{"report_id":"b8b1b931-3ad3-40f5-8b13-06466c0f7c0c","version":6,"status":"done","tags":[],"date":"2026-01-24T13:54:08Z","url":{"schema":"https","addr":"masterbot.claims","fqdn":"masterbot.claims","domain":"masterbot.claims","tld":"claims"},"ip":{"addr":"104.21.59.52","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"masterbot.claims/","fqdn":"masterbot.claims","domain":"masterbot.claims","tld":"claims"},"title":"MasterBOT | Airdrop","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"masterbot.claims","fqdn":"masterbot.claims","domain":"masterbot.claims","tld":"claims"},"ip":{"addr":"104.21.59.52","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-28T13:54:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"masterbot.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"masterbot.claims","ip":{"addr":"104.21.59.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-01-24T13:38:52.188704Z","last_seen":"2026-01-24T13:38:52.188704Z","alert_count":22,"request_count":22,"received_data":744919,"sent_data":10805,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"masterbot.claims/react-transition-group.prod.js","fqdn":"masterbot.claims","domain":"masterbot.claims","tld":"claims"},"ip":{"addr":"104.21.59.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"40e9b34399ee7d7e88f310563a604f78","sha1":"0b8e0e529352d407ef463e60ab61a68a89d76ab4","sha256":"4d0e72a0acb670813bd463f7d8b38db1dbf91fa543706a84dce8550c5ecede1b","sha512":"2e088cfdb40f06ae39a4613763ec9061471e603171e79b572dc9afbbcc248bf455d5c84afcb37e2e29314bf4a6fb85fedfda88bec9965fe904b7025eee17a3fc","ssdeep":"6144:dbHI1IuE/E06lWcR2cwL7mf0w0ls6l+Cr7:dsysJWcR29Lacxdlb7","tlshash":"fc84c68207ca10d9bff4f2bf847da099c4ad851147802fe7b57da196e4dc78122edb86","size":403308,"data":"","first_seen":"2025-10-30T00:46:19.013791Z","last_seen":"2026-01-24T13:54:19.374388Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"masterbot.claims/","fqdn":"masterbot.claims","domain":"masterbot.claims","tld":"claims"},"ip":{"addr":"104.21.59.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0695d2446cf005f4961e9d470c28c8e8","sha1":"99bf37424ebf1ca54a915e14cfbfba02b881f6e5","sha256":"27ea9efad59d3804fc9e38143374af0675e4c36bc076aefe903bf5cae9bec896","sha512":"b83464c0c6b5bdc201b0bc7e8796bd57cd39946661ceb7f237c08fa31c74f420d9a650e3c8d2b1cd6f18ffb86e3d0ba517a52524f6ce5aa97bcc7e4cceef37a5","ssdeep":"3072:39V+QGZepMAHHHdKX/CouD79AAL1LWnCKufYruQenEKs1iIViGOdXjJd+MJwH5tu:39sQGgMMdsbieAL16nCKufW0xsUPh","tlshash":"2184b8810bda10d8bff4f2bf957da095c4ad851183843fe7b47da192e4dc78122eda86","size":396396,"data":"","first_seen":"2025-10-30T00:46:19.031191Z","last_seen":"2026-01-24T13:54:19.377763Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"masterbot.claims/style.css","fqdn":"masterbot.claims","domain":"masterbot.claims","tld":"claims"},"ip":{"addr":"104.21.59.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://masterbot.claims/","date":"2026-01-24T13:53:47.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"masterbot.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 17:15:57 GMT","end":"Tue, 24 Mar 2026 18:12:22 GMT"},"fingerprint":{"sha1":"1F:30:F3:38:13:C2:0F:5A:52:EB:C4:7F:8E:67:E1:65:6E:B7:51:F3","sha256":"9C:43:EE:A0:D5:32:50:16:8B:72:C7:0B:DB:96:D3:DE:C5:71:8B:78:9E:DC:4E:8D:96:DF:A3:96:E4:89:60:0F"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: masterbot.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://masterbot.claims/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:47 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Oct 2025 19:53:25 GMT\r\netag: \"f4da-64229409a7f04-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 9201\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\nage: 916\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Omx49hIl027sqAa%2BapwEsvALogRtsTOky525eIEBfMuPUXPoVxE%2FKPy%2Fs2QU%2F9z8ZOTCfNFVYW9bRB88IKk98%2BEhHHtBPvjyKGl3C%2F7X\"}]}\r\ncf-ray: 9c3004df0a93b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62682,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (62682), with no line terminators","md5":"a29db337456cd84d1f7ed0c0852a1d78","sha1":"3bde56d5f940b1b5920847a336bfbd8de6b221a1","sha256":"f63af6cc6083b356565e030b23b294898dce294a53373917940d43aa64278203","sha512":"cceb32c66b9946fb00e63c6775aa423b2445c3d8e19df56d06f42d576517aeb04566b931938ff39ce24011bf8134780f1bb390db5a35e7a487bb6d4d2a0d943a","ssdeep":"768:ujks+ovXyJDWhd0sZ/QfYjuEsJh2vWcuHu0lw8QFGPfHPhMHS3vhW8zzWH2L0r8c:jYjuEsJh3lzB2HqU","tlshash":"d953b320e510503fb527d9bb25c5ae5d3418e002e5a32baef73a64e9cec74b71bb1718","first_seen":"2025-12-02T12:43:58.694002Z","last_seen":"2026-01-24T13:54:19.373785Z","times_seen":6,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"masterbot.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"masterbot.claims/react-transition-group.prod.js","fqdn":"masterbot.claims","domain":"masterbot.claims","tld":"claims"},"ip":{"addr":"104.21.59.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://masterbot.claims/","date":"2026-01-24T13:53:47.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"masterbot.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 17:15:57 GMT","end":"Tue, 24 Mar 2026 18:12:22 GMT"},"fingerprint":{"sha1":"1F:30:F3:38:13:C2:0F:5A:52:EB:C4:7F:8E:67:E1:65:6E:B7:51:F3","sha256":"9C:43:EE:A0:D5:32:50:16:8B:72:C7:0B:DB:96:D3:DE:C5:71:8B:78:9E:DC:4E:8D:96:DF:A3:96:E4:89:60:0F"}}},"request":{"raw":"GET /react-transition-group.prod.js HTTP/1.1\r\nHost: masterbot.