{"report_id":"bc1156e1-43bf-4b81-9ec9-e177f23786c4","version":6,"status":"done","tags":[],"date":"2026-04-28T14:19:10Z","url":{"schema":"https","addr":"claim-scam.pages.dev","fqdn":"claim-scam.pages.dev","domain":"claim-scam.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.189","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"claim-scam.pages.dev/","fqdn":"claim-scam.pages.dev","domain":"claim-scam.pages.dev","tld":"pages.dev"},"title":"Scam Altman | Airdrop","dom":{"size":15866,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1295)","md5":"7b31f3a88f6e3e460806ccc447725d1c","sha1":"2c506390768355f06ed6a249f4785034dabc74ff","sha256":"0361c4d936fdc5baa5d015d7f66a4adfdc3ec2b847bb3784c0be6db166c3e7b5","sha512":"898915c5d2c985995fe3abdb17605bb55295ebd4e46f6ef9cf7c48b0b7b050554c530a62b9ef20e9ead5e24f0f0c0ca7f3e0ef32e296ced4bda7e4a338c9a17a","ssdeep":"384:AWleRWlcsBs0UBDRZ6zBxNcv7b/scTWllc5UZZWl10wWtO0Wl7r2nB00UBrRZ6zF:AmeRmVaZ6mnHmrm1QmubgZ6Qwp","tlshash":"bf62c8a1429c1c2f111b42cb5e19a36c31bf7c7ba1b58286b7bf47958f8dc91e807896","dom_hash":"domhashd146be88e4751e6deb9599a50c4278e0","first_seen":"2026-04-28T14:19:14.485718Z","last_seen":"2026-04-28T14:19:14.485718Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"claim-scam.pages.dev","fqdn":"claim-scam.pages.dev","domain":"claim-scam.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.189","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-02T14:19:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":4}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-28T14:18:46Z","timestamp":1777385926,"ip_dst":{"addr":"172.66.44.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":43418,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2026-04-28T14:18:46.568713+0000\",\"flow_id\":1075742234808167,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.26\",\"src_port\":43418,\"dest_ip\":\"172.66.44.189\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"claim-scam.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":922,\"bytes_toclient\":2713,\"start\":\"2026-04-28T14:18:46.560999+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"solana.publicnode.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"claim-scam.pages.dev","ip":{"addr":"172.66.44.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-04-28T14:19:12.276901Z","last_seen":"2026-04-28T14:19:12.276901Z","alert_count":0,"request_count":18,"received_data":1169036,"sent_data":8689,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.dexscreener.com","ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-06-11","domain_rank":1560830,"first_seen":"2023-07-13T11:22:42Z","last_seen":"2026-04-21T16:51:22.357782Z","alert_count":0,"request_count":1,"received_data":152682,"sent_data":505,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2025-10-12","domain_rank":0,"first_seen":"2025-10-22T11:51:07.746032Z","last_seen":"2026-04-24T13:31:58.56223Z","alert_count":9,"request_count":3,"received_data":659250,"sent_data":1631,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"api.dexscreener.com","ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-06-11","domain_rank":2085659,"first_seen":"2022-05-19T18:07:24Z","last_seen":"2026-04-24T13:55:06.11296Z","alert_count":0,"request_count":1,"received_data":39373,"sent_data":509,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"corsproxy.io","ip":{"addr":"104.26.6.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-01-30","domain_rank":175528,"first_seen":"2016-05-19T01:27:08Z","last_seen":"2026-04-28T12:09:36.832502Z","alert_count":0,"request_count":1,"received_data":641,"sent_data":563,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"solana.publicnode.com","ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-08-16","domain_rank":0,"first_seen":"2025-10-03T14:04:26.693295Z","last_seen":"2026-04-28T13:39:29.159179Z","alert_count":2,"request_count":2,"received_data":1464,"sent_data":1039,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com/@v1/cdn/js/primus.next.min.js?t=29623098\u0026u=rwG2StNk53oKPGrMGDY5MjU2NDRlMjhjZmYzYzM0MDI3ZGU2N9gUUVMWWTM9F1LbeQ","fqdn":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","domain":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","size":656642,"data":"","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-08-04T05:59:25.953933Z","times_seen":2650,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-scam.pages.dev/ky.compat.umd.js","fqdn":"claim-scam.pages.dev","domain":"claim-scam.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5edaa1479a194542ff65c179c0ecd30","sha1":"4d883820324da039f490aa3e5f17e09ce7749dcc","sha256":"9bb991591852fa938aa48e2b8bc98e56e464834c61ef015730f7d76378c49bc0","sha512":"90b25900790b56936d68996e5f5e75112a51fb8f146b469310f5e10abf8da7189a775d312053a5abf44f020e2c19a1f8b924c18fd864869b88fdfc456642ac3d","ssdeep":"6144:qWAQJc02QJc0aCRU0gxMtO3gVdkz2t/73KYJE7h:RAQJc02QJc0aoJSClt/73KYa","tlshash":"56a4ec0593735a4c8bc083e9916123cbdf8c9ba745df7426e60d6bb9e0b8e1790de847","size":467075,"data":"","first_seen":"2026-04-22T13:42:19.377735Z","last_seen":"2026-06-29T00:34:28.167056Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-scam.pages.dev/","fqdn":"claim-scam.pages.dev","domain":"claim-scam.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"22afb76970f6b92b92bbf40f1960b5df","sha1":"166dbcd57a53876410e055d5fec23c7cb89fec09","sha256":"54b49938d72bb38cd0ee9f8b6b9918d57e167bc217f23b2dc5c8a868907fb467","sha512":"121a796e704a34dfa8c371145fa8678681a095d9a449f535de7efbdb35a045c0f50cb54a2139d2fa4bdfd35e723be48b1f30f0e5e7aa8cd90e594ee75800b12d","ssdeep":"6144:skyQJc0WQJc0anWlWlOf5MfCXlvKMBEDp:JyQJc0WQJc0aZ2vXlvKMk","tlshash":"11a4ea0497735a4c8bc083e9a22123cbdf8c9bab42df7425e51d6b75e4b8e1790de847","size":459676,"data":"","first_seen":"2026-04-22T13:42:19.390183Z","last_seen":"2026-06-29T00:34:28.173153Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-scam.pages.dev/","fqdn":"claim-scam.pages.dev","domain":"claim-scam.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"82f8aac2e62b7241f166257cd67c9ca5","sha1":"a7cac58ecc791c7adc0f1fb583aac32c985986a5","sha256":"6775d6c17ff9bc91650c57ea4e00bddccfae99fd4bbeaf1e55cd4812f6738591","sha512":"8da735ad8346f7ae6b5bb49237d0a8e00c6f5c185c13375b5e1f6cad3748ac264966168946b2767ffcdae69d3f380cd70545c2e46681fa82c20d57e15f8a4edc","ssdeep":"","tlshash":"9951226d067f2527623311a796cbb2953434700b26dce6097f2cc6e14fc4922a5e3eea","size":2612,"data":"","first_seen":"2026-04-28T13:39:31.868903Z","last_seen":"2026-04-28T14:19:14.512628Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"claim-scam.pages.dev/xn7gYHE41ni1AdIRggOxSuXd.woff2","fqdn":"claim-scam.pages.dev","domain":"claim-scam.