2dea9e147dc70591\"\r\nlast-modified: Thu, 12 Feb 2026 16:45:21 GMT\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: cle1::489b9-1770927253655-7f53a5c609e8\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":803,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (802)","md5":"9c126c37b55ffdec2dea9e147dc70591","sha1":"80a0f691f3373c84441125492cb7e95fbe0085ac","sha256":"649c7f6181b5e4cea70dd0987f6f30821ac6bd733f391bd4faeadfc70f0afefb","sha512":"fab55382ec0bab85320f87d24b604b978de71aea79c5c7591faa17bd5d7d78d36cf5f47e0c71782ae6acda9a7184982ec0898ac78ce90742b0db4f319949a053","ssdeep":"","tlshash":"2e014969a510689b1766ce111c9af24db17687bfc038c9a1b5a448390ff1fe7c07277d","first_seen":"2026-02-12T20:37:44.920975Z","last_seen":"2026-02-17T15:15:31.673146Z","times_seen":4,"resource_available":true,"data":null}},"time_used":386,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":384,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/okxWallet-GJMKZIND-Ctk5JsJ6.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:27:01.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"6B:84:E2:F7:B0:5A:22:11:49:DC:F7:9B:A2:54:CE:36:02:5B:F4:F5","sha256":"EB:40:F6:36:FE:11:66:87:B7:F6:20:14:F5:EC:28:6B:5E:7F:78:A7:93:24:72:E2:3F:B6:F2:19:7C:BB:54:C9"}}},"request":{"raw":"GET /assets/okxWallet-GJMKZIND-Ctk5JsJ6.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-8mEX-aQm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:27:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 898\r\nserver: nginx/1.29.5\r\naccess-control-allow-origin: *\r\nage: 12228\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"okxWallet-GJMKZIND-Ctk5JsJ6.js\"\r\netag: \"f4c59e31efbcd88c687fc0a977d992ca\"\r\nlast-modified: Thu, 12 Feb 2026 16:50:28 GMT\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: cle1::kgcv2-1770927256311-f8511c9b23d7\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":898,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (897)","md5":"f4c59e31efbcd88c687fc0a977d992ca","sha1":"486cb19e8e6498704d418690e59128ebf9a02c6e","sha256":"92b49f1aed987eee109fd98567002c0420d85c602003e003b0f2ad3513c41f15","sha512":"01d94e855345137a19596757a9b585c74536b3c847f6c34ce07e2890fc4536375a159870aa1c88ff8a9b24f94c3cfee0eac0998d73170b52c9887080dff1ec54","ssdeep":"","tlshash":"8e115b9600ad4ddecc5da1eb937ca4aa573d2df8763881352f4c8b5020aacf8f44ad5c","first_seen":"2025-04-09T07:08:13.428855Z","last_seen":"2026-05-20T16:17:57.647911Z","times_seen":47,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/bitgetWallet-CLYTW54T-Wwn2QYd0.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:27:01.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"6B:84:E2:F7:B0:5A:22:11:49:DC:F7:9B:A2:54:CE:36:02:5B:F4:F5","sha256":"EB:40:F6:36:FE:11:66:87:B7:F6:20:14:F5:EC:28:6B:5E:7F:78:A7:93:24:72:E2:3F:B6:F2:19:7C:BB:54:C9"}}},"request":{"raw":"GET /assets/bitgetWallet-CLYTW54T-Wwn2QYd0.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-8mEX-aQm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:27:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 1320\r\nserver: nginx/1.29.5\r\naccess-control-allow-origin: *\r\nage: 12226\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"bitgetWallet-CLYTW54T-Wwn2QYd0.js\"\r\ncontent-encoding: br\r\netag: \"0d3fcd1494db0e6f08944e18e1dab82e\"\r\nlast-modified: Thu, 12 Feb 2026 16:50:29 GMT\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: cle1::7gnjh-1770927256311-7136a300aba4\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3493,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3492)","md5":"c209ae7e667ef953a67fd9e02e026122","sha1":"263c559b9b3d0aa0da8a7ea36790983dc7a0821f","sha256":"1f5ce5ae5b81eeeb68a411dc27cbdeadab04eecff9fca4447d20755e6b770e46","sha512":"6daddffb9e9d093649df98bcb5d7737e9fa7687dac1308a4710689c88076d5dc81b7de5bbfe7abf7a3910d9f53c331207b153b9f582c2eafa4717e553cc07f58","ssdeep":"","tlshash":"2571a791d7f5e09f6b1803b6ff9a14e79432f4e641140b9de55e3361200ee23e91f554","first_seen":"2025-04-09T07:08:13.379631Z","last_seen":"2026-05-20T16:17:57.641698Z","times_seen":32,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eligible-ethgas.com/","fqdn":"eligible-ethgas.com","domain":"eligible-ethgas.com","tld":"com"},"ip":{"addr":"172.67.198.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T01:26:57.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eligible-ethgas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 03:51:42 GMT","end":"Wed, 22 Apr 2026 04:51:35 GMT"},"fingerprint":{"sha1":"C0:D5:DC:5F:FD:44:D3:71:4C:7F:51:87:BF:22:44:A2:41:75:9F:87","sha256":"88:C6:B7:F8:12:4F:45:10:CC:8D:7B:FC:94:D4:1C:F0:DE:CA:56:41:19:54:D0:9C:60:55:20:4B:8C:FB:3E:45"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: eligible-ethgas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:26:57 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 22 Jan 2026 04:40:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ARCB3MCjlglHdCSCnlT%2BCtfJGjNhZAN2F6SOhmgCZS91kn0%2FdN90mciISoud1%2FwJsBEGhkM1qEeyHT0DzGlMmO3TUJXx15igzoXo4qOOd3rnpO8%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9cd8c7c0edc31525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":744,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"e20e07478d13693175c9687188a7fb2d","sha1":"57937bcaa6df884341168df1921330418a34e1b3","sha256":"0e5b6056296c8c82684d7482a27205344c4cceeafa4ae6855f2bf8dfa0ca4120","sha512":"73dc52469a705c9d75976f39b946d9e6161c4a1ed3353b6d52bd20268df5302aa97ec497871c50b9f107df7e3564349d51dd77c12400acedc375704d10e96bcc","ssdeep":"","tlshash":"1701fea228d08c0981b48379bdf0a24cde83468357456850badd31632ff4a438ce37ec","first_seen":"2025-12-31T12:33:59.877053Z","last_seen":"2026-02-14T01:27:34.016745Z","times_seen":15,"resource_available":false,"data":null}},"time_used":388,"timings":{"blocked":54,"dns":41,"connect":1,"send":0,"wait":276,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"eligible-ethgas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://eligible-ethgas.com/","date":"2026-02-14T01:26:57.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"6B:84:E2:F7:B0:5A:22:11:49:DC:F7:9B:A2:54:CE:36:02:5B:F4:F5","sha256":"EB:40:F6:36:FE:11:66:87:B7:F6:20:14:F5:EC:28:6B:5E:7F:78:A7:93:24:72:E2:3F:B6:F2:19:7C:BB:54:C9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eligible-ethgas.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:26:58 GMT\r\ncontent-type: text/html\r\nserver: nginx/1.29.5\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: cle1::iad1::9sx8d-1771032418321-5c90c594d7a7\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48464,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (27241)","md5":"c1c99f1a851eeec7c5c15b1c52799b62","sha1":"5c67d963eac5aa4769afbfea0491a5ca23b178ff","sha256":"600b82ef8269523bc99e34a20caca3494aa255d69cc28b54129d81a2d8d5f548","sha512":"88f2073f1f162507dd31397f1b7175a254e5f049d5c2ecf26f720d694a247fd9da8710bfa9f4641ba741810ca19c68f97e085e2cc784791267e85878694147cf","ssdeep":"768:BAIIT7fMoMm08pv5uoF+ZNl0+xAf3UdnpJlXGsT:EfMoMmNxpq0c5nHlXGsT","tlshash":"b1235bb6c410a6ba0a231f54f6373da862a721e94b54509cf15cc15c2b40dbb8f7f9ee","first_seen":"2026-02-14T01:27:34.017428Z","last_seen":"2026-02-14T01:27:34.017428Z","times_seen":1,"resource_available":false,"data":null}},"time_used":999,"timings":{"blocked":404,"dns":84,"connect":106,"send":0,"wait":186,"receive":0,"ssl":217},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/loader.component-MQ1Ecw-o.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:26:58.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"6B:84:E2:F7:B0:5A:22:11:49:DC:F7:9B:A2:54:CE:36:02:5B:F4:F5","sha256":"EB:40:F6:36:FE:11:66:87:B7:F6:20:14:F5:EC:28:6B:5E:7F:78:A7:93:24:72:E2:3F:B6:F2:19:7C:BB:54:C9"}}},"request":{"raw":"GET /assets/loader.component-MQ1Ecw-o.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/home.page-Ct3tf3tM.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:26:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 38027\r\nserver: nginx/1.29.5\r\naccess-control-allow-origin: *\r\nage: 12169\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"loader.component-MQ1Ecw-o.js\"\r\ncontent-encoding: br\r\netag: \"1cefead3c95e384829fb1cc005c50d45\"\r\nlast-modified: Thu, 12 Feb 2026 16:50:23 GMT\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: cle1::lqw4v-1770927193245-4c98e14fb1cf\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":117949,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (46483)","md5":"69f34b5b165315b71333d0e6a7295fa3","sha1":"9b6e351669e11739c8bd9e39df9509b790fe24b5","sha256":"d0649f242ceef1251752ba00284bf8a0a01f66898d17d12e7026c1140b275f2f","sha512":"fbf030d996874ea4427f2180b55b4e43847cd90c862fc82690ead75728acbe61b41ec33d054831a04a433b6dff3ee909d47cc2c4f12c989bd50b422e8a6bcc70","ssdeep":"1536:IRK0GSaGlSaeey2MZ+40INYm1C5XeJP2CprtD2zj7br:IRcSllS3e070Bm1jrQ","tlshash":"b0b3c79c7882b8a5539b45a590ff010bf27d6c4b700c84a0f268ddaf79738695263fbd","first_seen":"2026-02-12T20:37:44.897315Z","last_seen":"2026-02-17T15:15:31.651856Z","times_seen":4,"resource_available":true,"data":null}},"time_used":381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":369,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/safeWallet-VUYZPLY4-CXnodgMs.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:27:01.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"6B:84:E2:F7:B0:5A:22:11:49:DC:F7:9B:A2:54:CE:36:02:5B:F4:F5","sha256":"EB:40:F6:36:FE:11:66:87:B7:F6:20:14:F5:EC:28:6B:5E:7F:78:A7:93:24:72:E2:3F:B6:F2:19:7C:BB:54:C9"}}},"request":{"raw":"GET /assets/safeWallet-VUYZPLY4-CXnodgMs.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-8mEX-aQm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:27:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 689\r\nserver: nginx/1.29.5\r\naccess-control-allow-origin: *\r\nage: 12831\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"safeWallet-VUYZPLY4-CXnodgMs.js\"\r\ncontent-encoding: br\r\netag: \"88dc16e86969db1d05c7274f714816d0\"\r\nlast-modified: Thu, 12 Feb 2026 16:40:25 GMT\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: cle1::4fwgr-1770927256312-098f3d7b956e\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1449,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1448)","md5":"9a09d06d29fe2837adda28d773f8d6e5","sha1":"93c50ca2782f3f0b4c1f6d48c9fa33476f772ac0","sha256":"aaaf8c1f6acc96bda06bfc1e526611b918cd12021d54b15cce8fef605554938e","sha512":"7c181bd28ffca7872846372455d30661b0b89069cc473f94ac177247350091749470603dbf2827abc14eee65d5f98c37664defe6105075889415cee5bc3ac9dd","ssdeep":"","tlshash":"c531229136cca6e0770ae321cd04c166f85528effd66e35c6a015862bd0846d758cdfd","first_seen":"2024-12-25T05:30:42.588753Z","last_seen":"2026-05-17T17:52:49.735726Z","times_seen":40,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/login-CWDTIDNK-DhDUYE4b.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:27:01.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"6B:84:E2:F7:B0:5A:22:11:49:DC:F7:9B:A2:54:CE:36:02:5B:F4:F5","sha256":"EB:40:F6:36:FE:11:66:87:B7:F6:20:14:F5:EC:28:6B:5E:7F:78:A7:93:24:72:E2:3F:B6:F2:19:7C:BB:54:C9"}}},"request":{"raw":"GET /assets/login-CWDTIDNK-DhDUYE4b.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/en_US-762U7H2X-CbWPluA0.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:27:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 2843\r\nserver: nginx/1.29.5\r\naccess-control-allow-origin: *\r\nage: 12525\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"login-CWDTIDNK-DhDUYE4b.js\"\r\ncontent-encoding: br\r\netag: \"0d95c7b76de7398234f93d6201b6706c\"\r\nlast-modified: Thu, 12 Feb 2026 16:45:31 GMT\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: cle1::lkbjt-1770927256313-b0d111c61138\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9275,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (9274)","md5":"baa5f0f7116deb709bd4b3a54c31eaff","sha1":"10c4efb11b9c1bcdd87aca0c0443f636c8d29b39","sha256":"63a8daf7039c537fe8d7ff88c50a6b8022e74f447d5df3ffcd6a515723252c33","sha512":"8d534b9541eb5d33576b4a5a2dbd28aadc57c01fc91ea3644bcfb13ad76470288c9ac8228a1fc8d6f30ca5873abb0c3b20136d5377bdb9923c3ff6665542b4bc","ssdeep":"192:dyAYirZ2ixxPjwzSFW5xrsRo3/58dmho4x7MV:EiN2Qjw+FWjARaidSpx7MV","tlshash":"261283ea5768627ed89bce6cdf668840130d70fd35b8c8e49a9ecf686057c89fd87010","first_seen":"2024-12-25T05:30:42.593071Z","last_seen":"2026-05-20T16:17:57.645038Z","times_seen":81,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us.i.posthog.com/i/v0/e/?ip=0\u0026_=1771032435597\u0026ver=1.332.0\u0026compression=gzip-js","fqdn":"us.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"34.199.45.253","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:27:15.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6A:93:A0:4B:D8:27:D0:2A:1E:35:71:6C:A2:1C:2A:2C:2E:E1:A7:D7","sha256":"2A:1F:69:7F:28:B0:DA:BD:59:C5:0F:27:B3:35:6D:E9:5B:8B:A2:4A:F8:89:F1:F0:10:CD:CD:8F:62:8E:07:E6"}}},"request":{"raw":"POST /i/v0/e/?ip=0\u0026_=1771032435597\u0026ver=1.332.0\u0026compression=gzip-js HTTP/1.1\r\nHost: us.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim.espresso.foundation/\r\ncontent-type: text/plain\r\nContent-Length: 1116\r\nOrigin: https://claim.espresso.foundation\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:27:15 GMT\r\ncontent-type: application/json\r\ncontent-length: 15\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: https://claim.espresso.foundation\r\naccess-control-allow-credentials: true\r\nx-envoy-upstream-service-time: 1\r\nserver: envoy\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c86a47ac0d792e37182689c73fcbf6ad","sha1":"8fd92e4671341e79f0a3529ac5e9d59d38db9e78","sha256":"0c40bafcfdc8adc6db63a6a5bfdb3dd5201798e6163fc674dc2fcbdb2a4134f1","sha512":"827cafe34edc64ac15f9bb3d269d338f8161a08d174071ed415b8a9e78d0672327e09034445292f90b81f5a063c8606d36ee66b20e0fff0446130303d598a8d3","ssdeep":"","tlshash":"1b600000000000030fc00c00000cc03c3ff30fc0003f00c0030fc0300c030c0c00c000","first_seen":"2023-04-06T21:35:05Z","last_seen":"2026-06-08T12:02:39.91061Z","times_seen":34815,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":98,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eligible-ethgas.com/settings.json","fqdn":"eligible-ethgas.com","domain":"eligible-ethgas.com","tld":"com"},"ip":{"addr":"172.67.198.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eligible-ethgas.com/","date":"2026-02-14T01:26:59.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eligible-ethgas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 03:51:42 GMT","end":"Wed, 22 Apr 2026 04:51:35 GMT"},"fingerprint":{"sha1":"C0:D5:DC:5F:FD:44:D3:71:4C:7F:51:87:BF:22:44:A2:41:75:9F:87","sha256":"88:C6:B7:F8:12:4F:45:10:CC:8D:7B:FC:94:D4:1C:F0:DE:CA:56:41:19:54:D0:9C:60:55:20:4B:8C:FB:3E:45"}}},"request":{"raw":"GET /settings.json HTTP/1.1\r\nHost: eligible-ethgas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eligible-ethgas.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 01:26:59 GMT\r\ncontent-type: application/json\r\ncast-mode: default\r\nlast-modified: Thu, 22 Jan 2026 04:40:58 GMT\r\netag: W/\"6971aa5a-351\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DsQ7m8yb8uplq5oY43WN67gtxK2HSiOUAzyVLD88O1C%2BdF600uhHrvoNBOmIDecqtr06cwX2yiwMCAj%2FzIxymqZZaqBtJN7ZNZ5y%2FtT0ng%2FFN3w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd8c7cdb93976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":849,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0edafa242f1339b9a891df5a4c30004d","sha1":"b320b528447ea4a19d07c7deba2ea3edfeb02dea","sha256":"37ea153ecb40aa932c3d34bc9f28c7b344ebf9f4972016d45ed603ad3388bfd3","sha512":"f4fadbc36c9129b0d0729032397855e52180821c4f36524bcc6948212a89d4e970bbf172403572ded86342f7cccab59b1da2615fa571a09da797992dd3b4bb12","ssdeep":"","tlshash":"b6011e45dc21486be2c90628b54e720809167d2742c43c406f1b9019af7e76b4f727cd","first_seen":"2025-12-31T12:33:59.897048Z","last_seen":"2026-02-14T01:27:34.021047Z","times_seen":5,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"eligible-ethgas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/portal-config.context-CMF-xdRd.