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://masterbot.claims/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:47 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Oct 2025 19:53:25 GMT\r\netag: \"6276c-64229409a7734-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l7f%2F3ppAOoxz%2FN%2FrjQyE%2B3Vqnw1O811ZBPBj%2FuYCHPwq5%2BxULKlhYll0g0q8VyytFqBYXJxzjhlh6cnpQdsyS13yf3mnzvyZorPErATy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 9c3004df0a94b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":403308,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65287)","md5":"40e9b34399ee7d7e88f310563a604f78","sha1":"0b8e0e529352d407ef463e60ab61a68a89d76ab4","sha256":"4d0e72a0acb670813bd463f7d8b38db1dbf91fa543706a84dce8550c5ecede1b","sha512":"2e088cfdb40f06ae39a4613763ec9061471e603171e79b572dc9afbbcc248bf455d5c84afcb37e2e29314bf4a6fb85fedfda88bec9965fe904b7025eee17a3fc","ssdeep":"6144:dbHI1IuE/E06lWcR2cwL7mf0w0ls6l+Cr7:dsysJWcR29Lacxdlb7","tlshash":"fc84c68207ca10d9bff4f2bf847da099c4ad851147802fe7b57da196e4dc78122edb86","first_seen":"2025-10-30T00:46:19.013791Z","last_seen":"2026-01-24T13:54:19.374388Z","times_seen":4,"resource_available":true,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":178,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"masterbot.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"masterbot.claims/images/image_37e12fe64bcc11848b8c979aed1164a33d726670.svg","fqdn":"masterbot.claims","domain":"masterbot.claims","tld":"claims"},"ip":{"addr":"104.21.59.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://masterbot.claims/","date":"2026-01-24T13:53:47.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"masterbot.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 17:15:57 GMT","end":"Tue, 24 Mar 2026 18:12:22 GMT"},"fingerprint":{"sha1":"1F:30:F3:38:13:C2:0F:5A:52:EB:C4:7F:8E:67:E1:65:6E:B7:51:F3","sha256":"9C:43:EE:A0:D5:32:50:16:8B:72:C7:0B:DB:96:D3:DE:C5:71:8B:78:9E:DC:4E:8D:96:DF:A3:96:E4:89:60:0F"}}},"request":{"raw":"GET /images/image_37e12fe64bcc11848b8c979aed1164a33d726670.svg HTTP/1.1\r\nHost: masterbot.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://masterbot.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:47 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Oct 2025 19:53:25 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YbXtlLFZhykZ2BepptzMRO4j%2Fth%2B2Mu40%2BiZhXTeo%2FMSdhbzTAWcEN22L9RuTLrPzVsGkJnmVm2bmhBe8jZEQh5Bo1Yy5oxXtvW6jy4n\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\nage: 916\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"ad6-64229409ab99c\"\r\ncf-ray: 9c3004df1a9ab503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2774,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"14568298cbae655fd79fb65e4d75bebf","sha1":"37e12fe64bcc11848b8c979aed1164a33d726670","sha256":"d70763867ccbbd3ca57c1a327323a395798ed5c821d26c02e71667d46ea34086","sha512":"c76d53ca8cc2298b9fe604433f1ca76a6464939ed19640fc6262e54287e356a43aef2883212a2b1358d089843f8da724db7128bb5dce5e3f27da890fbe59e227","ssdeep":"","tlshash":"985153c1615827e1d8048be0df2e65b6227b1af4be82ea43f1569df23cc44de0d58bc6","first_seen":"2025-09-02T07:43:09.380851Z","last_seen":"2026-04-13T18:25:45.858184Z","times_seen":439,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"masterbot.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"masterbot.claims/images/image_a2f3f47fce8eb5ad2b1865446591c3087c693ca6.svg","fqdn":"masterbot.claims","domain":"masterbot.claims","tld":"claims"},"ip":{"addr":"104.21.59.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://masterbot.claims/","date":"2026-01-24T13:53:47.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"masterbot.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 17:15:57 GMT","end":"Tue, 24 Mar 2026 18:12:22 GMT"},"fingerprint":{"sha1":"1F:30:F3:38:13:C2:0F:5A:52:EB:C4:7F:8E:67:E1:65:6E:B7:51:F3","sha256":"9C:43:EE:A0:D5:32:50:16:8B:72:C7:0B:DB:96:D3:DE:C5:71:8B:78:9E:DC:4E:8D:96:DF:A3:96:E4:89:60:0F"}}},"request":{"raw":"GET /images/image_a2f3f47fce8eb5ad2b1865446591c3087c693ca6.svg HTTP/1.1\r\nHost: masterbot.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://masterbot.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:47 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Oct 2025 19:53:25 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dauq0NyKSxqb4jGdP553hp%2F9vfOlY5ED892wmKgkgy9nFqaTBaDk1p9uIKBNI2CiDpBKpYqVx2vNXAhvMwryluThLoEj5TLdCnaYajGp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\nage: 916\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"eab-64229409ad4f4\"\r\ncf-ray: 9c3004df1a9bb503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3755,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"399f1f0b7b8310ee13f5f344cf8d1194","sha1":"a2f3f47fce8eb5ad2b1865446591c3087c693ca6","sha256":"1b03e12e25d6722e35e48e8f63e6b740f004b74d828e8ad6d79c07615bcfe12a","sha512":"3b7b4b431ba516221ad79743433630dadb9ce869f4e6401651982bea4d87ebe2a18248a2722fe1d8fac295a89f235371f30314e29c9de56eb32e5f6bf143b676","ssdeep":"","tlshash":"157173ebb3c8a2c0d60ae3f49b2a54f9360316f94623c228c6e50f65f99209dc94c8c5","first_seen":"2025-09-02T07:43:09.392798Z","last_seen":"2026-04-13T18:25:45.843178Z","times_seen":438,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"masterbot.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"masterbot.claims/images/image_3cc94ed020659f2ed5fefcc8dab4dc01380fcbb0.svg","fqdn":"masterbot.claims","domain":"masterbot.claims","tld":"claims"},"ip":{"addr":"104.21.59.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://masterbot.claims/","date":"2026-01-24T13:53:47.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"masterbot.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 17:15:57 GMT","end":"Tue, 24 Mar 2026 18:12:22 GMT"},"fingerprint":{"sha1":"1F:30:F3:38:13:C2:0F:5A:52:EB:C4:7F:8E:67:E1:65:6E:B7:51:F3","sha256":"9C:43:EE:A0:D5:32:50:16:8B:72:C7:0B:DB:96:D3:DE:C5:71:8B:78:9E:DC:4E:8D:96:DF:A3:96:E4:89:60:0F"}}},"request":{"raw":"GET /images/image_3cc94ed020659f2ed5fefcc8dab4dc01380fcbb0.svg HTTP/1.1\r\nHost: masterbot.