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-scam.pages.dev/","date":"2026-04-28T14:18:47.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-scam.pages.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 05:15:35 GMT","end":"Mon, 27 Jul 2026 05:15:34 GMT"},"fingerprint":{"sha1":"95:26:9E:7D:C2:8A:42:46:80:49:E7:81:C0:98:45:9A:0D:25:1D:FA","sha256":"AD:B9:7D:E7:9E:13:4F:3C:58:49:8B:18:1B:BC:D6:B5:3F:40:E3:52:5C:B6:B5:6D:0F:52:67:0F:69:C9:D8:15"}}},"request":{"raw":"GET /xn7gYHE41ni1AdIRggOxSuXd.woff2 HTTP/1.1\r\nHost: claim-scam.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://claim-scam.pages.dev/css2.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 14:18:47 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 14500\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"0f00219d1d5f31de66423631bd9bf3b5\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Imi6EG54lJjVD39sZPLAfaAQVD%2F9OoBUcJenjYfxPIsMDfUIZWsI%2Fc3tZ90hHag0vuNOwRwroc0Eojif%2FNroc8vmt0feD6Hdsq96TosBHOcbuTR4TWc0zXjhMNG2RtjsqmVehV9dZQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f36b2bcfd695695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14500,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14500, version 1.0","md5":"e58febde317b69ceb51690ea201850c9","sha1":"d8fc94bf7a39043a7759bd564a7e16b3ea080736","sha256":"c268b459a9329e59fecf39a17618efd44c71735532048d60b12aab76a8c14914","sha512":"af17f0a6913d974bd7d38a060549dacd158c667abb08f830d44d302c1a1cb4f8106eeeb772d2b4066be2c5a1e763d26042c707343770f5e84b0f5165cab9d96b","ssdeep":"384:4VvSHMmDtGjtHrBRvGjLWPSNRXZpyJ+kC18bZ:4VvSsmDt6LBROj1RXZ4J+318bZ","tlshash":"8a52b05ef04e86f0b51f2a7ece5c6a1153725e56134f2e50e967b0c8c75e82a1e27142","first_seen":"2025-06-05T11:45:07.756161Z","last_seen":"2026-08-09T10:10:33.27749Z","times_seen":3724,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-scam.pages.dev/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fprimus.next.min.js%3Ft%3D29623098%26u%3DrwG2StNk53oKPGrMGDY5MjU2NDRlMjhjZmYzYzM0MDI3ZGU2N9gUUVMWWTM9F1LbeQ","fqdn":"claim-scam.pages.dev","domain":"claim-scam.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-scam.pages.dev/","date":"2026-04-28T14:18:47.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-scam.pages.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 05:15:35 GMT","end":"Mon, 27 Jul 2026 05:15:34 GMT"},"fingerprint":{"sha1":"95:26:9E:7D:C2:8A:42:46:80:49:E7:81:C0:98:45:9A:0D:25:1D:FA","sha256":"AD:B9:7D:E7:9E:13:4F:3C:58:49:8B:18:1B:BC:D6:B5:3F:40:E3:52:5C:B6:B5:6D:0F:52:67:0F:69:C9:D8:15"}}},"request":{"raw":"GET /secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fprimus.next.min.js%3Ft%3D29623098%26u%3DrwG2StNk53oKPGrMGDY5MjU2NDRlMjhjZmYzYzM0MDI3ZGU2N9gUUVMWWTM9F1LbeQ HTTP/1.1\r\nHost: claim-scam.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-scam.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 14:18:47 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RePh9iaB3Z4DsHrtnH7Z8lke6ylUOr%2F3DNXaTenSspsaxtJ8dSzSAVMIfMjNgDXIBNiZhBD7OoWKQ8hu6dTEb%2FClf%2FOYtW9HrvZW0oUU3QTdhNHi3%2B2ACFa7J06kOt6SkiFWows8kw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f36b2bddec35695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T14:49:10.846265Z","times_seen":17800640,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dexscreener.com/cms/images/hgKKs-SyqpGHXwLf?width=800\u0026height=800\u0026quality=95\u0026format=auto","fqdn":"cdn.dexscreener.com","domain":"dexscreener.com","tld":"com"},"ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-scam.pages.dev/","date":"2026-04-28T14:18:47.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexscreener.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Mar 2026 04:53:41 GMT","end":"Wed, 24 Jun 2026 05:53:39 GMT"},"fingerprint":{"sha1":"DB:D3:5B:FF:81:85:8A:A5:E7:DF:56:3F:01:A1:3E:9A:DC:8B:1C:76","sha256":"71:14:D3:88:AD:EB:7B:11:A2:EB:5F:04:21:AF:5B:3C:3E:24:1F:EE:7C:A6:D8:06:82:85:E9:AD:39:2F:97:E6"}}},"request":{"raw":"GET /cms/images/hgKKs-SyqpGHXwLf?width=800\u0026height=800\u0026quality=95\u0026format=auto HTTP/1.1\r\nHost: cdn.dexscreener.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-scam.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 14:18:47 GMT\r\ncontent-type: image/avif\r\ncontent-length: 151619\r\ncf-ray: 9f36b2be9b585a0f-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 66763\r\ncache-control: public, max-age=31536000\r\netag: \"cfaaqnyqjkra1CNSyhMdZyv7SqoXS35aQuSdpn5VnlDQ:f20128507a1349b5573c967028ef6230\"\r\nlast-modified: Mon, 27 Apr 2026 19:45:30 GMT\r\nserver: cloudflare\r\nvary: Accept, accept-encoding\r\ncf-resized: internal=ram/m q=0 n=0+46 c=17+220 v=2026.4.4 l=151619 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=COv.LRxf91n3cr2MTXnjWXnGE9FAkNR_b4nQpnVLYqU-1777385927.460093-1.0.1.1-L1GhfYYrpfC8D0MG3DKgX7SZ0.uzBNMuGe80bAJI.qYQeb76HkXDpPYI0m1qR_Je2FwBF_WLeVcm1pxwWddYtVbiBn5Ytv0JkEdOI5LPFPO8I7t6e3MfuBGVRCvDiB.PmwjSr.aLaJEARcl3xKD8bg; HttpOnly; Secure; Path=/; Domain=dexscreener.com; Expires=Tue, 28 Apr 2026 14:48:47 GMT\r\npriority: u=4,i=?0\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":151619,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"dfe001d69bc1be1796922e086c4df908","sha1":"6b69ed2cf7ed943ee10053f5b63c809e6f32adc7","sha256":"0e32b2a25d0ba42523b5c0f6cd1277919fdfc3fd1bc6dda3b55c88040581dda5","sha512":"6c8cabc7e51a034339ebd59aee46f81ebfc1045cae67b205e34df6b90edc480c899a1ad1887359cbafd19d5512f2806d229e9c0c7dcf6e3521d8587ff43ad687","ssdeep":"3072:18mFhPYOFvHF9WT1OsTbqYpaMRowREiN+GAWzHPnvvRCw9vtCqRHYfz6H:1FPYOtl9WlaM68jvvvR51lYfze","tlshash":"c8e3126cbeaa027b9589c73be10e03fc279b8dd54e438da257c929ff75b0b351402598","first_seen":"2026-04-28T13:39:31.866625Z","last_seen":"2026-04-28T14:19:14.492387Z","times_seen":2,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":22,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-scam.pages.dev/wallet.webp","fqdn":"claim-scam.pages.dev","domain":"claim-scam.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-scam.pages.dev/","date":"2026-04-28T14:18:46.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-scam.pages.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 05:15:35 GMT","end":"Mon, 27 Jul 2026 05:15:34 GMT"},"fingerprint":{"sha1":"95:26:9E:7D:C2:8A:42:46:80:49:E7:81:C0:98:45:9A:0D:25:1D:FA","sha256":"AD:B9:7D:E7:9E:13:4F:3C:58:49:8B:18:1B:BC:D6:B5:3F:40:E3:52:5C:B6:B5:6D:0F:52:67:0F:69:C9:D8:15"}}},"request":{"raw":"GET /wallet.webp HTTP/1.1\r\nHost: claim-scam.