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:26:58.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"6B:84:E2:F7:B0:5A:22:11:49:DC:F7:9B:A2:54:CE:36:02:5B:F4:F5","sha256":"EB:40:F6:36:FE:11:66:87:B7:F6:20:14:F5:EC:28:6B:5E:7F:78:A7:93:24:72:E2:3F:B6:F2:19:7C:BB:54:C9"}}},"request":{"raw":"GET /assets/portal-config.context-CMF-xdRd.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-W8lXAx1b.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:26:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 351\r\nserver: nginx/1.29.5\r\naccess-control-allow-origin: *\r\nage: 12814\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"portal-config.context-CMF-xdRd.js\"\r\netag: \"e3aebedff17583da4653f1a9fa85711e\"\r\nlast-modified: Thu, 12 Feb 2026 16:40:13 GMT\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: cle1::xl97r-1770927228692-69fba3490f7a\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":351,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (350)","md5":"e3aebedff17583da4653f1a9fa85711e","sha1":"eda59fae2e436695ea79edb0e83a77b9ce79b6eb","sha256":"0f45a30e055ac1c9f616ae57c71e9d80ca7a02011fada27eb21c67c800839fbd","sha512":"975be27fb649bf407705df47343c51c2247c548f1f2c62d174db07e0bca4fbeb95c32f88888fd50873430d1d7e92accbb4a58b9c083b958372cac8a4ece6a7f4","ssdeep":"","tlshash":"b2e0c09b6040f67277034cf528208534d333346a30258b70c11c855bbac00e2633f8e2","first_seen":"2026-02-12T20:37:44.944046Z","last_seen":"2026-02-17T15:15:31.649714Z","times_seen":4,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/en_US-762U7H2X-CbWPluA0.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:26:58.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"6B:84:E2:F7:B0:5A:22:11:49:DC:F7:9B:A2:54:CE:36:02:5B:F4:F5","sha256":"EB:40:F6:36:FE:11:66:87:B7:F6:20:14:F5:EC:28:6B:5E:7F:78:A7:93:24:72:E2:3F:B6:F2:19:7C:BB:54:C9"}}},"request":{"raw":"GET /assets/en_US-762U7H2X-CbWPluA0.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-W8lXAx1b.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:26:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 171566\r\nserver: nginx/1.29.5\r\naccess-control-allow-origin: *\r\nage: 12839\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"en_US-762U7H2X-CbWPluA0.js\"\r\ncontent-encoding: br\r\netag: \"55e38f01c5e078ae5d0bd28979122220\"\r\nlast-modified: Thu, 12 Feb 2026 16:40:14 GMT\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: cle1::74drs-1770927253658-b71131cb0883\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":562283,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (7497)","md5":"ba4d43bdbbfd3c753e169df3aa2b74e0","sha1":"94e71fd5d63ad5ddb110133a9d3ae80d445c87d8","sha256":"858aa2383e4722460ec5d7ad11046a3d57d3c6621d641dfb2a27f43ef531f80a","sha512":"b611693cf312754d097de63a7a810f7997c6c6897b188983ce507f1e04a28548f347531a396a807fecea167196d52da96b15d624f330d799e766fb43771b684b","ssdeep":"12288:wd/7EKwzWIKWTHoX2f+ozuNqxl+SNa45IVWdyq:WzEJzWIKYIXQ2qx8SR0q","tlshash":"82c46c44b2a0b565439740e914eb1000f1346e9db50c58a876ecd9be3fbaec885fbf6d","first_seen":"2026-02-12T20:37:44.89269Z","last_seen":"2026-02-14T01:27:34.022587Z","times_seen":2,"resource_available":true,"data":null}},"time_used":556,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":351,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/use-is-client.hook-Dbkd0djT.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:26:58.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"6B:84:E2:F7:B0:5A:22:11:49:DC:F7:9B:A2:54:CE:36:02:5B:F4:F5","sha256":"EB:40:F6:36:FE:11:66:87:B7:F6:20:14:F5:EC:28:6B:5E:7F:78:A7:93:24:72:E2:3F:B6:F2:19:7C:BB:54:C9"}}},"request":{"raw":"GET /assets/use-is-client.hook-Dbkd0djT.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-W8lXAx1b.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:26:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 141\r\nserver: nginx/1.29.5\r\naccess-control-allow-origin: *\r\nage: 12840\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"use-is-client.hook-Dbkd0djT.js\"\r\netag: \"391de8cdcd2af4de88351dd1d73e986a\"\r\nlast-modified: Thu, 12 Feb 2026 16:40:13 GMT\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: cle1::dlvx5-1770927253656-bcb7ec897246\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":141,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"391de8cdcd2af4de88351dd1d73e986a","sha1":"153d5f5716888fed5639274f54d354547ba1e868","sha256":"8171e7a9d58fe35766e9a6b00e4473415b36bfbc374a727c1eef52dedbc3541f","sha512":"c831734885d6e9a318bdde077004403d4732e3a8b423d0bee43f37bd708692488dbca71242f9a02e1fa310b1ee1c81e6c98fee1e174e2da1cdee0cd46adbe442","ssdeep":"","tlshash":"c0c02b551081acb0870008b452b7cdb0a43354dc22e52b90b42a4c0717050e38bafc27","first_seen":"2026-02-12T20:37:44.861545Z","last_seen":"2026-02-17T15:15:31.651273Z","times_seen":4,"resource_available":true,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"magna-public-assets-prod.s3.us-east-1.amazonaws.com/portal-assets/espresso/unicorn-animation.json","fqdn":"magna-public-assets-prod.s3.us-east-1.amazonaws.com","domain":"magna-public-assets-prod.s3.us-east-1.amazonaws.com","tld":"s3.us-east-1.amazonaws.com"},"ip":{"addr":"16.182.41.98","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:27:01.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 20 May 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:6E:24:DA:38:A4:1B:D7:08:C5:38:4D:E4:0F:23:5C:25:6C:07:22","sha256":"35:22:88:53:F8:1C:C9:41:3D:8C:59:1A:B2:A9:9D:DB:1E:0B:3D:51:8E:EC:0A:47:5C:FD:28:EF:42:DD:69:E6"}}},"request":{"raw":"GET /portal-assets/espresso/unicorn-animation.json HTTP/1.1\r\nHost: magna-public-assets-prod.s3.us-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim.espresso.foundation/\r\nOrigin: https://claim.espresso.foundation\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: nD+MfKGjusVktgCJpP4DBqN+5GXPq/9cvHn+yI4VrmdAHTpZ7sfqECdUh5DR2Ve2dUUlra/xM44=\r\nx-amz-request-id: XG9GZSRHVE8H5W4S\r\nDate: Sat, 14 Feb 2026 01:27:02 GMT\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, HEAD\r\nVary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-amz-replication-status: COMPLETED\r\nLast-Modified: Fri, 16 Jan 2026 10:57:15 GMT\r\nETag: \"2ea07af947a247d91ddb094057983718\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: yoEgpUTK0HwwaorqC_3lM4zQe4dn91Hn\r\nAccept-Ranges: bytes\r\nContent-Type: application/json\r\nContent-Length: 56423\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":56423,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2ea07af947a247d91ddb094057983718","sha1":"f09ec926559ecf8dd1d7b02e535108c095767f3f","sha256":"260d78304c9f29249b0a22d6ae969adc5229b7f31100cb9cd80cd0e6679436ce","sha512":"5019faf50bff8d5a8f6df76f1bede43f2842942a7aa55280582adb3856740a1b297023fe808265ae0c6456b31a539fd06b9f40caeccd4ec309453c8eb363d00e","ssdeep":"1536:El31c1NrzuK2drRbHZF6pDyzCnCFkCbCFyCbC5L7U7soa9:El31c1NvhorRbHVz0QkOQy0KL7U7st9","tlshash":"5f43c5b464dad1249f07ad5ddc130288e37e70f91844a6979e1ec881e0c735ce7baadb","first_seen":"2026-01-30T19:04:09.864004Z","last_seen":"2026-04-08T12:13:16.917948Z","times_seen":14,"resource_available":false,"data":null}},"time_used":767,"timings":{"blocked":272,"dns":36,"connect":93,"send":0,"wait":123,"receive":95,"ssl":145},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.unicorn.studio/images/hK13GObf5rZ2ZBOA1482Q9StWR73/coin.png","fqdn":"assets.unicorn.studio","domain":"unicorn.studio","tld":"studio"},"ip":{"addr":"34.120.54.136","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:27:01.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.unicorn.studio","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 01:15:17 GMT","end":"Sat, 11 Apr 2026 02:09:11 GMT"},"fingerprint":{"sha1":"DE:FB:B9:C7:64:66:73:ED:A0:17:64:C3:90:DC:C4:DA:51:F9:1E:8A","sha256":"1B:C6:C2:0F:6E:57:8E:65:50:70:81:13:33:ED:B6:62:DE:B7:E4:60:18:5C:4C:BC:E8:0B:86:F9:84:5D:74:88"}}},"request":{"raw":"GET /images/hK13GObf5rZ2ZBOA1482Q9StWR73/coin.png HTTP/1.1\r\nHost: assets.unicorn.studio\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://claim.espresso.foundation\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5UfXsgc9wuS2OBc23suex0PZJjSYOCB9nNSIkUkhp9JotNVMt4p7TfLoy7n_hQuq42LRolHR40\r\nx-goog-generation: 1762861129615574\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 76234\r\nx-goog-hash: crc32c=s/wkUw==, md5=VUPxydD/UXnXMiBrkbzzgw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 76234\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, Content-Type, Date, ETag, If-None-Match, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Sat, 14 Feb 2026 01:21:22 GMT\r\nage: 339\r\nlast-modified: Tue, 11 Nov 2025 11:38:49 GMT\r\netag: \"5543f1c9d0ff5179d732206b91bcf383\"\r\ncontent-type: image/png\r\ncache-control: public,max-age=3600\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":76234,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 404 x 408, 8-bit colormap, non-interlaced","md5":"5543f1c9d0ff5179d732206b91bcf383","sha1":"7405c218b26efc284452c6f39c8522148667c4e5","sha256":"5b0b5b3c7175810ea204b14934608e55218c4a9326bdfa23c4c8a1ff4038063b","sha512":"578b57a63cf1cc650711f5525b08259affa1d722374a1cdfdde8c1f7282f315d444be30e134c361e34cce6bedd57f52c4fbde79b70ce3839fcd76c04c29d0fa9","ssdeep":"1536:ub3pH4uPjKs/YvPbs2vYdmUqNcD+LZoQdi+iL:w3pH4uPjKs/kAnqNS+LZoAAL","tlshash":"107302a84b7f871a9400a786a5a688b6e999fc3711b05a3dfdc403787c1c3d0c376da8","first_seen":"2025-12-31T12:33:59.890405Z","last_seen":"2026-04-08T12:13:16.930494Z","times_seen":19,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":108,"dns":28,"connect":27,"send":0,"wait":26,"receive":50,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-assets.i.posthog.com/static/web-vitals.js?v=1.332.0","fqdn":"us-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"172.66.166.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:27:06.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 21:09:57 GMT","end":"Mon, 20 Apr 2026 22:09:56 GMT"},"fingerprint":{"sha1":"28:A9:79:25:3F:AF:B7:89:AC:9D:42:8A:C3:69:5B:4C:8E:6F:4C:77","sha256":"4D:63:13:FA:35:7E:FE:29:D4:53:E6:EF:2E:3B:8F:06:9D:32:9C:B5:EB:7E:3C:76:62:83:84:76:B4:C3:88:3C"}}},"request":{"raw":"GET /static/web-vitals.js?v=1.332.0 HTTP/1.1\r\nHost: us-assets.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://claim.espresso.foundation\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:27:06 GMT\r\ncontent-type: text/javascript; charset=\"utf-8\"\r\ncache-control: public, max-age=300\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nlast-modified: Fri, 13 Feb 2026 23:12:07 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-opener-policy: same-origin\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\netag: \"698fafc7-19c7\"\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9cd8c7f79dee120a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6599,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6559)","md5":"aa1e3521e57a40ad394b049fa7ff3bc5","sha1":"ec88012f680be684d8d430c5efd61fc29b658374","sha256":"b17014672e5f28d0dc0cad40ee4d09feb6a1201dadb3932b1f3073a8e4f387d6","sha512":"729c7ed37f0f321fd1c588aab554f289ff37fce9a3cb7dfa78cb8f47db8cbacb69eb0660ea2e245a540dca857f4cf277f67f53c7d789609006e56799ce3ad282","ssdeep":"96:tzI8C48z+TJzq4L88kTAFKb5rbCKHDuqqUtl0AcJ4c0jU4mzWuCD/ZDZkRlulDsd:VC4F4Sk8FKvae0f4TcWuEZDyCSXEdij","tlshash":"eed1d9f59f41e53921bae2b6d47a514333396386a409409ce23eefd0146d4c6739bb32","first_seen":"2026-01-29T18:42:31.973098Z","last_seen":"2026-05-30T16:55:13.565573Z","times_seen":3485,"resource_available":true,"data":null}},"time_used":341,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":341,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us.i.posthog.com/flags/?v=2\u0026config=true\u0026ip=0\u0026_=1771032421211\u0026ver=1.332.0\u0026compression=base64","fqdn":"us.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"34.199.45.253","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:27:01.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6A:93:A0:4B:D8:27:D0:2A:1E:35:71:6C:A2:1C:2A:2C:2E:E1:A7:D7","sha256":"2A:1F:69:7F:28:B0:DA:BD:59:C5:0F:27:B3:35:6D:E9:5B:8B:A2:4A:F8:89:F1:F0:10:CD:CD:8F:62:8E:07:E6"}}},"request":{"raw":"POST /flags/?v=2\u0026config=true\u0026ip=0\u0026_=1771032421211\u0026ver=1.332.0\u0026compression=base64 HTTP/1.1\r\nHost: us.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim.espresso.foundation/\r\ncontent-type: application/x-www-form-urlencoded\r\nContent-Length: 269\r\nOrigin: https://claim.espresso.foundation\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":269,"data":"data=eyJ0b2tlbiI6InBoY185Q2c0MXdOQklYTkJueHl2enNEOUFDNlVUNUtTak5qVFI0U1NuajR1SDQiLCJkaXN0aW5jdF9pZCI6IjAxOWM1OWMyLTIzNTgtNzM4Zi1iYjdiLTY1MjMxNzVlZjA2MiIsImdyb3VwcyI6e30sInBlcnNvbl9wcm9wZXJ0aWVzIjp7fSwiJGRldmljZV9pZCI6IjAxOWM1OWMyLTIzNTgtNzM4Zi1iYjdiLTY1MjMxNzVlZjA2MiJ9"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:27:02 GMT\r\ncontent-type: application/json\r\nvary: origin, access-control-request-method, access-control-request-headers, Accept-Encoding\r\naccess-control-allow-origin: https://claim.espresso.foundation\r\naccess-control-allow-credentials: true\r\nx-envoy-upstream-service-time: 31\r\ncontent-encoding: gzip\r\nserver: envoy\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":743,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"812ad8f476fd0aaf405e5a0b75b71a6e","sha1":"2b4203b0a6b1fc37d840d9d5d99d914c747cfb0c","sha256":"a5cdd3a12e85b101a527bf061c70f37099a9d7779b75d25d7027c3f73d06eb58","sha512":"95d29b0d5ff08db63e33feb54e02356fe5c82c2481d3719087877e7025da51be9b90489874ff455d75a9c2541653fea7515d2c5312eaf99abff5d4ce5cc6d34b","ssdeep":"","tlshash":"37011b3eb460097cc8098316a9f269069fff403b32647c9ce6a8418271da0de5aa7e07","first_seen":"2026-02-14T01:27:34.026381Z","last_seen":"2026-02-14T01:27:34.026381Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1558,"timings":{"blocked":713,"dns":52,"connect":93,"send":0,"wait":126,"receive":0,"ssl":570},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/rainbowWallet-2SR6TVBF-kimcGeuf.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:27:01.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"6B:84:E2:F7:B0:5A:22:11:49:DC:F7:9B:A2:54:CE:36:02:5B:F4:F5","sha256":"EB:40:F6:36:FE:11:66:87:B7:F6:20:14:F5:EC:28:6B:5E:7F:78:A7:93:24:72:E2:3F:B6:F2:19:7C:BB:54:C9"}}},"request":{"raw":"GET /assets/rainbowWallet-2SR6TVBF-kimcGeuf.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-8mEX-aQm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:27:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 900\r\nserver: nginx/1.29.5\r\naccess-control-allow-origin: *\r\nage: 11929\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"rainbowWallet-2SR6TVBF-kimcGeuf.js\"\r\ncontent-encoding: br\r\netag: \"1dfeaa46d390c3e839db0407f735db86\"\r\nlast-modified: Thu, 12 Feb 2026 16:55:27 GMT\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: cle1::5t4jk-1770927256307-b009dff09248\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3646,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3645)","md5":"8a0e974aa17cd852cfd0a349aa6cde2a","sha1":"3e83142c11e9b7a57432123b72457ff579f8bcb8","sha256":"0813cf58d2da41c33e74c0fb7e5a9671020dc397611becaacd42e1f6ae5b30a4","sha512":"28eac8d72b65f6e1cd4f0ac75cfe58a515be407e04b12aea7a90a8056018133d9f4de319843eb5238f465a23d817971dbd945e4fdbfc59fca26b823efd59a601","ssdeep":"","tlshash":"c071ca958a3dac3be52dc18cee411420710daabfdc894a5272639fef9d784c6ac4c660","first_seen":"2024-12-25T05:30:42.549882Z","last_seen":"2026-05-17T17:52:49.736369Z","times_seen":59,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/x.icon-CbqT8MzM.