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://masterbot.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:47 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Oct 2025 19:53:25 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sv2SPeQCjR168nxqgSShurLKQ6us1oO%2BQ9uK4yzWPj93qnHwzbRbZMxjQ4YTScE88efc6uiKBZcfEUTjKJxRbLGjrGeKvLz8TogVsHDM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\nage: 915\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"139c-64229409abd84\"\r\ncf-ray: 9c3004df1a96b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5020,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"572b2b93edf154b733c0a57e6ed1921e","sha1":"3cc94ed020659f2ed5fefcc8dab4dc01380fcbb0","sha256":"48be26395e4c8699feda9f128c6c5da763a36e2357f774fe28a55a519203fc2f","sha512":"ac9d55fe7cccad9b529280f09c289bb3e474cf3ee6f3819b2281e0e4229e0d9a31d977b9d796e3e0a94a90758e6b6163bb74f8bee5c103a995d31cc5087fb852","ssdeep":"96:NZrgo+DmmnE9ht506zProP25NRRlCN1HxiRSwRftrQdJUlo5LJ:DSnEN50wPzRqH0RSwRftmao","tlshash":"70a1c8fc73f065a55a88c7e9ef06906a7daa50f3bf418240f08c5f9e1b96812cc976c5","first_seen":"2025-10-26T18:04:12.076697Z","last_seen":"2026-01-24T13:54:19.376478Z","times_seen":20,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"masterbot.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"masterbot.claims/images/image_d5e2cb59069a886204c8284813a02ecee6082250.svg","fqdn":"masterbot.claims","domain":"masterbot.claims","tld":"claims"},"ip":{"addr":"104.21.59.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://masterbot.claims/","date":"2026-01-24T13:53:47.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"masterbot.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 17:15:57 GMT","end":"Tue, 24 Mar 2026 18:12:22 GMT"},"fingerprint":{"sha1":"1F:30:F3:38:13:C2:0F:5A:52:EB:C4:7F:8E:67:E1:65:6E:B7:51:F3","sha256":"9C:43:EE:A0:D5:32:50:16:8B:72:C7:0B:DB:96:D3:DE:C5:71:8B:78:9E:DC:4E:8D:96:DF:A3:96:E4:89:60:0F"}}},"request":{"raw":"GET /images/image_d5e2cb59069a886204c8284813a02ecee6082250.svg HTTP/1.1\r\nHost: masterbot.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://masterbot.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:47 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Oct 2025 19:53:25 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JT%2FFmoRvkZgQBDBXPEinZhfmjyozgRd9F0xWoYNB%2FTfysMOGgiIGhg%2BoRJZpPcRQjhPS73akiMiSeNcDIg25tm%2BPvtYe%2FEJmwJtWRQmg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\nage: 916\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"2677-64229409ad8dc\"\r\ncf-ray: 9c3004df1a99b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9847,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5cb11fd2b4b91716c41205eb17e9d960","sha1":"d5e2cb59069a886204c8284813a02ecee6082250","sha256":"bf19d99498915d1aec2f355703d23bb5655de09d5b2bbcb88828aa00d9d6a3a6","sha512":"6e8df520180ffde25b12c20447d7b3ae364a11f1104c1cd5e5ee7d96978b69c43aa749db6e293e1e2acc9d6c3568a0a2841cb26ff2e105f5929b9225ab46b26b","ssdeep":"192:OXI9CbNZ73IhN47x5QO6tQuPOmU/m6FJIReX1gZss6+:+ThZ73eKVT6W05U/m6oeXdK","tlshash":"5012d8ec6be271f0f849e7e4e51698b63b1b35fb7611cb18c3856d21e64100eca79c86","first_seen":"2025-09-02T07:43:09.38934Z","last_seen":"2026-04-13T18:25:45.86138Z","times_seen":438,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"masterbot.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"masterbot.claims/fonts/font_b42951014c5eca12749d87a4706caf22dc4fe081.woff2","fqdn":"masterbot.claims","domain":"masterbot.claims","tld":"claims"},"ip":{"addr":"104.21.59.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://masterbot.claims/","date":"2026-01-24T13:53:47.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"masterbot.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 17:15:57 GMT","end":"Tue, 24 Mar 2026 18:12:22 GMT"},"fingerprint":{"sha1":"1F:30:F3:38:13:C2:0F:5A:52:EB:C4:7F:8E:67:E1:65:6E:B7:51:F3","sha256":"9C:43:EE:A0:D5:32:50:16:8B:72:C7:0B:DB:96:D3:DE:C5:71:8B:78:9E:DC:4E:8D:96:DF:A3:96:E4:89:60:0F"}}},"request":{"raw":"GET /fonts/font_b42951014c5eca12749d87a4706caf22dc4fe081.woff2 HTTP/1.1\r\nHost: masterbot.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://masterbot.claims/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:47 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Oct 2025 19:53:25 GMT\r\netag: \"6104-64229409a9e44\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 24836\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: font/woff2\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xZVHdBhQa8eFO2TH5Jn9waqo0588qmU5g%2BvXLFmE7XNDRDDtb2z%2FCbjRs6%2FRN8Mo9fVbN0rrsBbZfn5cbFI%2B9jMQB9wHmsYplG%2Foz46h\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c3004e1fac7b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-04-18T12:11:00.666503Z","times_seen":17602,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"masterbot.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"masterbot.claims/fonts/font_b42951014c5eca12749d87a4706caf22dc4fe081.woff2","fqdn":"masterbot.claims","domain":"masterbot.claims","tld":"claims"},"ip":{"addr":"104.21.59.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://masterbot.claims/","date":"2026-01-24T13:53:47.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"masterbot.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 17:15:57 GMT","end":"Tue, 24 Mar 2026 18:12:22 GMT"},"fingerprint":{"sha1":"1F:30:F3:38:13:C2:0F:5A:52:EB:C4:7F:8E:67:E1:65:6E:B7:51:F3","sha256":"9C:43:EE:A0:D5:32:50:16:8B:72:C7:0B:DB:96:D3:DE:C5:71:8B:78:9E:DC:4E:8D:96:DF:A3:96:E4:89:60:0F"}}},"request":{"raw":"GET /fonts/font_b42951014c5eca12749d87a4706caf22dc4fe081.woff2 HTTP/1.1\r\nHost: masterbot.