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-scam.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 14:18:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 286294\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"1d0d15d4b0f5bcda9bc9dff33a5d0889\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ic%2BsrqGQQSxkPoXAgQ6%2BPDil5qmNDkB%2FTAkTu8EkzAL0J5ZouyolWBi0a5AMaMT4CB6ttlb4EGxvhOg6%2BLvzArp5zyXv9NwxEXe1WY1y8p%2BY%2BMP%2F1SgfGoHlIX5%2Bmj7tszwYH9BwTA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f36b2ba7aab5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":286294,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"912a4dfb0d93593356dd0dea8bd8c8b4","sha1":"ec65ae9c7658bba8b59c85fefce0188f78c02353","sha256":"ab7af7a4c116e0af224fb8ffbafffa1d57374541dab961cdb172a04d3f37e6bd","sha512":"44a0810f01612225fb4d1e5a20aa50f1c953954a548f98f304637cd169250e390c345e1ee25f83d1eaa0772da70966de67ea2b0cb2fc699d76a4177bc34443c1","ssdeep":"6144:1alCbyx6DNfL/5n3RsMri1Pw3HXagUyr+njkr0yUpZMPHE0eDXIg:1Qc5T/d6xSXagUyT0y2ZMPH5YH","tlshash":"5754221a7aec778b1dcd7ca2832d179e655aa6c363c612d46f01ca5e1c56ff2318088d","first_seen":"2026-02-07T00:46:13.644339Z","last_seen":"2026-07-16T14:41:37.923118Z","times_seen":71,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-scam.pages.dev/bg.webp","fqdn":"claim-scam.pages.dev","domain":"claim-scam.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-scam.pages.dev/","date":"2026-04-28T14:18:47.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-scam.pages.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 05:15:35 GMT","end":"Mon, 27 Jul 2026 05:15:34 GMT"},"fingerprint":{"sha1":"95:26:9E:7D:C2:8A:42:46:80:49:E7:81:C0:98:45:9A:0D:25:1D:FA","sha256":"AD:B9:7D:E7:9E:13:4F:3C:58:49:8B:18:1B:BC:D6:B5:3F:40:E3:52:5C:B6:B5:6D:0F:52:67:0F:69:C9:D8:15"}}},"request":{"raw":"GET /bg.webp HTTP/1.1\r\nHost: claim-scam.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-scam.pages.dev/i7wqt.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 14:18:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 161460\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"8cb193a6f24d159ba2e1be6c0253660f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WWrLx0XX6vRIqzrXGZmc40EkrbDT%2FFykegXvCWJ0twu8peyhGto4Kdv0p%2FbIVL%2FFR%2FWxtH6MF6Mbq002GTVLOYPF9joi8%2FEo2xJyYLlE5rXSWzkswe%2BjMNcpdfR3ji75XXGn3M65QA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f36b2bccd205695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":161460,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1922x1080, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"31f5c65edcac5f993c24b3a18acbb859","sha1":"e8cbcd7a5e96cd672288da0fc6a2aadfeda04207","sha256":"edab7d1369564101d0d9e933434bcf2b30b48945f1a8f2480fcf92d11ce015cb","sha512":"b22142abcb7a2e392baf02bff69cac82f48dc9c9026ab8aa7fa4c87265db07e4b1ad5862aac9a9ac35cdc0839d7def728db7bf7958800e55ef8826f70373fe3d","ssdeep":"3072:+YYEryXjvO1+WP9D/9eYdr8V+Cvl6zusEsUD4Amd0Xdkyo0sM4QvBwAEmfM33:+YYE2Tvru9Dc+8V+7zuXsUvmd0bojQQH","tlshash":"b1f323157de3beb1f30873604d4b0c92d74ba9470e60d2585be923239e6362a95fcf4a","first_seen":"2026-02-07T00:46:13.6532Z","last_seen":"2026-07-16T14:41:37.924579Z","times_seen":68,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-scam.pages.dev/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"claim-scam.pages.dev","domain":"claim-scam.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-scam.pages.dev/","date":"2026-04-28T14:18:47.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-scam.pages.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 05:15:35 GMT","end":"Mon, 27 Jul 2026 05:15:34 GMT"},"fingerprint":{"sha1":"95:26:9E:7D:C2:8A:42:46:80:49:E7:81:C0:98:45:9A:0D:25:1D:FA","sha256":"AD:B9:7D:E7:9E:13:4F:3C:58:49:8B:18:1B:BC:D6:B5:3F:40:E3:52:5C:B6:B5:6D:0F:52:67:0F:69:C9:D8:15"}}},"request":{"raw":"GET /xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: claim-scam.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://claim-scam.pages.dev/css2.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 14:18:47 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 24836\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"1df3b315841516dcf29aa177f8dab32b\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U4fwQKAwmdTo74z2LZzbUMViHp4q9m0F5H6uFOyZvynH5hoMqB05OIbbaDHznDwC2HdWSjFDcSXskIskQWal812lXwkRBxek55ospf0QfPZR%2Ftzy6dc5P0HFdzcQi03ukTUeZHZP2g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f36b2bcfd555695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-08-09T14:46:48.613256Z","times_seen":37348,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com/@v1/cdn/js/primus.next.min.js?t=29623098\u0026u=rwG2StNk53oKPGrMGDY5MjU2NDRlMjhjZmYzYzM0MDI3ZGU2N9gUUVMWWTM9F1LbeQ","fqdn":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","domain":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-scam.pages.dev/","date":"2026-04-28T14:18:47.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 18:04:14 GMT","end":"Thu, 16 Jul 2026 18:04:13 GMT"},"fingerprint":{"sha1":"50:70:DF:1E:62:AD:77:E1:14:A0:28:F9:E7:E4:DB:97:AF:1C:F0:B8","sha256":"7A:C5:A1:51:DE:5E:4C:E1:B5:F6:B6:05:57:8D:AF:BB:BC:DA:07:6E:D6:DD:BD:4B:90:54:CB:F5:5A:14:C7:7C"}}},"request":{"raw":"GET /@v1/cdn/js/primus.next.min.js?t=29623098\u0026u=rwG2StNk53oKPGrMGDY5MjU2NDRlMjhjZmYzYzM0MDI3ZGU2N9gUUVMWWTM9F1LbeQ HTTP/1.1\r\nHost: aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-scam.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 14:18:47 GMT\r\ncontent-type: text/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-encoding: br\r\netag: W/\"a0502-14+i6Bt7XM8ofHk8WpmFyqoPYWI\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=primus.next.min.js\r\ncdn-proxyver: 1.51\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/28/2026 14:18:47\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 942c20ccbb0e6b2ed1c52db9f21bbf03\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":656642,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-08-04T05:59:25.953933Z","times_seen":2650,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":40,"dns":26,"connect":6,"send":0,"wait":144,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com/jmpd/","fqdn":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","domain":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-scam.pages.dev/","date":"2026-04-28T14:18:48.