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:26:58.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"6B:84:E2:F7:B0:5A:22:11:49:DC:F7:9B:A2:54:CE:36:02:5B:F4:F5","sha256":"EB:40:F6:36:FE:11:66:87:B7:F6:20:14:F5:EC:28:6B:5E:7F:78:A7:93:24:72:E2:3F:B6:F2:19:7C:BB:54:C9"}}},"request":{"raw":"GET /assets/x.icon-CbqT8MzM.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-W8lXAx1b.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:26:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 458\r\nserver: nginx/1.29.5\r\naccess-control-allow-origin: *\r\nage: 12203\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"x.icon-CbqT8MzM.js\"\r\netag: \"fb42e57ffea46e58aa4fb5ee7a0cef6a\"\r\nlast-modified: Thu, 12 Feb 2026 16:50:16 GMT\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: cle1::gjxqb-1770927220499-6329d4f8a5d7\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":458,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (457)","md5":"fb42e57ffea46e58aa4fb5ee7a0cef6a","sha1":"d70f95c5c596f2d7effecf7d91c026791f67880b","sha256":"e1f7a5c79ba590e07a72f3a5a1f220105553c2da2f97a31752ddf49e59d536e8","sha512":"1adb08cdfda523b90b2287caaeda482c961eb725d83342e0f20701507a655663ce9665c6e9c2a7bd1e569f3997950ee4ad441be86af502c621fec54e1ea10c84","ssdeep":"","tlshash":"54f097ff83c0609448591f7a79b22c252077b5f893a405a0c94449919d290f2b31ee82","first_seen":"2026-02-12T20:37:44.870545Z","last_seen":"2026-02-17T15:15:31.659695Z","times_seen":4,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/background-music.context-CyxtzD9I.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:26:58.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"6B:84:E2:F7:B0:5A:22:11:49:DC:F7:9B:A2:54:CE:36:02:5B:F4:F5","sha256":"EB:40:F6:36:FE:11:66:87:B7:F6:20:14:F5:EC:28:6B:5E:7F:78:A7:93:24:72:E2:3F:B6:F2:19:7C:BB:54:C9"}}},"request":{"raw":"GET /assets/background-music.context-CyxtzD9I.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-W8lXAx1b.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:26:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 927\r\nserver: nginx/1.29.5\r\naccess-control-allow-origin: *\r\nage: 12512\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"background-music.context-CyxtzD9I.js\"\r\netag: \"dd8962f02570fab22e3a42bcca1bd186\"\r\nlast-modified: Thu, 12 Feb 2026 16:45:19 GMT\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: cle1::nh2f7-1770927232416-f0e13cfba097\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":927,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (926)","md5":"dd8962f02570fab22e3a42bcca1bd186","sha1":"5b97d297afafc3fc4bb310d1df2ace70e1c55a15","sha256":"8463f455837cb03dee7ccdc05ac924afb6330a5d1c0927c55498bcba4b024ac7","sha512":"e4a9b80a701e74bf2fd7d6d6fbb8561d438203199b3a6b503e1fce4398ff1d80aa84ac7047df0e4102c79f9e40fb42e54ba08097c88a581bd4e2b8be4a6bf52e","ssdeep":"","tlshash":"d111dcb7a8a4907afb8e09a809a1907937333b54304a40f1e13c94ab45d2582e67b7d9","first_seen":"2026-02-12T20:37:44.875304Z","last_seen":"2026-02-17T15:15:31.642906Z","times_seen":4,"resource_available":true,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/warning.icon-DZMR3VcF.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:26:58.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"6B:84:E2:F7:B0:5A:22:11:49:DC:F7:9B:A2:54:CE:36:02:5B:F4:F5","sha256":"EB:40:F6:36:FE:11:66:87:B7:F6:20:14:F5:EC:28:6B:5E:7F:78:A7:93:24:72:E2:3F:B6:F2:19:7C:BB:54:C9"}}},"request":{"raw":"GET /assets/warning.icon-DZMR3VcF.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/home.page-Ct3tf3tM.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:26:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 655\r\nserver: nginx/1.29.5\r\naccess-control-allow-origin: *\r\nage: 12232\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"warning.icon-DZMR3VcF.js\"\r\netag: \"35d0183119e310f97da036fc8d8c531f\"\r\nlast-modified: Thu, 12 Feb 2026 16:50:22 GMT\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: cle1::p22r9-1770927254995-db29d5775b12\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":655,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (654)","md5":"35d0183119e310f97da036fc8d8c531f","sha1":"0f26d787dae1ac05c33174884d6288fe2b486f9e","sha256":"4ba7eab091a2f52849ef6820a64f8141bf491465cd22f2b45fa495edd19ff74e","sha512":"1945bbdc8bc075a6e1fe00fff2cd2217bd0431c9eb485a5a0b5f591a397c1493ee36f86301415502c9046d4bb7b539ea6efc3b75cc7cf33bbf0ca2ede0446d12","ssdeep":"","tlshash":"4ef0fe67e3b428b87505cea8b38f7936317760e4b3014641a35e680513600c5b46d992","first_seen":"2026-02-12T20:37:44.938743Z","last_seen":"2026-02-17T15:15:31.673806Z","times_seen":4,"resource_available":true,"data":null}},"time_used":377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":375,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eligible-ethgas.com/","date":"2026-02-14T01:26:59.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eligible-ethgas.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Feb 2026 01:26:59 GMT\r\ndate: Sat, 14 Feb 2026 01:26:59 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4887,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3fd96ba77783845730c343cf00ac7a93","sha1":"bc4f7f4f71aeae387232155c55c4f031c5f3f769","sha256":"27b95b2fcbc857ba25f7e5a707c5c4c06c5cf93415519b7669c19f4045edca37","sha512":"20b137cf9c61842c7bad62dd6c36125833022552379ad97324dbee2c2e9cb0303b17a9aee813ea2bcdbb68541c8c6edbfecfcfb2858cf27c2cff480d756d80cd","ssdeep":"96:aYg4aMzqYg4aybFZHYg4agkYg4aUJ3vYg4aERYg4aYGJc+uTYg4aR6NDO4a3qO4L:vywfydyGy63gy/yFVyR73xpmj3U8fHN","tlshash":"37a1ed91006f9104ea431dd627cf7e32ad8e51956082e27d6ffd2dca6cdbd23122874c","first_seen":"2025-09-10T21:50:06.177565Z","last_seen":"2026-06-08T12:18:11.471207Z","times_seen":16457,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":55,"dns":1,"connect":7,"send":0,"wait":22,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fumbling-pill.click/api/ping","fqdn":"fumbling-pill.click","domain":"fumbling-pill.click","tld":"click"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eligible-ethgas.com/","date":"2026-02-14T01:26:59.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fumbling-pill.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 16 Jan 2026 21:09:01 GMT","end":"Thu, 16 Apr 2026 22:07:44 GMT"},"fingerprint":{"sha1":"10:4C:C8:56:AD:32:70:5F:53:E2:0B:1A:90:78:05:37:E0:30:15:50","sha256":"E0:0D:BE:05:A5:2B:6D:65:24:F1:7D:AB:FB:6E:9A:3E:C5:CA:05:3E:14:40:36:58:C3:83:D7:6A:98:17:17:2F"}}},"request":{"raw":"GET /api/ping HTTP/1.1\r\nHost: fumbling-pill.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eligible-ethgas.com/\r\nOrigin: https://eligible-ethgas.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:27:00 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c4CpK4myllJKjnUQVdCPuuTqyxrlVwFsgYDkmit4PwVLNcNliFZeAnP%2FdW%2B1%2F4V4zD9BFZrb2gaSH6I2tYInJS1xoGXPMJR9C3KsfA6uX3kg5aw%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cd8c7d16a0e32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"594d96ea0628a6a87187b8e17a7fa4b0","sha1":"5fbf4e5362196240e62d4e192bd93777898755b2","sha256":"cb100e693b55b36a08dc2b04eb312835069a4f2fc406ff374b21313b1f56b5cd","sha512":"c92fac11849dbd07dd610982d2d2e49f7aa59ec6048782145992bed639b1a518c539d9603bea6b79e4f29aa745e301923edaa9d96e1dec3ce27a8a2f4c2f2f4c","ssdeep":"","tlshash":"d96000330c0c0330030c0cc0300fcf030cc0c0c00000fcc000000300c300c000c00300","first_seen":"2025-10-03T14:25:47.505502Z","last_seen":"2026-06-07T04:19:09.845807Z","times_seen":796,"resource_available":false,"data":null}},"time_used":955,"timings":{"blocked":101,"dns":80,"connect":1,"send":0,"wait":753,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"magna-public-assets-prod.s3.amazonaws.com/portal-assets/espresso/logo.svg","fqdn":"magna-public-assets-prod.s3.amazonaws.com","domain":"magna-public-assets-prod.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.217.140.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:26:58.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 19 Sep 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:FD:CD:50:85:6A:51:E7:71:E4:CB:E0:03:81:E1:EC:4E:AD:9E:C7","sha256":"D7:11:81:F4:91:03:0D:C6:A5:DE:8A:EF:AA:58:14:BA:AD:33:B5:11:8B:D5:F0:33:53:8B:AF:49:82:E9:4B:A4"}}},"request":{"raw":"GET /portal-assets/espresso/logo.svg HTTP/1.1\r\nHost: magna-public-assets-prod.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: EAL6lqOS884Ll8w68ryIzK3pvuQ2CCIqo7P5An51LsYr3O0qJ5y4wSq87VXIoufTsgZGVpzGjs4=\r\nx-amz-request-id: AW05A9MZZ12JBBGM\r\nDate: Sat, 14 Feb 2026 01:26:59 GMT\r\nx-amz-replication-status: COMPLETED\r\nLast-Modified: Wed, 12 Nov 2025 16:32:20 GMT\r\nETag: \"e7d57d12734f150bf16762985f60e68f\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: TqihulMH7zzidS_xLcOiP5lydJnvVth2\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 10123\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":10123,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e7d57d12734f150bf16762985f60e68f","sha1":"8b9e922d3d6cb0e595f06f9be854993143e08c39","sha256":"fff37441b6ebebe425ac73d7370e23f99ef080363dde784aed0d5ab0d2f6d67e","sha512":"c3e6515d8895a288314112f2e450bbac693526a28f7bd3aaeb993e2cb6c387e15b6ae1a666e4c91db478c84ae041786c517745a1f58a7bbf618ddcc14661660c","ssdeep":"192:8+g/3Z39WicEGuje62Ar97zpAa2OiVv4218mT5Uq/ww1y:ng/3xQieuD2AZBAPPy2FTfBy","tlshash":"0d2296da6be8f3f1d506f3e2c65a4078ba2b70f56d66cb18cba52d55aa1045fc884cc0","first_seen":"2025-12-28T18:47:24.370223Z","last_seen":"2026-04-08T12:13:16.923463Z","times_seen":27,"resource_available":false,"data":null}},"time_used":667,"timings":{"blocked":274,"dns":50,"connect":93,"send":0,"wait":118,"receive":1,"ssl":129},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eligible-ethgas.com/favicon.svg","fqdn":"eligible-ethgas.com","domain":"eligible-ethgas.com","tld":"com"},"ip":{"addr":"172.67.198.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eligible-ethgas.com/","date":"2026-02-14T01:26:59.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eligible-ethgas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 03:51:42 GMT","end":"Wed, 22 Apr 2026 04:51:35 GMT"},"fingerprint":{"sha1":"C0:D5:DC:5F:FD:44:D3:71:4C:7F:51:87:BF:22:44:A2:41:75:9F:87","sha256":"88:C6:B7:F8:12:4F:45:10:CC:8D:7B:FC:94:D4:1C:F0:DE:CA:56:41:19:54:D0:9C:60:55:20:4B:8C:FB:3E:45"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: eligible-ethgas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eligible-ethgas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 01:26:59 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=6,i=?0\r\ncast-mode: default\r\nlast-modified: Thu, 22 Jan 2026 04:40:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"6971aa5a-a64\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xyKTdynfKbHt6F5WFjqrWjiCrsBMWyfipBg5C%2F8cY4AgvEWQHmhrdnd3MTyiMmQScViS1i6TWOvpBLgxZOKQp5BLgtpvX3IvJEhRsBzLvxe%2FU%2Bw%3D\"}]}\r\ncf-ray: 9cd8c7cac88f76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2660,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0e5690d3b329d727d3beebed48d6c2d8","sha1":"46b9b822697390227617c5ae61b21db0bd9674cd","sha256":"99b5446fdb0675412588659f6eacf34bd66b95ddb4d340801d98d6b8f297a149","sha512":"bd902ea28f21257e5cecaf6d06b6a2585b0b937a8815b357b170f618e575343710c9a741c267176410640221cead59ad991db5e9e32b0ae74245618a29eea20e","ssdeep":"","tlshash":"3451ffdc361cd1854a5c6bcb9f5aa0791c26e1e0de8e8509ea442e1f38c5c6f6c393c5","first_seen":"2025-12-28T18:47:24.367929Z","last_seen":"2026-04-08T12:13:16.913402Z","times_seen":28,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"eligible-ethgas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/wei-D7GVSARS.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:26:58.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"6B:84:E2:F7:B0:5A:22:11:49:DC:F7:9B:A2:54:CE:36:02:5B:F4:F5","sha256":"EB:40:F6:36:FE:11:66:87:B7:F6:20:14:F5:EC:28:6B:5E:7F:78:A7:93:24:72:E2:3F:B6:F2:19:7C:BB:54:C9"}}},"request":{"raw":"GET /assets/wei-D7GVSARS.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-W8lXAx1b.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:26:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 13403\r\nserver: nginx/1.29.5\r\naccess-control-allow-origin: *\r\nage: 12838\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"wei-D7GVSARS.js\"\r\ncontent-encoding: br\r\netag: \"063813b91180e72006809d6678fa561b\"\r\nlast-modified: Thu, 12 Feb 2026 16:40:15 GMT\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: cle1::gh4ll-1770927253904-c6b8d28a1e5b\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":32145,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (32144)","md5":"e065176194127ef3104fbc14e1bd3b00","sha1":"039b4c635defe3279321deab3fb61f072e7d065f","sha256":"c3902c83d4f8bc61033b89f57529565f14d42ea0f041b9fdb5b9d0fe5c9475f4","sha512":"1d9acde4385221d0bd76124b774e59d581c7a9e8eaa324a63bc40d745f745db6ffb406267281105ecb9904d77d0e98a3b2ecf72ac19019f2515952270c534c36","ssdeep":"768:c694VJ5YH/os7Dwz5yuLKkyp0rxY5T0ztsZ:c69cXQos7UEuzi0Gku","tlshash":"1fe2c5e972a2f18663e734f201fb9446f13a7d44990d05b5f2088af53cb1686b32af75","first_seen":"2026-02-12T20:37:44.896165Z","last_seen":"2026-04-08T12:13:16.924687Z","times_seen":6,"resource_available":true,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":391,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/fonts/pp-neue-montreal/font.css","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:26:58.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"6B:84:E2:F7:B0:5A:22:11:49:DC:F7:9B:A2:54:CE:36:02:5B:F4:F5","sha256":"EB:40:F6:36:FE:11:66:87:B7:F6:20:14:F5:EC:28:6B:5E:7F:78:A7:93:24:72:E2:3F:B6:F2:19:7C:BB:54:C9"}}},"request":{"raw":"GET /fonts/pp-neue-montreal/font.css HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:26:58 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 400\r\nserver: nginx/1.29.5\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 21729\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"font.css\"\r\netag: \"a6a6e32dbe741d171e83cee23cf2248a\"\r\nlast-modified: Fri, 13 Feb 2026 19:24:48 GMT\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: cle1::nq5q9-1771032418581-742e406adfda\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":400,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a6a6e32dbe741d171e83cee23cf2248a","sha1":"b89b8228695b1b63c2abdb052b48dbbbd19a2528","sha256":"91fafc1905bf8c2ed7d8d91ee2c57deea7a7f886c4b8d9f1a6544f7fd9c08589","sha512":"39e9abd765670064d807e614cfa029e1b368beaa357afb935f88837d838c5bee37cfcd3285731fe84c825282bda9ac5a93c14238e28e6d4ea1f47e463382717f","ssdeep":"","tlshash":"d4e0228008aaa600d2290c46b38f8f272d1d48062002c4ae5b7b78489de38b173c0b0f","first_seen":"2025-12-31T12:33:59.892068Z","last_seen":"2026-02-17T15:15:31.670744Z","times_seen":16,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Press+Start+2P\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eligible-ethgas.com/","date":"2026-02-14T01:26:59.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Press+Start+2P\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eligible-ethgas.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Feb 2026 01:26:59 GMT\r\ndate: Sat, 14 Feb 2026 01:26:59 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1860,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"b7cad844ac5ba76f2eaa0a5f19927973","sha1":"0f619ace2a91abd4ba25e81b02b34e50708501aa","sha256":"c432858c887f02896894b1e44507b18fa1d22287d3bac0c1da9883849c63a118","sha512":"1056d64979f32cc0013a2564c64a6142439088d81b298c3da42cbd73ac308a5e0622cb5fee52c560d6e993e35eaaaea05d10226b42c65379b22a5c4252d1e632","ssdeep":"","tlshash":"043167e6052b94409b931cd373cf7e36de0e2125649184699efe1c84acbaca60391b5e","first_seen":"2025-09-17T02:54:26.564123Z","last_seen":"2026-06-08T11:48:26.606794Z","times_seen":1304,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":54,"dns":0,"connect":9,"send":0,"wait":20,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"public-bsc.nownodes.io/","fqdn":"public-bsc.nownodes.io","domain":"nownodes.io","tld":"io"},"ip":{"addr":"172.66.145.