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://masterbot.claims/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:47 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Oct 2025 19:53:25 GMT\r\netag: \"6104-64229409a9e44\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 24836\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: font/woff2\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2bg9o3Ej4vn6dw3L9MFEDBX7jotj39b9OX7HrirqinVH94bSVOq3W8N028IoFhq8MpnqzRmGmLrDqI2Kyh0JLSaapbj8IpdqsilL8kPu\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c3004e20acab503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-04-18T12:11:00.666503Z","times_seen":17602,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"masterbot.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"masterbot.claims/images/image_4503d4caddb600c467c92cb18cd5b2c13a056236.svg","fqdn":"masterbot.claims","domain":"masterbot.claims","tld":"claims"},"ip":{"addr":"104.21.59.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://masterbot.claims/","date":"2026-01-24T13:53:47.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"masterbot.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 17:15:57 GMT","end":"Tue, 24 Mar 2026 18:12:22 GMT"},"fingerprint":{"sha1":"1F:30:F3:38:13:C2:0F:5A:52:EB:C4:7F:8E:67:E1:65:6E:B7:51:F3","sha256":"9C:43:EE:A0:D5:32:50:16:8B:72:C7:0B:DB:96:D3:DE:C5:71:8B:78:9E:DC:4E:8D:96:DF:A3:96:E4:89:60:0F"}}},"request":{"raw":"GET /images/image_4503d4caddb600c467c92cb18cd5b2c13a056236.svg HTTP/1.1\r\nHost: masterbot.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://masterbot.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:47 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Oct 2025 19:53:25 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X6BliClmOCKeHZi2oNl6AcfVkoz2SSmtJdhPWmCUHU85d8csmIjhZ9gK%2BDFTk34b%2BSYUh6p%2BLzc6ODhMYilDyMIoWOrMst4q8VG1NyED\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\nage: 915\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"912-64229409ac554\"\r\ncf-ray: 9c3004df1a9cb503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2322,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"37d619de40a237df97301e340b9b2447","sha1":"4503d4caddb600c467c92cb18cd5b2c13a056236","sha256":"e5e5d3c3bccd9d67b02f2ae4335e1b9f7add851b0df03eea4376ca8f39267a62","sha512":"d82646626adbee5cc7c9a709bd37b8eb8026eca69112bccd16e0b5791182ec16d8d967eee4aa99399cee3594d97bf5855bbd9fd7255a7093e090258990879db9","ssdeep":"","tlshash":"f541555122ac93e49906a7c4e715f0b2755328fd6883ca10ea32bb70b4505df8dd98c4","first_seen":"2025-09-02T07:43:09.414801Z","last_seen":"2026-04-13T18:25:45.854898Z","times_seen":437,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"masterbot.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"masterbot.claims/fonts/font_b42951014c5eca12749d87a4706caf22dc4fe081.woff2","fqdn":"masterbot.claims","domain":"masterbot.claims","tld":"claims"},"ip":{"addr":"104.21.59.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://masterbot.claims/","date":"2026-01-24T13:53:47.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"masterbot.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 17:15:57 GMT","end":"Tue, 24 Mar 2026 18:12:22 GMT"},"fingerprint":{"sha1":"1F:30:F3:38:13:C2:0F:5A:52:EB:C4:7F:8E:67:E1:65:6E:B7:51:F3","sha256":"9C:43:EE:A0:D5:32:50:16:8B:72:C7:0B:DB:96:D3:DE:C5:71:8B:78:9E:DC:4E:8D:96:DF:A3:96:E4:89:60:0F"}}},"request":{"raw":"GET /fonts/font_b42951014c5eca12749d87a4706caf22dc4fe081.woff2 HTTP/1.1\r\nHost: masterbot.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://masterbot.claims/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:47 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Oct 2025 19:53:25 GMT\r\netag: \"6104-64229409a9e44\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 24836\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: font/woff2\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gaAxuiWsZitSNtAoQaoPQ7jL%2FZPX8nZqmEAO7Y%2FEf3v%2BDruzMDtGXv%2FZfnmHgdhNasQK4RcyptjckXBKnx0c8KOK%2FhYfHXDi4fe1Dxee\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c3004e20ac8b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-04-18T12:11:00.666503Z","times_seen":17602,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"masterbot.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"masterbot.claims/","fqdn":"masterbot.claims","domain":"masterbot.claims","tld":"claims"},"ip":{"addr":"104.21.59.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-24T13:53:47.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"masterbot.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 17:15:57 GMT","end":"Tue, 24 Mar 2026 18:12:22 GMT"},"fingerprint":{"sha1":"1F:30:F3:38:13:C2:0F:5A:52:EB:C4:7F:8E:67:E1:65:6E:B7:51:F3","sha256":"9C:43:EE:A0:D5:32:50:16:8B:72:C7:0B:DB:96:D3:DE:C5:71:8B:78:9E:DC:4E:8D:96:DF:A3:96:E4:89:60:0F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: masterbot.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:47 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Oct 2025 19:53:25 GMT\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FQqqs9SwWXjsEvs7IyzOOtQBoQvudNvXGSRtCk4eDENw6veOsSy2cfBGiW8O1ozQVAkl8qhDdB0zXqdTUOyL1Ur5tWCBZGAIlW3M3DwE\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c3004dd7bce0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37882,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1670)","md5":"87e85f21c96f9b46a6adbc8a6d1bbded","sha1":"27b5a99f79621b29ad190f07692be064af3084a4","sha256":"80456401b9d2487f783a25ca055391cd71659d0467cb928b3f060a587941584a","sha512":"dcfe77cea30446a9d34ed183416ed591e3f64d2d5c2e2871ea61cb314d4ef7c307029843ee6756d4ec5021b2422671fa980a2bd62ae193f9253277189529ab70","ssdeep":"768:66+ZHMIAat2uuiCBHynZwE2oRYXFxYRYwU33:Coat7uvsedXFxUYww3","tlshash":"c803f7e123a0003ea47751c12772673976e6a9a3ecde1005fbfe9b951f51dcbe823198","first_seen":"2025-12-02T12:43:58.700564Z","last_seen":"2026-01-24T13:54:19.369262Z","times_seen":6,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":56,"dns":42,"connect":1,"send":0,"wait":78,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"masterbot.