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 18:04:14 GMT","end":"Thu, 16 Jul 2026 18:04:13 GMT"},"fingerprint":{"sha1":"50:70:DF:1E:62:AD:77:E1:14:A0:28:F9:E7:E4:DB:97:AF:1C:F0:B8","sha256":"7A:C5:A1:51:DE:5E:4C:E1:B5:F6:B6:05:57:8D:AF:BB:BC:DA:07:6E:D6:DD:BD:4B:90:54:CB:F5:5A:14:C7:7C"}}},"request":{"raw":"OPTIONS /jmpd/ HTTP/1.1\r\nHost: aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://claim-scam.pages.dev/\r\nOrigin: https://claim-scam.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 28 Apr 2026 14:18:48 GMT\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\naccess-control-max-age: 86400\r\ncache-control: no-cache\r\ncdn-proxyver: 1.51\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 04/28/2026 14:18:48\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 05541f9d23376d21642a8f39e274ba04\r\ncdn-status: 204\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T14:49:10.846265Z","times_seen":17800640,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":17,"dns":1,"connect":4,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-scam.pages.dev/","fqdn":"claim-scam.pages.dev","domain":"claim-scam.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-28T14:18:46.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-scam.pages.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 05:15:35 GMT","end":"Mon, 27 Jul 2026 05:15:34 GMT"},"fingerprint":{"sha1":"95:26:9E:7D:C2:8A:42:46:80:49:E7:81:C0:98:45:9A:0D:25:1D:FA","sha256":"AD:B9:7D:E7:9E:13:4F:3C:58:49:8B:18:1B:BC:D6:B5:3F:40:E3:52:5C:B6:B5:6D:0F:52:67:0F:69:C9:D8:15"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: claim-scam.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 14:18:46 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OOBfBgmO8w7mvahro319Xklz6ybjsL8d%2FZ2CroCkOGQc6tqJxuYzt7B4zWzTumY9JmIA%2F2zC0TRCrHr%2BiFgPjbDzRFXYNj6oCogHsb0tzXgJ5b3Fw6%2BHNPGk4WDGljHh0zxO1TNQlQ%3D%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f36b2b92e364c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14809,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1282)","md5":"9af83c7de6c2a10bd8f73321c053bad2","sha1":"9a1b3fe0ef33e37c8c7a02273d408208274fca32","sha256":"5acfb0b14db757ac80a99a374bcc48382653232a3aec8d28bb687f8163b48006","sha512":"7af5b41af979299cf754f555978d5d6a9b1accdcc31b359c8b5b768f307dd0f12c3337decdc367ff1db1bc1a654ff2a8a2eca42841fe22c21aae5e7df87bd18f","ssdeep":"384:poOBQ09BXRZNBx8cPaR/s9A25UZ0wLtOpr2XB409B/RZNBxO/JuJVlzJsrJOODO1:nxZDWFfZZ++","tlshash":"ea62a892119c6c2f112b42cb4e59639830af2cb7f5b94182f7bf47c4df8ac91e90b856","first_seen":"2026-04-28T13:39:31.851735Z","last_seen":"2026-04-28T14:19:14.499817Z","times_seen":2,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":15,"dns":7,"connect":1,"send":0,"wait":65,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-scam.pages.dev/css2.css","fqdn":"claim-scam.pages.dev","domain":"claim-scam.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-scam.pages.dev/","date":"2026-04-28T14:18:46.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-scam.pages.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 05:15:35 GMT","end":"Mon, 27 Jul 2026 05:15:34 GMT"},"fingerprint":{"sha1":"95:26:9E:7D:C2:8A:42:46:80:49:E7:81:C0:98:45:9A:0D:25:1D:FA","sha256":"AD:B9:7D:E7:9E:13:4F:3C:58:49:8B:18:1B:BC:D6:B5:3F:40:E3:52:5C:B6:B5:6D:0F:52:67:0F:69:C9:D8:15"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: claim-scam.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-scam.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 14:18:46 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rXED5WIJBLBI0NefWVHFUR3Z86r4pimqemPQhS6X3o20kya%2B%2FRGv9kBXrFCPGU0vXoU033Hwsd%2FsTzTVeh8hLBdTFKvqbcgoDt%2Bcnef77FBChtjhRsOuvkuN50nOrRwu0c8DvzyR6Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a0e01c4ab5601658f87515ae280d7dc\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f36b2ba7aa35695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8920,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"9aed1b1208efc83b1164b9e89b31970d","sha1":"74779ad610a1cf967a8dc89d2016b34ba0e6cf36","sha256":"23287b79461e6a77efeb9828b63c97ef84bdb270aa599157356ee04ee42c11f3","sha512":"1d0bc2874d58cd564f9c86b4f8b83817a8c612a620b1f4be62b20aeb81b800a5c2da6e0b41974c3e82e70dae43a1f69db6cc80c3f2b619d11696619603de4d27","ssdeep":"192:4loLd3dx4yAlxWd38o4frl+Jd3nz40il3Ed3uK45llMvd3ht4G0:CSYMIewMoie","tlshash":"5602bb50002ba804a7831cd6bbce3e364d4db285a085d9756ffe149cbe9bd723270b5e","first_seen":"2025-08-27T17:25:21.854083Z","last_seen":"2026-07-16T14:41:37.925753Z","times_seen":93,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-scam.pages.dev/bafybeiaglqleiv6xn3m7mpuud7akhvmnld3rbp3mxdonztka7aqajoeefm.png","fqdn":"claim-scam.pages.dev","domain":"claim-scam.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-scam.pages.dev/","date":"2026-04-28T14:18:47.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-scam.pages.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 05:15:35 GMT","end":"Mon, 27 Jul 2026 05:15:34 GMT"},"fingerprint":{"sha1":"95:26:9E:7D:C2:8A:42:46:80:49:E7:81:C0:98:45:9A:0D:25:1D:FA","sha256":"AD:B9:7D:E7:9E:13:4F:3C:58:49:8B:18:1B:BC:D6:B5:3F:40:E3:52:5C:B6:B5:6D:0F:52:67:0F:69:C9:D8:15"}}},"request":{"raw":"GET /bafybeiaglqleiv6xn3m7mpuud7akhvmnld3rbp3mxdonztka7aqajoeefm.png HTTP/1.1\r\nHost: claim-scam.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-scam.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 14:18:47 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CyiVoPw3DkCh71v4nySNMYwUAKVcRYv09t3hL3uwhC7voo3bUbetEZfRf%2Bpb6pVj1oJBg36bZv8wobd13cM4gd%2FBjQkCnViGSlS%2BuWuL6aC1YK5xGNxPGPHmraqBhwOBeDTJvRJ7Ow%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f36b2bcbd015695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14809,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1282)","md5":"9af83c7de6c2a10bd8f73321c053bad2","sha1":"9a1b3fe0ef33e37c8c7a02273d408208274fca32","sha256":"5acfb0b14db757ac80a99a374bcc48382653232a3aec8d28bb687f8163b48006","sha512":"7af5b41af979299cf754f555978d5d6a9b1accdcc31b359c8b5b768f307dd0f12c3337decdc367ff1db1bc1a654ff2a8a2eca42841fe22c21aae5e7df87bd18f","ssdeep":"384:poOBQ09BXRZNBx8cPaR/s9A25UZ0wLtOpr2XB409B/RZNBxO/JuJVlzJsrJOODO1:nxZDWFfZZ++","tlshash":"ea62a892119c6c2f112b42cb4e59639830af2cb7f5b94182f7bf47c4df8ac91e90b856","first_seen":"2026-04-28T13:39:31.851735Z","last_seen":"2026-04-28T14:19:14.499817Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.dexscreener.com/latest/dex/tokens/6AVAUKa9uxQpruHZUinFECpXEh1usRVtzQWK8N2wpump","fqdn":"api.dexscreener.com","domain":"dexscreener.com","tld":"com"},"ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-scam.pages.dev/","date":"2026-04-28T14:18:47.