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eligible-ethgas.com/","date":"2026-02-14T01:26:59.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nownodes.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 23:24:15 GMT","end":"Sun, 12 Apr 2026 00:24:07 GMT"},"fingerprint":{"sha1":"EC:BA:9B:AB:CB:AC:F0:50:15:55:17:89:D4:5F:52:04:A6:2E:C8:1F","sha256":"43:C6:97:66:EC:F0:C7:EB:3D:64:36:C1:2D:53:6A:54:A0:BC:D0:0A:21:A3:CD:D9:75:A0:F7:5E:15:04:A5:18"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: public-bsc.nownodes.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eligible-ethgas.com/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://eligible-ethgas.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x6981E9EA7023a8407E4B08ad97f186A5CBDaFCf5\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:26:59 GMT\r\ncontent-type: application/json\r\ncontent-length: 199\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: Origin, accept-encoding\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9cd8c7d02f7c8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":871,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"78698c296273102ae6fe1630b8906d1b","sha1":"d13d210467a803af90cdb290724836e4af265187","sha256":"87a8e967afd6fc9433921ca31606f2651e1a331f1402e53ef1acf0e1c4ace23b","sha512":"65137da9fa20348c174fef8c581f26a1bf6b19ac61b8379c3c73de9fdb38b48cef9d42446faaf3f47e7a87862692fea389fb3d719357c2ff34b650e978e428c6","ssdeep":"","tlshash":"a5118cf005abaea0d0f5c8c9a2887a4b22133e43c8d02e428e0c8dc820cc8427235713","first_seen":"2026-02-12T20:37:44.918011Z","last_seen":"2026-03-07T01:27:40.951425Z","times_seen":9,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"public-bsc.nownodes.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/entry.client-Bv3K-XV0.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:27:00.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"6B:84:E2:F7:B0:5A:22:11:49:DC:F7:9B:A2:54:CE:36:02:5B:F4:F5","sha256":"EB:40:F6:36:FE:11:66:87:B7:F6:20:14:F5:EC:28:6B:5E:7F:78:A7:93:24:72:E2:3F:B6:F2:19:7C:BB:54:C9"}}},"request":{"raw":"GET /assets/entry.client-Bv3K-XV0.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:27:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 61663\r\nserver: nginx/1.29.5\r\naccess-control-allow-origin: *\r\nage: 12213\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"entry.client-Bv3K-XV0.js\"\r\ncontent-encoding: br\r\netag: \"baf1bf48e1c3a489fb883ab60696dc5e\"\r\nlast-modified: Thu, 12 Feb 2026 16:50:14 GMT\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: cle1::qrtfq-1770927228013-91c55fba372c\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":189577,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (54963)","md5":"ea90ebb2c0a9bda9658b8eb254b09e09","sha1":"4bc2cae557e90d63d4bfd15d5d90452b0e57ca60","sha256":"0140eab84177fcb22e827368c499794ece7e7d21204b44971d2e9c51c3a46e49","sha512":"5ed8fc3903da8c1454b9357681cc9d830e0ba865ba32ef0b8ab55d53b0db2f88210231e0a3eac15710f4cc8de6edbafae2bbfa6bebba8dd6ad4c9bacae7d826c","ssdeep":"3072:XO8GfDyHDZubrIrn6BEnaE2CmfnoSA016Un/m:evL4VunIz64eoSvL/m","tlshash":"10041bec32bea7566eb245e6109f1503727c28236c0c4c70a151fe9d66b844a51fbfee","first_seen":"2026-02-12T20:37:44.912773Z","last_seen":"2026-02-17T15:15:31.640008Z","times_seen":4,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":107,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/phantomWallet-IPGVKCAB-BGoqRxdn.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:27:01.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"6B:84:E2:F7:B0:5A:22:11:49:DC:F7:9B:A2:54:CE:36:02:5B:F4:F5","sha256":"EB:40:F6:36:FE:11:66:87:B7:F6:20:14:F5:EC:28:6B:5E:7F:78:A7:93:24:72:E2:3F:B6:F2:19:7C:BB:54:C9"}}},"request":{"raw":"GET /assets/phantomWallet-IPGVKCAB-BGoqRxdn.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-8mEX-aQm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:27:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 919\r\nserver: nginx/1.29.5\r\naccess-control-allow-origin: *\r\nage: 12529\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"phantomWallet-IPGVKCAB-BGoqRxdn.js\"\r\netag: \"d8d3e122c71dad3b911494fe2c10c5f8\"\r\nlast-modified: Thu, 12 Feb 2026 16:45:26 GMT\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: cle1::t4h2w-1770927256307-c49d98e14a24\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":919,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (918)","md5":"d8d3e122c71dad3b911494fe2c10c5f8","sha1":"1b78a2cd20efa5bf8974c3f1d828585a4dec9961","sha256":"074e942e3627e6929f68a9f298e84f7ca26788c12c1dfc6caf7dc90473303910","sha512":"cf37e331c970b63ce5d64b41b174e697175c73e2d942534a7b77daac130ca72233a08809240204283a3bf66bc52c73846ed55ba5add6302341688d4714158d22","ssdeep":"","tlshash":"e411dcd20f3080e50e9aae39ad3878e416b171af737826841349cf34ea83dc74508a50","first_seen":"2025-05-30T14:20:20.549969Z","last_seen":"2026-04-17T09:09:52.493057Z","times_seen":22,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/assets-NU2OP443-COMs-Mo6.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:27:01.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"6B:84:E2:F7:B0:5A:22:11:49:DC:F7:9B:A2:54:CE:36:02:5B:F4:F5","sha256":"EB:40:F6:36:FE:11:66:87:B7:F6:20:14:F5:EC:28:6B:5E:7F:78:A7:93:24:72:E2:3F:B6:F2:19:7C:BB:54:C9"}}},"request":{"raw":"GET /assets/assets-NU2OP443-COMs-Mo6.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/en_US-762U7H2X-CbWPluA0.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:27:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3960\r\nserver: nginx/1.29.5\r\naccess-control-allow-origin: *\r\nage: 12525\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"assets-NU2OP443-COMs-Mo6.js\"\r\ncontent-encoding: br\r\netag: \"34655b758c0c687593438afead60111e\"\r\nlast-modified: Thu, 12 Feb 2026 16:45:30 GMT\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: cle1::688sg-1770927256312-5d09c4c409f8\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":17965,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (17964)","md5":"33ae24799663e13f83cee5987fa8f728","sha1":"2309fcbf480ac447c060a427f2a6cd24974dfa30","sha256":"aac5c0d81b97b3892fafba21cdf014c77be385f12d7b1f525dc3f79d0cb2ede5","sha512":"f576ef24f5393cb38276b01c0aaa4d41c56a04d9bd0b82c8e04202949fe343407f12514560fe743af27fbff37a401bcff5c38a25ed66cecdd581c265ab9ad58d","ssdeep":"384:LOr2OrPR1YS2qj0FNwZe7QnBZ4pFSMLYp9uVEK:LOCO11D2qYzdyzK","tlshash":"2c82fd9b8728d94e6e6b8ff8ffdcb4d9332c30e5222e04d4115e616291a359feb41d81","first_seen":"2024-12-25T05:30:42.584192Z","last_seen":"2026-05-20T16:17:57.627438Z","times_seen":81,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-assets.i.posthog.com/static/dead-clicks-autocapture.js?v=1.332.0","fqdn":"us-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"172.66.166.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:27:06.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 21:09:57 GMT","end":"Mon, 20 Apr 2026 22:09:56 GMT"},"fingerprint":{"sha1":"28:A9:79:25:3F:AF:B7:89:AC:9D:42:8A:C3:69:5B:4C:8E:6F:4C:77","sha256":"4D:63:13:FA:35:7E:FE:29:D4:53:E6:EF:2E:3B:8F:06:9D:32:9C:B5:EB:7E:3C:76:62:83:84:76:B4:C3:88:3C"}}},"request":{"raw":"GET /static/dead-clicks-autocapture.js?v=1.332.0 HTTP/1.1\r\nHost: us-assets.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://claim.espresso.foundation\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:27:06 GMT\r\ncontent-type: text/javascript; charset=\"utf-8\"\r\ncache-control: public, max-age=14400\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nlast-modified: Fri, 13 Feb 2026 23:12:07 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-opener-policy: same-origin\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\netag: \"698fafc7-3303\"\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9cd8c7f78dc7120a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":13059,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13006)","md5":"cc981e3687edce8a3d22380972ee45e3","sha1":"1955fa562b42c9f134b62e7ac0e9c11bbfa4da75","sha256":"a40d91c2014cca52defeb2481998498f02fc53526fd05302df0e0e490173814a","sha512":"2dc021b1b3ef375290f2d59d97ccc6bd6306aa4af2791c6cc29a129b50acc89a0566e5b27074037312082f55966c0bda2d77ab2ace32ad4a2154d08176e1c2c1","ssdeep":"384:sw+VM/tkSeCRi2WzHiAOjCQBgxjOJWgikn26FT:n+D9QeOMgM6FT","tlshash":"69420a88b7d0f3b12bd7145ac4bf1702f03525082556c824b159ecdab4adb1622bbe7f","first_seen":"2026-01-12T11:07:28.642714Z","last_seen":"2026-05-30T16:55:13.558939Z","times_seen":5172,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eligible-ethgas.com/assets/eleven.js","fqdn":"eligible-ethgas.com","domain":"eligible-ethgas.com","tld":"com"},"ip":{"addr":"172.67.198.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eligible-ethgas.com/","date":"2026-02-14T01:26:57.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eligible-ethgas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 03:51:42 GMT","end":"Wed, 22 Apr 2026 04:51:35 GMT"},"fingerprint":{"sha1":"C0:D5:DC:5F:FD:44:D3:71:4C:7F:51:87:BF:22:44:A2:41:75:9F:87","sha256":"88:C6:B7:F8:12:4F:45:10:CC:8D:7B:FC:94:D4:1C:F0:DE:CA:56:41:19:54:D0:9C:60:55:20:4B:8C:FB:3E:45"}}},"request":{"raw":"GET /assets/eleven.js HTTP/1.1\r\nHost: eligible-ethgas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eligible-ethgas.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 01:26:58 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Thu, 22 Jan 2026 04:40:58 GMT\r\netag: W/\"6971aa5a-36433e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AWZhyHiWbYtEQHNZI8ruuUYtxw4xFp4VCBl6F3PaLAJitF6cfudj4nMy1iwUR8COYMdKv91O6HzOdrEeNpUM%2BicNPcTDkt2WZIkNRSE184cnjWI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd8c7c39f9076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3556158,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"e60d780300a74c70dc6418ea19873295","sha1":"74001d33824730e25d3d840e0c642f9f986015d7","sha256":"dcb99cd44bfd05f2cfc3c04527f35accfdd3df490666015cbafc125c4b368250","sha512":"617f21408d485ed842373a7c935208431b033f279973a23752599f44a0f4b4f1b125068a3ad244650a5c24d9859d2b9702998c1d415b43eb801bfd6d9b5b2ade","ssdeep":"24576:dmNHxkmMEWI2xMrvZKhch+k+ub6BqyxRz:dmNHKmME32xohKhcoGGBqyLz","tlshash":"a1254c9073a5b06243da14e4187b1006f279bc68744d80acf69cecfb7da9d84963bf79","first_seen":"2025-12-02T13:22:34.735267Z","last_seen":"2026-06-04T04:08:18.205676Z","times_seen":514,"resource_available":false,"data":null}},"time_used":546,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":268,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"eligible-ethgas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/use-on-connect.hook-B9Vb195z.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:26:58.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"6B:84:E2:F7:B0:5A:22:11:49:DC:F7:9B:A2:54:CE:36:02:5B:F4:F5","sha256":"EB:40:F6:36:FE:11:66:87:B7:F6:20:14:F5:EC:28:6B:5E:7F:78:A7:93:24:72:E2:3F:B6:F2:19:7C:BB:54:C9"}}},"request":{"raw":"GET /assets/use-on-connect.hook-B9Vb195z.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/home.page-Ct3tf3tM.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:26:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 654\r\nserver: nginx/1.29.5\r\naccess-control-allow-origin: *\r\nage: 12836\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"use-on-connect.hook-B9Vb195z.js\"\r\netag: \"5dddc34bc306e93857c0a0501f507ab4\"\r\nlast-modified: Thu, 12 Feb 2026 16:40:17 GMT\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: cle1::64n9m-1770927254269-a3a99a912d05\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":654,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (653)","md5":"5dddc34bc306e93857c0a0501f507ab4","sha1":"71f4b9fe8ed412a4300d6667888a8894b6110a1c","sha256":"1beb9af3345660f681b9316277dc9908a3a06e0a0cc29d1eb8efba5e026fbe27","sha512":"b7a566f2bb49ae583ad997f7380e6f8e871a2a7a0e7dac0e9af5a1d8d460b7ad254cc51dec92034739723fdb261482655a6782f0302a4e12b4bc05550223e378","ssdeep":"","tlshash":"f2f0dda5d0c0d6f8d317cce9d438eb7e0a312ad8b189c2c4dcae49631291ec0802aa07","first_seen":"2026-02-12T20:37:44.939654Z","last_seen":"2026-02-17T15:15:31.667925Z","times_seen":4,"resource_available":true,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":370,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/?format=json","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eligible-ethgas.com/","date":"2026-02-14T01:26:59.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 12:15:50 GMT","end":"Wed, 01 Apr 2026 13:15:39 GMT"},"fingerprint":{"sha1":"E8:04:3F:4D:91:E2:52:D3:E0:EA:F7:1A:C8:8C:94:50:7C:2E:FF:FF","sha256":"A1:8E:F1:BF:52:25:E4:EE:2D:91:8B:1E:0B:E7:A1:C3:B9:7D:DF:7D:D1:57:11:6A:14:CF:F2:A6:DF:D1:B0:18"}}},"request":{"raw":"GET /?format=json HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eligible-ethgas.com/\r\nOrigin: https://eligible-ethgas.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:26:59 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9cd8c7cddd5e3181-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7d69c71af0f191e9a72db6153f8018d1","sha1":"f67c5f2887bc05654b47f76e9621e53a4091aed1","sha256":"5bac6e06cf0e1ad38c55f9f9d12122272bf4b8157877629fe68cd33fe2133c65","sha512":"fdf43a8f3d843fe9008949d6709c8e2a5cd640f6101522319745f0a829f21dc8f4bd4d70ff3e2f6e1fd53ca0d2dd872bf3588c593a403071102ab28763cbdba5","ssdeep":"","tlshash":"b8700022000000208c80800eca0a032223a0000ac20a00088e800b2288a0b380282032","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-07T07:51:18.251001Z","times_seen":93313,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":17,"dns":0,"connect":1,"send":0,"wait":113,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eligible-ethgas.com/","fqdn":"eligible-ethgas.com","domain":"eligible-ethgas.com","tld":"com"},"ip":{"addr":"172.67.198.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eligible-ethgas.com/","date":"2026-02-14T01:26:59.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eligible-ethgas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 03:51:42 GMT","end":"Wed, 22 Apr 2026 04:51:35 GMT"},"fingerprint":{"sha1":"C0:D5:DC:5F:FD:44:D3:71:4C:7F:51:87:BF:22:44:A2:41:75:9F:87","sha256":"88:C6:B7:F8:12:4F:45:10:CC:8D:7B:FC:94:D4:1C:F0:DE:CA:56:41:19:54:D0:9C:60:55:20:4B:8C:FB:3E:45"}}},"request":{"raw":"HEAD / HTTP/1.1\r\nHost: eligible-ethgas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eligible-ethgas.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 01:26:59 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Thu, 22 Jan 2026 04:40:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nage: 1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K17QGmoaSdV9Htoons902e4eduG0sxtw2zScZWX00noKETxT9khpX4%2FCTQyjA%2FHdGefpz6qcpzZVuia61kaP%2B1SgQP6HHTBPu2L87U%2Bzvkg5MRg%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\ncf-ray: 9cd8c7cdb93a76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T12:34:25.437902Z","times_seen":16239334,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"eligible-ethgas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/ledgerWallet-KZKJ5Q2S-DdZeAsds.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:27:01.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"6B:84:E2:F7:B0:5A:22:11:49:DC:F7:9B:A2:54:CE:36:02:5B:F4:F5","sha256":"EB:40:F6:36:FE:11:66:87:B7:F6:20:14:F5:EC:28:6B:5E:7F:78:A7:93:24:72:E2:3F:B6:F2:19:7C:BB:54:C9"}}},"request":{"raw":"GET /assets/ledgerWallet-KZKJ5Q2S-DdZeAsds.