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"masterbot.claims/images/image_28f5308df3de8e7435ed9f29c07271102455bffb.svg","fqdn":"masterbot.claims","domain":"masterbot.claims","tld":"claims"},"ip":{"addr":"104.21.59.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://masterbot.claims/","date":"2026-01-24T13:53:47.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"masterbot.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 17:15:57 GMT","end":"Tue, 24 Mar 2026 18:12:22 GMT"},"fingerprint":{"sha1":"1F:30:F3:38:13:C2:0F:5A:52:EB:C4:7F:8E:67:E1:65:6E:B7:51:F3","sha256":"9C:43:EE:A0:D5:32:50:16:8B:72:C7:0B:DB:96:D3:DE:C5:71:8B:78:9E:DC:4E:8D:96:DF:A3:96:E4:89:60:0F"}}},"request":{"raw":"GET /images/image_28f5308df3de8e7435ed9f29c07271102455bffb.svg HTTP/1.1\r\nHost: masterbot.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://masterbot.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:47 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Oct 2025 19:53:25 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7uTvN0cE9KTH0oT%2BePPt3Bd9t3jjOi%2BuaYEA8LRZO192GyMoFo%2B9GR%2BAg3PbS%2FjMgaLWjfsM9NRJZOa0Q47Np%2ByIC6iJqVlL7oBtPez8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\nage: 916\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"314a-64229409ab1cc\"\r\ncf-ray: 9c3004df1a97b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12618,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"32264f4b5ef61d12d6c8c7585e844dcc","sha1":"28f5308df3de8e7435ed9f29c07271102455bffb","sha256":"22c0b5638dc650cc5fabd4b50dd2c24b0dccdc305ea37a8dc15aaf856b58a1c8","sha512":"33d0b30212a2408e4f0b435257efd055b0a0f8a3aa404e8c666de12528a446b7cc056270e6b3f79241626436351e520f046fb37d28bc04e28178d45a1a2f4b52","ssdeep":"192:FDLeI6N6VFklwNwKIxv6Cqc9I4jnMnX6TVlAaPyvGONdRvmiVTzvjxqVASFkM0/e:9Lm9wwtiCqVMMqTVlhPIzHeiVHvj6mrK","tlshash":"cb4297eab3a9e3d4f805e7f4872768743b6b2cfd2e20c59947d5aca0e95109d4858cc2","first_seen":"2025-09-02T07:43:09.420529Z","last_seen":"2026-04-13T18:25:45.857335Z","times_seen":437,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"masterbot.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"masterbot.claims/secureproxy?e=ping_proxy","fqdn":"masterbot.claims","domain":"masterbot.claims","tld":"claims"},"ip":{"addr":"104.21.59.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://masterbot.claims/","date":"2026-01-24T13:53:47.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"masterbot.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 17:15:57 GMT","end":"Tue, 24 Mar 2026 18:12:22 GMT"},"fingerprint":{"sha1":"1F:30:F3:38:13:C2:0F:5A:52:EB:C4:7F:8E:67:E1:65:6E:B7:51:F3","sha256":"9C:43:EE:A0:D5:32:50:16:8B:72:C7:0B:DB:96:D3:DE:C5:71:8B:78:9E:DC:4E:8D:96:DF:A3:96:E4:89:60:0F"}}},"request":{"raw":"GET /secureproxy?e=ping_proxy HTTP/1.1\r\nHost: masterbot.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://masterbot.claims/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:47 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncontent-type: text/html; charset=utf-8\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bsxs%2B%2BWvjpZea%2BWFToj1sc%2Fyd%2BgJvUhu2kTIYYUex0oFrMBYYKfklx%2B%2BCpJRBwNBQj%2B17WXZV3l7Gc3DbM6d6WX7eQMepUn%2BUG6e%2FSSl\"}]}\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c3004e1babab503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"6fdb087aa3fbfbcb8287a593a0919e61","sha1":"0e514a0662bcb69dc863953d1ce26e3d40e81a87","sha256":"9795c5ff8937f23526ccb207a5684c1fc94a7854e19c021b39d944e51f5baef2","sha512":"be5457d14c930b51b47ab152850c1ceaafe6ef88c8671b48164abbc83410b0c07a1e178540f6cdeac5f2672cadb1d1cbbb3434b3e39bc2c50c4646a2bae57437","ssdeep":"","tlshash":"fe300000300000000000000c0000000000000000000000000000000000300000000000","first_seen":"2023-04-12T09:14:15Z","last_seen":"2026-04-18T01:18:17.304613Z","times_seen":8402,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"masterbot.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"masterbot.claims/fonts/font_b42951014c5eca12749d87a4706caf22dc4fe081.woff2","fqdn":"masterbot.claims","domain":"masterbot.claims","tld":"claims"},"ip":{"addr":"104.21.59.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://masterbot.claims/","date":"2026-01-24T13:53:47.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"masterbot.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 17:15:57 GMT","end":"Tue, 24 Mar 2026 18:12:22 GMT"},"fingerprint":{"sha1":"1F:30:F3:38:13:C2:0F:5A:52:EB:C4:7F:8E:67:E1:65:6E:B7:51:F3","sha256":"9C:43:EE:A0:D5:32:50:16:8B:72:C7:0B:DB:96:D3:DE:C5:71:8B:78:9E:DC:4E:8D:96:DF:A3:96:E4:89:60:0F"}}},"request":{"raw":"GET /fonts/font_b42951014c5eca12749d87a4706caf22dc4fe081.woff2 HTTP/1.1\r\nHost: masterbot.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://masterbot.claims/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:47 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Oct 2025 19:53:25 GMT\r\netag: \"6104-64229409a9e44\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 24836\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: font/woff2\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ueQS5oykcttBt9PbLzbDaBUiVvjiXrL7STBWjznBv0%2BXNMERWj3InLaqAWIZak3yHrwWgqdjgyvQfEnsogIeyaYBubAgRZRZJRJTFURU\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c3004e1fac4b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-04-18T12:11:00.666503Z","times_seen":17602,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":132,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"masterbot.