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexscreener.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Mar 2026 04:53:41 GMT","end":"Wed, 24 Jun 2026 05:53:39 GMT"},"fingerprint":{"sha1":"DB:D3:5B:FF:81:85:8A:A5:E7:DF:56:3F:01:A1:3E:9A:DC:8B:1C:76","sha256":"71:14:D3:88:AD:EB:7B:11:A2:EB:5F:04:21:AF:5B:3C:3E:24:1F:EE:7C:A6:D8:06:82:85:E9:AD:39:2F:97:E6"}}},"request":{"raw":"GET /latest/dex/tokens/6AVAUKa9uxQpruHZUinFECpXEh1usRVtzQWK8N2wpump HTTP/1.1\r\nHost: api.dexscreener.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-scam.pages.dev/\r\nOrigin: https://claim-scam.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 14:18:47 GMT\r\ncontent-type: application/json; charset=utf-8\r\nset-cookie: __cf_bm=.u89ElycIGq7MAqmW67UZoEvKijFiAUApiIp0Qa.Nh4-1777385927.1988444-1.0.1.1-Dj5HrI.SFvnV5lGUP2JkX7pQT2PkV_SF70gZeb95A55fAh95HFuNCWBrfpv_hC8W979LHrUAdvmytGbhqoSl73Panki31xJ38Hc8H4QPdIqQTtDCsNZ_tZtOYYWu0d1WdwF6GbgvnDwdxuhuDg5X0g; HttpOnly; Secure; Path=/; Domain=dexscreener.com; Expires=Tue, 28 Apr 2026 14:48:47 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\netag: W/\"96b4-+X3IHUNkw7a2iXZ/cqTQQ0mzSCk\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Tue, 28 Apr 2026 14:19:17 GMT\r\ncache-control: public, max-age=30\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 9f36b2bcff11b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38580,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"39a03d79049127e10aff8c1072ad839f","sha1":"f97dc81d4364c3b6b689767f72a4d04349b34829","sha256":"46ad070161cf58643df40919aae268c20c269574b850a9cc009a637787eb7853","sha512":"2dca012a400180700b60c2f5a285e52c73a4ff90f6bf7a7998cd92c54e5da605d0256f730a5f5e02f36417e9c70b697a3580f5020a83c930d2404020f1985d09","ssdeep":"768:oE9lUpLJeilUpLfxRlUpLFRMblUpLsiMJlUpLeklUpLraJlUpL038lUpLpQKlUpp:ZsFspsUsoBsFs8s5sjs9stswsjLsCs1K","tlshash":"590351bb47e92a6bc2040676649b787c94e173c74ffd9987c2889e9a41ccf8b5007d9c","first_seen":"2026-04-28T14:19:14.503501Z","last_seen":"2026-04-28T14:19:14.503501Z","times_seen":1,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":14,"dns":5,"connect":1,"send":0,"wait":189,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-scam.pages.dev/xn7gYHE41ni1AdIRggOxSuXd.woff2","fqdn":"claim-scam.pages.dev","domain":"claim-scam.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-scam.pages.dev/","date":"2026-04-28T14:18:47.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-scam.pages.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 05:15:35 GMT","end":"Mon, 27 Jul 2026 05:15:34 GMT"},"fingerprint":{"sha1":"95:26:9E:7D:C2:8A:42:46:80:49:E7:81:C0:98:45:9A:0D:25:1D:FA","sha256":"AD:B9:7D:E7:9E:13:4F:3C:58:49:8B:18:1B:BC:D6:B5:3F:40:E3:52:5C:B6:B5:6D:0F:52:67:0F:69:C9:D8:15"}}},"request":{"raw":"GET /xn7gYHE41ni1AdIRggOxSuXd.woff2 HTTP/1.1\r\nHost: claim-scam.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://claim-scam.pages.dev/css2.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 14:18:47 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 14500\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"0f00219d1d5f31de66423631bd9bf3b5\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wjjJ5vBgtOed%2FC3qTXu6eShx2JXNOmS%2FkkftU8wpDBn0a%2F4LWz9eijTwYPU0yl3QZQPD0dfYdsr2YdifmjMsMBEQ69B0GCfzmpJOzsqzqPPv6au8bm%2FPRj5d7FjRTkr95un0ESaAEA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f36b2bd0d7b5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14500,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14500, version 1.0","md5":"e58febde317b69ceb51690ea201850c9","sha1":"d8fc94bf7a39043a7759bd564a7e16b3ea080736","sha256":"c268b459a9329e59fecf39a17618efd44c71735532048d60b12aab76a8c14914","sha512":"af17f0a6913d974bd7d38a060549dacd158c667abb08f830d44d302c1a1cb4f8106eeeb772d2b4066be2c5a1e763d26042c707343770f5e84b0f5165cab9d96b","ssdeep":"384:4VvSHMmDtGjtHrBRvGjLWPSNRXZpyJ+kC18bZ:4VvSsmDt6LBROj1RXZ4J+318bZ","tlshash":"8a52b05ef04e86f0b51f2a7ece5c6a1153725e56134f2e50e967b0c8c75e82a1e27142","first_seen":"2025-06-05T11:45:07.756161Z","last_seen":"2026-08-09T10:10:33.27749Z","times_seen":3724,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com/jmpd/","fqdn":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","domain":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-scam.pages.dev/","date":"2026-04-28T14:18:48.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 18:04:14 GMT","end":"Thu, 16 Jul 2026 18:04:13 GMT"},"fingerprint":{"sha1":"50:70:DF:1E:62:AD:77:E1:14:A0:28:F9:E7:E4:DB:97:AF:1C:F0:B8","sha256":"7A:C5:A1:51:DE:5E:4C:E1:B5:F6:B6:05:57:8D:AF:BB:BC:DA:07:6E:D6:DD:BD:4B:90:54:CB:F5:5A:14:C7:7C"}}},"request":{"raw":"POST /jmpd/ HTTP/1.1\r\nHost: aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-scam.pages.dev/\r\ncontent-type: application/json\r\nContent-Length: 2207\r\nOrigin: https://claim-scam.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2207,"data":"{\"route\":\"8XUwkBv9vhPYfVpD1fxb7EC65sUXJdqr\",\"payload\":\"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\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 14:18:48 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ncache-control: no-cache\r\ncontent-encoding: br\r\netag: W/\"d0-WeqWNUu3r7lRsWh9JAlypbAHEi8\"\r\nx-ratelimit-limit: 20\r\nx-ratelimit-remaining: 19\r\nx-ratelimit-reset: 1777385988456\r\ncdn-proxyver: 1.51\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/28/2026 14:18:48\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 1ab45914d9dfc850cd97f8ccc36093f9\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":208,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"27b57e8843accb483054047c626052b9","sha1":"59ea96354bb7afb951b1687d240972a5b007122f","sha256":"a487916250627b443e9d4e6123e35dd8f7f3d072c02779f6ccaa608d71bc5dd8","sha512":"ce37b3f33c593aff361eb26ba75b83980150ff40d01924fdfa78050988eae3c6816136d2addec3f3fceca272c371d65175d8d2ad47da1edf1cce06241d4044eb","ssdeep":"","tlshash":"97d022aaa18c86f9484c106afc871829d222208a464972a51bf11a69989c82ee800b1a","first_seen":"2026-04-28T14:19:14.505761Z","last_seen":"2026-04-28T14:19:14.505761Z","times_seen":1,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-scam.pages.dev/i7wqt.css","fqdn":"claim-scam.pages.dev","domain":"claim-scam.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-scam.pages.dev/","date":"2026-04-28T14:18:46.