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-8mEX-aQm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:27:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 443\r\nserver: nginx/1.29.5\r\naccess-control-allow-origin: *\r\nage: 12835\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"ledgerWallet-KZKJ5Q2S-DdZeAsds.js\"\r\netag: \"717b03058e9eccce29ae3a8f15544b1a\"\r\nlast-modified: Thu, 12 Feb 2026 16:40:20 GMT\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: cle1::px48q-1770927256306-c4be8554a5e0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":443,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (442)","md5":"717b03058e9eccce29ae3a8f15544b1a","sha1":"c2b626e64489c6f9084d3bad64c5fb73df88d797","sha256":"59642a8a9d30d9684f1aa6b4c8ca8886bf9a53491a3e238ad3aadac36f1917d9","sha512":"d339c57445af528cd655bad29dc18dbbf61ef6c5a8f6541b4735e8ef7ed872dbf173d22e3c67f976eb78bd25eb8b30a40b2613698d6ef9f24a485a61c7e9f6ee","ssdeep":"","tlshash":"b7f0abe64b508d00874a03b1cabc94c8313775eea758239cb2720619bd420afb90cbb0","first_seen":"2025-09-05T14:38:20.777264Z","last_seen":"2026-04-17T09:09:52.483064Z","times_seen":21,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/root-W8lXAx1b.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:26:58.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"6B:84:E2:F7:B0:5A:22:11:49:DC:F7:9B:A2:54:CE:36:02:5B:F4:F5","sha256":"EB:40:F6:36:FE:11:66:87:B7:F6:20:14:F5:EC:28:6B:5E:7F:78:A7:93:24:72:E2:3F:B6:F2:19:7C:BB:54:C9"}}},"request":{"raw":"GET /assets/root-W8lXAx1b.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:26:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 539\r\nserver: nginx/1.29.5\r\naccess-control-allow-origin: *\r\nage: 12790\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"root-W8lXAx1b.js\"\r\netag: \"8daea6b355ac65463f1bd3063b9029ef\"\r\nlast-modified: Thu, 12 Feb 2026 16:40:09 GMT\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: cle1::c4bwn-1770927200119-7a7bee55203a\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":539,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (538)","md5":"8daea6b355ac65463f1bd3063b9029ef","sha1":"836def8415437e6274e6e6a55e8a391bb6741916","sha256":"f539b7a402e078bd4b121e892a9790444c9b31bffb9ae3ef4ef580ad98e7b04e","sha512":"5bc8fdf0f3c17ba85106e32d3a66e2e815f99e4433f1eeab4e117fbb298f03e6fc7416e2a8bd72b56e65674c399730e0141dd3eeca83a75a8bc1e791c34d54a6","ssdeep":"","tlshash":"f8f0be27d91046b552d2ccf1d1a0f571263342a3d3e1e7b1e4ef277a03d14a9c545553","first_seen":"2026-02-12T20:37:44.891053Z","last_seen":"2026-02-17T15:15:31.672303Z","times_seen":4,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/base-modal.component-B_TnXego.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:26:58.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"6B:84:E2:F7:B0:5A:22:11:49:DC:F7:9B:A2:54:CE:36:02:5B:F4:F5","sha256":"EB:40:F6:36:FE:11:66:87:B7:F6:20:14:F5:EC:28:6B:5E:7F:78:A7:93:24:72:E2:3F:B6:F2:19:7C:BB:54:C9"}}},"request":{"raw":"GET /assets/base-modal.component-B_TnXego.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/home.page-Ct3tf3tM.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:26:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3102\r\nserver: nginx/1.29.5\r\naccess-control-allow-origin: *\r\nage: 12775\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"base-modal.component-B_TnXego.js\"\r\ncontent-encoding: br\r\netag: \"91bb08bc55675cd1d7c8c756d5887fa7\"\r\nlast-modified: Thu, 12 Feb 2026 16:40:17 GMT\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: cle1::78cqh-1770927193246-915f993cbcd9\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":7957,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (7956)","md5":"d8d308403b95f92748e1675665c7c997","sha1":"087fdbf4e6c73c4b95c1667dcae52ff5bd7175c4","sha256":"5a8ba25a6f724cf84177b9fe507e0b761a7275763228d146e88613153a03ea5d","sha512":"71122f70aefbe546c2e6474d82f06f8df21c9e29a7a190ded3c868fd73a489467b22f9223bba2a244c9a252b2870fdfe4caa31592338938eab612645096d74fb","ssdeep":"192:pGdAzs+Is14LdwydAz3kmmengY4CHlFYk:MdAzs+Is1IwuA7kmmev","tlshash":"6ef1c91de34aa568fc3fc549e0edda0aa56e102cf3360991b2bd952e01d4e52732bfd4","first_seen":"2026-02-12T20:37:44.910174Z","last_seen":"2026-02-17T15:15:31.663795Z","times_seen":4,"resource_available":true,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":369,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/proxy-CbI-37ef.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:26:58.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"6B:84:E2:F7:B0:5A:22:11:49:DC:F7:9B:A2:54:CE:36:02:5B:F4:F5","sha256":"EB:40:F6:36:FE:11:66:87:B7:F6:20:14:F5:EC:28:6B:5E:7F:78:A7:93:24:72:E2:3F:B6:F2:19:7C:BB:54:C9"}}},"request":{"raw":"GET /assets/proxy-CbI-37ef.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/home.page-Ct3tf3tM.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:26:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 40244\r\nserver: nginx/1.29.5\r\naccess-control-allow-origin: *\r\nage: 12834\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"proxy-CbI-37ef.js\"\r\ncontent-encoding: br\r\netag: \"6e58d7048e22466c28d897c2b862adff\"\r\nlast-modified: Thu, 12 Feb 2026 16:40:19 GMT\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: cle1::v6985-1770927253656-98d19ad82676\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":115479,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (39601)","md5":"a8609175f8d1090ccbfe6916a99abd31","sha1":"10b93318b1038161f4761f5f8b90d9ac2b10b38d","sha256":"9e0bf1425dd94af34dd3687c495430fc8f88005699cd827bd33a7c436d7c480a","sha512":"e8068f907bd69118366fb331a51b0f140e41c520d602b18986c0580fbace7fbefbf6c967a73f5f9de7b88578a5bb053b07289fc12ef59f40449775ad1cf71f28","ssdeep":"1536:H+2TsGd6fOmBgDHte9/Q3t/v5ScoeyUK8wlZWJDFV8lovCt5VyF6Puktr/:H+2Tdd6WFteRQ3t/vscoJUxwlMIwqr/","tlshash":"6bb307c572917561d3d685e9c0bf0b41b73718983009c0bcb63dadcb6d2250aa6bbb7e","first_seen":"2026-02-12T20:37:44.911871Z","last_seen":"2026-02-17T15:15:31.660652Z","times_seen":4,"resource_available":true,"data":null}},"time_used":381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Pixelify+Sans:wght@400..700\u0026family=Press+Start+2P\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eligible-ethgas.com/","date":"2026-02-14T01:26:59.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Pixelify+Sans:wght@400..700\u0026family=Press+Start+2P\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eligible-ethgas.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Feb 2026 01:26:59 GMT\r\ndate: Sat, 14 Feb 2026 01:26:59 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3080,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"d4e6d79c776bf8fc41c61de47e83d957","sha1":"8bc1ade7d4f4e91f3caa6d459dc1c6e3c0b05528","sha256":"fdaed61fd01a57851820b356beb641c643c8b4e699faddae0b72fa64c5d20bad","sha512":"7044230275f8f8d2e4725a69add094387aea08d50c588f7026b9c1aa00f4e576abae59e8bc05b3eb58f8601bcdee55a9ca9508200e51f6121b8a577bac04c82b","ssdeep":"","tlshash":"1851ddd5052bd040eb931cc233cf7e36ee0f21266495d8699efe18d4acbad664351b4e","first_seen":"2025-09-17T03:18:47.287526Z","last_seen":"2026-06-04T04:08:18.169859Z","times_seen":745,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":153,"dns":1,"connect":21,"send":0,"wait":17,"receive":0,"ssl":140},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://eligible-ethgas.com/","date":"2026-02-14T01:26:59.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://eligible-ethgas.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 09 Feb 2026 18:20:43 GMT\r\nexpires: Tue, 09 Feb 2027 18:20:43 GMT\r\ncache-control: public, max-age=31536000\r\nage: 371176\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72964,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72964, version 1.0","md5":"91247c94dcda6ff52b445d71d6bbfb81","sha1":"ad2f62363ed047b430b91f32afa31df51fcd7c5e","sha256":"6a3c3e024b31eeacbf1f19c3c7be78612d91c623186f64035a50038241dad4f9","sha512":"a12dcac84e9f9ae02df3aabe29d76994281cd1005edca471194605cfcd6a0456eec872fd28c63c72ae124804d0b47d8377048caae49c40b0a18b5d6be4d6213f","ssdeep":"768:zbw+rLBkMxbCkupj4Y69/Yr71+j9pWiKahMM6+AWEqXB0oGuNGku+QCcIKE205C7:zbw+iwuS/iZWeaO1zP1/9Esvf8fXnm1","tlshash":"8f6302244e3c50c2a54d33aa286940f6f6e79c75b2b79ba4a69c589cd410f329cdfdc4","first_seen":"2025-05-29T18:51:13.223047Z","last_seen":"2026-06-08T12:37:33.389104Z","times_seen":25883,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":76,"dns":3,"connect":20,"send":0,"wait":21,"receive":37,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/root-xUBic4Hn.css","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:26:58.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"6B:84:E2:F7:B0:5A:22:11:49:DC:F7:9B:A2:54:CE:36:02:5B:F4:F5","sha256":"EB:40:F6:36:FE:11:66:87:B7:F6:20:14:F5:EC:28:6B:5E:7F:78:A7:93:24:72:E2:3F:B6:F2:19:7C:BB:54:C9"}}},"request":{"raw":"GET /assets/root-xUBic4Hn.css HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:26:58 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 4341\r\nserver: nginx/1.29.5\r\naccess-control-allow-origin: *\r\nage: 12238\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"root-xUBic4Hn.css\"\r\ncontent-encoding: br\r\netag: \"88d9636b024941894745a79fb35a84d3\"\r\nlast-modified: Thu, 12 Feb 2026 16:49:14 GMT\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: cle1::mm7nh-1770927193246-d395d2b07b80\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28032,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (28031)","md5":"b791fa2cfe8eea5dc35ba023b26bf0cb","sha1":"12f5d243511c0b9273162b3018d0dd57ccea4f1f","sha256":"6dc4c7194a918e7786fa782145e281df7b49fad5e2a449716bde8a904e07e0d4","sha512":"8d059d197b5ef2bd53175dc7f2092ddfb74d73c124965b15dc92600efb15e2bfc7efd6622e6e90f9a8513a817cbb9876588cf43f97478a5df12879b9aa71220c","ssdeep":"384:P56ed283ZcW23qWF7O36YBzQ4JYf1ojPFEINi:P56UJoYBzQmSojPFEwi","tlshash":"73c2c9093e2d3f38ba13a32440c0949c620b775feebd8797acd1265d9d9d78431aca79","first_seen":"2025-12-28T18:47:24.374234Z","last_seen":"2026-04-08T12:13:16.905421Z","times_seen":25,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/metaMaskWallet-YFHEHW7V-BggUDXad.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:27:01.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"6B:84:E2:F7:B0:5A:22:11:49:DC:F7:9B:A2:54:CE:36:02:5B:F4:F5","sha256":"EB:40:F6:36:FE:11:66:87:B7:F6:20:14:F5:EC:28:6B:5E:7F:78:A7:93:24:72:E2:3F:B6:F2:19:7C:BB:54:C9"}}},"request":{"raw":"GET /assets/metaMaskWallet-YFHEHW7V-BggUDXad.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-8mEX-aQm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:27:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 1181\r\nserver: nginx/1.29.5\r\naccess-control-allow-origin: *\r\nage: 12230\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"metaMaskWallet-YFHEHW7V-BggUDXad.js\"\r\ncontent-encoding: br\r\netag: \"cd224897b488e3c58bcb44d3799d7877\"\r\nlast-modified: Thu, 12 Feb 2026 16:50:25 GMT\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: cle1::wdd7r-1770927256309-ce2c650ad9b5\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":6516,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (6515)","md5":"c9faabc0cac059efd75278832f35fba0","sha1":"75a665ec82b0dd2ccab406db25ed49f69ba40931","sha256":"748a6c743322ec0b319bf361b84e929e5099721824636f5a4befd8e0ff8ab826","sha512":"7ab0d0071f01aad00b47c9fd55ef2748c61eeeb46b3abfb66afdae61970d62a77a0f643be0c95cab9a778d28a816b75fbb5c4667be6b794d97cec3937d0b5eec","ssdeep":"192:M1vaqYOX292169AY32zqzKHio+21BZBTibnKCU+jpBxMCXV:my933BU+V","tlshash":"17d15deb67488cbcb8271f24e34a3271613836d7692ee6594c738a79090519dbb7fcc4","first_seen":"2024-12-25T05:30:42.586528Z","last_seen":"2026-05-20T16:17:57.649029Z","times_seen":72,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/trustWallet-E2GVGE4U-CcH50yxW.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:27:01.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"6B:84:E2:F7:B0:5A:22:11:49:DC:F7:9B:A2:54:CE:36:02:5B:F4:F5","sha256":"EB:40:F6:36:FE:11:66:87:B7:F6:20:14:F5:EC:28:6B:5E:7F:78:A7:93:24:72:E2:3F:B6:F2:19:7C:BB:54:C9"}}},"request":{"raw":"GET /assets/trustWallet-E2GVGE4U-CcH50yxW.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-8mEX-aQm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:27:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 760\r\nserver: nginx/1.29.5\r\naccess-control-allow-origin: *\r\nage: 12833\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"trustWallet-E2GVGE4U-CcH50yxW.js\"\r\netag: \"a25b589fc633676b9a58fa384f2d0334\"\r\nlast-modified: Thu, 12 Feb 2026 16:40:22 GMT\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: cle1::9jtkr-1770927256309-745c1567cb96\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":760,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (759)","md5":"a25b589fc633676b9a58fa384f2d0334","sha1":"119f38e7d9e19f351e022c5fa0f537f15ea3f933","sha256":"7edbc680126336b8db68846c0b688c957b60afd953859b06ca9dfd6a74a54f02","sha512":"ad917ac1bc65cbd0d55a05d5e39241f3badda088e0a56bf1d332a82c1df6d46e706c54bf3f9ddf22c75c3e754a33d6c3c03b2e6138720a09e85e0ce96cd9dc9b","ssdeep":"","tlshash":"3c01c0dbdb29dc77c85f83bced08a4a3521876db60c8436ee6554f1f25a808b1c0db60","first_seen":"2025-06-03T09:03:10.609568Z","last_seen":"2026-04-17T09:09:52.485468Z","times_seen":36,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/rabbyWallet-FLVUU35F-BZrp4syk.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:27:01.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"6B:84:E2:F7:B0:5A:22:11:49:DC:F7:9B:A2:54:CE:36:02:5B:F4:F5","sha256":"EB:40:F6:36:FE:11:66:87:B7:F6:20:14:F5:EC:28:6B:5E:7F:78:A7:93:24:72:E2:3F:B6:F2:19:7C:BB:54:C9"}}},"request":{"raw":"GET /assets/rabbyWallet-FLVUU35F-BZrp4syk.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-8mEX-aQm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:27:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 1125\r\nserver: nginx/1.29.5\r\naccess-control-allow-origin: *\r\nage: 12529\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"rabbyWallet-FLVUU35F-BZrp4syk.js\"\r\ncontent-encoding: br\r\netag: \"7529aec7bfab7dad9c01256a12151e9e\"\r\nlast-modified: Thu, 12 Feb 2026 16:45:27 GMT\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: cle1::8d4gp-1770927256310-1ed4b47352a2\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2370,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2369)","md5":"174b08de1e202256a72f7663e79b8461","sha1":"602e294d94f061211502895741144c4320248855","sha256":"0767c9b588d0ab9b532619b26d91fe6e5163f541bcc2d6a9e9adae18f670dc8d","sha512":"640ce4e8d836b4ea90ace61f30c3cbe697e7d9a7d6d04c4b4a4e0f1845f850754434d0415ee9f3a7ec0856d679fe14679d1548d99385bb887a205fb0ab6d3b1f","ssdeep":"","tlshash":"594183e8eb38e993edadc67cdf19a475310e30ff909441a551d65b1e30646d33e0a650","first_seen":"2025-04-01T04:17:39.073172Z","last_seen":"2026-04-10T09:11:01.513661Z","times_seen":32,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/mewWallet-6V4UZOQC-B0qJRky8.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:27:01.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"6B:84:E2:F7:B0:5A:22:11:49:DC:F7:9B:A2:54:CE:36:02:5B:F4:F5","sha256":"EB:40:F6:36:FE:11:66:87:B7:F6:20:14:F5:EC:28:6B:5E:7F:78:A7:93:24:72:E2:3F:B6:F2:19:7C:BB:54:C9"}}},"request":{"raw":"GET /assets/mewWallet-6V4UZOQC-B0qJRky8.