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"masterbot.claims/fonts/font_d8fc94bf7a39043a7759bd564a7e16b3ea080736.woff2","fqdn":"masterbot.claims","domain":"masterbot.claims","tld":"claims"},"ip":{"addr":"104.21.59.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://masterbot.claims/","date":"2026-01-24T13:53:47.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"masterbot.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 17:15:57 GMT","end":"Tue, 24 Mar 2026 18:12:22 GMT"},"fingerprint":{"sha1":"1F:30:F3:38:13:C2:0F:5A:52:EB:C4:7F:8E:67:E1:65:6E:B7:51:F3","sha256":"9C:43:EE:A0:D5:32:50:16:8B:72:C7:0B:DB:96:D3:DE:C5:71:8B:78:9E:DC:4E:8D:96:DF:A3:96:E4:89:60:0F"}}},"request":{"raw":"GET /fonts/font_d8fc94bf7a39043a7759bd564a7e16b3ea080736.woff2 HTTP/1.1\r\nHost: masterbot.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://masterbot.claims/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:47 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Oct 2025 19:53:25 GMT\r\netag: \"38a4-64229409aa22c\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 14500\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: font/woff2\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aRrKWySXmVi7eUH5AZ7gBxX75UMKAjwshn8rYT%2Fkbb1UEwA9gpEqCSavKO1M4AylGf00ZupEOUWXgocyz9w5RStP04kEYBcsCsbA%2BLRI\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c3004e22acdb503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14500,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14500, version 1.0","md5":"e58febde317b69ceb51690ea201850c9","sha1":"d8fc94bf7a39043a7759bd564a7e16b3ea080736","sha256":"c268b459a9329e59fecf39a17618efd44c71735532048d60b12aab76a8c14914","sha512":"af17f0a6913d974bd7d38a060549dacd158c667abb08f830d44d302c1a1cb4f8106eeeb772d2b4066be2c5a1e763d26042c707343770f5e84b0f5165cab9d96b","ssdeep":"384:4VvSHMmDtGjtHrBRvGjLWPSNRXZpyJ+kC18bZ:4VvSsmDt6LBROj1RXZ4J+318bZ","tlshash":"8a52b05ef04e86f0b51f2a7ece5c6a1153725e56134f2e50e967b0c8c75e82a1e27142","first_seen":"2025-06-05T11:45:07.756161Z","last_seen":"2026-04-18T11:50:46.265274Z","times_seen":2245,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":119,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"masterbot.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"masterbot.claims/images/image_78fb3f96438febfe4ae645f583a3a8d1b970cb90.png","fqdn":"masterbot.claims","domain":"masterbot.claims","tld":"claims"},"ip":{"addr":"104.21.59.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://masterbot.claims/","date":"2026-01-24T13:53:48.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"masterbot.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 17:15:57 GMT","end":"Tue, 24 Mar 2026 18:12:22 GMT"},"fingerprint":{"sha1":"1F:30:F3:38:13:C2:0F:5A:52:EB:C4:7F:8E:67:E1:65:6E:B7:51:F3","sha256":"9C:43:EE:A0:D5:32:50:16:8B:72:C7:0B:DB:96:D3:DE:C5:71:8B:78:9E:DC:4E:8D:96:DF:A3:96:E4:89:60:0F"}}},"request":{"raw":"GET /images/image_78fb3f96438febfe4ae645f583a3a8d1b970cb90.png HTTP/1.1\r\nHost: masterbot.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://masterbot.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:48 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Oct 2025 19:53:25 GMT\r\netag: \"2306-64229409acd24\"\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\ncontent-length: 8966\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 916\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8lL277LZFeWX2Ppjrnl56MqZYcliUqKv4S3g30aLcOTCH%2FK%2BZ7ky3FpjkaE7jf8dgVv5o3HUUF%2Bf27kLrfb1GMhafBVLb8v4iX1rItWb\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c3004e40adfb503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8966,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 250x250, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f6d2cbd879640a106a3402e3da18d40b","sha1":"78fb3f96438febfe4ae645f583a3a8d1b970cb90","sha256":"9291717e9678931ee26b83d29b381f0584aaa44d3afb860421916e1c055c181c","sha512":"0e924bb325915a35c1e8bc5b5dd6d5d36c945af80e58476f55faee4d85f5361256f2b0f66485bf0b8b766cf927c989e51d9ea7c0c7c08b6405513ecee8f16703","ssdeep":"192:ClGfAa9YSUI1yZ9MulRkBySom4Nw5+IL1gYBz6Ka4xxP3Pi1EBrRGw:pfAa9dUI1iiN/iw1ns4T3PiU","tlshash":"3802bf0563b0435aaa6bfdc7d770bf056b6482b19ec74af022f80362d368dd40a289e5","first_seen":"2025-12-02T12:43:58.692249Z","last_seen":"2026-01-24T13:54:19.370969Z","times_seen":6,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"masterbot.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"masterbot.claims/images/image_4689fc8b3d997acabf01e06139cdb5d44fd3b7bb.svg","fqdn":"masterbot.claims","domain":"masterbot.claims","tld":"claims"},"ip":{"addr":"104.21.59.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://masterbot.claims/","date":"2026-01-24T13:53:47.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"masterbot.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 17:15:57 GMT","end":"Tue, 24 Mar 2026 18:12:22 GMT"},"fingerprint":{"sha1":"1F:30:F3:38:13:C2:0F:5A:52:EB:C4:7F:8E:67:E1:65:6E:B7:51:F3","sha256":"9C:43:EE:A0:D5:32:50:16:8B:72:C7:0B:DB:96:D3:DE:C5:71:8B:78:9E:DC:4E:8D:96:DF:A3:96:E4:89:60:0F"}}},"request":{"raw":"GET /images/image_4689fc8b3d997acabf01e06139cdb5d44fd3b7bb.svg HTTP/1.1\r\nHost: masterbot.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://masterbot.