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-scam.pages.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 05:15:35 GMT","end":"Mon, 27 Jul 2026 05:15:34 GMT"},"fingerprint":{"sha1":"95:26:9E:7D:C2:8A:42:46:80:49:E7:81:C0:98:45:9A:0D:25:1D:FA","sha256":"AD:B9:7D:E7:9E:13:4F:3C:58:49:8B:18:1B:BC:D6:B5:3F:40:E3:52:5C:B6:B5:6D:0F:52:67:0F:69:C9:D8:15"}}},"request":{"raw":"GET /i7wqt.css HTTP/1.1\r\nHost: claim-scam.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-scam.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 14:18:46 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mvx5SoIBMESCMoN9L88l97lW6Alnoq%2F3QnMPXzrXBkpwygo%2BTmXa0DmXrUbWSWmRn4JhE4KgTPwGQ9jplBke7EVrUPGM26U%2FZwBXe8PmMQxabkc%2BBq8tV89gjjPrhoKLBNtpw%2BEC5A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"b629cc2e7e719d0bc0232ff61412b62d\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f36b2ba7aa45695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14680,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"f3eb46ee0278b78978b65a5278e8dd22","sha1":"0f074fd5d39209f1e84b9142f3cd4bb71f25f7de","sha256":"acb17292142865461378ec5e761c3d9914962678fb58fc848b1cfe964d894290","sha512":"aadcacb371dc8272b46a5848a160b9b7697fbef33ec4484280542a4c05a12e3a9f65aa26487010a9f834d20f82c1e763e4b86405e3944384077fab74fc58184a","ssdeep":"96:M/KxACqqqOW1OnfaV6O+5bxU1TqrQO+zfV0sGJU0EbSX1RyzB5Yg/t2gSPkrAMe7:MbCqqjfa63QO+zfTG7yzB5T/t2gSGA8I","tlshash":"c46214179f805545b31fa0946fe4479ba72ea4239e8e4dffa04b206c51ca1d512f2fce","first_seen":"2026-02-07T00:46:13.658883Z","last_seen":"2026-07-16T14:41:37.926873Z","times_seen":70,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-scam.pages.dev/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"claim-scam.pages.dev","domain":"claim-scam.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-scam.pages.dev/","date":"2026-04-28T14:18:47.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-scam.pages.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 05:15:35 GMT","end":"Mon, 27 Jul 2026 05:15:34 GMT"},"fingerprint":{"sha1":"95:26:9E:7D:C2:8A:42:46:80:49:E7:81:C0:98:45:9A:0D:25:1D:FA","sha256":"AD:B9:7D:E7:9E:13:4F:3C:58:49:8B:18:1B:BC:D6:B5:3F:40:E3:52:5C:B6:B5:6D:0F:52:67:0F:69:C9:D8:15"}}},"request":{"raw":"GET /xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: claim-scam.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://claim-scam.pages.dev/css2.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 14:18:47 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 24836\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"1df3b315841516dcf29aa177f8dab32b\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lw21prngSVJJadjebcIYARVyBXUcjvHfCctyR3HTqczQMWBXmJZkxYrYAe9VShbdf1Q%2BMFxhCHIQ2p%2BUAN%2F1EfihXfiMDPJkYrMo2gRYyhC9qm9n1Beg08%2Bm593bCr5Lzn8GPgtkxg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f36b2bcfd5c5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-08-09T14:46:48.613256Z","times_seen":37348,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-scam.pages.dev/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"claim-scam.pages.dev","domain":"claim-scam.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-scam.pages.dev/","date":"2026-04-28T14:18:47.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-scam.pages.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 05:15:35 GMT","end":"Mon, 27 Jul 2026 05:15:34 GMT"},"fingerprint":{"sha1":"95:26:9E:7D:C2:8A:42:46:80:49:E7:81:C0:98:45:9A:0D:25:1D:FA","sha256":"AD:B9:7D:E7:9E:13:4F:3C:58:49:8B:18:1B:BC:D6:B5:3F:40:E3:52:5C:B6:B5:6D:0F:52:67:0F:69:C9:D8:15"}}},"request":{"raw":"GET /xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: claim-scam.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://claim-scam.pages.dev/css2.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 14:18:47 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 24836\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"1df3b315841516dcf29aa177f8dab32b\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=roeHX6QgXPcwTqTsOe6wBGiVUUN%2BVNhxcpBeDN%2Bl5XaxgfXRz8gTcfwztuq%2FYMU%2BmPROGOmxE1k3IouB44iEAzFrTfCIufJPtsbWM8QhKICgXfbo0Eke1RTUN5ZQrzEnhHidulSv7g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f36b2bcfd655695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-08-09T14:46:48.613256Z","times_seen":37348,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-scam.pages.dev/xn7gYHE41ni1AdIRggOxSuXd.woff2","fqdn":"claim-scam.pages.dev","domain":"claim-scam.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-scam.pages.dev/","date":"2026-04-28T14:18:47.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-scam.pages.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 05:15:35 GMT","end":"Mon, 27 Jul 2026 05:15:34 GMT"},"fingerprint":{"sha1":"95:26:9E:7D:C2:8A:42:46:80:49:E7:81:C0:98:45:9A:0D:25:1D:FA","sha256":"AD:B9:7D:E7:9E:13:4F:3C:58:49:8B:18:1B:BC:D6:B5:3F:40:E3:52:5C:B6:B5:6D:0F:52:67:0F:69:C9:D8:15"}}},"request":{"raw":"GET /xn7gYHE41ni1AdIRggOxSuXd.woff2 HTTP/1.1\r\nHost: claim-scam.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://claim-scam.pages.dev/css2.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 14:18:47 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 14500\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"0f00219d1d5f31de66423631bd9bf3b5\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=90%2BWFpFUyWzNClsVEmCk7cSaR8YBTQmEAVjG6KMT1NkC1h1Hwgym6Eqn9rP0FZhQIpSkEPjfwiFTqdZRjGE5t%2FQH4B4QkxJ1RSXE1Un5%2B2ZvdqHeCKRLk2AsB81reEwDx3x83ud0Eg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f36b2bd0d835695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14500,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14500, version 1.0","md5":"e58febde317b69ceb51690ea201850c9","sha1":"d8fc94bf7a39043a7759bd564a7e16b3ea080736","sha256":"c268b459a9329e59fecf39a17618efd44c71735532048d60b12aab76a8c14914","sha512":"af17f0a6913d974bd7d38a060549dacd158c667abb08f830d44d302c1a1cb4f8106eeeb772d2b4066be2c5a1e763d26042c707343770f5e84b0f5165cab9d96b","ssdeep":"384:4VvSHMmDtGjtHrBRvGjLWPSNRXZpyJ+kC18bZ:4VvSsmDt6LBROj1RXZ4J+318bZ","tlshash":"8a52b05ef04e86f0b51f2a7ece5c6a1153725e56134f2e50e967b0c8c75e82a1e27142","first_seen":"2025-06-05T11:45:07.756161Z","last_seen":"2026-08-09T10:10:33.27749Z","times_seen":3724,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"corsproxy.io/?https://api.mainnet-beta.solana.com","fqdn":"corsproxy.io","domain":"corsproxy.io","tld":"io"},"ip":{"addr":"104.26.6.