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-8mEX-aQm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:27:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 4231\r\nserver: nginx/1.29.5\r\naccess-control-allow-origin: *\r\nage: 12832\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"mewWallet-6V4UZOQC-B0qJRky8.js\"\r\ncontent-encoding: br\r\netag: \"c9c90c8982869b7541a9ce55464ff15c\"\r\nlast-modified: Thu, 12 Feb 2026 16:40:23 GMT\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: cle1::h554l-1770927256308-96740657e53f\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12987,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (12986)","md5":"0ba9b4ec5d6e0138fdc7dcea74d719b1","sha1":"7e9a5254388ae9b05ccab215bcadfda7cbb92178","sha256":"cabb87e570e8e5c15a34eeb5c010a7651a3e878e76568fa8f274903a86c23047","sha512":"8bbc357ee098b1666e94e09a19e0b9711acc240227e819daa87a564a6a0ff456a338c4b61d83f68344063ce6c0ac09d7ef5e9ccb4c711aefc103562691a600de","ssdeep":"192:vSL2IcUA1oFBu/kyilFZl1s7tWld8YgsII9P3cO6+fzRXygn3IJigNnvMqDCdFIZ:vSL2IcUm/XwZvw0IGrCgivRhilI","tlshash":"9742c5d0332c53f9f507c3a9a7aaa0569a7c30da3daf5158f64f05256b144fa883f843","first_seen":"2025-12-31T12:33:59.905722Z","last_seen":"2026-04-08T12:13:16.929881Z","times_seen":17,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/roninWallet-SAB5ESVK-fW2QoTxP.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:27:01.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"6B:84:E2:F7:B0:5A:22:11:49:DC:F7:9B:A2:54:CE:36:02:5B:F4:F5","sha256":"EB:40:F6:36:FE:11:66:87:B7:F6:20:14:F5:EC:28:6B:5E:7F:78:A7:93:24:72:E2:3F:B6:F2:19:7C:BB:54:C9"}}},"request":{"raw":"GET /assets/roninWallet-SAB5ESVK-fW2QoTxP.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-8mEX-aQm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:27:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 975\r\nserver: nginx/1.29.5\r\naccess-control-allow-origin: *\r\nage: 11926\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"roninWallet-SAB5ESVK-fW2QoTxP.js\"\r\netag: \"68f97b0ae9e3156ac22560e59bd69d4e\"\r\nlast-modified: Thu, 12 Feb 2026 16:55:29 GMT\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: cle1::gjxqb-1770927256312-2021eb33218e\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":975,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (974)","md5":"68f97b0ae9e3156ac22560e59bd69d4e","sha1":"9809da0a9ae9c30ab42202c55b07eef3acd8d1fb","sha256":"8959d6d3640f29ffad2fcde3305042bd42df292e2059935d19d5227dbe809290","sha512":"d9d8677af4e67b9e869da5a01e783a25305798a87461bc1915b6f9c200ec06c5b44b79758c89ecfbc6324647893faa387e3f594b71729f0d7beb1a457370cf2b","ssdeep":"","tlshash":"36119ce5910889aec51fc22cdd109462231f24e67acac697a7fd4f393147443fc07a59","first_seen":"2025-12-31T12:33:59.906467Z","last_seen":"2026-04-08T12:13:16.914673Z","times_seen":17,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/index-Cv69DvSO.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:26:58.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"6B:84:E2:F7:B0:5A:22:11:49:DC:F7:9B:A2:54:CE:36:02:5B:F4:F5","sha256":"EB:40:F6:36:FE:11:66:87:B7:F6:20:14:F5:EC:28:6B:5E:7F:78:A7:93:24:72:E2:3F:B6:F2:19:7C:BB:54:C9"}}},"request":{"raw":"GET /assets/index-Cv69DvSO.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-W8lXAx1b.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:26:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 1466\r\nserver: nginx/1.29.5\r\naccess-control-allow-origin: *\r\nage: 12818\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"index-Cv69DvSO.js\"\r\ncontent-encoding: br\r\netag: \"6f290c3fccbfff5a4d4905c78d143a4f\"\r\nlast-modified: Thu, 12 Feb 2026 16:40:09 GMT\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: cle1::c2r7v-1770927228345-fe8d35dcb0b3\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3680,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3679)","md5":"2290e70d1f20a0f0ab497866d29e1f43","sha1":"8f91166b2507908b954144ca1060a707b5f92320","sha256":"46061444d4462839ff3e39911a47ba3d89aa404dddd7fb863a6a6958eb8c6a5e","sha512":"d58dfd6c176e19fca0d3a2bb8432b2d718c4ac1357242c5841a11afd1848b3c369dc2f1add96f8876da746a6958e2668e5aefb010c4e6595c9c4e93ae6966815","ssdeep":"","tlshash":"8c71138db7c4f04249c6a960037ba31772a9377318bdc2a193ee95b012675594227f74","first_seen":"2026-02-12T20:37:44.878589Z","last_seen":"2026-02-17T15:15:31.638947Z","times_seen":4,"resource_available":true,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/app-DdejxHE8.css","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:26:58.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"6B:84:E2:F7:B0:5A:22:11:49:DC:F7:9B:A2:54:CE:36:02:5B:F4:F5","sha256":"EB:40:F6:36:FE:11:66:87:B7:F6:20:14:F5:EC:28:6B:5E:7F:78:A7:93:24:72:E2:3F:B6:F2:19:7C:BB:54:C9"}}},"request":{"raw":"GET /assets/app-DdejxHE8.css HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:26:58 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 6555\r\nserver: nginx/1.29.5\r\naccess-control-allow-origin: *\r\nage: 12299\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"app-DdejxHE8.css\"\r\ncontent-encoding: br\r\netag: \"c0bb9f24679cd78eed04623d19003688\"\r\nlast-modified: Thu, 12 Feb 2026 16:49:14 GMT\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: cle1::75wts-1770927253948-a2f754a1d62a\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25721,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (25717)","md5":"2c44a5882ad1be683a8d7ffd40524876","sha1":"03b8ed64ef83bf10ec8714724b9945f12436419c","sha256":"43b08ad544b3b972e038754336d5703cce8996aafcfca3d139ddcddcf6170603","sha512":"d2c9fa300a00f0eb2788357b08f05a7783fff0eda1374b83b6e2a068291f1945adf4d9d86113f0842d7c46dfd2fda852aebab0a03982364490194b2e7a563036","ssdeep":"768:DvyYADX3HpL1YkPjTem0rRkutSc9zE8UaHbTcf+GJkChbAAoi9KckbFiH5ToIZU:LADX3HpL1YkPjTem0rmutSc9w8UaHbTV","tlshash":"5fc29689b6008abe7c3be56a576dea0c6309be12ec104eeff91835021be7ff615d5504","first_seen":"2026-02-04T23:59:59.697125Z","last_seen":"2026-02-17T15:15:31.645137Z","times_seen":6,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/home.page-Ct3tf3tM.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:26:58.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"6B:84:E2:F7:B0:5A:22:11:49:DC:F7:9B:A2:54:CE:36:02:5B:F4:F5","sha256":"EB:40:F6:36:FE:11:66:87:B7:F6:20:14:F5:EC:28:6B:5E:7F:78:A7:93:24:72:E2:3F:B6:F2:19:7C:BB:54:C9"}}},"request":{"raw":"GET /assets/home.page-Ct3tf3tM.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:26:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 5453\r\nserver: nginx/1.29.5\r\naccess-control-allow-origin: *\r\nage: 12838\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"home.page-Ct3tf3tM.js\"\r\ncontent-encoding: br\r\netag: \"4582dbd11084b3bb62acbfb7ab86773b\"\r\nlast-modified: Thu, 12 Feb 2026 16:40:15 GMT\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: cle1::v844z-1770927253907-a4b99895311a\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13417,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12765)","md5":"6fc72c7829d24ffffb7622bb8e5aeea9","sha1":"57b9d2943dd84ca319bf5e22f6752a19bd66590b","sha256":"d913d7f7f72ecc197e64a25b676a9dd8c27021fb27148644c5c2ac34d7952354","sha512":"0909e8869fabb6eb39d548193640fbc14aa86e3f9ac0059a55959069983919b34550397a9c9bc108a3633f7cf2536860316cf3a130c135318295b232f5e73998","ssdeep":"384:jy1HHMuN5w55aPYV0Y7MJho557Pegzcm7+tJuLhmn4K:jy1HHM85E5aPYV0VJho5gjtJuLhmn1","tlshash":"d8522c4cd296667fe5d24599253bd11cb33a0658b27a8091d37fa8360370dc2b933bdb","first_seen":"2026-02-12T20:37:44.937491Z","last_seen":"2026-02-14T01:27:34.058469Z","times_seen":2,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/chunk-EPOLDU6W-CTl9JfCV.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:26:58.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"6B:84:E2:F7:B0:5A:22:11:49:DC:F7:9B:A2:54:CE:36:02:5B:F4:F5","sha256":"EB:40:F6:36:FE:11:66:87:B7:F6:20:14:F5:EC:28:6B:5E:7F:78:A7:93:24:72:E2:3F:B6:F2:19:7C:BB:54:C9"}}},"request":{"raw":"GET /assets/chunk-EPOLDU6W-CTl9JfCV.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-W8lXAx1b.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:26:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 43638\r\nserver: nginx/1.29.5\r\naccess-control-allow-origin: *\r\nage: 11637\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"chunk-EPOLDU6W-CTl9JfCV.js\"\r\ncontent-encoding: br\r\netag: \"81de9863e580c83f45963b0933f95ca6\"\r\nlast-modified: Thu, 12 Feb 2026 17:00:16 GMT\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: cle1::vsbrh-1770927253654-bf1cbda5e90a\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":125122,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (46949)","md5":"db6bcb2e9203db5931e0a006707aa8f8","sha1":"3c2e1a69890c86ec42c22dcbbb2724da796f14fc","sha256":"aafcb8e093136e7e5e16c711e54525ad50b79bc7d4032a490688e34fdb02af56","sha512":"940017d99e2e7a61b013843f41f60e8ce5cc85443643b0383d6851dfbbe22ea17b320d8e3e4a6ce1c6a517832dc1d270a40aa57a10c0ea2582b776a94e9e6edd","ssdeep":"1536:YZe4IJi0G4pPj0hsIkZxr5bRRvMViduOZgVI/rYWYYKyWXMH:Ge4IoMaUZxr/RvMVid1GVI/rYWYYLW+","tlshash":"22c33bf9729270794bef13f180bb0015b3b92ca9246d8015b2acc99e35b5c4c967bf79","first_seen":"2026-02-12T20:37:44.877208Z","last_seen":"2026-02-17T15:15:31.655095Z","times_seen":4,"resource_available":true,"data":null}},"time_used":306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/config-BBCuuyHT.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:26:58.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"6B:84:E2:F7:B0:5A:22:11:49:DC:F7:9B:A2:54:CE:36:02:5B:F4:F5","sha256":"EB:40:F6:36:FE:11:66:87:B7:F6:20:14:F5:EC:28:6B:5E:7F:78:A7:93:24:72:E2:3F:B6:F2:19:7C:BB:54:C9"}}},"request":{"raw":"GET /assets/config-BBCuuyHT.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-W8lXAx1b.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:26:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 16779\r\nserver: nginx/1.29.5\r\naccess-control-allow-origin: *\r\nage: 12808\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"config-BBCuuyHT.js\"\r\ncontent-encoding: br\r\netag: \"5da6e41079970bcbe0231f184203beba\"\r\nlast-modified: Thu, 12 Feb 2026 16:40:11 GMT\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: cle1::67cpx-1770927219968-191b0a9856ba\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":47290,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (47289)","md5":"2659ce7411e25b3d5645e8b9e7481b22","sha1":"1386224bd903186c8f26dbcf6b16b4bac52fe189","sha256":"3640abc74fa3ee2f91ed70d2d775e9394c102e19d824f29c7be284c9cde5fd06","sha512":"ea3c6acc6b8bad14675569407fd59965170a30c28148b9ed577e693dc286e0dd86f0adc998cbd80e5e80889309bd3b46751a48341eddc0c771c0545c03a9d0b4","ssdeep":"768:WzlHMGUyZBymwaJ2+d3EfZ56gNjwWghktt55HRTrhD1841Mzq2yS6Iv4Gx5U4KMA:WzlHfL2p6lhi9Wq2tHhC9V48pd","tlshash":"f523a7ca7186b2162be2d1a4483f4015e2396954780e846cb5bdddd3bd72c8ee17bf38","first_seen":"2026-02-12T20:37:44.856378Z","last_seen":"2026-02-17T15:15:31.641748Z","times_seen":4,"resource_available":true,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/injectedWallet-H7LYKTQS-CAHJNGc-.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:27:01.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"6B:84:E2:F7:B0:5A:22:11:49:DC:F7:9B:A2:54:CE:36:02:5B:F4:F5","sha256":"EB:40:F6:36:FE:11:66:87:B7:F6:20:14:F5:EC:28:6B:5E:7F:78:A7:93:24:72:E2:3F:B6:F2:19:7C:BB:54:C9"}}},"request":{"raw":"GET /assets/injectedWallet-H7LYKTQS-CAHJNGc-.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-8mEX-aQm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:27:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 685\r\nserver: nginx/1.29.5\r\naccess-control-allow-origin: *\r\nage: 11623\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"injectedWallet-H7LYKTQS-CAHJNGc-.js\"\r\netag: \"d15e27dd16cca201d14667c3af8cb320\"\r\nlast-modified: Thu, 12 Feb 2026 17:00:32 GMT\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: cle1::r8nmk-1770927256314-37f8b71f5c36\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":685,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (684)","md5":"d15e27dd16cca201d14667c3af8cb320","sha1":"a2a412c0b28c967d51856bd18a3f5b1a039cbf94","sha256":"db58171c5bda95e8016d892b4692c77c4f7644fe1fd3ee9b6ac1f561e867aec0","sha512":"20a745ee7cfac75a1160058128403ca4639ca13460191bceb426a295e6ad64e72d63343c73565dff68a719fb7590fe12853a1b213c9a1e0d33a24d2e0937225a","ssdeep":"","tlshash":"fc01f476d22cd45dc91dc36cfd6e68f3234961e6611f4328755c0f2ea2194cbec1e264","first_seen":"2025-04-01T04:17:39.059491Z","last_seen":"2026-05-20T16:17:57.675356Z","times_seen":35,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-assets.i.posthog.com/static/surveys.js?v=1.332.0","fqdn":"us-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"172.66.166.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:27:06.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 21:09:57 GMT","end":"Mon, 20 Apr 2026 22:09:56 GMT"},"fingerprint":{"sha1":"28:A9:79:25:3F:AF:B7:89:AC:9D:42:8A:C3:69:5B:4C:8E:6F:4C:77","sha256":"4D:63:13:FA:35:7E:FE:29:D4:53:E6:EF:2E:3B:8F:06:9D:32:9C:B5:EB:7E:3C:76:62:83:84:76:B4:C3:88:3C"}}},"request":{"raw":"GET /static/surveys.js?v=1.332.0 HTTP/1.1\r\nHost: us-assets.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://claim.espresso.foundation\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:27:06 GMT\r\ncontent-type: text/javascript; charset=\"utf-8\"\r\ncache-control: public, max-age=300\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nlast-modified: Fri, 13 Feb 2026 23:12:07 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-opener-policy: same-origin\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\netag: \"698fafc7-15f85\"\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9cd8c7f78dcc120a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89989,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e5524e0a38e666641598f4af467d97cb","sha1":"45c5c489a4d62917bd6c96ba53c42f22a0532837","sha256":"76627c7a8023fdfcf06970fa7ad2bf139ba499a9b02c1b2315b1046b01b5b8da","sha512":"757082563a814e2fb37959c1e9b38090f2982876fa8686afad56cfcfa9005642464a75cad8bf762e7140b42bbc01f9ffdf657b15af4129374165b5a8af4b20cb","ssdeep":"1536:lLNgAQ74f1FTsEQvLwBaTa2IaDwxFPFk/XnVVUbH4ah:1Ngj7p/Lw4we/XnNU","tlshash":"61934bd5b740f1ae41db80b4207e4842b33d2b1afa0d4958b157dc943de9948a39ffaa","first_seen":"2026-02-12T20:37:44.899207Z","last_seen":"2026-04-13T10:23:59.614185Z","times_seen":882,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/hstack-CUgmLe_w.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:26:58.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"6B:84:E2:F7:B0:5A:22:11:49:DC:F7:9B:A2:54:CE:36:02:5B:F4:F5","sha256":"EB:40:F6:36:FE:11:66:87:B7:F6:20:14:F5:EC:28:6B:5E:7F:78:A7:93:24:72:E2:3F:B6:F2:19:7C:BB:54:C9"}}},"request":{"raw":"GET /assets/hstack-CUgmLe_w.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-W8lXAx1b.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:26:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 473\r\nserver: nginx/1.29.5\r\naccess-control-allow-origin: *\r\nage: 12236\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"hstack-CUgmLe_w.js\"\r\netag: \"b7eee23af1a11018eccb2f03f433479e\"\r\nlast-modified: Thu, 12 Feb 2026 16:50:18 GMT\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: cle1::c2c96-1770927254990-9f7a7330a6c2\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":473,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (472)","md5":"b7eee23af1a11018eccb2f03f433479e","sha1":"26a85d0dfade6f1936bf0536ff7552cafb10eddf","sha256":"be84c6b2df189dee15f38c7cac639297e122f25960e6ecf27b842b497f34a032","sha512":"be66625d268bd7860953531aeecb3af8281ddbb7a4a506ae6f087dd003d425c40ce907773581b62ccd8cad76d8897a7b90594afdb5467e21acced2a78344ca91","ssdeep":"","tlshash":"a5f0dcaba44171b003e5cc68b1e6526951de6fd8f67195c4a0cf884f26202c682aba4a","first_seen":"2026-02-12T20:37:44.860275Z","last_seen":"2026-02-17T15:15:31.648865Z","times_seen":4,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rpc.walletconnect.org/v1/supported-chains?st=appkit\u0026sv=html-ethers-1.6.9\u0026projectId=2e149567ef86e6af702071858dad334d","fqdn":"rpc.walletconnect.org","domain":"walletconnect.org","tld":"org"},"ip":{"addr":"3.120.6.92","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eligible-ethgas.com/","date":"2026-02-14T01:26:59.