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:47 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Oct 2025 19:53:25 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FzH1F%2BVMUaxUQL0IZfWv%2BR0IdffgECaog%2BGXJjq7QEA8yEyumKnU2uQ2cp0CtQnJHPHK6Zxv3Sl2692LHst058KJ6DLLxAMsCfKmqOgq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\nage: 916\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"779-64229409ac93c\"\r\ncf-ray: 9c3004df1a98b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1913,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b555eeb2c89878019ca271ce239f5144","sha1":"4689fc8b3d997acabf01e06139cdb5d44fd3b7bb","sha256":"5daa8b44652cf3cca0e22528f3e8b09a4a83c071ceb68e11af6138b240220615","sha512":"b3758eff6e3f56a6b9a2189b1fa55ad8af57fe46c233ad62db30dcde00f4333128ad0b96e0730cd36609b70ffe1e875509cd6891cd423dc3f0b9f435d3b0bf83","ssdeep":"","tlshash":"59410360a26d57a4a104ebe04b1a64762e9322f7352286284b9fd97864831df5cecdc9","first_seen":"2025-09-02T07:43:09.3868Z","last_seen":"2026-04-13T18:25:45.848734Z","times_seen":437,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"masterbot.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"masterbot.claims/fonts/font_d8fc94bf7a39043a7759bd564a7e16b3ea080736.woff2","fqdn":"masterbot.claims","domain":"masterbot.claims","tld":"claims"},"ip":{"addr":"104.21.59.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://masterbot.claims/","date":"2026-01-24T13:53:47.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"masterbot.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 17:15:57 GMT","end":"Tue, 24 Mar 2026 18:12:22 GMT"},"fingerprint":{"sha1":"1F:30:F3:38:13:C2:0F:5A:52:EB:C4:7F:8E:67:E1:65:6E:B7:51:F3","sha256":"9C:43:EE:A0:D5:32:50:16:8B:72:C7:0B:DB:96:D3:DE:C5:71:8B:78:9E:DC:4E:8D:96:DF:A3:96:E4:89:60:0F"}}},"request":{"raw":"GET /fonts/font_d8fc94bf7a39043a7759bd564a7e16b3ea080736.woff2 HTTP/1.1\r\nHost: masterbot.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://masterbot.claims/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:47 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Oct 2025 19:53:25 GMT\r\netag: \"38a4-64229409aa22c\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 14500\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: font/woff2\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qphdUSCht%2B8xL3m0FEfW8Dzw1CrK5teOIJb7DnpvhunDWQpCnnZp9PezgwjWK6yPPTTjpdUPHcBo8urCbJlYkyhymZLSXxRIUWdHDzvr\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c3004e20ac9b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14500,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14500, version 1.0","md5":"e58febde317b69ceb51690ea201850c9","sha1":"d8fc94bf7a39043a7759bd564a7e16b3ea080736","sha256":"c268b459a9329e59fecf39a17618efd44c71735532048d60b12aab76a8c14914","sha512":"af17f0a6913d974bd7d38a060549dacd158c667abb08f830d44d302c1a1cb4f8106eeeb772d2b4066be2c5a1e763d26042c707343770f5e84b0f5165cab9d96b","ssdeep":"384:4VvSHMmDtGjtHrBRvGjLWPSNRXZpyJ+kC18bZ:4VvSsmDt6LBROj1RXZ4J+318bZ","tlshash":"8a52b05ef04e86f0b51f2a7ece5c6a1153725e56134f2e50e967b0c8c75e82a1e27142","first_seen":"2025-06-05T11:45:07.756161Z","last_seen":"2026-04-18T11:50:46.265274Z","times_seen":2245,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"masterbot.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"masterbot.claims/fonts/font_d8fc94bf7a39043a7759bd564a7e16b3ea080736.woff2","fqdn":"masterbot.claims","domain":"masterbot.claims","tld":"claims"},"ip":{"addr":"104.21.59.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://masterbot.claims/","date":"2026-01-24T13:53:47.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"masterbot.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 17:15:57 GMT","end":"Tue, 24 Mar 2026 18:12:22 GMT"},"fingerprint":{"sha1":"1F:30:F3:38:13:C2:0F:5A:52:EB:C4:7F:8E:67:E1:65:6E:B7:51:F3","sha256":"9C:43:EE:A0:D5:32:50:16:8B:72:C7:0B:DB:96:D3:DE:C5:71:8B:78:9E:DC:4E:8D:96:DF:A3:96:E4:89:60:0F"}}},"request":{"raw":"GET /fonts/font_d8fc94bf7a39043a7759bd564a7e16b3ea080736.woff2 HTTP/1.1\r\nHost: masterbot.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://masterbot.claims/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:47 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Oct 2025 19:53:25 GMT\r\netag: \"38a4-64229409aa22c\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 14500\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: font/woff2\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uInoeTNRUrMPfG5iKrPkXVo2w2g%2F6i0H0r2CvlFvhQUcUKyp%2FdZrlkVw%2Fg9Kkp%2BTS9Nu9kIfIS0%2FpQ%2BDuzrp3ON2d8tQCETBzvTvUzIH\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c3004e1fac6b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14500,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14500, version 1.0","md5":"e58febde317b69ceb51690ea201850c9","sha1":"d8fc94bf7a39043a7759bd564a7e16b3ea080736","sha256":"c268b459a9329e59fecf39a17618efd44c71735532048d60b12aab76a8c14914","sha512":"af17f0a6913d974bd7d38a060549dacd158c667abb08f830d44d302c1a1cb4f8106eeeb772d2b4066be2c5a1e763d26042c707343770f5e84b0f5165cab9d96b","ssdeep":"384:4VvSHMmDtGjtHrBRvGjLWPSNRXZpyJ+kC18bZ:4VvSsmDt6LBROj1RXZ4J+318bZ","tlshash":"8a52b05ef04e86f0b51f2a7ece5c6a1153725e56134f2e50e967b0c8c75e82a1e27142","first_seen":"2025-06-05T11:45:07.756161Z","last_seen":"2026-04-18T11:50:46.265274Z","times_seen":2245,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"masterbot.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"masterbot.claims/fonts/font_d8fc94bf7a39043a7759bd564a7e16b3ea080736.woff2","fqdn":"masterbot.claims","domain":"masterbot.claims","tld":"claims"},"ip":{"addr":"104.21.59.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://masterbot.claims/","date":"2026-01-24T13:53:47.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"masterbot.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 17:15:57 GMT","end":"Tue, 24 Mar 2026 18:12:22 GMT"},"fingerprint":{"sha1":"1F:30:F3:38:13:C2:0F:5A:52:EB:C4:7F:8E:67:E1:65:6E:B7:51:F3","sha256":"9C:43:EE:A0:D5:32:50:16:8B:72:C7:0B:DB:96:D3:DE:C5:71:8B:78:9E:DC:4E:8D:96:DF:A3:96:E4:89:60:0F"}}},"request":{"raw":"GET /fonts/font_d8fc94bf7a39043a7759bd564a7e16b3ea080736.woff2 HTTP/1.1\r\nHost: masterbot.