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-scam.pages.dev/","date":"2026-04-28T14:18:47.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corsproxy.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 02:55:04 GMT","end":"Wed, 15 Jul 2026 03:55:00 GMT"},"fingerprint":{"sha1":"B3:92:DD:57:B1:14:DF:D2:D8:2C:B3:38:F6:E8:1D:94:5F:4B:2B:E6","sha256":"AB:10:26:76:DE:9D:EE:84:86:A9:4A:CC:40:DB:86:06:F9:60:32:F7:85:FD:88:CC:98:50:4D:02:95:FC:FF:29"}}},"request":{"raw":"OPTIONS /?https://api.mainnet-beta.solana.com HTTP/1.1\r\nHost: corsproxy.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://claim-scam.pages.dev/\r\nOrigin: https://claim-scam.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Tue, 28 Apr 2026 14:18:47 GMT\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZlpcpEKPpxEah7kjQMPYQ58wtBa6AyKwxmCcZ0JMkFzro%2FjmJ25HvyW7UX6MzhFCOuHtgZDfHqgjfP128OYOll13IgAKS3S%2BYwODcqkko6cFbSupk3xDUqprSQVpuw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f36b2be4f0fb4eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T14:49:10.846265Z","times_seen":17800640,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":28,"dns":4,"connect":1,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"solana.publicnode.com/","fqdn":"solana.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-scam.pages.dev/","date":"2026-04-28T14:18:47.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 23:57:50 GMT","end":"Fri, 10 Jul 2026 00:57:42 GMT"},"fingerprint":{"sha1":"FA:41:42:B5:59:CD:F2:75:9C:78:CB:D0:5E:1F:F6:83:58:D2:EE:5F","sha256":"07:86:2C:E3:AD:0C:A4:31:FD:57:1E:C8:01:EA:80:5B:24:9B:5E:3F:7B:09:9D:D4:1B:FE:A9:2B:34:AC:3E:B4"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: solana.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://claim-scam.pages.dev/\r\nOrigin: https://claim-scam.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 28 Apr 2026 14:18:47 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 172800\r\nallow: OPTIONS, POST\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\nx-envoy-upstream-service-time: 11\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: 9f36b2beef584e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T14:49:10.846265Z","times_seen":17800640,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":38,"dns":4,"connect":1,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"solana.publicnode.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-scam.pages.dev/bafybeiaglqleiv6xn3m7mpuud7akhvmnld3rbp3mxdonztka7aqajoeefm.png","fqdn":"claim-scam.pages.dev","domain":"claim-scam.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-scam.pages.dev/","date":"2026-04-28T14:18:47.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-scam.pages.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 05:15:35 GMT","end":"Mon, 27 Jul 2026 05:15:34 GMT"},"fingerprint":{"sha1":"95:26:9E:7D:C2:8A:42:46:80:49:E7:81:C0:98:45:9A:0D:25:1D:FA","sha256":"AD:B9:7D:E7:9E:13:4F:3C:58:49:8B:18:1B:BC:D6:B5:3F:40:E3:52:5C:B6:B5:6D:0F:52:67:0F:69:C9:D8:15"}}},"request":{"raw":"GET /bafybeiaglqleiv6xn3m7mpuud7akhvmnld3rbp3mxdonztka7aqajoeefm.png HTTP/1.1\r\nHost: claim-scam.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-scam.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 14:18:47 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=6,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p1psAUVH8JIkvYJyrCl7GMN3Dy7GASQ183ICOzh1i%2Bjx6o%2FsyIitB4AfxVfgsnkrZ2Ozl7xNlzewcP2NUllrob3%2BF%2FtyW89tjzWvnTFZM1tgO5g%2F49jVnUUX5X5PK5wxubjRkDpFNA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f36b2bf78da5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14809,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1282)","md5":"9af83c7de6c2a10bd8f73321c053bad2","sha1":"9a1b3fe0ef33e37c8c7a02273d408208274fca32","sha256":"5acfb0b14db757ac80a99a374bcc48382653232a3aec8d28bb687f8163b48006","sha512":"7af5b41af979299cf754f555978d5d6a9b1accdcc31b359c8b5b768f307dd0f12c3337decdc367ff1db1bc1a654ff2a8a2eca42841fe22c21aae5e7df87bd18f","ssdeep":"384:poOBQ09BXRZNBx8cPaR/s9A25UZ0wLtOpr2XB409B/RZNBxO/JuJVlzJsrJOODO1:nxZDWFfZZ++","tlshash":"ea62a892119c6c2f112b42cb4e59639830af2cb7f5b94182f7bf47c4df8ac91e90b856","first_seen":"2026-04-28T13:39:31.851735Z","last_seen":"2026-04-28T14:19:14.499817Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"solana.publicnode.com/","fqdn":"solana.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-scam.pages.dev/","date":"2026-04-28T14:18:47.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 23:57:50 GMT","end":"Fri, 10 Jul 2026 00:57:42 GMT"},"fingerprint":{"sha1":"FA:41:42:B5:59:CD:F2:75:9C:78:CB:D0:5E:1F:F6:83:58:D2:EE:5F","sha256":"07:86:2C:E3:AD:0C:A4:31:FD:57:1E:C8:01:EA:80:5B:24:9B:5E:3F:7B:09:9D:D4:1B:FE:A9:2B:34:AC:3E:B4"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: solana.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-scam.pages.dev/\r\nContent-Type: application/json\r\nContent-Length: 130\r\nOrigin: https://claim-scam.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":130,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"getAccountInfo\",\"params\":[\"8ycauMwVE61B4uWz87B2k2G8mMK7iFjRoBHooaVAcP4k\",{\"encoding\":\"base64\"}]}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 14:18:47 GMT\r\ncontent-type: application/json\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\nx-envoy-upstream-service-time: 1\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-ray: 9f36b2bfeb2a4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":327,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"82907724d13c48acc54a95b0847b12df","sha1":"318af001500180417286fdfb479bf34a8f189446","sha256":"79b22e248c41db01a3b7219fe310a51ad224deacb405c78a8028dc5af9925fb3","sha512":"90a930299e246c6c72a271410d2c9bc7e341d47685d32d2683ace19995b7db027a2afd9d9352a92333c9d9baac55e2cd92028c9197faac6e03500bd29c27a3d2","ssdeep":"","tlshash":"6ce07dc03e090bbeded48a57ca1521a9d7c509996b40498713db1e1571c955da00babb","first_seen":"2026-04-28T14:19:14.508876Z","last_seen":"2026-04-28T14:19:14.508876Z","times_seen":1,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"solana.publicnode.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-scam.pages.dev/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"claim-scam.pages.dev","domain":"claim-scam.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-scam.pages.dev/","date":"2026-04-28T14:18:47.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-scam.pages.