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rpc.walletconnect.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 16 Oct 2025 00:00:00 GMT","end":"Sat, 14 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"38:E6:43:A0:F8:F2:8D:21:9C:36:21:F5:DB:3B:F9:93:F7:7B:C4:8B","sha256":"09:1F:96:1E:4B:E3:8B:06:C3:8F:0A:2E:0F:79:E7:43:9C:B4:45:CC:26:0C:77:C5:50:CD:15:A8:7D:1D:83:DB"}}},"request":{"raw":"GET /v1/supported-chains?st=appkit\u0026sv=html-ethers-1.6.9\u0026projectId=2e149567ef86e6af702071858dad334d HTTP/1.1\r\nHost: rpc.walletconnect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eligible-ethgas.com/\r\nOrigin: https://eligible-ethgas.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:26:59 GMT\r\ncontent-type: application/json\r\ncontent-length: 1310\r\ncache-control: public, max-age=86400, s-maxage=86400\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\nx-request-id: da7f92fe-2cca-47cf-811a-41685dcc4559\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1310,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5c4797b9a97aa6bf5c6837f29f49facc","sha1":"0c5ca92d8836a08f97696c4fb9b45d41f284d008","sha256":"28370ec14b4f7d9b6138e7146b25d1b9c32ed9ca65c3c281b80b8f57ee282d4f","sha512":"5dfb6394534cebfa64b616dbf81aab67cf5a48c75a231ebb1313f9a090a9d5d0015d63d3be92a75829d3ab22073062145069067b89847326665fc35eaba1cc7d","ssdeep":"","tlshash":"eb21338c88804c44dcb4d398dbbce8cb94aef05399cd289999f82cb155fd6b3355276e","first_seen":"2026-02-12T20:37:44.922301Z","last_seen":"2026-02-14T01:27:34.063705Z","times_seen":3,"resource_available":false,"data":null}},"time_used":761,"timings":{"blocked":369,"dns":27,"connect":20,"send":0,"wait":22,"receive":0,"ssl":320},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/hiunicornstudio/unicornstudio.js@v2.0.1/dist/unicornStudio.umd.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:27:01.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/hiunicornstudio/unicornstudio.js@v2.0.1/dist/unicornStudio.umd.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 2.0.1\r\nx-jsd-version-type: version\r\netag: W/\"27f09-y/Rvi2bV0iZWjaDz7inrFDeE0Mk\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 3040807\r\ndate: Sat, 14 Feb 2026 01:27:01 GMT\r\nx-served-by: cache-fra-etou8220186-FRA, cache-hel1410030-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 40621\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":163593,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d62fcb8aae79e4ddff0c2f73514cac7f","sha1":"cbf46f8b66d5d226568da0f3ee29eb143784d0c9","sha256":"9a64dbb9af5e9672cc99b091377d7df9a9d1dcb2a910b639360e77b18a31cd71","sha512":"be67b0445a5e1603905d44b113b7d5c70f675e8901d6cf7a7f918cb61f197d581abee3af79af6e846d27cf87b7a0fcac17e0330455992ec09ee337b194a05f35","ssdeep":"3072:2dkdy/7ekEfcyDjn/+H4/l81Ei7PlzLWymGMbnDaURDS5WfeT:2dkdy/7ekEfcMRDS5WfeT","tlshash":"9ef3e9a6716b642e0982818bf0750e07a226655c340dc46d7b7cb8ff68ece5e317d73a","first_seen":"2026-01-30T19:04:09.913225Z","last_seen":"2026-05-29T10:09:54.461281Z","times_seen":16,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":77,"dns":1,"connect":13,"send":0,"wait":14,"receive":13,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/vstack-C3IvQv9K.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:26:58.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"6B:84:E2:F7:B0:5A:22:11:49:DC:F7:9B:A2:54:CE:36:02:5B:F4:F5","sha256":"EB:40:F6:36:FE:11:66:87:B7:F6:20:14:F5:EC:28:6B:5E:7F:78:A7:93:24:72:E2:3F:B6:F2:19:7C:BB:54:C9"}}},"request":{"raw":"GET /assets/vstack-C3IvQv9K.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-W8lXAx1b.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:26:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 10826\r\nserver: nginx/1.29.5\r\naccess-control-allow-origin: *\r\nage: 12538\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"vstack-C3IvQv9K.js\"\r\ncontent-encoding: br\r\netag: \"f56734d79196ff5dee48a3abc5bd2440\"\r\nlast-modified: Thu, 12 Feb 2026 16:45:16 GMT\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: cle1::mpmk7-1770927254990-044e405f32f3\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32755,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32754)","md5":"c72115e55d96341fe00e51a13ad95800","sha1":"f789714ca4a48a66869371451206a6e9ce15f7f5","sha256":"e5a93dc91bddae578f0687f643569653fb9c0153c227e0541e839a351f8b557a","sha512":"68ae22b64c7f635d371f27233ca7ef7e99ffbce471ecc831481cd428db19f75ece5453e7ea4e8850215aedf4b58ec8904bad0e72ac36cb7f47c4f00a18e2ae79","ssdeep":"768:VsHWUpDTugn4fMqCgSknl5Qn1upQLpOFZDPTKyPZmZA5J4hdrW:e2bC1YczpOb2Z0J4i","tlshash":"c1e2f9a132541408f6afc7aef8c61f48c13916335413fccab67c8aa8d1517b91b6bb6d","first_seen":"2026-02-12T20:37:44.873434Z","last_seen":"2026-02-17T15:15:31.671429Z","times_seen":4,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Fira+Code:wght@300..700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eligible-ethgas.com/","date":"2026-02-14T01:26:59.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Fira+Code:wght@300..700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eligible-ethgas.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Feb 2026 01:26:59 GMT\r\ndate: Sat, 14 Feb 2026 01:26:59 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2425,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"364d80757a1c7c81dccbf8d6caeb7ae7","sha1":"abf8e3b38eb2295c6378231fb2ecabae5ecd4b2f","sha256":"17babf90f4bae4a92ef7f4f24552b88b41c391b89328f46faa49286f5c2c2c6a","sha512":"6a0c6519a03917cedd40ecfe91e6cb8d30a42a61c005244bf8c09934a12132ba0fe963dd6e5c77a9baa19944cadb274ecf81e1780697acc5f3e22ae85b02c131","ssdeep":"","tlshash":"1c41aaa601a79400afa30cc177cebe779e1e2198b041c6b95efd08989ce7d32435472e","first_seen":"2025-09-17T03:18:47.282954Z","last_seen":"2026-06-05T09:23:27.363467Z","times_seen":820,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":150,"dns":0,"connect":21,"send":0,"wait":17,"receive":0,"ssl":138},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-LBSJK40LXZ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:27:01.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:20 GMT","end":"Mon, 20 Apr 2026 08:39:19 GMT"},"fingerprint":{"sha1":"60:64:B6:72:E4:67:A4:EC:78:B2:F2:B8:3E:17:7A:A6:A8:CE:74:4C","sha256":"3E:71:C0:44:31:9B:1A:8A:23:FF:D9:4F:B9:3F:89:6D:7C:66:33:BE:14:26:CB:01:F2:79:BB:FE:F3:3A:71:98"}}},"request":{"raw":"GET /gtag/js?id=G-LBSJK40LXZ HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 14 Feb 2026 01:27:01 GMT\r\nexpires: Sat, 14 Feb 2026 01:27:01 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 149123\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":450233,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"3e9633f58cf6c7c62a3ffeb35f72226c","sha1":"791c5b1e55dfc10b8755a916b5448f4508c40ed8","sha256":"d6cab1d9321350cb439c20a0a8bc2b5137c89ed609dd480d98fc86aa1e573d18","sha512":"cb20586532efe32d50543d6d5a1f87fb692b7d3b8474c2a6cc9cab7714623b5bf7e86c28bd4729716a86a9a1d27a16a5ca367a2ddb78fdb5dfca29a5ebbcb2e6","ssdeep":"6144:HPjNMmwzYRrw8wENIP8gMDSgP14j9VkV4Bq5Itz/uG:5jwzYRSmIP8G44BSa","tlshash":"eaa419ce73d674225296e478503f018ba57b24a2f49cc89af189cce42d74a9a4277f7c","first_seen":"2026-02-14T01:27:34.066415Z","last_seen":"2026-02-14T01:27:34.066415Z","times_seen":1,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":77,"dns":1,"connect":20,"send":0,"wait":45,"receive":59,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us.i.posthog.com/e/?ip=0\u0026_=1771032421303\u0026ver=1.332.0\u0026compression=gzip-js","fqdn":"us.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"34.199.45.253","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:27:01.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6A:93:A0:4B:D8:27:D0:2A:1E:35:71:6C:A2:1C:2A:2C:2E:E1:A7:D7","sha256":"2A:1F:69:7F:28:B0:DA:BD:59:C5:0F:27:B3:35:6D:E9:5B:8B:A2:4A:F8:89:F1:F0:10:CD:CD:8F:62:8E:07:E6"}}},"request":{"raw":"POST /e/?ip=0\u0026_=1771032421303\u0026ver=1.332.0\u0026compression=gzip-js HTTP/1.1\r\nHost: us.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim.espresso.foundation/\r\ncontent-type: text/plain\r\nContent-Length: 845\r\nOrigin: https://claim.espresso.foundation\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:27:01 GMT\r\ncontent-type: application/json\r\ncontent-length: 15\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: https://claim.espresso.foundation\r\naccess-control-allow-credentials: true\r\nx-envoy-upstream-service-time: 1\r\nserver: envoy\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c86a47ac0d792e37182689c73fcbf6ad","sha1":"8fd92e4671341e79f0a3529ac5e9d59d38db9e78","sha256":"0c40bafcfdc8adc6db63a6a5bfdb3dd5201798e6163fc674dc2fcbdb2a4134f1","sha512":"827cafe34edc64ac15f9bb3d269d338f8161a08d174071ed415b8a9e78d0672327e09034445292f90b81f5a063c8606d36ee66b20e0fff0446130303d598a8d3","ssdeep":"","tlshash":"1b600000000000030fc00c00000cc03c3ff30fc0003f00c0030fc0300c030c0c00c000","first_seen":"2023-04-06T21:35:05Z","last_seen":"2026-06-08T12:02:39.91061Z","times_seen":34815,"resource_available":false,"data":null}},"time_used":811,"timings":{"blocked":357,"dns":1,"connect":93,"send":0,"wait":97,"receive":0,"ssl":260},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"public-bsc.nownodes.io/","fqdn":"public-bsc.nownodes.io","domain":"nownodes.io","tld":"io"},"ip":{"addr":"172.66.145.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eligible-ethgas.com/","date":"2026-02-14T01:26:59.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nownodes.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 23:24:15 GMT","end":"Sun, 12 Apr 2026 00:24:07 GMT"},"fingerprint":{"sha1":"EC:BA:9B:AB:CB:AC:F0:50:15:55:17:89:D4:5F:52:04:A6:2E:C8:1F","sha256":"43:C6:97:66:EC:F0:C7:EB:3D:64:36:C1:2D:53:6A:54:A0:BC:D0:0A:21:A3:CD:D9:75:A0:F7:5E:15:04:A5:18"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: public-bsc.nownodes.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://eligible-ethgas.com/\r\nOrigin: https://eligible-ethgas.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 14 Feb 2026 01:26:59 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Authorization,DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,api-key\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9cd8c7cfae578be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T12:34:25.437902Z","times_seen":16239334,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":38,"dns":21,"connect":1,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"public-bsc.nownodes.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/index.es-Cs6pd85t.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:27:01.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"6B:84:E2:F7:B0:5A:22:11:49:DC:F7:9B:A2:54:CE:36:02:5B:F4:F5","sha256":"EB:40:F6:36:FE:11:66:87:B7:F6:20:14:F5:EC:28:6B:5E:7F:78:A7:93:24:72:E2:3F:B6:F2:19:7C:BB:54:C9"}}},"request":{"raw":"GET /assets/index.es-Cs6pd85t.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-8mEX-aQm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:27:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 84086\r\nserver: nginx/1.29.5\r\naccess-control-allow-origin: *\r\nage: 12231\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"index.es-Cs6pd85t.js\"\r\ncontent-encoding: br\r\netag: \"2d0e8bfb14904cb41272acd236ee1797\"\r\nlast-modified: Thu, 12 Feb 2026 16:50:24 GMT\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: cle1::6mpkm-1770927255669-a6a7a4935c1c\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":345997,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (53181)","md5":"cb0eab7d1742ada31f6506523e2f42b5","sha1":"9573691d65d377d70aca093fc5fe5f76c1befbfa","sha256":"ab7a7822ca5bd437b9433f372f2cca0dd917fc5865597ad73e7cb1eb99c0005c","sha512":"068701da2cf0b22387f3d5053b53ccbc15accc2c14a15853a6d6c8aaa80bf95d6766b4a267d79d19b41296f2c2495dba7023ec8b320d310dba5468b0a1f4d2e9","ssdeep":"6144:zKozfkuuo9pepoE4y4++7o8IR4zHVwSbZnECpGN36NokB:zRhnep4y4+kO4pwSbZn+6NXB","tlshash":"94742b8473b6a47603ea95d9a8352201f23458683049d46cffbc6defae844854b3ff76","first_seen":"2026-02-12T20:37:44.884861Z","last_seen":"2026-02-17T15:15:31.661464Z","times_seen":3,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":107,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/sound-button.component-CXJP3EGL.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:26:58.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"6B:84:E2:F7:B0:5A:22:11:49:DC:F7:9B:A2:54:CE:36:02:5B:F4:F5","sha256":"EB:40:F6:36:FE:11:66:87:B7:F6:20:14:F5:EC:28:6B:5E:7F:78:A7:93:24:72:E2:3F:B6:F2:19:7C:BB:54:C9"}}},"request":{"raw":"GET /assets/sound-button.component-CXJP3EGL.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/home.page-Ct3tf3tM.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:26:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 946\r\nserver: nginx/1.29.5\r\naccess-control-allow-origin: *\r\nage: 11884\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"sound-button.component-CXJP3EGL.js\"\r\ncontent-encoding: br\r\netag: \"7501bd197d3af1b8a7440489cb796958\"\r\nlast-modified: Thu, 12 Feb 2026 16:55:22 GMT\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: cle1::xd5cx-1770927206261-9282d67a367f\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2189,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (2188)","md5":"6a87328d6438328d99961c6a3b5251d1","sha1":"8665ad288654908abf6930b50e5110fb228a1460","sha256":"40e7a7bcfee3bd860b9eb80bdd7befdebfe80abb3c67c6b78449b1a1501b86b2","sha512":"ac723989fd6ed8e62f01f65d66d1ae27e37a4ac14ca3ee6801d6e0c8ebc041a60ebb6d6c59380f38f345d28ddbcef96d4c9a490bcffcff647bc1c77e2528327a","ssdeep":"","tlshash":"204163e9c70035ac680e9b30fc177812b1be14fe8ba557d0814c653c6a328e3eb25ad5","first_seen":"2026-02-12T20:37:44.952108Z","last_seen":"2026-02-17T15:15:31.642379Z","times_seen":4,"resource_available":true,"data":null}},"time_used":382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":380,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/fonts/pp-neue-montreal/pp-neue-montreal-medium.woff2","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:26:58.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"6B:84:E2:F7:B0:5A:22:11:49:DC:F7:9B:A2:54:CE:36:02:5B:F4:F5","sha256":"EB:40:F6:36:FE:11:66:87:B7:F6:20:14:F5:EC:28:6B:5E:7F:78:A7:93:24:72:E2:3F:B6:F2:19:7C:BB:54:C9"}}},"request":{"raw":"GET /fonts/pp-neue-montreal/pp-neue-montreal-medium.woff2 HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/fonts/pp-neue-montreal/font.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:26:58 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 51980\r\nserver: nginx/1.29.5\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 21730\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"pp-neue-montreal-medium.woff2\"\r\netag: \"b36caee87073c28b3f64d07e13d86b2a\"\r\nlast-modified: Fri, 13 Feb 2026 19:24:47 GMT\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: cle1::cgz5v-1771032418726-fdba61f8c4f9\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51980,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 51980, version 1.0","md5":"b36caee87073c28b3f64d07e13d86b2a","sha1":"5f77698d1e7c61ee9dbeda0774b7227c0e3ebf3a","sha256":"11a1b227a4f432bdc5587a529d34a46abbed7067b6e1fb913db0c489c7175828","sha512":"4d868669f739643351e9d2d6ec442fce5db761eb35f48e855deb755529556b28bf55adbd1eb4d25b34478efb35cc34662ead7af40342f365f6082b11f337ad38","ssdeep":"1536:mfOh/to3MFPyrfkIsvSfkMmIxH1S0VSIw6b:mfOh/+cJmpOYI0cIXb","tlshash":"f933f254a314656ed906ef65c95c2ba363bd33dae801e84f303d3bdbf91aa312790057","first_seen":"2023-11-11T04:34:18Z","last_seen":"2026-06-06T02:10:22.255056Z","times_seen":378,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":126,"receive":107,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/root-8mEX-aQm.