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://masterbot.claims/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:47 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Oct 2025 19:53:25 GMT\r\netag: \"38a4-64229409aa22c\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 14500\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: font/woff2\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rsu7wNA6UUz7xQbQzr0B8VhvnhE00QuEg1pfTMwUjaEdAgh6hOInVw8ZRaDn9lBeLuyObbCfOhQNIYwFTSAKAAvsXk6fe6PMDtTYXUsd\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c3004e21accb503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14500,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14500, version 1.0","md5":"e58febde317b69ceb51690ea201850c9","sha1":"d8fc94bf7a39043a7759bd564a7e16b3ea080736","sha256":"c268b459a9329e59fecf39a17618efd44c71735532048d60b12aab76a8c14914","sha512":"af17f0a6913d974bd7d38a060549dacd158c667abb08f830d44d302c1a1cb4f8106eeeb772d2b4066be2c5a1e763d26042c707343770f5e84b0f5165cab9d96b","ssdeep":"384:4VvSHMmDtGjtHrBRvGjLWPSNRXZpyJ+kC18bZ:4VvSsmDt6LBROj1RXZ4J+318bZ","tlshash":"8a52b05ef04e86f0b51f2a7ece5c6a1153725e56134f2e50e967b0c8c75e82a1e27142","first_seen":"2025-06-05T11:45:07.756161Z","last_seen":"2026-04-18T11:50:46.265274Z","times_seen":2245,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"masterbot.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"masterbot.claims/images/image_78fb3f96438febfe4ae645f583a3a8d1b970cb90.png","fqdn":"masterbot.claims","domain":"masterbot.claims","tld":"claims"},"ip":{"addr":"104.21.59.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://masterbot.claims/","date":"2026-01-24T13:53:47.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"masterbot.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 17:15:57 GMT","end":"Tue, 24 Mar 2026 18:12:22 GMT"},"fingerprint":{"sha1":"1F:30:F3:38:13:C2:0F:5A:52:EB:C4:7F:8E:67:E1:65:6E:B7:51:F3","sha256":"9C:43:EE:A0:D5:32:50:16:8B:72:C7:0B:DB:96:D3:DE:C5:71:8B:78:9E:DC:4E:8D:96:DF:A3:96:E4:89:60:0F"}}},"request":{"raw":"GET /images/image_78fb3f96438febfe4ae645f583a3a8d1b970cb90.png HTTP/1.1\r\nHost: masterbot.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://masterbot.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:47 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Oct 2025 19:53:25 GMT\r\netag: \"2306-64229409acd24\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 8966\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nage: 916\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BdXGEGxIsgRS3hDoHcu1u6DC%2BYTo4%2F3JBjfr2Mijpsp7xcWPq1j%2FrQ5jF7egsgG3Sl3PPST0RSuupRGdWN6%2FB7P6HHk2wqbdxnestCNa\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9c3004df1a95b503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8966,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 250x250, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f6d2cbd879640a106a3402e3da18d40b","sha1":"78fb3f96438febfe4ae645f583a3a8d1b970cb90","sha256":"9291717e9678931ee26b83d29b381f0584aaa44d3afb860421916e1c055c181c","sha512":"0e924bb325915a35c1e8bc5b5dd6d5d36c945af80e58476f55faee4d85f5361256f2b0f66485bf0b8b766cf927c989e51d9ea7c0c7c08b6405513ecee8f16703","ssdeep":"192:ClGfAa9YSUI1yZ9MulRkBySom4Nw5+IL1gYBz6Ka4xxP3Pi1EBrRGw:pfAa9dUI1iiN/iw1ns4T3PiU","tlshash":"3802bf0563b0435aaa6bfdc7d770bf056b6482b19ec74af022f80362d368dd40a289e5","first_seen":"2025-12-02T12:43:58.692249Z","last_seen":"2026-01-24T13:54:19.370969Z","times_seen":6,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"masterbot.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"masterbot.claims/images/image_e9dbc07a64cebfbd0389bcec396877b2f338e6bd.svg","fqdn":"masterbot.claims","domain":"masterbot.claims","tld":"claims"},"ip":{"addr":"104.21.59.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://masterbot.claims/","date":"2026-01-24T13:53:47.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"masterbot.claims","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 17:15:57 GMT","end":"Tue, 24 Mar 2026 18:12:22 GMT"},"fingerprint":{"sha1":"1F:30:F3:38:13:C2:0F:5A:52:EB:C4:7F:8E:67:E1:65:6E:B7:51:F3","sha256":"9C:43:EE:A0:D5:32:50:16:8B:72:C7:0B:DB:96:D3:DE:C5:71:8B:78:9E:DC:4E:8D:96:DF:A3:96:E4:89:60:0F"}}},"request":{"raw":"GET /images/image_e9dbc07a64cebfbd0389bcec396877b2f338e6bd.svg HTTP/1.1\r\nHost: masterbot.claims\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://masterbot.claims/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:53:47 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Oct 2025 19:53:25 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LZaC9Wg%2BgjLl%2FT9IyrlroCSU5wmTgxKgFy2Nxdy7s0dlhWrHTLDRrKoQJoX%2FMSv2qpci7hVEvjxM5GS8%2Fr7u14nW%2BbxEH5wnNPV6FliA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\nage: 916\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"2fb6-64229409ae0ac\"\r\ncf-ray: 9c3004df1a9db503-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12214,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e6c2726ae5e7cc1c0aa199ad3b7195b9","sha1":"e9dbc07a64cebfbd0389bcec396877b2f338e6bd","sha256":"b5ba7b16778896912b7712690a16b5eab96e9dc8643be4af77ec5a1e8b3e6b5b","sha512":"7d3f6b9f2259a8136531a9c09ade0c885e01239c4c49e6d9f4618d076361e325b7a73c5209440f733b9ca07eda312240fb4306a42a060b6733e8b474e37968d8","ssdeep":"192:Cebn8EmAexeRzs8VWOAluUFbpATzs9IQF/n9AY41RRodskit3dEamw2gq:Ceb8aexOAMnIb7XhGY41/ungq","tlshash":"9742b6debbe5a3f4a905f3c8875688793a532cf67b03cb38c3986e95b54104d8895c87","first_seen":"2025-09-02T07:43:09.409787Z","last_seen":"2026-04-13T18:25:45.858865Z","times_seen":438,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"masterbot.claims","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}