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 05:15:35 GMT","end":"Mon, 27 Jul 2026 05:15:34 GMT"},"fingerprint":{"sha1":"95:26:9E:7D:C2:8A:42:46:80:49:E7:81:C0:98:45:9A:0D:25:1D:FA","sha256":"AD:B9:7D:E7:9E:13:4F:3C:58:49:8B:18:1B:BC:D6:B5:3F:40:E3:52:5C:B6:B5:6D:0F:52:67:0F:69:C9:D8:15"}}},"request":{"raw":"GET /xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: claim-scam.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://claim-scam.pages.dev/css2.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 14:18:47 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 24836\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"1df3b315841516dcf29aa177f8dab32b\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tiWkPFDgsGs%2FGDkzwUtuN4eh1J1uQHMdbE8A4ytwzrPV%2FrT84SEtQiOoMIYWfvWrctsfbKeRVQsToinLRDK%2FE7AylJSqMs7Ph6%2FfB7AbKyjVPnegWKPLiPYxYE8b%2B2wlxUtbMcT9vw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f36b2bcfd535695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-08-09T14:46:48.613256Z","times_seen":37348,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-scam.pages.dev/ky.compat.umd.js","fqdn":"claim-scam.pages.dev","domain":"claim-scam.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-scam.pages.dev/","date":"2026-04-28T14:18:46.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-scam.pages.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 05:15:35 GMT","end":"Mon, 27 Jul 2026 05:15:34 GMT"},"fingerprint":{"sha1":"95:26:9E:7D:C2:8A:42:46:80:49:E7:81:C0:98:45:9A:0D:25:1D:FA","sha256":"AD:B9:7D:E7:9E:13:4F:3C:58:49:8B:18:1B:BC:D6:B5:3F:40:E3:52:5C:B6:B5:6D:0F:52:67:0F:69:C9:D8:15"}}},"request":{"raw":"GET /ky.compat.umd.js HTTP/1.1\r\nHost: claim-scam.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-scam.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 14:18:46 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O4Z1SRjFJNuWOZ%2BA%2BG%2By5KJQANDTWxhMPebLfzmPebbw3K%2F2sXnrIhtrBzY0OmbAid4ou0PXijwMnAbFjBaYvWruMIRtAz7AOhEfvUJrVJ5WNcIPnzEIlGVnokX7ECNE7o0dn9Gwxw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"5d289ccdac67498c960489a14aa6d518\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f36b2ba7a9f5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":467075,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65159)","md5":"a5edaa1479a194542ff65c179c0ecd30","sha1":"4d883820324da039f490aa3e5f17e09ce7749dcc","sha256":"9bb991591852fa938aa48e2b8bc98e56e464834c61ef015730f7d76378c49bc0","sha512":"90b25900790b56936d68996e5f5e75112a51fb8f146b469310f5e10abf8da7189a775d312053a5abf44f020e2c19a1f8b924c18fd864869b88fdfc456642ac3d","ssdeep":"6144:qWAQJc02QJc0aCRU0gxMtO3gVdkz2t/73KYJE7h:RAQJc02QJc0aoJSClt/73KYa","tlshash":"56a4ec0593735a4c8bc083e9916123cbdf8c9ba745df7426e60d6bb9e0b8e1790de847","first_seen":"2026-04-22T13:42:19.377735Z","last_seen":"2026-06-29T00:34:28.167056Z","times_seen":7,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-scam.pages.dev/bafybeiaglqleiv6xn3m7mpuud7akhvmnld3rbp3mxdonztka7aqajoeefm.png","fqdn":"claim-scam.pages.dev","domain":"claim-scam.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-scam.pages.dev/","date":"2026-04-28T14:18:46.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-scam.pages.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 05:15:35 GMT","end":"Mon, 27 Jul 2026 05:15:34 GMT"},"fingerprint":{"sha1":"95:26:9E:7D:C2:8A:42:46:80:49:E7:81:C0:98:45:9A:0D:25:1D:FA","sha256":"AD:B9:7D:E7:9E:13:4F:3C:58:49:8B:18:1B:BC:D6:B5:3F:40:E3:52:5C:B6:B5:6D:0F:52:67:0F:69:C9:D8:15"}}},"request":{"raw":"GET /bafybeiaglqleiv6xn3m7mpuud7akhvmnld3rbp3mxdonztka7aqajoeefm.png HTTP/1.1\r\nHost: claim-scam.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-scam.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 14:18:46 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BBEv4LrwzGMJKKaN0AJV8QEMk4cooKMKMQT2TQx7rhQ2cClwFicqQov9IoyOvawxzqFT454cCV3odQweytzltt8R7CHHPVjjswbeV3NL3l25bgcoDPuVAPV3rcUIZnlds7zd6EzKyw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f36b2ba7aa75695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14809,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1282)","md5":"9af83c7de6c2a10bd8f73321c053bad2","sha1":"9a1b3fe0ef33e37c8c7a02273d408208274fca32","sha256":"5acfb0b14db757ac80a99a374bcc48382653232a3aec8d28bb687f8163b48006","sha512":"7af5b41af979299cf754f555978d5d6a9b1accdcc31b359c8b5b768f307dd0f12c3337decdc367ff1db1bc1a654ff2a8a2eca42841fe22c21aae5e7df87bd18f","ssdeep":"384:poOBQ09BXRZNBx8cPaR/s9A25UZ0wLtOpr2XB409B/RZNBxO/JuJVlzJsrJOODO1:nxZDWFfZZ++","tlshash":"ea62a892119c6c2f112b42cb4e59639830af2cb7f5b94182f7bf47c4df8ac91e90b856","first_seen":"2026-04-28T13:39:31.851735Z","last_seen":"2026-04-28T14:19:14.499817Z","times_seen":2,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-scam.pages.dev/secureproxy?e=ping_proxy","fqdn":"claim-scam.pages.dev","domain":"claim-scam.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim-scam.pages.dev/","date":"2026-04-28T14:18:47.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-scam.pages.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 05:15:35 GMT","end":"Mon, 27 Jul 2026 05:15:34 GMT"},"fingerprint":{"sha1":"95:26:9E:7D:C2:8A:42:46:80:49:E7:81:C0:98:45:9A:0D:25:1D:FA","sha256":"AD:B9:7D:E7:9E:13:4F:3C:58:49:8B:18:1B:BC:D6:B5:3F:40:E3:52:5C:B6:B5:6D:0F:52:67:0F:69:C9:D8:15"}}},"request":{"raw":"GET /secureproxy?e=ping_proxy HTTP/1.1\r\nHost: claim-scam.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-scam.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 14:18:47 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RoreVtzdZx7mLCF37xal3bHfJVSGCHphiIjzbQAZgdJY6xMppneYeavmVhayA1ook%2B7qKaRwdt%2BAvkO75Ld9BoyktXrXBzh3CBs8NOkG%2BGiHsyLBDmu5qi2NO6Ak5Tw7IskKhBpSEg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f36b2bcacf45695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14809,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1282)","md5":"9af83c7de6c2a10bd8f73321c053bad2","sha1":"9a1b3fe0ef33e37c8c7a02273d408208274fca32","sha256":"5acfb0b14db757ac80a99a374bcc48382653232a3aec8d28bb687f8163b48006","sha512":"7af5b41af979299cf754f555978d5d6a9b1accdcc31b359c8b5b768f307dd0f12c3337decdc367ff1db1bc1a654ff2a8a2eca42841fe22c21aae5e7df87bd18f","ssdeep":"384:poOBQ09BXRZNBx8cPaR/s9A25UZ0wLtOpr2XB409B/RZNBxO/JuJVlzJsrJOODO1:nxZDWFfZZ++","tlshash":"ea62a892119c6c2f112b42cb4e59639830af2cb7f5b94182f7bf47c4df8ac91e90b856","first_seen":"2026-04-28T13:39:31.851735Z","last_seen":"2026-04-28T14:19:14.499817Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}