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:26:58.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"6B:84:E2:F7:B0:5A:22:11:49:DC:F7:9B:A2:54:CE:36:02:5B:F4:F5","sha256":"EB:40:F6:36:FE:11:66:87:B7:F6:20:14:F5:EC:28:6B:5E:7F:78:A7:93:24:72:E2:3F:B6:F2:19:7C:BB:54:C9"}}},"request":{"raw":"GET /assets/root-8mEX-aQm.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-W8lXAx1b.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:26:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 1431828\r\nserver: nginx/1.29.5\r\naccess-control-allow-origin: *\r\nage: 12513\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"root-8mEX-aQm.js\"\r\ncontent-encoding: br\r\netag: \"830f3d8f9597c597fe987b96d7544c6b\"\r\nlast-modified: Thu, 12 Feb 2026 16:45:15 GMT\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: cle1::lc7kt-1770927228777-76f9780d25f7\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4584591,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (34815)","md5":"2cf1d3b508ff9b7c9f000159d1dee902","sha1":"33278b12cefadd98aee1cce8a095eb2e68c00a1c","sha256":"7fc482ab08c498d9e9759cb22316925699218fc75b2bf5cb3ce316ccbc611881","sha512":"21e8b2841a48b59f88917a645938c1a3af829092bfc09d487dd1518d89a427e186c4aed4ad0bdc547b710c9d7df868c74a24f185f905277ce2869504174d19e4","ssdeep":"12288:n9fpJVdQ4gcuM4m5D4yUvaqzm/rFqkKY4reW8VSm1FXV:n9fpXgXM35D4PCqm4recEz","tlshash":"b025e8ef6b0f5d9c0e61138444ab02d1e1545c83d4cc8483f5b89beb5ef94aa906a7fe","first_seen":"2026-02-12T20:37:44.891849Z","last_seen":"2026-02-17T15:15:31.638344Z","times_seen":4,"resource_available":false,"data":null}},"time_used":559,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":452,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eligible-ethgas.com/settings.json","fqdn":"eligible-ethgas.com","domain":"eligible-ethgas.com","tld":"com"},"ip":{"addr":"172.67.198.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eligible-ethgas.com/","date":"2026-02-14T01:26:59.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eligible-ethgas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 03:51:42 GMT","end":"Wed, 22 Apr 2026 04:51:35 GMT"},"fingerprint":{"sha1":"C0:D5:DC:5F:FD:44:D3:71:4C:7F:51:87:BF:22:44:A2:41:75:9F:87","sha256":"88:C6:B7:F8:12:4F:45:10:CC:8D:7B:FC:94:D4:1C:F0:DE:CA:56:41:19:54:D0:9C:60:55:20:4B:8C:FB:3E:45"}}},"request":{"raw":"GET /settings.json HTTP/1.1\r\nHost: eligible-ethgas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eligible-ethgas.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 01:26:59 GMT\r\ncontent-type: application/json\r\ncast-mode: default\r\nlast-modified: Thu, 22 Jan 2026 04:40:58 GMT\r\netag: W/\"6971aa5a-351\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ROFy4PztQuI%2BEJWNieYoKggnZaP8AI7dp61YyAmEnhvb2BXsiGroabReCKfHGs5Rk5amxv5pVwjeTlxqDgx0AwrX6GSeZgZlRPyEK5dJUn14e80%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd8c7cb589776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":849,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0edafa242f1339b9a891df5a4c30004d","sha1":"b320b528447ea4a19d07c7deba2ea3edfeb02dea","sha256":"37ea153ecb40aa932c3d34bc9f28c7b344ebf9f4972016d45ed603ad3388bfd3","sha512":"f4fadbc36c9129b0d0729032397855e52180821c4f36524bcc6948212a89d4e970bbf172403572ded86342f7cccab59b1da2615fa571a09da797992dd3b4bb12","ssdeep":"","tlshash":"b6011e45dc21486be2c90628b54e720809167d2742c43c406f1b9019af7e76b4f727cd","first_seen":"2025-12-31T12:33:59.897048Z","last_seen":"2026-02-14T01:27:34.021047Z","times_seen":5,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"eligible-ethgas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eligible-ethgas.com/assets/secure.php?req=ping","fqdn":"eligible-ethgas.com","domain":"eligible-ethgas.com","tld":"com"},"ip":{"addr":"172.67.198.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eligible-ethgas.com/","date":"2026-02-14T01:26:59.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eligible-ethgas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 03:51:42 GMT","end":"Wed, 22 Apr 2026 04:51:35 GMT"},"fingerprint":{"sha1":"C0:D5:DC:5F:FD:44:D3:71:4C:7F:51:87:BF:22:44:A2:41:75:9F:87","sha256":"88:C6:B7:F8:12:4F:45:10:CC:8D:7B:FC:94:D4:1C:F0:DE:CA:56:41:19:54:D0:9C:60:55:20:4B:8C:FB:3E:45"}}},"request":{"raw":"GET /assets/secure.php?req=ping HTTP/1.1\r\nHost: eligible-ethgas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eligible-ethgas.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 01:26:59 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 13263\r\ncast-mode: default\r\nlast-modified: Thu, 22 Jan 2026 04:40:58 GMT\r\netag: \"6971aa5a-33cf\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OxTVOOCE6nQMqVL0Nv%2FqqgQtzHDtjjReXbMeTHtApfzO3%2FoJ3E0ilUv8Bf6WnoNdDT8kbH%2BDlJdu9YUZJY9kUpwJBJ7FPxcYS%2BxQkV56QX%2Bswpw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd8c7cdb93876ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13263,"size_decoded":0,"mime_type":"application/octet-stream","magic":"PHP script, ASCII text, with very long lines (13257)","md5":"1c925167dc939ba7920a7b978a42b65d","sha1":"9b4d27462d3d897552a996e85fde3fbf24283df2","sha256":"0da07b458e6aeb7e396730ce0272d86319a458189810252b1a99ca689f765dac","sha512":"f09322f748a40ff5aa579399a7a7fef8eeca5c81c193eab15cea18d0c3ae30ad34719cd9aad64674575ef05cb185087dd43ab9a9a38340ce1295255a34188101","ssdeep":"384:CLpx+D3MQZuRAxe+0A0C2A6VR0NBfAqRq:CLpxQMnRQt0C2A6VR0NdAqRq","tlshash":"735230702582559b789e0dc7afd32a8e71b042e74e0f7a8f8e3839d9249c259c14dfe4","first_seen":"2025-11-08T08:53:34.56198Z","last_seen":"2026-06-04T04:08:18.148098Z","times_seen":108,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-14","alert":"PHP webshell obfuscated by encoding of mixed hex and dec","trigger":"eligible-ethgas.com/assets/secure.php?req=ping","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/04/18","description":"PHP webshell obfuscated by encoding of mixed hex and dec","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_obfuscated_encoding_mixed_dec_and_hex"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-14","alert":"Known PHP Webshells which contain unique strings, lousy rule for low hanging fruits. Most are catched by other rules in here but maybe these catch different versions.","trigger":"eligible-ethgas.com/assets/secure.php?req=ping","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/01/09","description":"Known PHP Webshells which contain unique strings, lousy rule for low hanging fruits. Most are catched by other rules in here but maybe these catch different versions.","hash":"7b6471774d14510cf6fa312a496eed72b614f6fc","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_by_string_known_webshell"}},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"eligible-ethgas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"us-assets.i.posthog.com/array/phc_9Cg41wNBIXNBnxyvzsD9AC6UT5KSjNjTR4SSnj4uH4/config.js","fqdn":"us-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"172.66.166.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:27:01.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 21:09:57 GMT","end":"Mon, 20 Apr 2026 22:09:56 GMT"},"fingerprint":{"sha1":"28:A9:79:25:3F:AF:B7:89:AC:9D:42:8A:C3:69:5B:4C:8E:6F:4C:77","sha256":"4D:63:13:FA:35:7E:FE:29:D4:53:E6:EF:2E:3B:8F:06:9D:32:9C:B5:EB:7E:3C:76:62:83:84:76:B4:C3:88:3C"}}},"request":{"raw":"GET /array/phc_9Cg41wNBIXNBnxyvzsD9AC6UT5KSjNjTR4SSnj4uH4/config.js HTTP/1.1\r\nHost: us-assets.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://claim.espresso.foundation\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:27:01 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 517\r\nvary: Origin, Referer, Accept-Encoding\r\nallow: GET, HEAD, OPTIONS\r\nx-frame-options: SAMEORIGIN\r\nreporting-endpoints: posthog=\"https://us.i.posthog.com/report/?token=sTMFPsFhdP1Ssg\u0026sample_rate=0.1\u0026v=2\"\r\ncontent-security-policy-report-only: default-src 'self'; style-src 'self' 'unsafe-inline' https://*.posthog.com https://fonts.googleapis.com; script-src 'self' 'nonce-4koT05BjRXV8z0PsGBmhT' https://*.posthog.com https://*.i.posthog.com; font-src 'self' https://*.posthog.com https://app-static.eu.posthog.com https://app-static-prod.posthog.com https://d1sdjtjk6xzm7.cloudfront.net https://fonts.gstatic.com https://cdn.jsdelivr.net https://assets.faircado.com https://use.typekit.net; worker-src 'self'; child-src 'none'; object-src 'none'; media-src https://res.cloudinary.com; img-src 'self' data: https://*.posthog.com https://posthog.com https://www.gravatar.com https://res.cloudinary.com https://platform.slack-edge.com https://raw.githubusercontent.com; frame-ancestors https://posthog.com https://preview.posthog.com https://vercel.com; connect-src 'self' https://status.posthog.com https://*.posthog.com  https://raw.githubusercontent.com https://api.github.com; frame-src https:; manifest-src 'self'; base-uri 'self'; report-uri https://us.i.posthog.com/report/?token=sTMFPsFhdP1Ssg\u0026sample_rate=0.1\u0026v=2; report-to posthog\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-opener-policy: same-origin\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 9\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ranges: bytes\r\ncache-control: max-age=300\r\ncf-cache-status: EXPIRED\r\nlast-modified: Sat, 14 Feb 2026 01:27:01 GMT\r\ncf-ray: 9cd8c7d8c827120a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":860,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (662)","md5":"f9602dfdc98c5a6fb6544ae7444ccfaf","sha1":"6cb2ab54f288ae3b676fc25db366d79fb1e10ddb","sha256":"4a42653d425ab8b40189e6e4513ce79ca10d48595b52d5dfcb4e0a057d500020","sha512":"8495d2da826c16a88402e145858b24de3378304fb867254845ab87950b8bc54c42c7a629270db02ed23dec97a526c5f075a71c99258d0be625adb4f7e675a3b5","ssdeep":"","tlshash":"79114c29f99008be00e6b51eabd7e0436f7b809b92444c1de9c441567b1d83b9987fc4","first_seen":"2026-02-12T20:37:44.903055Z","last_seen":"2026-02-14T01:27:34.071224Z","times_seen":2,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":36,"dns":20,"connect":1,"send":0,"wait":139,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/coinbaseWallet-WWX6LF36-BMRj6mTC.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:27:01.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"6B:84:E2:F7:B0:5A:22:11:49:DC:F7:9B:A2:54:CE:36:02:5B:F4:F5","sha256":"EB:40:F6:36:FE:11:66:87:B7:F6:20:14:F5:EC:28:6B:5E:7F:78:A7:93:24:72:E2:3F:B6:F2:19:7C:BB:54:C9"}}},"request":{"raw":"GET /assets/coinbaseWallet-WWX6LF36-BMRj6mTC.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-8mEX-aQm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:27:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 598\r\nserver: nginx/1.29.5\r\naccess-control-allow-origin: *\r\nage: 12230\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"coinbaseWallet-WWX6LF36-BMRj6mTC.js\"\r\netag: \"694e1f6dd72af86c8c477f9608975a74\"\r\nlast-modified: Thu, 12 Feb 2026 16:50:26 GMT\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: cle1::8d4gp-1770927256305-30ada7edf847\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":598,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (597)","md5":"694e1f6dd72af86c8c477f9608975a74","sha1":"3b0def5280cfb0e2cb76b3a039bf7e26986a7f92","sha256":"4a238a92bd23caf58037a8423adebebfc6a84b6762f033bc7e6ebf8741ca1e41","sha512":"7290b10e41ef6e0d7bc27cb24d75327c1493f0d2ae961fb89bf1bb387659a9bc14681b66dbe754722c5f2ea5a98b6cc76c2ca9cde9406de0062262f6f056003f","ssdeep":"","tlshash":"64f022a1a2dcb411186ad336513c5ad4bcd7128cae2e621c32801f1af82009a98c8a79","first_seen":"2024-12-25T05:30:42.515918Z","last_seen":"2026-05-17T17:52:49.746342Z","times_seen":63,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/user.context-DIZs7jcU.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:26:58.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"6B:84:E2:F7:B0:5A:22:11:49:DC:F7:9B:A2:54:CE:36:02:5B:F4:F5","sha256":"EB:40:F6:36:FE:11:66:87:B7:F6:20:14:F5:EC:28:6B:5E:7F:78:A7:93:24:72:E2:3F:B6:F2:19:7C:BB:54:C9"}}},"request":{"raw":"GET /assets/user.context-DIZs7jcU.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-W8lXAx1b.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:26:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 8556\r\nserver: nginx/1.29.5\r\naccess-control-allow-origin: *\r\nage: 12815\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"user.context-DIZs7jcU.js\"\r\ncontent-encoding: br\r\netag: \"59a66dba33e68f827983e3a16eaf132d\"\r\nlast-modified: Thu, 12 Feb 2026 16:40:12 GMT\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: cle1::27t5c-1770927228052-9f41212e1d44\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23804,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12049)","md5":"141404d63ba51bf63193a06055d53b51","sha1":"c45d60d7f06d4b87009fcb9b4d33800f51fea6b8","sha256":"59a539e37c978604e589f466d438e0a4a599b4eb7ff53c7120cf6e6f75658f99","sha512":"fb6d0501d6ad0d357cb96205f93210ca81d25d686f9f3fc87a2cdfc917d70aa42159c8e77596c49e1127c8f9fd2577d3680992424706b83352a8aae4d07f660e","ssdeep":"384:OPQJMJF7sMqTKP/bSZu/dcLgl1lkkObqtrC8CmUZr8sEo2M48/DFYREV7J/RC5AU:OPQJMJFITKP/b24dcC1lkMtrC8CBl8uM","tlshash":"67b2f75831d9e0b142e750a4947f620bf17819a0e05ca4a4e2aafdf439f8d97817bf36","first_seen":"2026-02-12T20:37:44.894834Z","last_seen":"2026-02-17T15:15:31.655683Z","times_seen":4,"resource_available":true,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.espresso.foundation/assets/walletConnectWallet-FNSU4KNU-B0ci71fU.js","fqdn":"claim.espresso.foundation","domain":"espresso.foundation","tld":"foundation"},"ip":{"addr":"3.18.26.223","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.espresso.foundation/","date":"2026-02-14T01:27:01.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"claim.espresso.foundation","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 09 Feb 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"6B:84:E2:F7:B0:5A:22:11:49:DC:F7:9B:A2:54:CE:36:02:5B:F4:F5","sha256":"EB:40:F6:36:FE:11:66:87:B7:F6:20:14:F5:EC:28:6B:5E:7F:78:A7:93:24:72:E2:3F:B6:F2:19:7C:BB:54:C9"}}},"request":{"raw":"GET /assets/walletConnectWallet-FNSU4KNU-B0ci71fU.js HTTP/1.1\r\nHost: claim.espresso.foundation\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.espresso.foundation/assets/root-8mEX-aQm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:27:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 655\r\nserver: nginx/1.29.5\r\naccess-control-allow-origin: *\r\nage: 12830\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"walletConnectWallet-FNSU4KNU-B0ci71fU.js\"\r\ncontent-encoding: br\r\netag: \"c54691e324f11158e160ac01cf110898\"\r\nlast-modified: Thu, 12 Feb 2026 16:40:25 GMT\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: cle1::z9v9h-1770927256311-afa79a144967\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.29.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1513,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1512)","md5":"05a8359b297686a38136a26a10311301","sha1":"5d995f91f19bdd38e876708ea756b76ad53ce55c","sha256":"ff6da22ac4da1356c60264b8a4ca0e3bf79b026e16220dfac81cf1058e40160d","sha512":"28ffda0d4b0fcf35ec80c90c3bfc90103685a5220858159a9016588568e808550fb18e8b2d8ee45f72817087723c842ad4f3872adf933ef1da6267d6cef4fdbb","ssdeep":"","tlshash":"1a3115ef6be412f4d017e3a3d01590267ddb24ba7729ef44421b4ae0ae0149d64c8d78","first_seen":"2024-12-25T05:30:42.591141Z","last_seen":"2026-05-20T16:17:57.685031Z","times_seen":75,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}